$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3217A8A4FE9111F0A1B314CB5E6F56BC.roa File: 3217A8A4FE9111F0A1B314CB5E6F56BC.roa (raw, json) Hash identifier: e4ZuxWb5cCekYcElSW4JvYKjXw0H/ViZF5MQ5iP/rZs= Subject key identifier: 64:2A:B2:B6:34:50:FA:58:B9:EB:6B:E0:6C:83:28:3F:48:4A:A1:50 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F702 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3217A8A4FE9111F0A1B314CB5E6F56BC.roa Signing time: Mon 06 Jul 2026 17:46:54 +0000 ROA not before: Mon 06 Jul 2026 17:46:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154390 IP address blocks: 49.238.36.0/24 maxlen: 24 49.238.39.0/24 maxlen: 24 49.238.40.0/24 maxlen: 24 49.238.41.0/24 maxlen: 24 2402:3aa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63234 (0xf702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:46:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bea0e-2abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:52:da:3b:fb:ca:cf:0d:f9:9b:c0:54:48: 8f:58:b9:b1:6f:1f:3e:05:26:ee:77:7a:6b:00:a7: e6:30:8f:63:6f:26:77:0f:7e:53:48:cc:66:04:9b: 47:17:e4:68:73:e7:0b:db:16:4f:ee:7b:c7:f5:30: e1:4b:c9:2e:62:c0:10:9e:0e:85:cd:6b:ff:a1:8c: 3a:1a:1c:8e:28:2d:8b:4e:35:79:e6:9b:28:06:95: 96:35:2d:e1:5a:e4:7c:23:7b:26:14:cc:94:71:4a: 49:9d:f1:34:e1:28:61:d5:b6:dd:a2:2e:99:bf:8c: f2:d4:10:91:b0:a3:6c:21:01:cd:52:cd:08:0c:e3: 93:05:32:29:b8:db:86:e7:7a:14:52:7f:4a:6b:f1: 4b:69:09:c3:ec:1e:c8:fa:a4:24:69:33:c7:0f:29: 2e:be:6e:00:c1:fd:49:d4:17:83:c5:74:02:c2:85: 79:46:b2:a7:f0:20:2b:d7:c5:4d:b9:b7:75:fc:5e: db:20:e4:8c:d0:c3:8a:f8:9c:ba:de:39:fc:70:af: 02:ff:32:31:7d:e3:6e:70:21:c2:7a:a4:03:d0:34: 33:a1:ba:6c:77:a5:e0:cc:cd:c0:33:69:8f:75:5e: 41:81:a4:87:cc:3a:02:85:10:ce:05:29:6c:7b:67: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2A:B2:B6:34:50:FA:58:B9:EB:6B:E0:6C:83:28:3F:48:4A:A1:50 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3217A8A4FE9111F0A1B314CB5E6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 49.238.36.0/24 49.238.39.0-49.238.41.255 IPv6: 2402:3aa0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:85:66:25:8f:35:9e:46:a2:ff:db:b6:2b:3b:5d:a6:e2:27: 63:c0:56:12:22:35:f4:30:6c:f1:10:0e:09:3a:ef:76:b9:c4: ee:00:1f:69:1c:96:20:d3:3e:5d:fc:45:fa:e7:4c:0f:13:02: 35:cf:d5:b4:a6:38:bd:fd:60:50:56:20:be:ef:41:96:71:e5: 78:b8:de:13:c9:d3:29:be:b8:a5:1d:c1:37:59:97:24:f0:03: b8:d4:5c:3c:a9:35:3b:59:12:20:65:99:b4:3c:85:4d:9b:59: d1:6e:77:ab:b3:83:35:85:46:21:c9:20:be:06:81:5a:2c:ba: c5:06:37:2f:37:69:14:86:44:5e:b1:7f:d1:db:28:f7:66:4e: 64:20:12:96:74:02:22:f4:03:14:49:fb:65:e5:d2:08:15:0c: dd:22:43:a3:e4:bb:3d:8b:10:66:6d:5d:08:08:66:eb:d8:6e: 6f:4d:b2:b4:15:e2:2e:f5:23:03:9a:cf:d1:9b:e9:47:dd:1b: d2:cd:a0:9a:f2:70:7e:f0:4d:b9:40:64:36:db:eb:c9:09:27: 95:0c:c6:e6:55:8d:f5:1c:f4:3f:38:6a:cd:e5:1a:3a:d9:87: a6:83:88:bb:40:d6:2c:ab:3b:c1:a0:a7:65:8a:36:25:e9:3b: d4:f9:24:9f -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIDAPcCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDY1NFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmVhMGUtMmFiZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3sUto7+8rPDfmbwFRIj1i5sW8fPgUm7nd6awCn5jCPY28mdw9+U0jMZgSb RxfkaHPnC9sWT+57x/Uw4UvJLmLAEJ4Ohc1r/6GMOhocjigti041eeabKAaVljUt 4VrkfCN7JhTMlHFKSZ3xNOEoYdW23aIumb+M8tQQkbCjbCEBzVLNCAzjkwUyKbjb hud6FFJ/SmvxS2kJw+weyPqkJGkzxw8pLr5uAMH9SdQXg8V0AsKFeUayp/AgK9fF Tbm3dfxe2yDkjNDDivicut45/HCvAv8yMX3jbnAhwnqkA9A0M6G6bHel4MzNwDNp j3VeQYGkh8w6AoUQzgUpbHtnnhMCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBRkKrK2 NFD6WLnra+Bsgyg/SEqhUDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMyMTdBOEE0 RkU5MTExRjBBMUIzMTRDQjVFNkY1NkJDLnJvYTA8BggrBgEFBQcBBwEB/wQtMCsw GgQCAAEwFAMEADHuJDAMAwQAMe4nAwQBMe4oMA0EAgACMAcDBQAkAjqgMA0GCSqG SIb3DQEBCwUAA4IBAQB9hWYljzWeRqL/27YrO12m4idjwFYSIjX0MGzxEA4JOu92 ucTuAB9pHJYg0z5d/EX650wPEwI1z9W0pji9/WBQViC+70GWceV4uN4TydMpvril HcE3WZck8AO41Fw8qTU7WRIgZZm0PIVNm1nRbners4M1hUYhySC+BoFaLLrFBjcv N2kUhkResX/R2yj3Zk5kIBKWdAIi9AMUSftl5dIIFQzdIkOj5Ls9ixBmbV0ICGbr 2G5vTbK0FeIu9SMDms/Rm+lH3RvSzaCa8nB+8E25QGQ22+vJCSeVDMbmVY31HPQ/ OGrN5Ro62Yemg4i7QNYsqzvBoKdlijYl6TvU+SSf -----END CERTIFICATE-----Generated at Tue Jul 21 13:48:21 2026 by rpki-client