$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CAC8BACAC45D11F096301D2FC4F9AE02.roa File: CAC8BACAC45D11F096301D2FC4F9AE02.roa (raw, json) Hash identifier: +Z99JvYTNAasfiOduLxadjKul6ShQXzY7bLDflDLeu4= Subject key identifier: 52:8A:B3:BE:77:A3:D5:5E:C8:17:5A:A5:8F:E7:B5:72:46:88:A2:FC Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CD1 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CAC8BACAC45D11F096301D2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:50:04 +0000 ROA not before: Tue 18 Nov 2025 09:05:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154374 IP address blocks: 138.252.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11473 (0x2cd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Nov 18 09:05:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c29b-b2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9e:a7:a3:6a:cf:ef:b4:49:55:25:09:1d:61: 76:a1:18:b7:a0:cf:6e:24:53:67:e4:09:89:e9:5d: d8:ea:13:90:36:88:e2:33:ea:52:37:16:c1:6f:42: ac:5c:a0:c1:39:df:f7:e9:50:de:9b:67:96:2c:d8: ba:82:4f:c2:fb:cc:1f:63:9d:1a:f9:f2:bb:bd:02: 75:ba:41:e5:da:96:43:57:ce:de:d9:74:d8:51:15: 14:00:b6:6a:71:70:2f:c0:c9:e6:38:96:fe:1a:f1: 65:59:97:4a:ba:75:9e:23:be:c8:6c:9e:a9:85:3b: c6:ee:69:75:f5:b6:f9:55:06:ef:3b:01:60:66:34: 88:6d:ce:69:53:6d:07:55:e5:a2:eb:d7:7a:b8:6b: f3:cc:53:98:39:bb:3b:60:b8:79:cc:4f:d7:34:ac: 94:a7:d6:80:16:72:ec:f9:82:97:b1:06:57:a0:a6: 5b:75:0f:7a:6b:32:fa:fc:38:20:ed:98:13:62:2f: 19:14:97:45:a4:d1:39:4d:50:60:09:ec:5b:cc:d6: 66:9d:51:31:be:0f:ab:d7:6e:c2:6e:a3:4f:c1:f1: 6e:3b:15:e6:1a:39:55:e9:27:2d:0f:a0:0f:0e:be: a0:6c:18:b1:5d:1c:6d:68:f9:16:7f:22:40:56:ca: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8A:B3:BE:77:A3:D5:5E:C8:17:5A:A5:8F:E7:B5:72:46:88:A2:FC X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CAC8BACAC45D11F096301D2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.212.0/23 Signature Algorithm: sha256WithRSAEncryption ba:21:ec:69:58:89:8a:4d:d5:42:e7:1f:06:ac:cf:9f:40:72: b8:9a:09:a5:d4:44:06:8a:3b:e7:c0:00:74:57:23:9c:ad:86: 5c:95:08:4d:fa:46:72:b6:34:c3:cf:71:81:18:fa:76:95:4d: 01:23:e6:bc:69:22:7d:82:ed:72:05:01:be:62:48:bc:72:de: 28:f4:92:2b:25:08:e7:18:f9:ad:5f:9c:4f:f0:59:c0:23:39: a1:32:07:9e:76:e3:30:a8:fc:c7:ec:6c:5c:b3:1e:ec:49:13: 2f:b5:de:4e:8b:07:9f:a6:48:1a:ce:ad:97:78:9e:f1:b1:c0: 0d:49:86:58:3d:46:8a:88:01:a4:e1:37:38:e7:d3:8b:a1:30: a3:61:97:ba:a2:fc:6d:e4:64:ec:1d:ab:83:a2:ec:a1:eb:b5: 4a:2e:15:ae:3d:29:e6:97:ba:42:55:b0:41:1f:4f:82:e9:31: ad:e1:28:a2:98:db:d1:37:05:27:c4:d7:63:15:67:7c:92:19: a6:b8:f9:82:1a:79:99:be:65:b1:77:0a:ba:11:4e:de:ca:2c: bc:32:b1:05:05:20:64:3d:68:18:9b:e3:31:b7:20:2d:72:01: 6c:21:73:fe:29:fe:1c:a1:cd:d3:05:8d:6e:95:ba:3b:5c:17: 1e:9d:4c:f4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMTE4MDkwNTU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzI5Yi1iMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz56no2rP77RJVSUJHWF2oRi3oM9uJFNn5AmJ6V3Y6hOQNojiM+pSNxbBb0Ks XKDBOd/36VDem2eWLNi6gk/C+8wfY50a+fK7vQJ1ukHl2pZDV87e2XTYURUUALZq cXAvwMnmOJb+GvFlWZdKunWeI77IbJ6phTvG7ml19bb5VQbvOwFgZjSIbc5pU20H VeWi69d6uGvzzFOYObs7YLh5zE/XNKyUp9aAFnLs+YKXsQZXoKZbdQ96azL6/Dgg 7ZgTYi8ZFJdFpNE5TVBgCexbzNZmnVExvg+r127CbqNPwfFuOxXmGjlV6SctD6AP Dr6gbBixXRxtaPkWfyJAVsodnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFKKs753 o9VeyBdapY/ntXJGiKL8MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0FDOEJBQ0FD NDVEMTFGMDk2MzAxRDJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivzUMA0GCSqGSIb3DQEBCwUAA4IBAQC6IexpWImKTdVC5x8GrM+f QHK4mgml1EQGijvnwAB0VyOcrYZclQhN+kZytjTDz3GBGPp2lU0BI+a8aSJ9gu1y BQG+Yki8ct4o9JIrJQjnGPmtX5xP8FnAIzmhMgeeduMwqPzH7Gxcsx7sSRMvtd5O iwefpkgazq2XeJ7xscANSYZYPUaKiAGk4Tc459OLoTCjYZe6ovxt5GTsHauDouyh 67VKLhWuPSnml7pCVbBBH0+C6TGt4SiimNvRNwUnxNdjFWd8khmmuPmCGnmZvmWx dwq6EU7eyiy8MrEFBSBkPWgYm+MxtyAtcgFsIXP+Kf4coc3TBY1ulbo7XBcenUz0 -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:55 2026 by rpki-client