$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa File: EC11B380D4D911F0BE68C020C4F9AE02.roa (raw, json) Hash identifier: xtwA6jEj5Xm+eNTwREdnyGUZQyWDkRQls1wOh6b/t+8= Subject key identifier: 0C:9F:07:CA:81:37:D9:E8:1E:42:9D:46:A5:35:63:DE:57:0F:93:94 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3239 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa Signing time: Wed 08 Jul 2026 10:14:06 +0000 ROA not before: Wed 08 Jul 2026 10:14:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154408 IP address blocks: 138.252.214.0/23 maxlen: 24 144.79.166.0/24 maxlen: 24 144.79.192.0/24 maxlen: 24 162.4.12.0/24 maxlen: 24 162.4.146.0/24 maxlen: 24 192.232.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Jul 2026 12:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12857 (0x3239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 8 10:14:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4e22ee-6471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:c3:3c:de:9b:e8:1f:1d:52:60:5c:1b:db: 91:32:63:8e:82:e0:44:3d:df:9d:b5:c1:c6:3a:75: fd:ca:bc:95:3c:bd:31:23:bb:77:bc:28:f5:11:9c: 9f:d0:0c:5f:a2:47:e6:2f:a6:4e:95:06:c0:f3:89: cc:4b:d6:f4:20:9e:e1:0f:a3:db:af:29:86:59:82: 16:d8:ee:a5:e6:b7:5a:23:21:8f:45:5c:00:79:10: be:60:89:f0:ea:32:3e:c5:28:de:bc:49:1d:ca:95: c0:0c:d6:01:c3:0d:f1:4e:9d:a7:f4:71:95:00:91: d4:14:af:d2:c8:f4:12:d2:f9:61:8a:4d:1d:f8:a4: df:0c:a9:42:29:15:67:e6:bb:58:d0:e2:73:f8:fd: c5:d2:32:2f:78:d0:7f:e1:63:d2:e0:00:6b:98:57: d8:ca:ea:c1:82:0c:3e:61:73:0c:4c:a6:5c:9c:b8: 82:8f:5e:c0:6e:b4:45:5d:ec:5a:ce:ab:0b:80:7c: 8c:b5:ec:9c:13:4d:a1:1b:26:cc:e5:71:b1:60:2d: 81:8a:ef:bf:d1:d7:ed:e1:88:d1:64:e2:26:6e:e0: 30:d9:84:f0:06:3d:9a:95:74:bc:7d:c2:e2:ac:ac: 02:cf:7f:a1:8a:a1:ec:45:1d:0b:f1:ae:04:d6:1d: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9F:07:CA:81:37:D9:E8:1E:42:9D:46:A5:35:63:DE:57:0F:93:94 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.214.0/23 144.79.166.0/24 144.79.192.0/24 162.4.12.0/24 162.4.146.0/24 192.232.57.0/24 Signature Algorithm: sha256WithRSAEncryption 74:e0:7b:c8:c4:6a:05:38:86:ce:40:51:18:17:90:5b:93:68: c2:03:41:64:31:df:3c:31:ab:3c:e3:a2:b2:10:08:69:75:08: 0d:31:7d:b9:7d:f8:dc:3a:eb:2e:43:8d:60:ab:48:93:85:bc: 9b:64:96:12:34:6c:34:d2:ad:48:3a:40:5f:3b:67:15:f4:6c: a7:2c:45:f6:6a:50:14:bd:e2:c4:78:66:31:df:56:65:62:b6: 4f:68:3c:78:bb:d8:a6:50:fc:51:34:8b:b1:ee:97:7c:c2:b5: be:ad:b8:2e:71:3f:ca:64:02:35:67:d0:d3:e7:b2:d1:52:7f: 01:84:8c:12:0c:01:7c:a1:4b:49:f4:5b:e7:ef:48:b5:f8:17: 54:2a:e7:d7:e6:a2:82:0d:6e:32:a1:79:1f:1b:c0:e3:a1:d7: ac:35:5e:2c:6a:2f:95:f9:cc:4a:1a:32:cf:e2:88:54:32:ea: c2:a3:80:55:79:11:79:fc:26:e7:6e:5e:e2:a9:b2:34:5c:e7: 7a:5c:39:83:ce:b9:18:47:ce:2e:b3:d5:e4:70:7e:02:65:c4: b9:55:57:92:2a:70:79:cf:c2:f6:fb:1c:2b:e1:7e:ed:c8:4e: c9:0b:b4:52:0b:b1:d0:7e:d1:11:68:24:17:2c:c0:d2:03:55: 33:aa:2f:24 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICMjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA4MTAxNDA2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRlMjJlZS02NDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8PDPN6b6B8dUmBcG9uRMmOOguBEPd+dtcHGOnX9yryVPL0xI7t3vCj1EZyf 0AxfokfmL6ZOlQbA84nMS9b0IJ7hD6PbrymGWYIW2O6l5rdaIyGPRVwAeRC+YInw 6jI+xSjevEkdypXADNYBww3xTp2n9HGVAJHUFK/SyPQS0vlhik0d+KTfDKlCKRVn 5rtY0OJz+P3F0jIveNB/4WPS4ABrmFfYyurBggw+YXMMTKZcnLiCj17AbrRFXexa zqsLgHyMteycE02hGybM5XGxYC2Biu+/0dft4YjRZOImbuAw2YTwBj2alXS8fcLi rKwCz3+hiqHsRR0L8a4E1h2mbwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAyfB8qB N9noHkKdRqU1Y95XD5OUMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUMxMUIzODBE NEQ5MTFGMEJFNjhDMDIwQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQBivzWAwQAkE+mAwQAkE/AAwQAogQMAwQAogSSAwQAwOg5MA0GCSqG SIb3DQEBCwUAA4IBAQB04HvIxGoFOIbOQFEYF5Bbk2jCA0FkMd88Mas846KyEAhp dQgNMX25ffjcOusuQ41gq0iThbybZJYSNGw00q1IOkBfO2cV9GynLEX2alAUveLE eGYx31ZlYrZPaDx4u9imUPxRNIux7pd8wrW+rbgucT/KZAI1Z9DT57LRUn8BhIwS DAF8oUtJ9Fvn70i1+BdUKufX5qKCDW4yoXkfG8DjodesNV4sai+V+cxKGjLP4ohU MurCo4BVeRF5/Cbnbl7iqbI0XOd6XDmDzrkYR84us9XkcH4CZcS5VVeSKnB5z8L2 +xwr4X7tyE7JC7RSC7HQftERaCQXLMDSA1Uzqi8k -----END CERTIFICATE-----Generated at Fri Jul 10 15:47:41 2026 by rpki-client