$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D27514A0CF5011F0A7B96743C4F9AE02.roa File: D27514A0CF5011F0A7B96743C4F9AE02.roa (raw, json) Hash identifier: Q2VLhThW2DSwqJfNgKDq82SYSrv9F52hLza+xLe0fUY= Subject key identifier: 93:4B:26:99:06:1E:00:25:92:24:00:CD:72:6A:E3:35:AB:91:85:B6 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3138 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D27514A0CF5011F0A7B96743C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:20:41 +0000 ROA not before: Mon 06 Jul 2026 16:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150650 IP address blocks: 138.252.194.0/24 maxlen: 24 138.252.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12600 (0x3138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd5d9-7b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:75:11:06:c3:df:fd:30:62:84:04:ec:3b: 74:92:60:08:68:53:01:fb:7f:5c:fe:75:8c:ad:d1: dc:7c:e1:4a:ba:08:6f:2c:89:a1:63:cf:11:58:bd: e9:ee:77:d7:cc:f9:77:e1:fe:89:ca:66:67:b0:c6: e1:f2:2e:ce:fd:25:1f:0f:2a:b8:aa:b4:d5:c7:41: 08:2c:ed:b1:0f:75:3a:e5:fb:cd:55:8b:ec:e7:62: ef:9a:14:f2:9a:55:01:7c:32:b8:af:41:1f:c6:be: 6f:47:19:f0:c7:3b:5a:67:37:9e:94:8c:2e:ea:2a: 1d:c4:3c:2c:ad:b6:26:e0:68:bc:a8:e4:01:c4:39: 4e:bd:d4:bd:6e:d2:2a:c8:77:12:f7:08:96:02:26: d6:19:3a:25:5e:a0:81:80:52:36:15:cc:a3:96:a9: 70:04:52:18:96:a7:dd:84:04:6a:53:e5:75:06:06: 5a:24:fd:0b:39:3e:55:40:42:32:e2:0c:98:fd:d9: 22:40:e8:41:9f:21:cd:c1:87:49:c4:de:7e:bf:64: 45:c2:ff:3b:42:29:84:55:8c:ba:7e:35:93:29:b2: 4b:b0:db:33:24:f6:1d:63:83:a7:cf:30:07:a6:54: fd:1b:8a:7f:a7:af:32:df:e4:d0:5a:f6:db:8d:14: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4B:26:99:06:1E:00:25:92:24:00:CD:72:6A:E3:35:AB:91:85:B6 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D27514A0CF5011F0A7B96743C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.194.0/23 Signature Algorithm: sha256WithRSAEncryption a4:2b:51:c6:d8:7b:7b:87:2c:00:97:ba:65:cb:6c:13:38:27: ca:9f:f3:37:96:94:ea:a4:d2:13:64:1b:3c:d8:5e:9e:8c:9a: 38:9b:b8:b2:2c:b4:bb:9c:79:3e:e4:2c:c9:48:35:3e:cb:1c: e5:1a:b3:58:1a:84:b9:e9:13:72:b2:6b:7e:72:bc:46:ac:e0: 76:29:4d:5e:4b:ba:1e:54:ec:e5:52:00:a5:52:25:f7:c7:03: 22:47:63:51:ae:0e:90:5c:84:80:e9:2e:f9:d9:0f:fa:f8:d7: 07:7a:87:e2:b2:5c:8d:78:67:51:ea:81:13:22:28:63:46:65: 2e:1d:24:81:3e:9f:f5:74:af:80:f4:9b:67:4b:44:2d:0a:89: cd:40:cf:67:21:b4:b5:63:2e:01:e3:4b:97:77:35:cd:4b:3a: 94:4f:b1:12:74:d8:66:bb:f8:20:cc:18:93:f4:89:9e:a3:9f: 26:a0:99:5e:4b:6f:43:87:a7:d2:12:c0:1b:b7:f5:7e:6c:e7: c4:0d:fb:65:0d:ab:a5:22:65:46:74:e8:6c:c2:45:d8:50:79: 25:13:d1:a0:30:55:da:a6:bd:76:cc:6c:40:f0:eb:b5:7d:28: 40:6b:46:cc:4c:92:f5:fe:85:47:af:63:f4:fd:68:e0:86:ed: 7b:d4:e2:66 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyMDQxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDVkOS03Yjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUx1EQbD3/0wYoQE7Dt0kmAIaFMB+39c/nWMrdHcfOFKughvLImhY88RWL3p 7nfXzPl34f6JymZnsMbh8i7O/SUfDyq4qrTVx0EILO2xD3U65fvNVYvs52LvmhTy mlUBfDK4r0Efxr5vRxnwxztaZzeelIwu6iodxDwsrbYm4Gi8qOQBxDlOvdS9btIq yHcS9wiWAibWGTolXqCBgFI2FcyjlqlwBFIYlqfdhARqU+V1BgZaJP0LOT5VQEIy 4gyY/dkiQOhBnyHNwYdJxN5+v2RFwv87QimEVYy6fjWTKbJLsNszJPYdY4OnzzAH plT9G4p/p68y3+TQWvbbjRQIpQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJNLJpkG HgAlkiQAzXJq4zWrkYW2MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDI3NTE0QTBD RjUwMTFGMEE3Qjk2NzQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivzCMA0GCSqGSIb3DQEBCwUAA4IBAQCkK1HG2Ht7hywAl7ply2wT OCfKn/M3lpTqpNITZBs82F6ejJo4m7iyLLS7nHk+5CzJSDU+yxzlGrNYGoS56RNy smt+crxGrOB2KU1eS7oeVOzlUgClUiX3xwMiR2NRrg6QXISA6S752Q/6+NcHeofi slyNeGdR6oETIihjRmUuHSSBPp/1dK+A9JtnS0QtConNQM9nIbS1Yy4B40uXdzXN SzqUT7ESdNhmu/ggzBiT9Imeo58moJleS29Dh6fSEsAbt/V+bOfEDftlDaulImVG dOhswkXYUHklE9GgMFXapr12zGxA8Ou1fShAa0bMTJL1/oVHr2P0/Wjghu171OJm -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:03 2026 by rpki-client