$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8589BDA6AF1D11F0B0944E21C4F9AE02.roa File: 8589BDA6AF1D11F0B0944E21C4F9AE02.roa (raw, json) Hash identifier: yXxm1Mte0y6KOwlqpX0f66rkutV4FnJeQT2k98vzamI= Subject key identifier: 82:5B:4C:63:ED:2F:E4:1F:87:A1:64:19:BC:5C:DE:36:86:74:0F:D4 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2FD7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8589BDA6AF1D11F0B0944E21C4F9AE02.roa Signing time: Sun 31 May 2026 16:29:24 +0000 ROA not before: Sun 31 May 2026 16:29:24 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 154299 IP address blocks: 138.252.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 15:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12247 (0x2fd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:29:24 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c61e4-2591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:4d:94:7c:33:f0:56:68:b5:cf:6e:e3:d7: ad:b8:8e:73:61:22:65:fe:02:e4:52:10:86:43:88: 5f:ec:d7:04:7b:11:bf:25:da:74:b1:d9:e9:20:0b: c0:4b:6d:ed:ae:30:b0:32:b7:6c:de:ac:69:47:d5: 00:49:dc:26:e9:82:e8:79:9e:5a:9a:fc:e7:72:6e: 63:ac:58:3b:64:1f:4b:b3:9f:5c:71:27:c4:86:38: 62:3e:58:f1:82:17:83:b9:c1:6e:a2:cd:d0:71:90: d4:51:7c:3d:b6:cb:79:65:58:4f:39:3b:99:87:8e: 6e:40:0c:65:bf:da:b1:ab:e6:1b:fb:87:f4:14:67: 07:99:b1:be:c0:69:61:6c:8a:01:7f:da:07:fd:32: 86:a5:f9:4b:7c:71:e1:56:43:4d:28:dd:86:fd:9d: 7d:42:29:e3:31:f1:4c:f9:80:b2:52:0b:73:6d:5d: 2b:26:00:82:1f:c5:28:b8:4c:57:06:91:7a:b8:b7: 84:cc:81:5f:47:71:be:5f:e9:88:ec:fe:f6:6d:d8: 7c:99:63:82:09:4f:80:05:03:ea:53:3b:0f:8e:8b: 40:02:83:75:0e:21:89:f1:0e:20:cf:71:60:12:ef: 94:68:50:ef:2b:c3:c8:e9:22:51:05:99:dc:24:07: 25:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5B:4C:63:ED:2F:E4:1F:87:A1:64:19:BC:5C:DE:36:86:74:0F:D4 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8589BDA6AF1D11F0B0944E21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.38.0/23 Signature Algorithm: sha256WithRSAEncryption 66:53:6b:05:b6:38:37:f8:07:a3:ae:7b:c1:33:51:72:be:67: 40:09:0b:e1:72:de:51:e2:b7:a2:df:39:2d:12:1d:77:98:36: ef:cb:b0:8e:85:64:76:d1:ee:c6:75:69:20:7a:df:7f:1d:7b: bc:07:a4:c2:7b:ee:2d:5c:5f:a9:c9:c0:66:b6:be:c6:1b:fa: 84:64:5c:9c:46:6b:61:ff:f7:8b:1f:3d:2f:09:35:a5:be:5a: 5d:61:56:39:31:5f:d6:c7:48:ae:59:6c:68:e2:98:29:0f:5e: 67:c9:72:22:25:14:0d:78:52:ba:c1:80:37:8d:72:47:7c:f0: 8b:84:9f:e3:31:dd:fe:94:fc:bc:48:a5:86:8c:ee:84:7b:a8: c4:7e:85:ac:10:58:44:f3:ce:6b:7f:de:72:b3:39:20:85:0c: 53:4a:b8:49:8d:5a:94:00:92:cd:60:54:a1:dd:c8:2c:c3:04: 4c:23:d2:70:98:b0:93:ce:e9:16:6e:1d:7e:eb:44:8e:d5:34: ed:bf:d6:2a:21:d6:8e:a5:a8:68:96:5c:b3:51:dd:8e:f5:80: 68:55:40:29:fc:89:c3:a6:9c:86:23:ba:4a:8f:3b:27:bb:8b: f4:c5:15:a1:55:b7:9b:55:9d:b1:4d:4e:35:f0:19:06:8e:a8: 07:03:ed:39 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICL9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYyOTI0WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNjFlNC0yNTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkTZNlHwz8FZotc9u49etuI5zYSJl/gLkUhCGQ4hf7NcEexG/Jdp0sdnpIAvA S23trjCwMrds3qxpR9UASdwm6YLoeZ5amvzncm5jrFg7ZB9Ls59ccSfEhjhiPljx gheDucFuos3QcZDUUXw9tst5ZVhPOTuZh45uQAxlv9qxq+Yb+4f0FGcHmbG+wGlh bIoBf9oH/TKGpflLfHHhVkNNKN2G/Z19QinjMfFM+YCyUgtzbV0rJgCCH8UouExX BpF6uLeEzIFfR3G+X+mI7P72bdh8mWOCCU+ABQPqUzsPjotAAoN1DiGJ8Q4gz3Fg Eu+UaFDvK8PI6SJRBZncJAcl5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIJbTGPt L+Qfh6FkGbxc3jaGdA/UMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODU4OUJEQTZB RjFEMTFGMEIwOTQ0RTIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivwmMA0GCSqGSIb3DQEBCwUAA4IBAQBmU2sFtjg3+AejrnvBM1Fy vmdACQvhct5R4rei3zktEh13mDbvy7COhWR20e7GdWkget9/HXu8B6TCe+4tXF+p ycBmtr7GG/qEZFycRmth//eLHz0vCTWlvlpdYVY5MV/Wx0iuWWxo4pgpD15nyXIi JRQNeFK6wYA3jXJHfPCLhJ/jMd3+lPy8SKWGjO6Ee6jEfoWsEFhE885rf95yszkg hQxTSrhJjVqUAJLNYFSh3cgswwRMI9JwmLCTzukWbh1+60SO1TTtv9YqIdaOpaho llyzUd2O9YBoVUAp/InDppyGI7pKjzsnu4v0xRWhVbebVZ2xTU418BkGjqgHA+05 -----END CERTIFICATE-----Generated at Sat Jun 6 09:39:45 2026 by rpki-client