$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa File: 384CF758C46011F091DDFD33C4F9AE02.roa (raw, json) Hash identifier: WrCeTKRZhTVaS7dr636WRKN9QG3HqkjVR5eYJMiIX0c= Subject key identifier: E1:B4:63:4D:61:81:A3:93:A2:5F:32:3F:AE:6D:4C:E7:E7:A8:30:B0 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3205 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:27:24 +0000 ROA not before: Mon 06 Jul 2026 16:27:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154326 IP address blocks: 138.252.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12805 (0x3205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:27:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd76c-1475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:35:03:35:0e:a4:7f:18:ea:6e:53:12:ca: 9c:7f:80:51:ba:f6:7b:ab:76:2b:d9:b5:fe:1a:f5: 08:5f:4e:c6:62:62:79:42:1d:35:df:26:a7:35:62: 70:86:9b:44:8f:81:88:f6:64:99:5b:c1:5a:83:49: e7:a5:8b:f9:3f:32:c6:de:cb:1d:c7:2d:b2:05:1d: 27:08:73:d1:b4:37:80:8b:16:04:75:80:67:0e:ce: 3f:cc:47:73:b0:5b:9e:0a:5a:6e:5c:65:32:fd:0f: 1b:af:ab:1c:9e:b9:90:cf:59:ac:db:61:09:55:b3: 17:5c:4b:14:84:03:38:07:76:05:be:72:09:45:59: 1c:df:79:74:34:b9:74:e3:3e:e6:d2:6b:ff:73:3f: cc:f9:db:48:0e:3f:a6:41:04:e7:e3:37:f1:2f:87: c2:f9:14:90:5b:13:e9:3b:ae:37:4d:88:b3:db:cc: d7:45:73:fd:2c:6d:45:cc:2c:ed:a6:cf:fa:c2:8f: a7:1c:ae:37:52:e4:b3:0c:03:11:54:d2:90:91:74: f7:e1:c6:a6:d6:4f:7b:f9:af:30:ec:65:00:36:f4: 47:3f:1e:3b:26:04:51:54:f8:23:5b:4b:8c:a2:8a: e3:8d:74:79:9e:a0:62:66:12:4e:08:18:e7:5a:bd: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B4:63:4D:61:81:A3:93:A2:5F:32:3F:AE:6D:4C:E7:E7:A8:30:B0 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.108.0/24 Signature Algorithm: sha256WithRSAEncryption c1:7c:de:06:d8:9b:77:7e:dd:7d:da:06:ba:b7:8f:36:c1:80: 8f:8b:e8:27:a1:03:fb:c2:f0:c5:3a:b0:a0:24:a4:ce:8e:3e: cc:ef:b2:2b:2e:ad:f8:dd:7b:df:87:4b:f6:09:cc:c1:5a:7a: ab:81:76:10:b0:02:43:55:f8:e3:17:33:80:bf:7b:2e:55:62: b2:64:02:85:ce:dc:7b:d1:00:70:ac:b6:df:7d:d6:58:79:67: 59:28:bf:24:73:46:bf:cb:ba:58:86:da:dd:00:f9:e1:c3:44: c0:76:a5:33:72:e3:6d:18:94:97:1a:9b:b8:a0:b5:fa:67:1c: 65:15:bd:22:ee:b5:a9:1b:f3:8f:03:da:03:41:10:28:33:f9: 06:74:d1:9a:4a:c8:6d:76:76:39:5f:68:cd:bf:04:1f:c0:fd: be:91:1b:ed:af:e4:7b:b3:fa:d0:af:bf:4e:d5:2e:ae:20:50: 6a:ef:c8:60:68:30:34:a5:34:a1:68:8b:e1:a8:b4:4b:c8:f4: 81:47:a3:50:25:36:cd:f2:d0:f8:98:fe:8e:bd:f9:c2:c2:2d: 0d:84:9a:bf:59:82:a6:dc:32:46:76:ff:74:b2:1c:3e:75:ee: f9:cc:b1:b7:f8:8c:11:a6:f0:63:16:60:91:44:65:22:d7:7d: ff:9c:e3:d1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNzI0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDc2Yy0xNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXc1AzUOpH8Y6m5TEsqcf4BRuvZ7q3Yr2bX+GvUIX07GYmJ5Qh013yanNWJw hptEj4GI9mSZW8Fag0nnpYv5PzLG3ssdxy2yBR0nCHPRtDeAixYEdYBnDs4/zEdz sFueClpuXGUy/Q8br6scnrmQz1ms22EJVbMXXEsUhAM4B3YFvnIJRVkc33l0NLl0 4z7m0mv/cz/M+dtIDj+mQQTn4zfxL4fC+RSQWxPpO643TYiz28zXRXP9LG1FzCzt ps/6wo+nHK43UuSzDAMRVNKQkXT34cam1k97+a8w7GUANvRHPx47JgRRVPgjW0uM oorjjXR5nqBiZhJOCBjnWr1YwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOG0Y01h gaOTol8yP65tTOfnqDCwMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzg0Q0Y3NThD NDYwMTFGMDkxRERGRDMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAivxsMA0GCSqGSIb3DQEBCwUAA4IBAQDBfN4G2Jt3ft192ga6t482 wYCPi+gnoQP7wvDFOrCgJKTOjj7M77IrLq343Xvfh0v2CczBWnqrgXYQsAJDVfjj FzOAv3suVWKyZAKFztx70QBwrLbffdZYeWdZKL8kc0a/y7pYhtrdAPnhw0TAdqUz cuNtGJSXGpu4oLX6ZxxlFb0i7rWpG/OPA9oDQRAoM/kGdNGaSshtdnY5X2jNvwQf wP2+kRvtr+R7s/rQr79O1S6uIFBq78hgaDA0pTShaIvhqLRLyPSBR6NQJTbN8tD4 mP6OvfnCwi0NhJq/WYKm3DJGdv90shw+de75zLG3+IwRpvBjFmCRRGUi133/nOPR -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:59 2026 by rpki-client