$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4BB08426CF4C11F0B2E16987C4F9AE02.roa File: 4BB08426CF4C11F0B2E16987C4F9AE02.roa (raw, json) Hash identifier: pUNBh7vV00+Cdrle83tLsXlVO4Z3h3/alVe+Iv72VvA= Subject key identifier: 1A:40:CA:87:9F:FF:FB:F0:22:86:9B:23:7B:C9:F2:68:E5:3A:26:94 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CDB Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4BB08426CF4C11F0B2E16987C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:50:17 +0000 ROA not before: Tue 02 Dec 2025 06:58:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154325 IP address blocks: 138.252.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11483 (0x2cdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Dec 2 06:58:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c2a8-4c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:2d:37:06:1f:77:f5:40:57:31:79:55:68: b7:54:10:72:49:34:db:0b:df:6e:1c:c2:c8:b4:aa: 7f:6a:49:96:47:54:2a:76:07:d8:7f:f6:3c:a9:7f: 25:cd:3f:0f:38:e0:80:b1:4d:16:67:43:0b:b7:43: 27:39:f2:d6:bd:3b:5e:ee:10:ef:cb:fe:f2:02:40: dc:8e:1b:68:c5:e8:3a:17:e9:cc:83:08:33:7f:12: 95:fa:fc:51:c6:7f:f6:b1:b0:b4:19:8f:4b:07:79: ee:65:9d:9a:dd:44:3a:1f:cc:43:84:0f:c2:5d:ee: e0:85:d1:05:22:50:6d:45:55:bb:86:6b:90:f1:ec: 65:cd:37:97:f0:8d:2b:6f:36:9a:21:9e:0c:87:0a: 44:a2:e7:7d:78:bb:d6:fe:b7:00:e0:94:2d:02:35: 16:0c:79:64:fb:c1:7c:d0:d5:5d:ed:74:05:fe:6c: 4f:44:9e:3d:60:f4:e0:41:2c:ed:eb:d3:45:4b:e6: b5:92:b4:7a:4a:3f:2e:2f:92:57:12:f7:55:7a:83: c8:b9:40:56:7d:6e:d7:c7:2e:9c:f8:63:95:e9:1a: fe:82:f4:46:0a:18:2b:d2:2e:43:e1:4f:5a:10:04: 57:e8:b2:6a:67:0f:08:86:f7:de:b3:de:a6:18:a5: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:40:CA:87:9F:FF:FB:F0:22:86:9B:23:7B:C9:F2:68:E5:3A:26:94 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4BB08426CF4C11F0B2E16987C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.104.0/23 Signature Algorithm: sha256WithRSAEncryption ce:ba:79:8b:a9:71:0c:55:64:28:e4:ff:f1:a4:33:a9:fb:70: d2:4e:f9:b0:96:b1:88:61:07:30:0f:3f:db:ff:d0:43:d8:d0: aa:e3:f1:9c:2d:07:6c:3c:9b:50:39:de:f6:67:af:16:c4:22: 32:75:ee:66:cf:bc:07:8d:86:70:b0:05:ca:ca:7c:92:77:b0: 24:a2:cc:19:4b:6c:0a:93:2a:30:01:d0:c2:33:df:ab:db:a2: 19:f5:94:a0:2f:ab:68:8d:18:2b:50:6b:f1:58:51:6d:2b:3b: 16:81:18:72:72:32:0f:53:f1:f2:65:e1:c6:f2:b4:e9:10:d0: 50:39:5d:d9:8c:49:54:f5:25:da:58:0d:51:93:a1:f4:63:2b: 75:2e:9f:00:68:0f:b7:e4:78:5e:20:83:8f:bb:23:d0:1f:7f: 2d:01:fa:ca:ef:b4:0a:b4:0a:f2:86:d0:8b:f2:29:e1:7d:84: a1:b2:32:80:a0:f0:0d:94:df:c6:81:d6:d9:6d:18:bd:c4:8b: 8e:28:e8:bf:ae:ba:c4:25:fb:7d:b1:1b:69:c5:25:c1:7b:8f: 81:c0:bd:d4:9e:e0:5b:6f:55:92:44:25:f2:e4:01:51:9b:59: 64:9c:28:d5:be:39:e7:64:a8:92:33:24:4a:ac:df:eb:91:63: 86:b1:0a:59 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMjAyMDY1ODI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzJhOC00Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXwtNwYfd/VAVzF5VWi3VBBySTTbC99uHMLItKp/akmWR1QqdgfYf/Y8qX8l zT8POOCAsU0WZ0MLt0MnOfLWvTte7hDvy/7yAkDcjhtoxeg6F+nMgwgzfxKV+vxR xn/2sbC0GY9LB3nuZZ2a3UQ6H8xDhA/CXe7ghdEFIlBtRVW7hmuQ8exlzTeX8I0r bzaaIZ4MhwpEoud9eLvW/rcA4JQtAjUWDHlk+8F80NVd7XQF/mxPRJ49YPTgQSzt 69NFS+a1krR6Sj8uL5JXEvdVeoPIuUBWfW7Xxy6c+GOV6Rr+gvRGChgr0i5D4U9a EARX6LJqZw8Ihvfes96mGKWk2wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBpAyoef //vwIoabI3vJ8mjlOiaUMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEJCMDg0MjZD RjRDMTFGMEIyRTE2OTg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivxoMA0GCSqGSIb3DQEBCwUAA4IBAQDOunmLqXEMVWQo5P/xpDOp +3DSTvmwlrGIYQcwDz/b/9BD2NCq4/GcLQdsPJtQOd72Z68WxCIyde5mz7wHjYZw sAXKynySd7AkoswZS2wKkyowAdDCM9+r26IZ9ZSgL6tojRgrUGvxWFFtKzsWgRhy cjIPU/HyZeHG8rTpENBQOV3ZjElU9SXaWA1Rk6H0Yyt1Lp8AaA+35HheIIOPuyPQ H38tAfrK77QKtAryhtCL8inhfYShsjKAoPANlN/GgdbZbRi9xIuOKOi/rrrEJft9 sRtpxSXBe4+BwL3UnuBbb1WSRCXy5AFRm1lknCjVvjnnZKiSMyRKrN/rkWOGsQpZ -----END CERTIFICATE-----Generated at Mon Mar 2 23:58:25 2026 by rpki-client