$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9EB1F84D01C11F0A34A4F34C4F9AE02.roa File: B9EB1F84D01C11F0A34A4F34C4F9AE02.roa (raw, json) Hash identifier: XX9Z7iCJpz0IFfRmxlOF3WK1D6I3umqOfNm2Si2mBIg= Subject key identifier: 5E:61:BD:6E:64:5F:F5:70:DF:F5:D4:AC:5F:3B:95:22:2E:CF:5C:2F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 320A Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9EB1F84D01C11F0A34A4F34C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:27:34 +0000 ROA not before: Mon 06 Jul 2026 16:27:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154384 IP address blocks: 138.252.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12810 (0x320a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:27:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd776-b56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:fc:e7:a5:b2:82:5a:02:c8:88:5a:36:e7: 76:e6:ed:62:d4:b4:a7:94:64:32:a0:03:2e:b9:1a: 3b:3a:40:bb:73:72:ca:ce:1f:8d:ef:a2:71:c9:3d: fb:32:de:6f:07:48:3c:a9:01:84:4e:4c:45:5e:19: 59:97:86:19:58:cb:36:00:aa:e4:66:16:a2:56:b6: 03:b4:dc:2b:94:8c:1e:e9:1f:75:e2:6f:d4:f4:65: 6a:ea:9b:b7:39:8a:84:39:39:92:f3:7c:f8:9e:f7: fc:03:6b:0f:05:81:ea:84:83:b8:24:40:72:09:35: 7b:de:70:7e:ff:ec:85:65:0f:8a:99:17:91:26:48: af:d6:a7:68:5d:95:9e:f1:94:a5:9b:bd:17:70:72: 76:2d:33:4c:e2:1b:2e:d6:4c:50:d5:38:88:96:1b: 3f:f7:07:44:3f:3d:17:7d:29:bc:32:ec:ac:73:bb: 5b:aa:52:cc:20:72:64:bc:c4:b1:76:c4:e3:52:0e: 12:76:a2:15:1e:8b:08:ee:5f:05:70:27:2e:5f:a1: 4b:98:2b:65:ee:37:38:27:18:bf:58:3d:5c:35:d7: 3e:79:f4:4d:ba:aa:64:14:d0:8e:ff:54:e5:a1:30: 8e:93:c4:b9:a9:86:36:64:25:22:ef:a6:f1:6e:20: 30:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:61:BD:6E:64:5F:F5:70:DF:F5:D4:AC:5F:3B:95:22:2E:CF:5C:2F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9EB1F84D01C11F0A34A4F34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.254.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:6f:de:0a:58:79:d2:3e:1c:fa:83:3c:ce:6b:a0:cc:f0:e6: dc:99:59:a7:62:57:de:1a:7e:1b:8d:5d:e5:d1:46:c5:41:38: 86:e2:f6:4b:c5:b6:69:10:e3:f4:95:d7:76:d8:c6:4b:28:05: 09:e4:e4:ff:ff:0d:4e:54:72:a6:67:73:66:70:12:b0:95:06: c2:aa:d0:1e:87:31:41:98:59:ba:67:ff:c3:a6:37:66:d0:6a: 0d:1a:12:f0:e3:b2:cf:32:74:3d:0f:d8:30:c1:10:9f:d6:39: 46:71:7c:ef:96:9d:c0:5d:a8:98:86:53:a3:af:ae:b3:ee:da: c7:8b:57:3c:01:5e:cd:77:90:ac:a3:83:aa:01:e5:6f:06:bb: f7:16:d2:93:5e:ff:c5:0f:a3:af:75:5a:b7:64:2c:38:cd:55: 8f:b4:dc:1f:76:4c:bf:5a:7f:a8:5c:c6:06:84:0a:c0:a4:6e: 11:41:80:84:ad:0b:fb:0f:c0:85:66:46:6a:26:b6:32:1c:c4: f4:6e:2f:47:74:78:f0:d6:04:ba:6e:c4:11:75:f6:18:74:3c: 1c:c5:b6:e9:b2:c4:f0:71:48:10:e1:7f:ee:e5:a8:a7:50:79: 81:aa:64:aa:68:93:69:f5:e9:a8:d7:e0:75:39:e0:8b:06:49: 6a:43:fa:cb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNzM0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDc3Ni1iNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGH856WygloCyIhaNud25u1i1LSnlGQyoAMuuRo7OkC7c3LKzh+N76JxyT37 Mt5vB0g8qQGETkxFXhlZl4YZWMs2AKrkZhaiVrYDtNwrlIwe6R914m/U9GVq6pu3 OYqEOTmS83z4nvf8A2sPBYHqhIO4JEByCTV73nB+/+yFZQ+KmReRJkiv1qdoXZWe 8ZSlm70XcHJ2LTNM4hsu1kxQ1TiIlhs/9wdEPz0XfSm8Muysc7tbqlLMIHJkvMSx dsTjUg4SdqIVHosI7l8FcCcuX6FLmCtl7jc4Jxi/WD1cNdc+efRNuqpkFNCO/1Tl oTCOk8S5qYY2ZCUi76bxbiAwOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF5hvW5k X/Vw3/XUrF87lSIuz1wvMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjlFQjFGODRE MDFDMTFGMEEzNEE0RjM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivz+MA0GCSqGSIb3DQEBCwUAA4IBAQAub94KWHnSPhz6gzzOa6DM 8ObcmVmnYlfeGn4bjV3l0UbFQTiG4vZLxbZpEOP0ldd22MZLKAUJ5OT//w1OVHKm Z3NmcBKwlQbCqtAehzFBmFm6Z//Dpjdm0GoNGhLw47LPMnQ9D9gwwRCf1jlGcXzv lp3AXaiYhlOjr66z7trHi1c8AV7Nd5Cso4OqAeVvBrv3FtKTXv/FD6OvdVq3ZCw4 zVWPtNwfdky/Wn+oXMYGhArApG4RQYCErQv7D8CFZkZqJrYyHMT0bi9HdHjw1gS6 bsQRdfYYdDwcxbbpssTwcUgQ4X/u5ainUHmBqmSqaJNp9emo1+B1OeCLBklqQ/rL -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:42 2026 by rpki-client