$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/07867DB4B3FD11F1B1F7B03E6C11F970.roa File: 07867DB4B3FD11F1B1F7B03E6C11F970.roa (raw, json) Hash identifier: aOKx6wZTt0gHliD1/2SMwzoUb8r5ECDYINrZSp9Fb6w= Subject key identifier: 86:7F:E0:2D:14:F9:64:52:98:15:E7:0D:34:BC:8D:09:E1:70:18:12 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 32E9 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/07867DB4B3FD11F1B1F7B03E6C11F970.roa Signing time: Sat 19 Sep 2026 07:37:56 +0000 ROA not before: Sat 19 Sep 2026 07:37:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154408 IP address blocks: 138.252.214.0/23 maxlen: 24 144.79.166.0/24 maxlen: 24 162.4.12.0/24 maxlen: 24 162.4.146.0/24 maxlen: 24 192.232.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13033 (0x32e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Sep 19 07:37:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aae3bd4-9613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:e1:4d:fb:59:a8:f8:02:26:a3:cb:f9:69: 1f:d3:70:fd:7b:2c:df:58:b9:75:02:2d:c1:5d:ac: b0:76:bd:48:68:27:e2:32:f5:9a:f5:ad:25:9d:17: ec:d6:6e:14:13:3b:2e:72:71:f6:c0:eb:85:9b:29: 16:da:d1:f9:a0:1e:1c:99:3c:a2:89:4a:a2:ea:4e: ce:4b:d4:d4:ce:62:68:53:5c:12:20:49:c9:35:8b: ef:4a:27:a4:db:3c:c5:f2:64:2f:62:60:07:e0:e4: ac:9a:19:f6:49:f2:1e:16:1f:db:ec:73:30:c0:06: 4b:bf:f7:66:8e:e0:6b:7a:c8:39:3b:57:69:37:eb: 15:99:86:6f:d1:bc:2e:d9:e7:d6:b9:72:59:cb:74: 6b:81:37:78:eb:fa:83:bf:6b:2d:4c:ab:cb:e0:9e: 3a:42:65:8e:9e:d3:6b:c0:03:9b:01:6d:66:6c:1c: e6:72:4f:6a:a3:8c:28:9e:af:e7:53:a9:66:dc:e7: 7a:95:9d:eb:d3:b5:99:c9:7a:87:19:06:c0:a7:3e: df:03:27:ea:59:3f:85:d6:32:cd:dd:32:fc:00:e8: 6f:fe:01:3f:c2:e2:00:05:52:f1:00:a0:76:54:a0: 4a:e6:ea:5a:45:8f:e4:3d:0c:4f:40:78:09:3a:f9: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7F:E0:2D:14:F9:64:52:98:15:E7:0D:34:BC:8D:09:E1:70:18:12 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/07867DB4B3FD11F1B1F7B03E6C11F970.roa sbgp-ipAddrBlock: critical IPv4: 138.252.214.0/23 144.79.166.0/24 162.4.12.0/24 162.4.146.0/24 192.232.57.0/24 Signature Algorithm: sha256WithRSAEncryption 72:7b:62:9f:69:05:16:80:f3:1d:4c:e8:0d:b5:a1:fe:51:d1: 2d:3b:24:60:5e:d4:18:37:9b:a9:f9:c1:92:15:18:8a:c6:30: e2:d8:9c:54:1c:d1:ec:92:f7:2f:a2:74:87:c4:5c:1a:5d:05: 03:d0:6e:d2:96:38:53:01:7f:e7:6e:5d:9b:cb:51:12:d6:0e: c8:f5:8e:ad:fb:25:6b:b8:aa:52:b1:b4:33:e1:11:dc:63:48: be:32:07:12:ca:d5:5f:a0:25:55:9f:52:b5:1b:23:87:28:84: bf:58:62:8d:df:80:aa:6d:52:ab:0c:4d:6e:d3:1c:e0:28:a3: 5e:f6:c2:11:45:da:fc:77:a3:f8:24:8a:6f:c4:f1:96:89:27: 25:a0:5e:0d:41:bb:5e:39:50:c9:c5:87:44:f0:47:78:d8:64: f9:3e:34:0c:1c:eb:42:33:8c:61:24:03:45:44:68:02:dd:d6: cc:8c:d5:94:17:88:0f:30:a2:fd:22:9b:53:f1:3b:0f:04:c5: c7:46:37:3e:8e:f2:0b:ec:1c:45:8d:20:23:14:39:f4:6d:64: 7d:e9:05:c5:e1:09:f3:0f:51:66:86:c4:09:77:86:d2:af:af: 28:63:6d:83:2e:0b:66:68:30:1d:dd:57:cf:fe:cd:f5:05:ab: bb:59:89:6a -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICMukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwOTE5MDczNzU2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFlM2JkNC05NjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8DhTftZqPgCJqPL+Wkf03D9eyzfWLl1Ai3BXaywdr1IaCfiMvWa9a0lnRfs 1m4UEzsucnH2wOuFmykW2tH5oB4cmTyiiUqi6k7OS9TUzmJoU1wSIEnJNYvvSiek 2zzF8mQvYmAH4OSsmhn2SfIeFh/b7HMwwAZLv/dmjuBresg5O1dpN+sVmYZv0bwu 2efWuXJZy3RrgTd46/qDv2stTKvL4J46QmWOntNrwAObAW1mbBzmck9qo4wonq/n U6lm3Od6lZ3r07WZyXqHGQbApz7fAyfqWT+F1jLN3TL8AOhv/gE/wuIABVLxAKB2 VKBK5upaRY/kPQxPQHgJOvmh2QIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFIZ/4C0U +WRSmBXnDTS8jQnhcBgSMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDc4NjdEQjRC M0ZEMTFGMUIxRjdCMDNFNkMxMUY5NzAucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQBivzWAwQAkE+mAwQAogQMAwQAogSSAwQAwOg5MA0GCSqGSIb3DQEB CwUAA4IBAQBye2KfaQUWgPMdTOgNtaH+UdEtOyRgXtQYN5up+cGSFRiKxjDi2JxU HNHskvcvonSHxFwaXQUD0G7SljhTAX/nbl2by1ES1g7I9Y6t+yVruKpSsbQz4RHc Y0i+MgcSytVfoCVVn1K1GyOHKIS/WGKN34CqbVKrDE1u0xzgKKNe9sIRRdr8d6P4 JIpvxPGWiScloF4NQbteOVDJxYdE8Ed42GT5PjQMHOtCM4xhJANFRGgC3dbMjNWU F4gPMKL9IptT8TsPBMXHRjc+jvIL7BxFjSAjFDn0bWR96QXF4QnzD1FmhsQJd4bS r68oY22DLgtmaDAd3VfP/s31Bau7WYlq -----END CERTIFICATE-----Generated at Sun Sep 20 17:54:13 2026 by rpki-client