$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3933F030F6CF11F0B52F4A0C526F56BC.roa File: 3933F030F6CF11F0B52F4A0C526F56BC.roa (raw, json) Hash identifier: MOudtvKQxck5N0LTr1YmfrSgqZvXAC/4bv60nueP12Y= Subject key identifier: 6F:D1:87:19:C3:99:2F:0D:EE:21:E8:F1:23:67:06:A1:BC:30:AD:3C Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3208 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3933F030F6CF11F0B52F4A0C526F56BC.roa Signing time: Mon 06 Jul 2026 16:27:30 +0000 ROA not before: Mon 06 Jul 2026 16:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154366 IP address blocks: 138.252.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12808 (0x3208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd772-9a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5f:08:b9:22:14:35:85:cf:8a:96:21:80:a9: 60:32:14:f3:4e:5d:c1:24:bd:33:a2:79:43:67:7a: 26:81:8b:f2:db:58:2e:67:68:76:bd:79:ad:f3:64: 06:1a:ac:f4:07:6e:be:5a:2b:3c:a2:98:2c:a0:66: 57:db:c3:79:d1:2a:4a:9c:85:60:b4:49:10:8b:e5: 18:52:c0:46:6b:ed:c4:56:ae:16:c8:a7:42:02:13: cd:ac:43:a5:94:b6:3c:e1:dd:97:a2:c4:d6:30:e6: e1:f9:fd:85:12:8d:33:96:6c:65:61:20:ee:73:bf: c6:8c:96:e7:8d:fd:63:69:fa:d0:97:41:09:4d:48: 8c:89:9b:39:6d:c6:8f:98:31:ea:7a:13:02:16:b1: 78:69:71:42:b3:d8:34:cf:8f:f5:c0:96:b2:34:52: 86:55:f7:f1:e5:aa:24:ac:5b:90:bd:9d:66:5a:3a: 42:0b:d9:ad:06:78:ab:cb:4e:c6:60:f1:ab:86:e1: 13:4d:1c:a8:04:e6:60:f1:a6:ac:8c:c6:d8:90:52: 72:6b:eb:71:86:ee:36:46:59:80:58:09:96:f9:3a: d1:3d:a5:a4:13:63:07:b6:e2:71:7e:04:c0:c9:b9: 79:34:01:40:52:9a:2a:66:80:63:3d:cc:d5:2e:cf: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D1:87:19:C3:99:2F:0D:EE:21:E8:F1:23:67:06:A1:BC:30:AD:3C X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3933F030F6CF11F0B52F4A0C526F56BC.roa sbgp-ipAddrBlock: critical IPv4: 138.252.200.0/23 Signature Algorithm: sha256WithRSAEncryption 65:c3:12:b7:d4:e3:0b:0e:78:80:27:29:b8:4a:03:6c:48:4f: ca:28:74:50:01:c4:d9:72:8b:ba:ae:e5:12:0b:78:05:12:05: b8:08:d9:fb:c2:9d:a7:99:5d:f8:16:cf:05:90:53:a4:83:17: bc:b0:db:2d:bb:fb:9f:3d:5a:4e:45:65:bf:12:25:89:58:cd: 1f:99:a1:80:7b:ec:3c:3b:3f:5a:b4:53:41:82:93:b2:cb:9f: 00:95:9c:f3:7f:c6:5b:47:20:ea:6d:32:89:b8:ad:e1:c7:80: f7:21:7d:52:47:bc:c1:9b:ad:95:e1:c1:8c:e8:52:ea:ee:df: b8:a8:97:99:6f:5b:03:20:d2:68:e8:4c:ce:69:b9:4d:0b:db: eb:e6:0c:3b:ca:c3:9a:50:f4:b2:4c:37:19:bd:89:0c:d7:f1: b7:72:78:7f:6f:c9:9d:43:82:d8:00:eb:40:50:81:7c:cb:24: e2:48:e6:41:31:52:04:bb:03:ec:bf:51:66:ed:fd:e7:09:57: 42:72:02:02:1a:72:77:59:cc:3a:6e:15:fc:90:3f:48:b1:81: 2e:83:20:ee:1f:21:90:b7:09:e5:2a:58:27:01:ce:5a:6c:54: 61:4d:73:37:85:3c:24:07:95:5d:a2:71:37:1c:1e:eb:cb:91: c6:2b:a7:62 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNzMwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDc3Mi05YTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkV8IuSIUNYXPipYhgKlgMhTzTl3BJL0zonlDZ3omgYvy21guZ2h2vXmt82QG Gqz0B26+Wis8opgsoGZX28N50SpKnIVgtEkQi+UYUsBGa+3EVq4WyKdCAhPNrEOl lLY84d2XosTWMObh+f2FEo0zlmxlYSDuc7/GjJbnjf1jafrQl0EJTUiMiZs5bcaP mDHqehMCFrF4aXFCs9g0z4/1wJayNFKGVffx5aokrFuQvZ1mWjpCC9mtBniry07G YPGrhuETTRyoBOZg8aasjMbYkFJya+txhu42RlmAWAmW+TrRPaWkE2MHtuJxfgTA ybl5NAFAUpoqZoBjPczVLs+YvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG/RhxnD mS8N7iHo8SNnBqG8MK08MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzkzM0YwMzBG NkNGMTFGMEI1MkY0QTBDNTI2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivzIMA0GCSqGSIb3DQEBCwUAA4IBAQBlwxK31OMLDniAJym4SgNs SE/KKHRQAcTZcou6ruUSC3gFEgW4CNn7wp2nmV34Fs8FkFOkgxe8sNstu/ufPVpO RWW/EiWJWM0fmaGAe+w8Oz9atFNBgpOyy58AlZzzf8ZbRyDqbTKJuK3hx4D3IX1S R7zBm62V4cGM6FLq7t+4qJeZb1sDINJo6EzOablNC9vr5gw7ysOaUPSyTDcZvYkM 1/G3cnh/b8mdQ4LYAOtAUIF8yyTiSOZBMVIEuwPsv1Fm7f3nCVdCcgICGnJ3Wcw6 bhX8kD9IsYEugyDuHyGQtwnlKlgnAc5abFRhTXM3hTwkB5VdonE3HB7ry5HGK6di -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:41 2026 by rpki-client