$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/32995A3A694811F1886272136D47A888.roa File: 32995A3A694811F1886272136D47A888.roa (raw, json) Hash identifier: S2SLXPxi8XxKWyzzpI3+4CyywRMYjufpB9D5r3iT1gg= Subject key identifier: A2:4B:A1:C3:1A:79:48:9F:A8:AA:B5:8D:81:7A:55:24:62:EC:44:49 Certificate issuer: /CN=A918D1BD/serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8 Certificate serial: 8C Authority key identifier: C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/32995A3A694811F1886272136D47A888.roa Signing time: Tue 16 Jun 2026 05:57:03 +0000 ROA not before: Tue 16 Jun 2026 05:57:03 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 140641 IP address blocks: 138.252.20.0/24 maxlen: 24 138.252.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1BD, serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8 Validity Not Before: Jun 16 05:57:03 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a30e5af-f852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:50:aa:d0:c7:cb:dc:97:09:62:92:73:92: 5a:96:cf:36:81:c3:9b:86:cd:a2:c4:2c:42:9f:22: 49:28:bb:d0:24:ce:65:50:3a:b4:fd:63:8a:87:05: 5f:21:e8:53:c8:90:a0:f9:62:e3:9c:89:0e:17:52: a1:b8:31:ef:55:56:d6:ba:b2:1b:23:19:a6:59:92: 55:da:4f:a2:8b:3b:69:c9:07:18:ea:7a:5a:ac:11: b8:ee:2b:7c:07:51:cc:c5:60:11:09:92:be:18:25: f4:3b:82:c7:d0:24:5f:f9:94:62:17:34:32:ff:1d: 47:53:69:3e:0d:79:8d:7d:96:3a:91:76:fb:61:e0: a0:ec:37:94:2c:10:06:f8:3f:2f:24:f8:73:c6:f3: 81:f1:8b:81:27:a4:ac:c4:b3:8b:b7:d8:89:db:f1: 2f:40:c3:84:bd:2b:61:8b:39:43:67:13:72:e1:f2: 88:7c:f1:0a:2f:85:c4:4f:d2:80:ce:51:d6:a7:69: 2e:10:80:28:66:f1:e0:f9:1c:85:11:ba:92:84:93: c1:39:72:02:5c:6b:3e:1e:25:8f:5c:92:aa:0b:c0: da:82:81:02:8c:bb:08:1e:42:56:c1:1b:b5:bc:2e: c2:7d:c1:b1:69:d9:4b:7d:ea:4c:99:ed:82:89:50: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4B:A1:C3:1A:79:48:9F:A8:AA:B5:8D:81:7A:55:24:62:EC:44:49 X509v3 Authority Key Identifier: keyid:C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/32995A3A694811F1886272136D47A888.roa sbgp-ipAddrBlock: critical IPv4: 138.252.20.0/23 Signature Algorithm: sha256WithRSAEncryption 81:65:84:76:02:e6:f6:f9:ec:52:a7:79:c7:e1:34:70:41:8b: c9:59:da:03:6a:08:09:66:1b:9c:21:79:ff:2d:cb:12:7b:9e: ad:3a:58:7b:64:f5:79:99:03:45:76:a0:fb:ad:bf:8d:43:16: 39:08:b1:43:90:77:b0:b3:ec:38:48:24:2c:98:38:20:f6:b0: 9d:98:ae:d7:71:8b:97:4f:95:b9:cb:bc:47:b7:45:ed:6b:72: 4b:0c:91:99:17:45:07:bb:96:97:d9:06:0b:77:e9:25:e5:e6: 87:c4:8b:4a:7a:b4:87:be:ba:e9:90:84:bd:16:4b:7f:81:f9: 99:c4:dc:17:19:ee:f2:de:51:6b:fb:f3:69:49:da:89:d1:07: 24:f0:e2:28:c4:f8:12:4e:c3:b4:28:c1:2f:26:ee:7e:9e:be: f2:15:f8:fc:1b:55:20:80:5a:a1:5a:55:54:06:1a:5f:fe:39: cb:4e:b7:3c:00:ca:73:f6:34:fb:fd:00:91:58:44:1b:66:aa: 88:25:ce:2f:ae:21:44:a7:bc:f1:7a:7d:85:9d:c1:24:68:d3: 2f:41:b8:8d:c3:6b:0c:cb:02:ad:5b:d2:24:1a:04:fc:33:1b: a0:ce:0b:1f:8a:f1:87:23:9e:50:d9:c5:0e:30:d4:a1:0c:d0: d4:f5:13:2c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQkQxMTAvBgNVBAUTKEMzOTVEMDFBMDhDMTVBMjExMTAzQ0U4MTA2MUUyNjgy NEY1NkJERDgwHhcNMjYwNjE2MDU1NzAzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMwZTVhZi1mODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7VQqtDHy9yXCWKSc5Jals82gcObhs2ixCxCnyJJKLvQJM5lUDq0/WOKhwVf IehTyJCg+WLjnIkOF1KhuDHvVVbWurIbIxmmWZJV2k+iiztpyQcY6nparBG47it8 B1HMxWARCZK+GCX0O4LH0CRf+ZRiFzQy/x1HU2k+DXmNfZY6kXb7YeCg7DeULBAG +D8vJPhzxvOB8YuBJ6SsxLOLt9iJ2/EvQMOEvSthizlDZxNy4fKIfPEKL4XET9KA zlHWp2kuEIAoZvHg+RyFEbqShJPBOXICXGs+HiWPXJKqC8DagoECjLsIHkJWwRu1 vC7CfcGxadlLfepMme2CiVDtUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKJLocMa eUifqKq1jYF6VSRi7ERJMB8GA1UdIwQYMBaAFMOV0BoIwVohEQPOgQYeJoJPVr3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFCRC9BNzA2RjhCMkE3 NjIxMUYwOEZERTM0MTNDNEY5QUUwMi93NVhRR2dqQldpRVJBODZCQmg0bWdrOVd2 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c1WFFHZ2pCV2lFUkE4NkJCaDRtZ2s5V3ZkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQxQkQvQTcwNkY4QjJBNzYyMTFGMDhGREUzNDEzQzRGOUFFMDIvMzI5OTVBM0E2 OTQ4MTFGMTg4NjI3MjEzNkQ0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivwUMA0GCSqGSIb3DQEBCwUAA4IBAQCBZYR2Aub2+exSp3nH4TRw QYvJWdoDaggJZhucIXn/LcsSe56tOlh7ZPV5mQNFdqD7rb+NQxY5CLFDkHews+w4 SCQsmDgg9rCdmK7XcYuXT5W5y7xHt0Xta3JLDJGZF0UHu5aX2QYLd+kl5eaHxItK erSHvrrpkIS9Fkt/gfmZxNwXGe7y3lFr+/NpSdqJ0Qck8OIoxPgSTsO0KMEvJu5+ nr7yFfj8G1UggFqhWlVUBhpf/jnLTrc8AMpz9jT7/QCRWEQbZqqIJc4vriFEp7zx en2FncEkaNMvQbiNw2sMywKtW9IkGgT8MxugzgsfivGHI55Q2cUOMNShDNDU9RMs -----END CERTIFICATE-----Generated at Sat Jul 18 05:18:29 2026 by rpki-client