$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF71D19AB94E11F0A3C60216C4F9AE02.roa File: FF71D19AB94E11F0A3C60216C4F9AE02.roa (raw, json) Hash identifier: ToP78qjTALU2GtTskLt6PlUuohWQSKMr5++zZxWSAWk= Subject key identifier: C0:EE:55:43:6A:3E:86:F0:40:80:55:E4:8B:22:8F:6A:AE:60:B7:3F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3201 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF71D19AB94E11F0A3C60216C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:27:16 +0000 ROA not before: Mon 06 Jul 2026 16:27:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154298 IP address blocks: 138.252.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12801 (0x3201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:27:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd764-ba6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:26:d2:59:eb:c9:56:5e:b6:ba:ce:d7:5d: 67:6e:a7:24:1f:e0:18:5c:80:36:3a:06:84:35:ac: fe:e8:c5:23:3b:1c:40:bd:47:59:c3:d5:8d:18:47: af:74:20:a3:31:66:54:a4:ff:e1:46:50:63:a0:6f: a1:cd:b6:2d:ee:c4:cb:2f:fb:18:b3:25:f7:2d:65: 5e:f4:dc:eb:24:c7:28:25:c2:2d:5c:2e:38:35:52: a3:8e:27:93:da:7a:dc:b0:e9:fa:33:32:8d:e7:11: 17:a9:1e:94:8e:31:a1:d9:e9:a6:af:62:5b:91:34: 52:45:94:39:f2:ae:c2:2d:cd:06:b7:7c:b8:55:38: 06:8f:4a:cd:ec:a7:75:f0:a3:a2:5e:84:cf:05:72: 40:8f:19:46:62:7e:0f:55:71:93:ea:c8:df:f3:c3: 9b:55:a9:5b:07:93:8b:30:d0:c6:38:01:ea:99:3f: 04:85:7d:e1:89:fd:4e:0f:d0:11:00:62:21:c0:41: 82:85:01:9a:38:ff:18:01:ba:af:dc:82:79:90:b1: 02:9d:38:3f:61:07:fa:17:40:93:13:8a:af:6e:67: 12:fc:06:4b:69:4c:0e:dc:d8:f2:b0:ef:bc:48:24: d1:7e:91:f4:5a:08:fc:94:03:57:38:86:30:54:98: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EE:55:43:6A:3E:86:F0:40:80:55:E4:8B:22:8F:6A:AE:60:B7:3F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF71D19AB94E11F0A3C60216C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.36.0/23 Signature Algorithm: sha256WithRSAEncryption af:c3:14:4b:e7:aa:e1:fb:02:cf:91:3c:2f:35:a1:6b:e1:a8: ec:a0:fd:f8:18:33:d8:6a:3e:02:58:41:1c:e2:5c:2a:74:54: fa:b3:d8:8d:a5:3a:42:18:ad:38:c8:57:89:36:26:f2:0b:89: ea:d6:24:ab:52:78:5f:9b:2d:c7:ae:3d:79:ac:11:9e:4d:2d: ff:b5:d0:86:58:2b:3c:27:4e:93:3e:db:a0:d3:34:62:43:bd: fa:cc:9d:d2:e5:40:b1:37:cc:61:91:20:a1:c8:fe:e9:95:41: 49:48:b7:17:94:21:3b:4f:62:56:04:79:49:6a:a3:ae:c9:c7: 88:5c:de:4d:c6:2f:16:f2:1c:a5:b2:91:73:cc:ea:48:26:59: 7a:a4:34:60:66:8d:e6:eb:01:e3:49:13:c6:d1:95:41:28:9b: da:a6:11:6a:a0:52:7d:9b:be:0f:74:72:26:89:c0:48:aa:5c: 64:c0:f1:d9:22:46:d1:85:bf:9e:9f:23:a5:07:3f:24:b8:99: d9:f6:4f:a9:2f:88:d8:d3:b0:82:9f:a3:6d:8d:86:1c:41:87: d0:39:e8:1a:b8:75:99:8b:bb:36:ab:3c:a5:70:a1:9a:5f:f0: ce:4f:eb:8f:12:0c:f6:66:92:15:fe:6d:4b:f2:62:43:45:d9: 1a:46:e2:14 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNzE2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDc2NC1iYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWcm0lnryVZetrrO111nbqckH+AYXIA2OgaENaz+6MUjOxxAvUdZw9WNGEev dCCjMWZUpP/hRlBjoG+hzbYt7sTLL/sYsyX3LWVe9NzrJMcoJcItXC44NVKjjieT 2nrcsOn6MzKN5xEXqR6UjjGh2emmr2JbkTRSRZQ58q7CLc0Gt3y4VTgGj0rN7Kd1 8KOiXoTPBXJAjxlGYn4PVXGT6sjf88ObValbB5OLMNDGOAHqmT8EhX3hif1OD9AR AGIhwEGChQGaOP8YAbqv3IJ5kLECnTg/YQf6F0CTE4qvbmcS/AZLaUwO3NjysO+8 SCTRfpH0Wgj8lANXOIYwVJhF3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMDuVUNq PobwQIBV5Isij2quYLc/MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkY3MUQxOUFC OTRFMTFGMEEzQzYwMjE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivwkMA0GCSqGSIb3DQEBCwUAA4IBAQCvwxRL56rh+wLPkTwvNaFr 4ajsoP34GDPYaj4CWEEc4lwqdFT6s9iNpTpCGK04yFeJNibyC4nq1iSrUnhfmy3H rj15rBGeTS3/tdCGWCs8J06TPtug0zRiQ736zJ3S5UCxN8xhkSChyP7plUFJSLcX lCE7T2JWBHlJaqOuyceIXN5Nxi8W8hylspFzzOpIJll6pDRgZo3m6wHjSRPG0ZVB KJvaphFqoFJ9m74PdHImicBIqlxkwPHZIkbRhb+enyOlBz8kuJnZ9k+pL4jY07CC n6NtjYYcQYfQOegauHWZi7s2qzylcKGaX/DOT+uPEgz2ZpIV/m1L8mJDRdkaRuIU -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:34 2026 by rpki-client