$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa File: EC11B380D4D911F0BE68C020C4F9AE02.roa (raw, json) Hash identifier: KMFM+SBSIqqzo4RJ66n+/Qljp9nZvquSqCbJlG3mbr8= Subject key identifier: 36:F8:CA:C8:61:39:C1:2A:EF:FA:A7:98:34:F9:5D:1A:10:22:3B:46 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 220D Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa Signing time: Sat 31 Jan 2026 11:10:49 +0000 ROA not before: Sat 31 Jan 2026 11:10:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154408 IP address blocks: 138.252.214.0/23 maxlen: 24 144.79.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Mar 2026 15:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8717 (0x220d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jan 31 11:10:49 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=697de339-9ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:5a:3a:b5:27:18:4d:81:44:55:4a:12:23: a4:40:60:83:49:41:c9:c5:35:84:f0:08:1f:06:79: e7:cd:80:43:d9:a6:19:56:5c:9c:6d:c5:f5:c2:72: a0:1b:60:06:69:54:5a:15:10:0b:1d:7f:c1:ac:58: 5a:38:a7:3a:3d:e0:d3:89:bc:06:ad:80:1b:18:5d: 20:71:45:90:a8:ca:1e:e4:6d:02:f4:6c:cb:50:8a: 6c:73:0f:88:a7:c7:d2:4e:1c:f9:05:87:63:4c:62: 2f:7f:30:98:32:c4:bd:40:e2:60:d6:84:33:26:b8: cc:80:32:93:12:50:74:93:86:e1:1e:c2:25:c1:8f: c0:c0:ab:cc:c3:3d:fa:e6:66:04:67:1c:c1:d3:70: 97:13:09:20:2c:b4:72:f6:04:13:bd:6d:93:a4:db: d1:d3:47:22:23:91:e2:d0:5d:8e:e0:60:c1:fd:86: 13:97:2b:49:99:e7:e9:2b:88:e8:22:6d:44:5c:4b: 32:fb:9f:12:c5:78:e8:9f:dd:8d:6e:e1:53:5d:64: a3:ca:ae:38:ef:20:00:a7:77:76:36:cd:71:9b:3b: 49:63:10:dd:48:aa:55:47:1e:c0:ea:08:60:d5:1b: 79:3c:fa:b2:5b:38:07:07:50:bf:a2:e5:9a:fd:15: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F8:CA:C8:61:39:C1:2A:EF:FA:A7:98:34:F9:5D:1A:10:22:3B:46 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.214.0/23 144.79.166.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:25:26:3c:e6:dc:a3:ce:5f:85:db:a0:b1:4b:ba:60:81:21: a6:4c:1b:28:79:7c:eb:b8:9d:c0:c7:1c:8b:12:dd:fc:ca:0a: b4:fa:10:2b:25:05:3a:b9:ad:b7:41:b0:00:96:b8:3d:14:dc: a5:be:f0:58:a5:3b:54:84:23:a4:3b:85:35:3c:cb:68:c0:24: 34:2c:da:36:d0:ad:6a:cc:08:75:ae:67:43:33:dc:19:25:59: 72:b0:6b:79:79:b8:56:93:f8:74:d0:ee:05:da:ac:3e:4d:45: d7:7a:f7:ab:6e:2b:70:f6:f9:46:73:70:45:d8:ca:ba:0a:06: 34:49:ca:ac:53:49:58:3c:a2:38:c3:26:c3:78:2c:5c:7c:7e: 0c:52:ce:7a:89:4d:e0:7a:4a:95:22:74:2f:86:27:cd:c4:6f: d4:d3:8c:54:ca:85:f2:42:a6:e8:f3:c1:e2:03:d5:e4:21:2b: ae:e0:32:6d:dc:24:7f:c9:f7:be:3b:12:85:49:05:14:06:6e: 96:e5:1e:cf:b5:1d:6d:e2:28:2f:51:93:56:36:f5:62:70:3b: 02:b8:ae:33:1d:f8:ad:ca:7a:13:b3:2b:bc:60:74:10:03:ee: b9:50:7e:b4:1f:8b:e8:f3:4a:e0:59:c9:64:41:8d:c9:ac:d1: 38:93:75:4b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICIg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwMTMxMTExMDQ5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdkZTMzOS05ZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+JaOrUnGE2BRFVKEiOkQGCDSUHJxTWE8AgfBnnnzYBD2aYZVlycbcX1wnKg G2AGaVRaFRALHX/BrFhaOKc6PeDTibwGrYAbGF0gcUWQqMoe5G0C9GzLUIpscw+I p8fSThz5BYdjTGIvfzCYMsS9QOJg1oQzJrjMgDKTElB0k4bhHsIlwY/AwKvMwz36 5mYEZxzB03CXEwkgLLRy9gQTvW2TpNvR00ciI5Hi0F2O4GDB/YYTlytJmefpK4jo Im1EXEsy+58SxXjon92NbuFTXWSjyq447yAAp3d2Ns1xmztJYxDdSKpVRx7A6ghg 1Rt5PPqyWzgHB1C/ouWa/RVk4QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDb4yshh OcEq7/qnmDT5XRoQIjtGMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUMxMUIzODBE NEQ5MTFGMEJFNjhDMDIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGK/NYDBACQT6YwDQYJKoZIhvcNAQELBQADggEBAC8lJjzm 3KPOX4XboLFLumCBIaZMGyh5fOu4ncDHHIsS3fzKCrT6ECslBTq5rbdBsACWuD0U 3KW+8FilO1SEI6Q7hTU8y2jAJDQs2jbQrWrMCHWuZ0Mz3BklWXKwa3l5uFaT+HTQ 7gXarD5NRdd696tuK3D2+UZzcEXYyroKBjRJyqxTSVg8ojjDJsN4LFx8fgxSznqJ TeB6SpUidC+GJ83Eb9TTjFTKhfJCpujzweID1eQhK67gMm3cJH/J9747EoVJBRQG bpblHs+1HW3iKC9Rk1Y29WJwOwK4rjMd+K3KehOzK7xgdBAD7rlQfrQfi+jzSuBZ yWRBjcms0TiTdUs= -----END CERTIFICATE-----Generated at Tue Feb 24 01:06:56 2026 by rpki-client