$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9EB1F84D01C11F0A34A4F34C4F9AE02.roa File: B9EB1F84D01C11F0A34A4F34C4F9AE02.roa (raw, json) Hash identifier: C/lBDRz9f0bdc0MyMWoiVhDjzHdYa+vFMtyIjF0SwZk= Subject key identifier: 53:FC:E3:9D:4D:05:42:B5:B1:66:3B:B7:4D:4C:04:9E:F4:F4:44:3F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2FDF Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9EB1F84D01C11F0A34A4F34C4F9AE02.roa Signing time: Sun 31 May 2026 16:29:39 +0000 ROA not before: Sun 31 May 2026 16:29:39 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 154384 IP address blocks: 138.252.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Jun 2026 09:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12255 (0x2fdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:29:39 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c61f3-7ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:f9:2b:a6:21:c2:21:16:23:1d:1c:63:15: f5:f9:bd:b2:84:cb:3a:ce:38:1b:d4:5f:8f:a0:50: 2c:05:0a:ff:34:7f:63:30:a4:e4:f8:6a:a9:e1:d4: e6:56:61:03:a1:48:86:44:22:5c:74:98:47:04:0e: b4:45:e1:1b:43:d0:9e:22:94:d3:95:a1:c4:e5:1c: fe:62:b5:6b:82:ad:ff:f1:94:ce:f4:e4:35:d2:c3: 6b:89:ae:3b:9f:0f:f1:0e:cc:b7:00:50:b6:91:cb: 19:2e:11:72:1c:22:d4:d3:c7:68:a5:d2:0a:82:98: d5:63:6e:30:6b:03:0d:85:e8:7f:a9:a5:f9:64:40: c3:e9:76:4a:b9:be:e5:9b:08:b9:c0:fc:29:db:4c: b9:9a:b8:77:83:f1:cc:7a:e4:8f:d2:2a:fc:b9:f1: 03:0f:18:af:ca:a6:22:37:f5:1e:49:09:e5:69:ba: 57:bc:8f:e2:d7:a5:6d:46:5b:fd:64:7f:a9:0f:28: b0:7a:80:3a:ea:1d:e7:6a:87:22:22:97:be:e7:6f: a9:f1:4c:ea:1b:7e:5b:94:01:85:66:6d:5b:43:b1: c4:b8:fc:23:7b:63:41:60:2f:c8:45:c1:30:ab:23: 5c:c8:0a:8d:80:fc:dd:f1:7a:cb:10:fe:6b:8d:0f: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FC:E3:9D:4D:05:42:B5:B1:66:3B:B7:4D:4C:04:9E:F4:F4:44:3F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9EB1F84D01C11F0A34A4F34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.254.0/23 Signature Algorithm: sha256WithRSAEncryption 84:3f:b6:c9:b4:a7:76:f4:33:57:59:49:71:45:63:10:e7:03: b2:31:92:ac:8e:f1:eb:c6:bc:52:83:2f:4a:1e:8e:85:ba:f5: 5f:37:3e:ef:1a:e9:7b:22:1f:03:a1:a4:88:98:c0:b2:13:ab: 7f:8d:7c:16:46:09:ee:50:a0:3e:64:b5:d3:e4:4f:c4:39:3f: 5f:5c:80:60:04:67:64:b0:61:9b:7c:09:d8:51:1f:d8:5f:81: 56:dd:0c:dd:96:38:c9:b7:50:8d:90:01:d1:9d:d8:f5:47:b7: ff:ef:cb:a4:5d:5d:75:50:9d:ea:7a:73:88:52:41:5d:f6:57: 2d:53:3b:d5:31:3a:cd:b1:28:40:37:ad:2c:3b:c2:12:4d:0d: af:da:6d:88:b1:16:2d:0a:80:0b:7f:a7:e1:e7:c9:37:d4:cb: cf:22:bd:a1:3d:c2:c1:54:37:55:d8:22:70:fc:80:3b:c8:6a: b2:07:80:64:1e:32:38:f6:3b:f7:45:29:f7:37:0a:55:02:9b: be:f2:4d:e1:69:d4:90:3e:de:89:6a:f8:66:fa:23:54:f1:e8: 70:29:38:79:46:6a:b9:ca:fe:d3:55:64:31:3b:1e:aa:8b:7e: dc:99:a4:3e:12:5b:40:ba:08:99:25:37:d6:04:83:ae:f5:cc: 64:e8:73:58 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICL98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYyOTM5WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNjFmMy03ZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxD5K6YhwiEWIx0cYxX1+b2yhMs6zjgb1F+PoFAsBQr/NH9jMKTk+Gqp4dTm VmEDoUiGRCJcdJhHBA60ReEbQ9CeIpTTlaHE5Rz+YrVrgq3/8ZTO9OQ10sNria47 nw/xDsy3AFC2kcsZLhFyHCLU08dopdIKgpjVY24wawMNheh/qaX5ZEDD6XZKub7l mwi5wPwp20y5mrh3g/HMeuSP0ir8ufEDDxivyqYiN/UeSQnlabpXvI/i16VtRlv9 ZH+pDyiweoA66h3naociIpe+52+p8UzqG35blAGFZm1bQ7HEuPwje2NBYC/IRcEw qyNcyAqNgPzd8XrLEP5rjQ84xwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFP8451N BUK1sWY7t01MBJ709EQ/MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjlFQjFGODRE MDFDMTFGMEEzNEE0RjM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivz+MA0GCSqGSIb3DQEBCwUAA4IBAQCEP7bJtKd29DNXWUlxRWMQ 5wOyMZKsjvHrxrxSgy9KHo6FuvVfNz7vGul7Ih8DoaSImMCyE6t/jXwWRgnuUKA+ ZLXT5E/EOT9fXIBgBGdksGGbfAnYUR/YX4FW3QzdljjJt1CNkAHRndj1R7f/78uk XV11UJ3qenOIUkFd9lctUzvVMTrNsShAN60sO8ISTQ2v2m2IsRYtCoALf6fh58k3 1MvPIr2hPcLBVDdV2CJw/IA7yGqyB4BkHjI49jv3RSn3NwpVApu+8k3hadSQPt6J avhm+iNU8ehwKTh5Rmq5yv7TVWQxOx6qi37cmaQ+EltAugiZJTfWBIOu9cxk6HNY -----END CERTIFICATE-----Generated at Thu Jun 4 11:09:19 2026 by rpki-client