$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9CCF294FC4E11F099E0DDDC486F56BC.roa File: B9CCF294FC4E11F099E0DDDC486F56BC.roa (raw, json) Hash identifier: YvkTv9vlfShK8S4p7kK0r3psQmy6ZQb7U9khH5e56ds= Subject key identifier: C0:33:BE:EA:E6:DE:73:B0:9F:C3:36:EB:84:CD:E6:BD:30:75:93:8A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2EED Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9CCF294FC4E11F099E0DDDC486F56BC.roa Signing time: Sun 31 May 2026 16:21:55 +0000 ROA not before: Sun 31 May 2026 16:21:55 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 14618 IP address blocks: 138.252.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 15:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12013 (0x2eed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:21:55 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6023-8ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:07:41:85:57:47:30:3b:62:3d:ff:a7:c1: 32:85:58:34:53:ae:3b:e8:8c:ba:20:ab:20:28:64: cf:14:63:c7:d0:8f:ca:74:f1:dc:bf:20:1f:53:91: 53:ba:5a:1e:3a:72:00:b0:23:dc:56:48:c9:57:36: 98:71:19:cd:88:a2:93:38:32:dd:f8:ba:54:fe:3e: 85:13:73:b5:2d:d0:cb:ca:06:85:b3:89:36:61:54: 04:63:a5:b0:58:aa:be:56:d0:64:a4:61:29:10:41: 4d:08:13:ca:c3:7b:de:81:e6:b7:a6:b3:8b:15:7c: 7b:eb:7a:20:bf:8b:62:ca:61:e1:87:f8:dd:e1:07: 4d:ec:b0:c3:9a:c1:cf:7f:62:16:0d:6a:e1:49:13: 6a:f4:95:29:ab:c4:a2:a7:a7:c3:8d:4b:fb:bb:2b: ab:77:44:db:9f:79:f2:8e:56:12:7f:a8:cb:ae:bb: 21:0c:7e:e8:16:a2:3d:66:db:ac:8c:b3:bd:f7:8d: 55:ce:7f:81:09:61:52:76:33:10:dd:b4:c7:ce:02: 3b:49:30:58:69:4b:1e:7d:37:64:cd:de:91:b3:f8: 5d:73:2a:6e:d4:ae:f0:c2:68:a8:3d:e5:83:28:69: 84:06:a1:b5:15:4d:c3:84:ca:b9:ef:67:5b:09:30: ea:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:33:BE:EA:E6:DE:73:B0:9F:C3:36:EB:84:CD:E6:BD:30:75:93:8A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9CCF294FC4E11F099E0DDDC486F56BC.roa sbgp-ipAddrBlock: critical IPv4: 138.252.109.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:02:ea:e2:cf:dd:2e:f7:7b:2a:52:99:22:56:d7:65:59:c6: 77:d6:84:34:3b:5a:1b:8b:a4:13:79:46:7e:a2:94:cf:13:3a: ca:aa:df:d5:81:b3:45:10:f3:60:e5:4f:33:19:a8:09:fe:13: 98:d9:0e:eb:52:57:3a:0c:5e:1c:cd:cc:b3:eb:b6:eb:50:65: b0:cf:c2:42:37:45:f0:dc:30:39:5d:47:cd:f3:f8:ac:85:77: 36:24:94:6d:ce:26:73:52:d4:0a:d5:ff:6d:86:41:bd:bc:00: 97:68:04:60:7b:40:19:96:97:b5:6e:e8:3d:e0:f0:9f:83:85: 36:73:27:11:64:35:d1:07:df:01:78:63:c6:8c:75:64:32:7f: fc:3e:4d:40:27:38:61:96:7d:4b:c6:5a:1f:8e:c1:1a:4b:68: 61:d9:67:3c:cc:d1:fe:09:01:d4:5f:82:eb:7d:6f:1b:1e:23: c0:e1:5f:9d:7a:7f:fd:68:b4:71:c2:ca:c3:cd:01:d7:70:62: 2d:5e:60:1b:79:75:7f:ff:0c:5e:a3:39:42:11:73:36:de:93: a6:0a:f3:c7:1b:b6:3f:8a:62:89:5b:26:18:10:83:3e:62:ca: 56:a4:07:ea:1b:ca:f6:67:d5:43:f2:e5:75:41:5d:0c:78:f5: b5:85:f6:a0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYyMTU1WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNjAyMy04ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMkHQYVXRzA7Yj3/p8EyhVg0U6476Iy6IKsgKGTPFGPH0I/KdPHcvyAfU5FT uloeOnIAsCPcVkjJVzaYcRnNiKKTODLd+LpU/j6FE3O1LdDLygaFs4k2YVQEY6Ww WKq+VtBkpGEpEEFNCBPKw3vegea3prOLFXx763ogv4tiymHhh/jd4QdN7LDDmsHP f2IWDWrhSRNq9JUpq8Sip6fDjUv7uyurd0Tbn3nyjlYSf6jLrrshDH7oFqI9Ztus jLO9941Vzn+BCWFSdjMQ3bTHzgI7STBYaUsefTdkzd6Rs/hdcypu1K7wwmioPeWD KGmEBqG1FU3DhMq572dbCTDq8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMAzvurm 3nOwn8M264TN5r0wdZOKMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjlDQ0YyOTRG QzRFMTFGMDk5RTBERERDNDg2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAivxtMA0GCSqGSIb3DQEBCwUAA4IBAQAuAuriz90u93sqUpkiVtdl WcZ31oQ0O1obi6QTeUZ+opTPEzrKqt/VgbNFEPNg5U8zGagJ/hOY2Q7rUlc6DF4c zcyz67brUGWwz8JCN0Xw3DA5XUfN8/ishXc2JJRtziZzUtQK1f9thkG9vACXaARg e0AZlpe1bug94PCfg4U2cycRZDXRB98BeGPGjHVkMn/8Pk1AJzhhln1LxlofjsEa S2hh2Wc8zNH+CQHUX4LrfW8bHiPA4V+den/9aLRxwsrDzQHXcGItXmAbeXV//wxe ozlCEXM23pOmCvPHG7Y/imKJWyYYEIM+YspWpAfqG8r2Z9VD8uV1QV0MePW1hfag -----END CERTIFICATE-----Generated at Sat Jun 13 07:18:04 2026 by rpki-client