$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3132E24B89A11F0A4C52740C4F9AE02.roa File: C3132E24B89A11F0A4C52740C4F9AE02.roa (raw, json) Hash identifier: vS99Xjpm1XhhFuFPVflH7t0be9cRvfdve+xy8UgPWV4= Subject key identifier: 29:3C:A0:7F:D7:AC:99:BA:F8:01:A8:DE:02:6E:5C:C0:FE:56:8D:75 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3203 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3132E24B89A11F0A4C52740C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:27:20 +0000 ROA not before: Mon 06 Jul 2026 16:27:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154304 IP address blocks: 138.252.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12803 (0x3203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:27:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd768-e401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:9b:44:6f:88:de:ac:4d:7a:a2:29:f6:ea: 87:ff:99:37:22:aa:8b:f5:dd:59:d9:ec:02:c1:d8: 2d:37:1a:f3:f3:c2:7e:c5:90:d3:f6:6d:cf:90:01: 5d:fb:4e:81:ab:7f:77:1a:fe:7c:69:47:80:19:18: d3:68:87:09:ca:29:4f:cc:2b:86:c7:b5:8e:2e:3c: f0:c6:76:2c:0d:6d:82:05:af:49:e6:57:ec:99:b0: 56:cd:a5:45:66:ac:0d:96:35:34:07:b6:56:1f:0a: d0:3b:dd:09:c7:17:72:eb:70:a3:07:67:0c:d7:85: 90:2a:53:e4:56:fc:9f:89:58:11:cf:c3:82:db:84: 8d:e7:4e:6f:a8:ed:32:af:a6:fc:aa:98:fe:3e:53: 14:c1:85:01:0b:bb:9a:c9:7e:25:05:32:1c:d4:d2: 3e:65:50:ea:01:32:38:a4:4f:0f:ff:0f:2e:7b:c0: e3:41:10:d0:62:b9:97:45:33:21:1e:d2:d5:0e:f5: 7c:ef:d4:22:82:ca:32:1f:21:5f:d9:2d:54:31:fd: cd:8f:9c:d8:9e:36:37:57:fa:f3:41:be:d4:b8:49: 52:22:1d:9e:d9:28:5a:51:87:40:75:ae:87:ce:0b: ad:1f:3c:29:11:98:16:4d:93:74:63:9e:0d:b9:b9: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3C:A0:7F:D7:AC:99:BA:F8:01:A8:DE:02:6E:5C:C0:FE:56:8D:75 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3132E24B89A11F0A4C52740C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.66.0/23 Signature Algorithm: sha256WithRSAEncryption af:31:c7:96:85:70:17:05:72:21:c5:a7:d8:a8:2d:65:c1:4f: 05:2a:a7:b2:04:2d:83:62:52:0f:86:d0:78:bd:03:28:58:9f: 66:45:cf:6c:f8:d3:64:80:13:0c:fb:08:b9:d1:ba:4a:6a:de: 2e:14:0c:13:03:83:ea:c8:23:f9:52:9a:ff:75:99:fe:b1:66: 6c:6c:7d:07:7f:91:e4:c3:21:58:14:ac:de:23:d8:95:63:cc: d7:d7:88:48:b0:21:63:68:92:18:77:b2:25:9c:bb:b2:7a:64: bb:bb:7e:20:e2:f3:4c:15:4b:26:f9:8b:01:d3:07:61:23:a5: b8:c0:9f:f4:e6:c1:13:7c:6e:7b:23:3e:64:f8:88:03:cb:33: 67:94:e4:02:9f:9d:55:3e:08:82:ae:80:eb:f3:ee:0c:c3:a2: e5:3b:3b:c5:9c:a8:29:20:e1:e9:90:78:ae:76:48:e3:8a:df: 1a:62:ca:b5:56:67:3a:da:b8:4e:2f:b0:b9:73:0c:69:69:69: 42:77:63:3c:3a:45:6a:4d:be:14:6e:5c:d2:e1:90:68:8f:5a: 52:36:e7:c1:66:15:d2:ff:0f:a8:b2:5e:ee:5a:9b:01:e2:b2: e4:02:ec:49:f6:f8:11:61:9c:50:be:75:59:9c:df:60:cf:81: a2:f5:8b:1e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNzIwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDc2OC1lNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKubRG+I3qxNeqIp9uqH/5k3IqqL9d1Z2ewCwdgtNxrz88J+xZDT9m3PkAFd +06Bq393Gv58aUeAGRjTaIcJyilPzCuGx7WOLjzwxnYsDW2CBa9J5lfsmbBWzaVF ZqwNljU0B7ZWHwrQO90Jxxdy63CjB2cM14WQKlPkVvyfiVgRz8OC24SN505vqO0y r6b8qpj+PlMUwYUBC7uayX4lBTIc1NI+ZVDqATI4pE8P/w8ue8DjQRDQYrmXRTMh HtLVDvV879QigsoyHyFf2S1UMf3Nj5zYnjY3V/rzQb7UuElSIh2e2ShaUYdAda6H zgutHzwpEZgWTZN0Y54NublxQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCk8oH/X rJm6+AGo3gJuXMD+Vo11MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzMxMzJFMjRC ODlBMTFGMEE0QzUyNzQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivxCMA0GCSqGSIb3DQEBCwUAA4IBAQCvMceWhXAXBXIhxafYqC1l wU8FKqeyBC2DYlIPhtB4vQMoWJ9mRc9s+NNkgBMM+wi50bpKat4uFAwTA4PqyCP5 Upr/dZn+sWZsbH0Hf5HkwyFYFKzeI9iVY8zX14hIsCFjaJIYd7IlnLuyemS7u34g 4vNMFUsm+YsB0wdhI6W4wJ/05sETfG57Iz5k+IgDyzNnlOQCn51VPgiCroDr8+4M w6LlOzvFnKgpIOHpkHiudkjjit8aYsq1Vmc62rhOL7C5cwxpaWlCd2M8OkVqTb4U blzS4ZBoj1pSNufBZhXS/w+osl7uWpsB4rLkAuxJ9vgRYZxQvnVZnN9gz4Gi9Yse -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:25 2026 by rpki-client