$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9EB1F84D01C11F0A34A4F34C4F9AE02.roa File: B9EB1F84D01C11F0A34A4F34C4F9AE02.roa (raw, json) Hash identifier: 8yWrnp8+X1LqmPsR98m3EF31xHAqXynV2FkdwCe3FO4= Subject key identifier: 9C:91:A7:35:98:CF:FB:0D:BE:96:57:44:91:B1:7F:8A:D3:FA:F6:2C Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CE1 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9EB1F84D01C11F0A34A4F34C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:50:25 +0000 ROA not before: Wed 03 Dec 2025 07:50:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154384 IP address blocks: 138.252.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11489 (0x2ce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Dec 3 07:50:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c2b0-44c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:e2:ba:72:41:e2:05:44:b5:f1:fb:0a:a8: 92:94:b9:f7:17:81:53:be:cc:8a:3f:f8:fa:d9:03: 51:31:b5:51:93:ef:28:90:a6:93:f2:f6:e4:9f:ef: 83:b7:ab:60:e2:0f:be:ec:af:f9:6d:bb:31:38:d2: b8:2d:8c:3f:47:7d:6f:d5:23:31:29:67:5e:f7:e7: c9:ad:ed:13:16:ab:6d:96:33:28:0f:de:66:03:77: b7:42:15:b2:5e:e3:a4:57:d6:05:bd:85:c5:cd:c1: 51:a3:3e:6c:18:2b:7d:ca:91:4a:e1:2d:67:22:ec: 3d:11:eb:b5:39:7d:46:88:7d:14:13:9c:46:ec:08: 63:f9:c6:b4:ed:ac:34:9d:da:f4:25:54:57:83:72: d8:f7:12:ac:c4:a6:7f:ee:ac:b3:b4:5f:82:06:f8: f6:54:00:bd:84:5f:29:1e:56:78:dc:3c:88:cd:98: 2a:ca:2d:b0:e7:8c:ce:a3:b7:0a:21:46:fd:e7:c6: 94:4d:62:b3:a7:df:1e:da:82:22:30:6a:70:b4:81: 26:9e:bc:9a:48:3a:3b:34:6e:32:15:58:43:d5:ac: 0c:f6:4c:18:2e:fa:e5:d1:a0:62:ea:55:e2:90:49: a4:9b:68:c3:ec:6f:bd:ac:26:49:24:44:d9:4e:c8: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:91:A7:35:98:CF:FB:0D:BE:96:57:44:91:B1:7F:8A:D3:FA:F6:2C X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B9EB1F84D01C11F0A34A4F34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.254.0/23 Signature Algorithm: sha256WithRSAEncryption b8:7a:fe:11:a1:69:87:e9:4c:93:cd:ef:e4:f3:59:7c:5b:27: 4e:6e:7f:47:43:87:a8:e7:82:48:dc:72:4a:a2:7a:1b:6d:e2: 47:bf:cf:c1:67:d2:99:a5:17:c9:0f:b8:44:c8:a9:19:d8:47: a8:4a:6a:9e:28:03:2d:9f:9a:0d:8e:e5:1d:a0:ec:a2:f9:a4: a3:76:48:06:f3:37:a4:37:2c:66:a1:f0:6c:39:0f:5c:f0:6c: da:8e:82:b7:a3:3a:ee:56:c1:9d:0c:29:eb:84:62:f0:73:78: 9b:8a:b2:d0:a3:9d:fb:db:28:39:2d:7f:09:95:67:22:d0:15: 35:f9:e9:52:37:ab:d8:4c:f2:af:88:f0:dd:b3:39:47:d5:eb: 41:e1:1a:f1:9f:04:c8:ba:37:62:44:90:92:e9:72:2b:2d:32: 86:b3:7a:d0:0c:21:5c:29:c2:c6:b7:5b:12:83:88:ce:37:a1: 91:40:2e:de:65:57:28:98:11:63:16:3e:4b:6b:a0:11:b2:d5: a1:13:3b:75:2c:b1:c8:8a:e5:7b:c7:10:fb:22:14:52:21:7d: 32:03:c9:59:16:53:e0:ac:b1:55:f7:e9:d2:5f:e7:01:71:48: db:6d:76:8b:4a:aa:98:a6:10:9a:10:19:c7:91:cd:5e:79:37: b7:fc:a9:e1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMjAzMDc1MDI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzJiMC00NGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hziunJB4gVEtfH7CqiSlLn3F4FTvsyKP/j62QNRMbVRk+8okKaT8vbkn++D t6tg4g++7K/5bbsxONK4LYw/R31v1SMxKWde9+fJre0TFqttljMoD95mA3e3QhWy XuOkV9YFvYXFzcFRoz5sGCt9ypFK4S1nIuw9Eeu1OX1GiH0UE5xG7Ahj+ca07aw0 ndr0JVRXg3LY9xKsxKZ/7qyztF+CBvj2VAC9hF8pHlZ43DyIzZgqyi2w54zOo7cK IUb958aUTWKzp98e2oIiMGpwtIEmnryaSDo7NG4yFVhD1awM9kwYLvrl0aBi6lXi kEmkm2jD7G+9rCZJJETZTsgxPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJyRpzWY z/sNvpZXRJGxf4rT+vYsMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjlFQjFGODRE MDFDMTFGMEEzNEE0RjM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivz+MA0GCSqGSIb3DQEBCwUAA4IBAQC4ev4RoWmH6UyTze/k81l8 WydObn9HQ4eo54JI3HJKonobbeJHv8/BZ9KZpRfJD7hEyKkZ2EeoSmqeKAMtn5oN juUdoOyi+aSjdkgG8zekNyxmofBsOQ9c8GzajoK3ozruVsGdDCnrhGLwc3ibirLQ o5372yg5LX8JlWci0BU1+elSN6vYTPKviPDdszlH1etB4RrxnwTIujdiRJCS6XIr LTKGs3rQDCFcKcLGt1sSg4jON6GRQC7eZVcomBFjFj5La6ARstWhEzt1LLHIiuV7 xxD7IhRSIX0yA8lZFlPgrLFV9+nSX+cBcUjbbXaLSqqYphCaEBnHkc1eeTe3/Knh -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:10 2026 by rpki-client