$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72DAB060BE1E11F0AA0A3249C4F9AE02.roa File: 72DAB060BE1E11F0AA0A3249C4F9AE02.roa (raw, json) Hash identifier: xuaSPj3fxlG2oNY2e+dpoZwNoLip1HMjGgJ9je3SIzA= Subject key identifier: 6A:56:5D:81:07:58:CD:53:77:A5:83:DC:BE:0E:16:40:29:C4:01:DD Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 322C Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72DAB060BE1E11F0AA0A3249C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:28:47 +0000 ROA not before: Mon 06 Jul 2026 16:28:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55577 IP address blocks: 138.252.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12844 (0x322c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:28:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd7bf-b134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:45:ea:e0:b6:d9:c8:24:33:4d:49:68:50: 5e:2f:ce:dc:82:2d:69:ee:97:5e:e4:4d:48:fc:c5: 3e:cd:fb:ea:76:95:c4:36:dc:50:04:89:98:e2:ed: df:78:e6:12:15:fa:46:5e:f9:48:2d:47:c6:d5:40: 8c:e6:61:c9:30:af:db:91:53:32:2f:01:95:44:d4: 04:7e:e2:f1:73:3b:1c:a4:f6:aa:3e:96:6b:64:4e: 6b:8b:3d:85:95:d8:c8:81:3a:23:da:4f:d3:b8:f5: e4:2a:70:7d:e1:34:18:cf:b2:fe:a5:95:f5:31:d8: 05:04:4f:de:50:4c:28:29:d9:b4:5e:86:26:df:f1: 62:0a:53:b2:69:84:35:75:04:2b:c2:d2:7d:6d:87: 01:45:f9:ab:b0:cf:16:51:e4:60:cb:8d:df:1f:8e: 40:8d:34:72:54:d3:07:15:09:b6:b1:25:5a:eb:7f: 8f:d3:1c:11:b3:7e:a0:17:6a:3c:da:36:a1:59:22: ec:75:ef:88:a3:67:e0:81:c1:58:1f:b0:f8:b3:3f: 1c:34:98:c9:2c:d8:d9:49:30:54:c7:8f:bc:d8:26: 6d:0d:14:ab:69:73:7d:1e:7a:3c:88:ad:ee:ec:2b: 7c:91:64:6d:cd:83:2d:45:af:ea:27:66:e3:70:50: 6b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:56:5D:81:07:58:CD:53:77:A5:83:DC:BE:0E:16:40:29:C4:01:DD X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72DAB060BE1E11F0AA0A3249C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.68.0/24 Signature Algorithm: sha256WithRSAEncryption b6:29:61:84:cf:f1:7e:ea:8e:58:cc:d0:42:63:4d:db:b2:c3: 29:42:1e:87:f6:2e:98:a3:03:3a:81:87:e0:7e:7d:63:37:25: ab:90:e3:43:86:6f:f6:61:8e:f1:50:04:3e:13:63:d0:b0:e8: 7e:4b:ea:a7:d4:e1:64:2f:53:23:0f:51:39:d1:bd:13:ab:50: 9e:3b:e1:f2:1d:8e:eb:98:95:58:58:f5:32:2f:67:09:c4:ad: 16:40:3b:67:a9:2f:36:d2:3f:5c:cd:38:29:2c:77:85:8c:24: 24:85:b9:90:e5:85:f2:b7:0f:3e:ff:b2:af:c1:2b:5c:96:cb: 25:d5:36:48:46:6c:c6:4c:7e:ad:b3:78:50:34:a1:e7:5f:38: 0d:e4:a4:9c:06:94:cd:76:cf:ff:34:68:1e:b2:db:5a:55:b4: 87:db:8a:70:20:e0:2c:31:ff:cb:1a:a0:14:dd:90:80:a6:ed: 11:d1:e1:f6:ce:07:ed:88:9c:aa:2c:15:f4:d6:86:e0:3a:8a: 87:2d:71:58:05:94:07:c3:95:23:fe:f2:06:60:4e:e1:6a:07: c4:c6:1c:03:8b:64:b9:bc:a0:21:bb:e7:fe:a9:56:e0:17:96: 89:0b:3b:ad:12:16:81:ce:f2:3d:a2:3c:dd:e0:50:a3:95:ae: ec:55:51:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyODQ3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDdiZi1iMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoZF6uC22cgkM01JaFBeL87cgi1p7pde5E1I/MU+zfvqdpXENtxQBImY4u3f eOYSFfpGXvlILUfG1UCM5mHJMK/bkVMyLwGVRNQEfuLxczscpPaqPpZrZE5riz2F ldjIgToj2k/TuPXkKnB94TQYz7L+pZX1MdgFBE/eUEwoKdm0XoYm3/FiClOyaYQ1 dQQrwtJ9bYcBRfmrsM8WUeRgy43fH45AjTRyVNMHFQm2sSVa63+P0xwRs36gF2o8 2jahWSLsde+Io2fggcFYH7D4sz8cNJjJLNjZSTBUx4+82CZtDRSraXN9Hno8iK3u 7Ct8kWRtzYMtRa/qJ2bjcFBr3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGpWXYEH WM1Td6WD3L4OFkApxAHdMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzJEQUIwNjBC RTFFMTFGMEFBMEEzMjQ5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAivxEMA0GCSqGSIb3DQEBCwUAA4IBAQC2KWGEz/F+6o5YzNBCY03b ssMpQh6H9i6YowM6gYfgfn1jNyWrkONDhm/2YY7xUAQ+E2PQsOh+S+qn1OFkL1Mj D1E50b0Tq1CeO+HyHY7rmJVYWPUyL2cJxK0WQDtnqS820j9czTgpLHeFjCQkhbmQ 5YXytw8+/7KvwStclssl1TZIRmzGTH6ts3hQNKHnXzgN5KScBpTNds//NGgestta VbSH24pwIOAsMf/LGqAU3ZCApu0R0eH2zgftiJyqLBX01obgOoqHLXFYBZQHw5Uj /vIGYE7hagfExhwDi2S5vKAhu+f+qVbgF5aJCzutEhaBzvI9ojzd4FCjla7sVVFO -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:33 2026 by rpki-client