$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/66FA3E10C68311F0A13F9748C4F9AE02.roa File: 66FA3E10C68311F0A13F9748C4F9AE02.roa (raw, json) Hash identifier: buWGojGruD0EkezOya613tzB5yRXr1J4Cny+XbPZUqs= Subject key identifier: B7:83:B5:69:79:24:17:73:F0:9A:F5:71:AD:E5:3F:F8:64:EC:9E:96 Certificate issuer: /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Certificate serial: AD Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/66FA3E10C68311F0A13F9748C4F9AE02.roa Signing time: Sat 17 Oct 2026 07:56:17 +0000 ROA not before: Sat 17 Oct 2026 07:56:17 +0000 ROA not after: Wed 01 Mar 2028 00:00:00 +0000 asID: 139923 IP address blocks: 138.252.248.0/23 maxlen: 23 138.252.248.0/24 maxlen: 24 138.252.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 07:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Validity Not Before: Oct 17 07:56:17 2026 GMT Not After : Mar 1 00:00:00 2028 GMT Subject: CN=6ad32a21-0d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:f0:a1:56:3a:80:d1:38:90:e7:a1:13:e1: 94:76:9f:52:ec:8e:d7:e7:83:fa:82:b4:7e:65:e2: 9c:c1:a0:b3:06:d6:22:c8:78:3b:16:30:37:ac:d5: 7b:5c:36:e4:03:33:0f:cc:1f:37:64:3a:70:c2:59: 93:a0:bd:c4:cc:aa:c2:32:04:dd:cf:76:94:82:c0: 8e:a3:25:ad:84:24:c8:30:15:0b:7e:a2:a6:99:ad: 15:83:fb:ba:ca:43:3c:26:65:dc:ab:98:2c:94:e4: f5:e9:39:32:cc:e2:d8:3c:f1:3c:75:47:0d:34:85: 6d:d5:c3:a6:3c:b4:fd:80:0f:5e:3a:d0:30:56:d9: a1:5a:89:a2:9d:f9:be:37:e1:25:00:82:29:72:61: ac:5f:d8:a0:27:2f:da:8a:9f:8d:76:4b:07:b2:5c: 09:91:10:ba:77:76:f7:42:78:78:7f:1a:1c:94:d9: cc:06:c9:79:de:34:77:ce:b6:71:9c:a1:37:66:b2: b8:ed:f4:e1:dd:ee:e3:51:59:8d:5c:bf:14:f6:6c: 30:8f:e6:73:b0:9f:ba:64:b9:45:44:72:5a:b9:96: 00:22:b1:7f:f3:5d:89:77:f5:de:b7:1a:1d:ee:62: 8b:79:ad:ef:5a:fe:81:45:18:24:d6:91:30:72:4e: c1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:83:B5:69:79:24:17:73:F0:9A:F5:71:AD:E5:3F:F8:64:EC:9E:96 X509v3 Authority Key Identifier: keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/66FA3E10C68311F0A13F9748C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.248.0/23 Signature Algorithm: sha256WithRSAEncryption ab:20:4e:02:56:6d:e2:9c:76:2f:3d:e8:11:ad:8b:4f:22:dd: 9f:56:b9:88:ea:be:97:50:22:6f:b4:6c:c6:2a:05:a0:3e:f5: c7:76:9e:18:3c:3b:fa:22:b5:70:c9:d3:cb:d2:f2:53:ff:3e: ba:04:66:05:86:b3:4f:d6:08:b7:34:ca:bc:44:f3:42:07:79: 61:56:95:9b:06:18:e2:a0:ee:76:89:45:74:10:c6:67:95:da: 43:92:94:3b:8d:86:ec:8a:c7:6a:aa:df:9c:f8:c8:1a:60:9d: bd:d0:0f:73:8d:40:3c:17:f2:04:52:62:b9:9e:e1:8e:c7:de: 6e:98:7c:0d:cc:1b:d8:61:cd:58:1c:e1:41:32:21:11:5a:b7: 6c:d0:11:40:47:3d:72:27:ec:5c:d1:db:bb:3d:b0:32:97:ad: 54:b0:d7:8e:c3:8f:45:ce:8f:59:f7:a1:cc:25:15:e4:04:18: db:af:22:1e:64:36:29:d0:a2:c1:c4:36:64:f8:f8:b9:83:d5: 3b:f0:8d:ba:94:9b:fd:c6:70:d7:99:49:e0:dd:c7:c8:48:9f: 11:64:19:78:27:79:18:31:c2:89:1b:93:b4:ef:b8:e3:d9:73: bd:80:1f:bb:a7:e5:e7:cf:b3:7c:08:0c:1b:d6:f2:6c:4b:7f: 51:5e:84:e9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NFMTgxMTAvBgNVBAUTKENGOUEzRjMxNjQ4M0EyQTc5NDQxMUQ1OTE0NkY5RkM1 NjQwOTE5OTcwHhcNMjYxMDE3MDc1NjE3WhcNMjgwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQzMmEyMS0wZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVLwoVY6gNE4kOehE+GUdp9S7I7X54P6grR+ZeKcwaCzBtYiyHg7FjA3rNV7 XDbkAzMPzB83ZDpwwlmToL3EzKrCMgTdz3aUgsCOoyWthCTIMBULfqKmma0Vg/u6 ykM8JmXcq5gslOT16TkyzOLYPPE8dUcNNIVt1cOmPLT9gA9eOtAwVtmhWominfm+ N+ElAIIpcmGsX9igJy/aip+NdksHslwJkRC6d3b3Qnh4fxoclNnMBsl53jR3zrZx nKE3ZrK47fTh3e7jUVmNXL8U9mwwj+ZzsJ+6ZLlFRHJauZYAIrF/812Jd/Xetxod 7mKLea3vWv6BRRgk1pEwck7BDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLeDtWl5 JBdz8Jr1ca3lP/hk7J6WMB8GA1UdIwQYMBaAFM+aPzFkg6KnlEEdWRRvn8VkCRmX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0UxOC9CMzc1MkFCMkM2 ODIxMUYwQjc2RTE3NDZDNEY5QUUwMi96NW9fTVdTRG9xZVVRUjFaRkctZnhXUUpH WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o1b19NV1NEb3FlVVFSMVpGRy1meFdRSkdaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NFMTgvQjM3NTJBQjJDNjgyMTFGMEI3NkUxNzQ2QzRGOUFFMDIvNjZGQTNFMTBD NjgzMTFGMEExM0Y5NzQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivz4MA0GCSqGSIb3DQEBCwUAA4IBAQCrIE4CVm3inHYvPegRrYtP It2fVrmI6r6XUCJvtGzGKgWgPvXHdp4YPDv6IrVwydPL0vJT/z66BGYFhrNP1gi3 NMq8RPNCB3lhVpWbBhjioO52iUV0EMZnldpDkpQ7jYbsisdqqt+c+MgaYJ290A9z jUA8F/IEUmK5nuGOx95umHwNzBvYYc1YHOFBMiERWrds0BFARz1yJ+xc0du7PbAy l61UsNeOw49Fzo9Z96HMJRXkBBjbryIeZDYp0KLBxDZk+Pi5g9U78I26lJv9xnDX mUng3cfISJ8RZBl4J3kYMcKJG5O077jj2XO9gB+7p+Xnz7N8CAwb1vJsS39RXoTp -----END CERTIFICATE-----Generated at Sun Oct 18 20:03:16 2026 by rpki-client