$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa File: 25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa (raw, json) Hash identifier: fLf4Ne3HMKCfjQ9fz3hzkemiT0+qqTqp7AiGd7fOLB0= Subject key identifier: 0D:06:4F:C0:FE:CD:C8:71:E7:89:1F:B8:46:98:94:61:A0:CC:12:65 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CDE Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:50:20 +0000 ROA not before: Tue 02 Dec 2025 09:05:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132964 IP address blocks: 138.252.234.0/23 maxlen: 23 138.252.234.0/24 maxlen: 24 138.252.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11486 (0x2cde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Dec 2 09:05:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c2ac-c2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:3a:40:ff:f6:8e:b5:08:89:3a:e6:90:4a: e1:1f:2c:a9:a7:a9:13:f5:10:9a:3f:7b:58:16:b2: a0:16:25:69:a3:71:3d:fa:6f:bc:e0:76:58:34:ef: 04:34:3f:6a:ba:b1:71:c3:d5:6f:47:ed:f1:ae:01: bb:e0:7e:f2:68:94:f2:fc:d6:6e:8a:16:77:bb:e6: 9d:4f:e5:a6:52:57:f2:37:62:25:5e:ba:f5:d2:c3: 43:3d:72:de:77:98:26:e7:ba:67:e4:70:c8:60:c9: d3:2c:79:46:aa:b2:89:e2:30:42:c5:22:f5:86:3c: d9:a2:df:77:43:fa:ee:8c:7a:8b:2b:6b:41:f3:ba: 84:98:3c:0d:1f:4e:13:94:4f:49:c3:40:65:c8:55: 4f:34:30:20:c5:ee:46:79:64:2d:85:43:c1:27:64: 33:b4:b2:07:61:ca:cd:45:ec:7b:c7:34:b7:85:c0: 1e:33:09:a2:89:e0:89:3a:8c:b0:f2:69:b2:6b:ec: 77:a4:96:d5:29:f5:ef:80:4d:05:66:f7:3f:12:24: d6:6e:47:9e:fa:fa:b2:77:13:0e:ff:52:68:28:2c: af:ba:3c:14:b5:5e:77:ed:43:55:71:e0:99:3b:91: a4:e8:f8:a1:d0:d0:87:80:09:f4:50:87:39:61:89: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:06:4F:C0:FE:CD:C8:71:E7:89:1F:B8:46:98:94:61:A0:CC:12:65 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25DB4D8ECF5C11F09EDC3D1CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.234.0/23 Signature Algorithm: sha256WithRSAEncryption a9:99:d9:c9:79:1e:aa:08:92:49:11:27:20:3e:5c:e5:46:26: 15:54:07:a1:67:4e:c2:e2:d7:b8:2c:0c:79:c7:26:ba:12:ac: d1:49:7a:7e:f6:48:f6:8a:89:fe:b3:64:a3:b6:e6:33:c3:91: 65:b3:93:5a:85:a3:2a:a3:3f:18:bf:24:f5:10:18:5a:f4:08: 13:c2:a9:99:48:8e:e3:fa:94:5d:ec:a3:f4:9f:54:6f:42:e0: 90:d5:f3:45:de:e2:0f:0f:4e:da:ca:86:06:a0:1f:b1:2b:40: 50:ff:7d:fc:3f:9d:cd:77:f4:e1:4c:2b:5a:ef:30:cd:ca:d0: 1d:10:43:3a:ae:35:d1:78:11:f4:e3:40:99:72:96:f1:dd:13: d4:22:ad:07:98:dd:cd:66:99:b4:75:fc:b8:26:48:ee:37:9c: f2:d6:56:a7:21:19:4e:b6:45:16:d4:3c:75:98:d8:45:87:cf: 5b:f2:1a:5e:fe:8c:ae:18:ef:a1:ca:bb:ff:66:cc:00:3e:f1: 15:1a:25:8c:bc:6b:29:ae:e1:51:22:f5:8a:02:1d:1b:e2:76: 35:6d:3f:6e:44:3c:5b:26:07:8a:02:9a:0c:8b:6c:73:24:3a: 7e:ed:96:74:f1:00:ec:6e:e9:07:ba:e5:65:8f:ea:db:35:f6: 28:bb:8f:38 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMjAyMDkwNTI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzJhYy1jMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnU6QP/2jrUIiTrmkErhHyypp6kT9RCaP3tYFrKgFiVpo3E9+m+84HZYNO8E ND9qurFxw9VvR+3xrgG74H7yaJTy/NZuihZ3u+adT+WmUlfyN2IlXrr10sNDPXLe d5gm57pn5HDIYMnTLHlGqrKJ4jBCxSL1hjzZot93Q/rujHqLK2tB87qEmDwNH04T lE9Jw0BlyFVPNDAgxe5GeWQthUPBJ2QztLIHYcrNRex7xzS3hcAeMwmiieCJOoyw 8mmya+x3pJbVKfXvgE0FZvc/EiTWbkee+vqydxMO/1JoKCyvujwUtV537UNVceCZ O5Gk6Pih0NCHgAn0UIc5YYnLUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA0GT8D+ zchx54kfuEaYlGGgzBJlMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjVEQjREOEVD RjVDMTFGMDlFREMzRDFDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivzqMA0GCSqGSIb3DQEBCwUAA4IBAQCpmdnJeR6qCJJJEScgPlzl RiYVVAehZ07C4te4LAx5xya6EqzRSXp+9kj2ion+s2SjtuYzw5Fls5NahaMqoz8Y vyT1EBha9AgTwqmZSI7j+pRd7KP0n1RvQuCQ1fNF3uIPD07ayoYGoB+xK0BQ/338 P53Nd/ThTCta7zDNytAdEEM6rjXReBH040CZcpbx3RPUIq0HmN3NZpm0dfy4Jkju N5zy1lanIRlOtkUW1Dx1mNhFh89b8hpe/oyuGO+hyrv/ZswAPvEVGiWMvGspruFR IvWKAh0b4nY1bT9uRDxbJgeKApoMi2xzJDp+7ZZ08QDsbukHuuVlj+rbNfYou484 -----END CERTIFICATE-----Generated at Mon Mar 2 17:05:01 2026 by rpki-client