$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa File: 25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa (raw, json) Hash identifier: 0Pq2LRg5nW1mDzbmM6l8hRffGtdimmBjW3eWH+uPEzE= Subject key identifier: 33:DF:E5:6C:5F:4E:2C:7C:46:59:A7:5E:A9:99:D0:1D:26:B1:17:07 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3092 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:15:10 +0000 ROA not before: Mon 06 Jul 2026 16:15:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132964 IP address blocks: 138.252.234.0/23 maxlen: 23 138.252.234.0/24 maxlen: 24 138.252.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12434 (0x3092) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:15:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd48e-ff64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9e:5e:87:60:3e:e9:69:9b:14:38:c6:9b:5a: 61:51:d9:35:17:1f:9e:19:b5:cf:95:54:0d:b3:51: 72:8d:02:4d:5b:8b:95:03:2b:4b:9d:af:ee:20:2f: 83:db:7c:c9:6f:d5:4c:96:dd:87:f3:bc:14:fe:b5: 8f:af:9b:d8:67:ae:6a:9a:55:47:a9:5d:f9:97:b4: 8a:e3:3c:a4:dd:9e:4c:b1:59:4f:91:2b:69:dd:32: 64:14:5b:40:bc:82:1a:c1:5e:b8:99:55:92:61:f3: 9f:1b:8b:1a:be:cc:1b:86:7a:d7:4d:fa:c5:e5:e7: 0b:b3:ac:a7:e2:60:9e:97:06:f4:28:0d:db:c7:65: 95:3c:ad:9a:3f:01:0f:00:f9:96:ca:1f:ac:c1:a4: e2:a4:ce:d8:12:e4:bc:f5:5d:79:73:92:25:c6:df: 53:00:0a:4a:87:a7:05:bd:7d:e1:0f:86:c7:eb:6a: 90:34:d4:bf:7a:99:cc:29:13:6d:9b:c3:b1:70:ad: 97:4f:e0:75:38:25:97:c6:a1:dc:e0:ad:b1:c6:19: d0:1f:0a:bb:98:32:47:25:89:b2:e2:28:fa:0e:50: 92:43:e4:59:41:10:b0:dd:07:87:ea:60:36:ec:4c: d9:49:a0:0a:7c:21:2d:f1:9b:8b:fe:f9:ce:44:33: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DF:E5:6C:5F:4E:2C:7C:46:59:A7:5E:A9:99:D0:1D:26:B1:17:07 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.234.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:d9:56:47:b9:7f:ea:6b:40:83:60:71:b6:58:ac:a1:8d:3e: 2c:7b:8b:66:f7:b5:71:7f:79:65:e2:41:da:c9:27:4f:dd:b3: 09:51:04:80:8d:62:0b:5b:14:49:e6:6f:12:48:5d:b1:59:14: e9:be:ca:a6:fd:3f:c6:7f:2d:00:86:5b:f9:9b:4a:84:f6:6d: 1f:be:a7:26:7e:cc:ef:1f:2c:f9:bb:b0:51:3b:22:83:30:15: 87:fe:67:01:92:a4:f3:2b:6a:ca:ff:b8:07:e7:f2:81:b3:a8: fb:42:24:38:18:c8:a3:d2:f1:dc:e0:4d:bd:a7:03:0a:ba:f3: 53:9d:a4:d1:bc:12:40:0c:93:0f:b6:ce:77:d8:bf:1e:bf:2f: 16:62:5a:ff:8d:79:f5:81:a6:d2:00:b7:76:94:32:a2:63:c1: c5:53:93:18:2c:0e:e9:70:73:c8:84:42:65:a0:c9:36:9b:d6: 65:f2:c6:c8:6b:0e:3e:3c:d9:65:c5:95:fe:92:e7:10:08:c1: dd:83:61:37:6c:42:d2:e3:98:08:a9:a0:e6:33:c2:95:97:89: d7:71:21:08:c9:df:9d:e8:87:fe:ae:1b:8f:ba:25:89:04:49: 68:7d:ad:da:79:dd:53:19:f1:4b:24:8a:98:93:6d:29:ee:6e: 62:de:a3:73 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxNTEwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDQ4ZS1mZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z5eh2A+6WmbFDjGm1phUdk1Fx+eGbXPlVQNs1FyjQJNW4uVAytLna/uIC+D 23zJb9VMlt2H87wU/rWPr5vYZ65qmlVHqV35l7SK4zyk3Z5MsVlPkStp3TJkFFtA vIIawV64mVWSYfOfG4savswbhnrXTfrF5ecLs6yn4mCelwb0KA3bx2WVPK2aPwEP APmWyh+swaTipM7YEuS89V15c5Ilxt9TAApKh6cFvX3hD4bH62qQNNS/epnMKRNt m8OxcK2XT+B1OCWXxqHc4K2xxhnQHwq7mDJHJYmy4ij6DlCSQ+RZQRCw3QeH6mA2 7EzZSaAKfCEt8ZuL/vnORDMpUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDPf5Wxf Tix8RlmnXqmZ0B0msRcHMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjVEQjREOEVD RjVDMTFGMDlFREMzRDFDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivzqMA0GCSqGSIb3DQEBCwUAA4IBAQBu2VZHuX/qa0CDYHG2WKyh jT4se4tm97Vxf3ll4kHaySdP3bMJUQSAjWILWxRJ5m8SSF2xWRTpvsqm/T/Gfy0A hlv5m0qE9m0fvqcmfszvHyz5u7BROyKDMBWH/mcBkqTzK2rK/7gH5/KBs6j7QiQ4 GMij0vHc4E29pwMKuvNTnaTRvBJADJMPts532L8evy8WYlr/jXn1gabSALd2lDKi Y8HFU5MYLA7pcHPIhEJloMk2m9Zl8sbIaw4+PNllxZX+kucQCMHdg2E3bELS45gI qaDmM8KVl4nXcSEIyd+d6If+rhuPuiWJBElofa3aed1TGfFLJIqYk20p7m5i3qNz -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:07 2026 by rpki-client