$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa File: D1E157DAD99411F0B61ED2F763D3641D.roa (raw, json) Hash identifier: +DrjXdF+QBPoJpfv5Zuva2L0V9xLbCgykvCJjh7uOWU= Subject key identifier: CF:8B:B2:D7:1A:14:C4:D8:B4:0D:83:A8:0D:55:6A:9B:E7:47:7E:81 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CE6 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa Signing time: Sun 01 Mar 2026 22:50:32 +0000 ROA not before: Mon 15 Dec 2025 09:02:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136904 IP address blocks: 138.252.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11494 (0x2ce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Dec 15 09:02:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c2b7-697e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:0e:b3:8e:7f:1f:73:e5:39:8b:b8:49:5a: 79:a3:33:05:c7:2a:1e:88:35:94:57:41:16:2c:45: 59:b7:5e:a2:75:10:1c:33:51:c0:3b:b7:ab:2f:6c: 5b:3d:31:d0:91:e0:e8:9d:83:44:aa:a0:e3:0e:0a: 79:96:40:bd:56:7f:4d:24:90:a4:94:dc:fe:ea:94: 00:12:b7:86:59:33:97:5e:12:58:5f:3f:0a:fb:c0: a7:5e:37:1f:be:c6:af:87:f6:ec:b0:db:38:e0:06: d4:b1:ca:77:f3:0b:3d:62:d1:4d:b3:24:1b:38:8b: a4:1d:41:24:1b:21:97:a4:05:3f:9a:a2:93:e3:19: 4b:01:ff:85:d2:0a:ff:d4:8a:d0:9f:b9:93:01:9f: 53:5e:50:b3:89:05:54:ef:1b:a6:3e:47:87:c8:f2: 6e:78:2f:f5:8c:a9:1c:7d:55:3e:49:0c:54:65:3d: 5a:50:6d:ff:93:24:0a:d1:40:e4:2d:46:49:3c:75: 90:83:24:bf:ec:24:60:b4:23:c1:e6:12:82:2b:ce: f4:28:0b:09:d3:9f:89:97:5f:12:85:2f:0d:4b:05: 2c:35:d2:cd:32:66:35:01:76:1c:1e:24:31:6c:92: 95:d6:ce:f1:70:26:60:71:77:e9:ae:e0:4c:f3:9b: 1e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8B:B2:D7:1A:14:C4:D8:B4:0D:83:A8:0D:55:6A:9B:E7:47:7E:81 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa sbgp-ipAddrBlock: critical IPv4: 138.252.246.0/23 Signature Algorithm: sha256WithRSAEncryption b9:e5:f5:fc:9e:dd:32:2e:19:cf:6b:b7:ab:6c:ad:a9:c2:4a: 75:4c:8b:40:bf:c4:d0:25:4b:12:6a:a4:a7:7a:77:59:d8:08: ff:c6:90:7d:bf:62:88:5d:ae:f1:44:92:a7:6e:18:d2:fa:f1: e4:a8:d2:54:76:04:2e:d4:fc:76:9d:09:69:b2:ab:69:1f:45: 64:6b:82:61:88:9b:9f:2f:53:e1:3c:f2:9b:76:d7:4e:ad:bc: c5:0c:5f:60:18:68:f1:8a:3c:a0:c8:18:4c:6d:d8:9e:9a:2a: dc:fa:b9:8d:1c:9f:bc:e3:29:69:c3:96:17:35:29:4e:5b:2b: 03:4b:b2:4f:22:e9:31:c0:9f:a1:6f:48:4f:47:a6:d3:67:e5: e8:12:e2:f8:15:6d:07:20:ca:22:f1:66:3c:1d:b8:88:7f:a4: ed:0e:c7:b6:f1:f3:c6:c3:81:a0:bf:01:35:0c:33:58:7d:54: 95:3c:85:b8:e8:9d:3c:46:eb:a6:69:3e:20:02:86:4a:b9:97: 13:e2:e8:70:aa:a3:3f:4b:3c:02:b3:ad:24:01:8b:9f:65:24: b8:71:72:59:ca:8a:d6:ce:42:34:b3:30:31:13:7f:df:9d:d0: a9:dd:61:9e:c3:63:d9:f4:74:48:34:c1:c7:6c:aa:81:57:08: 2a:65:a9:a1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMjE1MDkwMjQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzJiNy02OTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPUOs45/H3PlOYu4SVp5ozMFxyoeiDWUV0EWLEVZt16idRAcM1HAO7erL2xb PTHQkeDonYNEqqDjDgp5lkC9Vn9NJJCklNz+6pQAEreGWTOXXhJYXz8K+8CnXjcf vsavh/bssNs44AbUscp38ws9YtFNsyQbOIukHUEkGyGXpAU/mqKT4xlLAf+F0gr/ 1IrQn7mTAZ9TXlCziQVU7xumPkeHyPJueC/1jKkcfVU+SQxUZT1aUG3/kyQK0UDk LUZJPHWQgyS/7CRgtCPB5hKCK870KAsJ05+Jl18ShS8NSwUsNdLNMmY1AXYcHiQx bJKV1s7xcCZgcXfpruBM85sewwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM+Lstca FMTYtA2DqA1VapvnR36BMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDFFMTU3REFE OTk0MTFGMEI2MUVEMkY3NjNEMzY0MUQucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivz2MA0GCSqGSIb3DQEBCwUAA4IBAQC55fX8nt0yLhnPa7erbK2p wkp1TItAv8TQJUsSaqSnendZ2Aj/xpB9v2KIXa7xRJKnbhjS+vHkqNJUdgQu1Px2 nQlpsqtpH0Vka4JhiJufL1PhPPKbdtdOrbzFDF9gGGjxijygyBhMbdiemirc+rmN HJ+84ylpw5YXNSlOWysDS7JPIukxwJ+hb0hPR6bTZ+XoEuL4FW0HIMoi8WY8HbiI f6TtDse28fPGw4GgvwE1DDNYfVSVPIW46J08RuumaT4gAoZKuZcT4uhwqqM/SzwC s60kAYufZSS4cXJZyorWzkI0szAxE3/fndCp3WGew2PZ9HRINMHHbKqBVwgqZamh -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:23 2026 by rpki-client