$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8A616828A20211F19A574D5D4511F970.roa File: 8A616828A20211F19A574D5D4511F970.roa (raw, json) Hash identifier: RQ8ST8KaLz5I0HeXd5ycyMXxHJgeVkei3gMq0Czo0Fk= Subject key identifier: 1E:E8:21:87:08:79:78:C8:E2:FC:F3:A5:E5:07:48:A7:D5:01:D1:88 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 32B7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8A616828A20211F19A574D5D4511F970.roa Signing time: Thu 27 Aug 2026 10:32:02 +0000 ROA not before: Thu 27 Aug 2026 10:32:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147224 IP address blocks: 138.252.204.0/24 maxlen: 24 157.15.98.0/23 maxlen: 24 165.99.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12983 (0x32b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Aug 27 10:32:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a901222-6cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:27:22:6b:28:ac:84:72:2d:6e:95:38:40:4c: 59:06:ed:22:69:2d:5c:9a:59:a4:fe:a3:06:30:89: e4:f7:86:6d:08:e6:1e:9d:ea:29:ae:c1:9f:64:16: 06:d0:4c:f3:c8:9c:d8:a9:b4:08:bd:9c:80:6e:79: a1:e4:e1:ba:43:62:79:b1:96:da:4f:3a:09:95:33: cb:1e:78:2b:93:c9:00:7b:8d:23:82:72:44:03:f7: 46:87:3b:02:e1:80:10:b3:a4:32:49:83:15:57:8a: 2d:73:7e:ef:3f:e1:72:77:e7:f6:f0:bc:ea:6b:a0: a2:91:72:3b:07:c7:9f:33:dc:fd:01:cf:d2:8e:cf: 0b:45:25:f4:43:36:54:89:aa:ab:c3:05:8f:d4:aa: cc:21:5f:ce:9a:aa:e3:aa:00:83:36:60:e3:a8:1c: 77:c7:9e:0c:37:6c:0e:9e:04:25:b2:41:c4:72:86: 21:a3:08:b0:e1:07:a9:4f:15:3d:3c:b6:04:60:b0: d8:6e:2e:32:cb:62:07:68:da:48:ef:75:b9:46:d4: 9b:75:e7:26:8a:74:e4:09:b8:ec:07:b5:ee:bc:a6: 3e:eb:2d:95:d1:2c:b3:ba:4a:f6:72:d1:33:ab:e4: a7:c6:88:2a:34:6b:9f:d2:32:35:7a:13:dd:13:57: ee:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E8:21:87:08:79:78:C8:E2:FC:F3:A5:E5:07:48:A7:D5:01:D1:88 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8A616828A20211F19A574D5D4511F970.roa sbgp-ipAddrBlock: critical IPv4: 138.252.204.0/24 157.15.98.0/23 165.99.9.0/24 Signature Algorithm: sha256WithRSAEncryption 11:b5:53:0e:c5:9f:99:f3:48:d2:4a:7d:97:8f:d7:c6:fe:86: cf:68:0f:44:4e:f2:a9:b3:25:13:05:2d:e9:d3:ea:2c:62:ed: 0f:41:61:bc:ea:b6:28:a4:90:3d:7f:40:0a:bd:90:63:38:3e: f9:c0:de:9b:72:ff:06:a2:90:97:bd:e4:df:ff:29:13:cb:bb: d8:33:ae:36:c1:43:84:53:1f:83:2b:38:66:c5:41:cd:57:18: b3:75:c6:2c:27:93:af:cb:9f:67:8b:4e:65:83:b4:f2:5e:81: 3d:1c:c1:98:9e:36:fe:16:2c:3d:b7:e8:fc:0b:0d:a2:50:d3: a4:b0:24:d1:cd:a7:b0:5f:0f:7a:16:d2:79:e1:fb:82:9a:7c: 89:1b:6e:12:00:b8:d2:2a:00:36:08:c1:fd:27:76:12:7a:dc: c4:17:e1:eb:f6:d9:f3:bc:b2:29:ac:01:7b:40:a0:8f:53:5a: 88:d3:ff:7a:8f:20:1e:94:c8:01:a1:37:60:3e:8d:af:99:c7: 58:cb:62:5b:3e:5b:ef:f3:cb:52:ad:bf:5a:f4:2f:02:a5:73: 42:95:0e:79:08:ff:d4:bf:7c:b6:d6:22:9c:90:7e:fa:78:f0: f9:c4:17:a4:5a:a9:56:4c:e6:b4:46:3b:d5:b1:2a:d2:41:2c: f1:7a:2d:b3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICMrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwODI3MTAzMjAyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkwMTIyMi02Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSciayishHItbpU4QExZBu0iaS1cmlmk/qMGMInk94ZtCOYeneoprsGfZBYG 0EzzyJzYqbQIvZyAbnmh5OG6Q2J5sZbaTzoJlTPLHngrk8kAe40jgnJEA/dGhzsC 4YAQs6QySYMVV4otc37vP+Fyd+f28Lzqa6CikXI7B8efM9z9Ac/Sjs8LRSX0QzZU iaqrwwWP1KrMIV/OmqrjqgCDNmDjqBx3x54MN2wOngQlskHEcoYhowiw4QepTxU9 PLYEYLDYbi4yy2IHaNpI73W5RtSbdecminTkCbjsB7XuvKY+6y2V0Syzukr2ctEz q+SnxogqNGuf0jI1ehPdE1fuowIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFB7oIYcI eXjI4vzzpeUHSKfVAdGIMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEE2MTY4MjhB MjAyMTFGMTlBNTc0RDVENDUxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAivzMAwQBnQ9iAwQApWMJMA0GCSqGSIb3DQEBCwUAA4IBAQARtVMO xZ+Z80jSSn2Xj9fG/obPaA9ETvKpsyUTBS3p0+osYu0PQWG86rYopJA9f0AKvZBj OD75wN6bcv8GopCXveTf/ykTy7vYM642wUOEUx+DKzhmxUHNVxizdcYsJ5Ovy59n i05lg7TyXoE9HMGYnjb+Fiw9t+j8Cw2iUNOksCTRzaewXw96FtJ54fuCmnyJG24S ALjSKgA2CMH9J3YSetzEF+Hr9tnzvLIprAF7QKCPU1qI0/96jyAelMgBoTdgPo2v mcdYy2JbPlvv88tSrb9a9C8CpXNClQ55CP/Uv3y21iKckH76ePD5xBekWqlWTOa0 RjvVsSrSQSzxei2z -----END CERTIFICATE-----Generated at Fri Sep 4 21:25:42 2026 by rpki-client