$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8589BDA6AF1D11F0B0944E21C4F9AE02.roa File: 8589BDA6AF1D11F0B0944E21C4F9AE02.roa (raw, json) Hash identifier: G0V9UstoUlqbuXnOSyypwTaPnLMp4jfjg5VnH5xZim8= Subject key identifier: 05:55:56:16:1D:69:F6:A5:B7:A8:8B:D5:70:38:93:41:5B:6F:95:39 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3202 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8589BDA6AF1D11F0B0944E21C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:27:19 +0000 ROA not before: Mon 06 Jul 2026 16:27:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154299 IP address blocks: 138.252.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12802 (0x3202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:27:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd767-d0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:50:e5:94:6b:67:61:77:df:a1:af:f3:7d: 3f:6c:14:14:d2:0c:eb:e5:38:58:f7:da:78:84:a1: 29:5d:78:a2:5f:7b:2c:d3:24:0b:13:83:65:2e:30: ca:06:81:e9:14:d8:7b:0a:ca:34:bb:2e:6d:e0:b5: df:09:1c:58:df:74:dd:00:25:8d:52:c3:36:bb:ae: bb:75:96:02:94:31:f9:26:d2:80:27:b7:c0:23:7e: 37:7d:1f:71:3f:96:39:a2:bf:91:83:d4:ce:76:15: 7c:97:8d:ff:4a:c5:e6:76:a8:25:b8:67:86:ec:a1: dc:53:9c:5c:ef:f9:af:77:eb:84:1a:b8:77:ec:82: 54:42:60:3f:02:24:e1:c9:a5:6d:15:8d:44:53:7e: ff:f7:9d:cb:19:f0:ad:83:f8:0e:b5:f4:8e:1a:76: 15:22:79:d9:2a:54:9b:47:86:f8:18:4c:28:22:93: ac:0a:ec:f5:2e:02:4e:f2:b4:6c:6c:eb:af:d6:db: 08:d4:00:76:93:33:dd:4f:b7:08:f9:06:3e:f2:bc: bb:f4:8e:ef:09:f5:4a:3c:99:d6:0c:4b:19:a3:1a: 43:03:a5:c2:5a:42:98:82:73:c3:e7:73:4e:20:90: a7:6b:c8:d6:d8:51:d1:e0:1f:c1:1f:db:72:40:36: bc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:55:56:16:1D:69:F6:A5:B7:A8:8B:D5:70:38:93:41:5B:6F:95:39 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8589BDA6AF1D11F0B0944E21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.38.0/23 Signature Algorithm: sha256WithRSAEncryption 75:b7:00:09:90:7a:ad:81:7f:9c:a7:8d:0d:5f:36:37:7b:91: 4d:53:11:d8:0a:ec:e6:4f:c6:77:8f:ac:5e:af:16:7f:f1:c8: 69:c1:f0:91:b4:4f:27:c1:3f:2e:99:a7:15:f2:59:1c:e2:4c: a4:c9:91:c6:31:d4:40:95:30:b7:7b:ee:ff:83:de:21:ee:cc: b4:e2:31:85:49:a2:bc:d5:b2:e2:cf:de:c6:6c:ca:6b:64:2c: 53:68:30:d1:ee:d9:44:f0:dc:1e:b3:1a:b8:54:fb:27:68:78: b8:dd:57:45:cb:55:27:5a:9e:b3:6d:e9:e5:6f:99:4f:74:9f: 6d:5b:e7:8d:c6:51:1f:54:ea:df:16:9f:c4:0c:19:2d:31:56: 54:7a:fd:69:e4:c4:8e:c6:f7:87:42:96:e3:8a:89:77:3f:c8: 01:5f:f7:3f:55:d1:d5:fa:cd:9d:c9:d4:f4:d3:78:97:8a:fa: a3:44:ee:2e:75:be:89:e8:54:87:d6:8e:98:95:d3:84:71:d9: f8:b0:84:9a:9c:d0:59:fc:fd:16:23:20:7d:01:11:05:63:06: 25:50:1c:3e:ea:ab:07:23:e4:42:8a:7e:33:e6:5d:7f:9b:90: 9d:da:0a:96:08:fb:10:b3:1d:b4:08:11:43:58:8f:79:bb:bf: d9:f5:d4:3c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNzE5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDc2Ny1kMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptlQ5ZRrZ2F336Gv830/bBQU0gzr5ThY99p4hKEpXXiiX3ss0yQLE4NlLjDK BoHpFNh7Cso0uy5t4LXfCRxY33TdACWNUsM2u667dZYClDH5JtKAJ7fAI343fR9x P5Y5or+Rg9TOdhV8l43/SsXmdqgluGeG7KHcU5xc7/mvd+uEGrh37IJUQmA/AiTh yaVtFY1EU37/953LGfCtg/gOtfSOGnYVInnZKlSbR4b4GEwoIpOsCuz1LgJO8rRs bOuv1tsI1AB2kzPdT7cI+QY+8ry79I7vCfVKPJnWDEsZoxpDA6XCWkKYgnPD53NO IJCna8jW2FHR4B/BH9tyQDa8NwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAVVVhYd afalt6iL1XA4k0Fbb5U5MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODU4OUJEQTZB RjFEMTFGMEIwOTQ0RTIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivwmMA0GCSqGSIb3DQEBCwUAA4IBAQB1twAJkHqtgX+cp40NXzY3 e5FNUxHYCuzmT8Z3j6xerxZ/8chpwfCRtE8nwT8umacV8lkc4kykyZHGMdRAlTC3 e+7/g94h7sy04jGFSaK81bLiz97GbMprZCxTaDDR7tlE8Nwesxq4VPsnaHi43VdF y1UnWp6zbenlb5lPdJ9tW+eNxlEfVOrfFp/EDBktMVZUev1p5MSOxveHQpbjiol3 P8gBX/c/VdHV+s2dydT003iXivqjRO4udb6J6FSH1o6YldOEcdn4sISanNBZ/P0W IyB9AREFYwYlUBw+6qsHI+RCin4z5l1/m5Cd2gqWCPsQsx20CBFDWI95u7/Z9dQ8 -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:25 2026 by rpki-client