$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3181E726CE7911F0A596D24CC4F9AE02.roa File: 3181E726CE7911F0A596D24CC4F9AE02.roa (raw, json) Hash identifier: rEhcdfT2xpReajlB+MEe+c912U4YAKqHAUat3VqpeNA= Subject key identifier: 00:95:B7:C1:8F:DD:DC:DE:A9:3B:8C:DD:CF:AC:45:5B:4E:F7:CC:C0 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 30BC Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3181E726CE7911F0A596D24CC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:16:34 +0000 ROA not before: Mon 06 Jul 2026 16:16:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135692 IP address blocks: 138.252.242.0/23 maxlen: 23 138.252.242.0/24 maxlen: 24 138.252.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12476 (0x30bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:16:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd4e2-ea1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:b4:0a:0c:c5:cc:80:48:bf:5f:93:b0:ee: 55:ab:2b:3a:ea:45:d6:b5:b8:78:08:25:95:01:44: b9:8b:80:4a:82:b2:1a:53:b7:54:1a:71:04:c5:0b: 4b:8a:8c:eb:7a:2f:4c:70:71:78:34:25:62:e9:a5: a5:82:61:e4:36:d8:d6:f3:2e:ee:04:29:57:73:b6: ca:a5:db:49:57:a8:67:35:d9:78:b7:e4:dc:33:1c: 49:0e:ef:68:3d:e6:0c:e8:69:09:96:b8:10:de:56: 3f:57:7f:ff:8d:b6:1d:de:94:f5:48:50:4e:d7:47: e0:5a:fe:0d:f8:4e:9c:30:29:cf:dc:9c:9c:2a:f2: b0:75:50:1f:a9:12:1a:e2:93:b4:f7:7c:c8:77:63: af:dd:ff:16:06:66:9e:0f:a8:53:e6:53:6c:e2:9b: 23:01:9a:4c:59:7e:23:a5:c9:b9:6a:6f:53:89:7c: d6:70:ae:5d:ed:00:a7:7c:2c:02:9d:24:86:9c:5e: b5:90:62:1f:16:75:3d:4d:72:d1:97:bb:d1:f1:4d: 14:fd:36:66:c6:e7:89:0f:1d:1c:d2:31:81:35:cb: 11:f2:e1:56:b2:5e:79:06:4e:cb:a3:b6:e8:20:9b: b6:25:a8:73:5e:bd:8d:10:a9:05:34:b1:48:40:a5: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:95:B7:C1:8F:DD:DC:DE:A9:3B:8C:DD:CF:AC:45:5B:4E:F7:CC:C0 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3181E726CE7911F0A596D24CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.242.0/23 Signature Algorithm: sha256WithRSAEncryption 52:c6:87:e0:52:4b:d5:49:f0:ea:96:f1:02:a5:d1:33:ac:cf: 2e:dd:31:d5:82:f2:ff:bb:02:c0:5a:58:62:53:3c:b4:e4:76: 8e:49:15:0e:97:b4:d7:25:59:23:9b:8d:12:19:91:fb:59:c9: 6b:22:0e:c3:8b:cd:f2:ad:02:a7:e5:c2:7e:1e:96:7d:79:b2: 11:8d:c7:1d:22:6c:d9:00:78:10:01:f9:fa:83:3e:e9:f4:55: 47:96:7d:b8:19:c4:34:aa:60:79:23:9b:73:51:ca:c8:60:a9: 8b:07:13:c8:7c:04:f7:1f:64:45:41:58:bc:cf:a9:41:18:ae: 0b:2b:a5:b9:c4:20:39:b6:dd:67:08:a3:eb:f2:b1:79:72:71: 4b:e5:31:a8:48:e7:1a:db:6e:05:db:39:67:70:32:2f:a8:b2: 0e:0e:9c:4c:0e:89:7d:d5:a3:fc:31:62:11:f0:a8:15:63:ea: 28:bc:31:38:2a:49:92:18:b1:aa:05:c2:a5:c7:ff:4d:c7:48: e7:d0:0b:5a:92:39:e2:33:a6:d1:ca:b7:34:2d:26:c3:f1:f0: a4:56:23:4b:28:00:9e:72:04:1c:59:0f:83:42:e2:bb:45:4f: fe:3b:80:69:63:3c:82:2d:43:be:01:15:98:16:1e:d1:28:6b: 97:d9:71:5b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxNjM0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDRlMi1lYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwK0CgzFzIBIv1+TsO5Vqys66kXWtbh4CCWVAUS5i4BKgrIaU7dUGnEExQtL iozrei9McHF4NCVi6aWlgmHkNtjW8y7uBClXc7bKpdtJV6hnNdl4t+TcMxxJDu9o PeYM6GkJlrgQ3lY/V3//jbYd3pT1SFBO10fgWv4N+E6cMCnP3JycKvKwdVAfqRIa 4pO093zId2Ov3f8WBmaeD6hT5lNs4psjAZpMWX4jpcm5am9TiXzWcK5d7QCnfCwC nSSGnF61kGIfFnU9TXLRl7vR8U0U/TZmxueJDx0c0jGBNcsR8uFWsl55Bk7Lo7bo IJu2JahzXr2NEKkFNLFIQKW4uQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFACVt8GP 3dzeqTuM3c+sRVtO98zAMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzE4MUU3MjZD RTc5MTFGMEE1OTZEMjRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivzyMA0GCSqGSIb3DQEBCwUAA4IBAQBSxofgUkvVSfDqlvECpdEz rM8u3THVgvL/uwLAWlhiUzy05HaOSRUOl7TXJVkjm40SGZH7WclrIg7Di83yrQKn 5cJ+HpZ9ebIRjccdImzZAHgQAfn6gz7p9FVHln24GcQ0qmB5I5tzUcrIYKmLBxPI fAT3H2RFQVi8z6lBGK4LK6W5xCA5tt1nCKPr8rF5cnFL5TGoSOca224F2zlncDIv qLIODpxMDol91aP8MWIR8KgVY+oovDE4KkmSGLGqBcKlx/9Nx0jn0AtakjniM6bR yrc0LSbD8fCkViNLKACecgQcWQ+DQuK7RU/+O4BpYzyCLUO+ARWYFh7RKGuX2XFb -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:57 2026 by rpki-client