$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa File: 384CF758C46011F091DDFD33C4F9AE02.roa (raw, json) Hash identifier: dbIDUBiFPiwpTXxQ+bUS2E67zg/GGwOw08whIq6frJU= Subject key identifier: 7E:9D:C2:8A:1B:92:23:17:F1:39:23:B3:AA:26:31:8A:74:58:B7:8F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CD2 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:50:05 +0000 ROA not before: Tue 18 Nov 2025 09:23:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154326 IP address blocks: 138.252.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11474 (0x2cd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Nov 18 09:23:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c29c-7c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:cc:d2:8e:dc:06:c2:bd:40:8d:67:26:2b: 12:04:88:7d:7d:75:92:10:19:43:2f:b1:f9:11:10: 08:32:d7:ae:29:19:c8:d6:ca:67:76:74:f6:16:dc: 81:9f:7f:9b:cb:35:3d:30:d2:fc:34:87:8d:91:d0: 46:5f:b9:16:6e:41:40:16:80:cc:58:ec:58:28:0e: db:e6:89:94:d5:7a:2c:c7:60:28:df:35:eb:22:b4: 83:00:59:3d:37:7a:8b:f0:cc:90:16:fe:7a:bb:d5: b1:6f:17:1f:c5:06:70:a6:7a:e7:55:22:93:58:d2: 72:fb:21:eb:1b:6a:9b:24:f5:cc:16:18:a6:0a:6f: 18:41:99:2d:6e:37:5b:45:62:74:c9:54:86:83:67: 42:d5:94:51:5d:d2:b3:7c:57:d0:93:2d:b1:cb:d8: 72:3b:f1:c4:fd:c1:5d:be:d1:e6:a8:02:79:2b:e7: cd:4f:0a:a6:bb:9c:98:92:18:22:91:44:f5:9f:72: df:dc:ae:df:cc:16:70:57:be:a5:d1:d5:24:0a:2e: c9:c6:98:40:a8:45:76:39:4b:b2:85:d1:a0:7b:92: 6e:33:35:bc:dc:96:45:58:cb:1f:2d:cc:3d:77:e3: d9:41:6f:a5:29:02:84:47:01:e9:e8:70:e0:71:2d: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9D:C2:8A:1B:92:23:17:F1:39:23:B3:AA:26:31:8A:74:58:B7:8F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/384CF758C46011F091DDFD33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.108.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:08:34:e1:59:38:a7:c9:92:33:fc:b5:be:8c:08:02:f4:0e: cf:0c:de:e1:43:b2:b4:54:e4:d3:ba:07:3b:e7:ef:ee:13:e9: 1e:49:f4:ab:6c:2b:f8:47:15:ff:5c:5d:13:d2:09:ae:5f:bb: 6c:e7:38:6b:04:b2:5e:b0:f5:8a:36:31:42:99:0d:34:02:dc: 38:ce:43:57:c5:cb:c2:ad:21:69:8b:41:4a:04:dd:33:b1:e1: 7b:d7:5d:76:44:11:57:57:17:a0:7a:71:c6:43:72:d7:f2:41: 48:c4:01:20:3b:ef:91:16:6d:90:db:ca:31:61:6a:5a:b6:29: dd:98:27:84:69:5e:be:9c:f0:4f:20:17:2b:bc:bf:04:0b:7e: 07:6d:ef:a8:89:f2:ca:1b:37:b9:55:cc:20:4d:9e:1e:0d:1a: 4a:83:c1:e1:27:08:a5:2b:ce:58:6a:3c:ab:9c:d5:a7:88:cf: 48:07:74:d5:f8:e5:c2:1d:cb:f2:89:e6:48:50:e8:a4:e8:f7: 12:70:ee:89:a1:48:eb:7e:46:51:08:d4:0e:2c:17:28:6e:b6: 46:b0:f5:10:47:f5:29:32:08:3c:85:4f:0f:07:ba:97:08:64: 1c:7a:9c:9e:94:eb:e2:03:97:bd:7f:45:1f:87:ab:a8:82:4d: f9:fc:a1:68 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMTE4MDkyMzE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzI5Yy03Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJLM0o7cBsK9QI1nJisSBIh9fXWSEBlDL7H5ERAIMteuKRnI1spndnT2FtyB n3+byzU9MNL8NIeNkdBGX7kWbkFAFoDMWOxYKA7b5omU1Xosx2Ao3zXrIrSDAFk9 N3qL8MyQFv56u9WxbxcfxQZwpnrnVSKTWNJy+yHrG2qbJPXMFhimCm8YQZktbjdb RWJ0yVSGg2dC1ZRRXdKzfFfQky2xy9hyO/HE/cFdvtHmqAJ5K+fNTwqmu5yYkhgi kUT1n3Lf3K7fzBZwV76l0dUkCi7JxphAqEV2OUuyhdGge5JuMzW83JZFWMsfLcw9 d+PZQW+lKQKERwHp6HDgcS1FXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH6dwoob kiMX8Tkjs6omMYp0WLePMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzg0Q0Y3NThD NDYwMTFGMDkxRERGRDMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAivxsMA0GCSqGSIb3DQEBCwUAA4IBAQALCDThWTinyZIz/LW+jAgC 9A7PDN7hQ7K0VOTTugc75+/uE+keSfSrbCv4RxX/XF0T0gmuX7ts5zhrBLJesPWK NjFCmQ00Atw4zkNXxcvCrSFpi0FKBN0zseF71112RBFXVxegenHGQ3LX8kFIxAEg O++RFm2Q28oxYWpatindmCeEaV6+nPBPIBcrvL8EC34Hbe+oifLKGze5VcwgTZ4e DRpKg8HhJwilK85YajyrnNWniM9IB3TV+OXCHcvyieZIUOik6PcScO6JoUjrfkZR CNQOLBcobrZGsPUQR/UpMgg8hU8PB7qXCGQcepyelOviA5e9f0Ufh6uogk35/KFo -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:23 2026 by rpki-client