$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa File: EC11B380D4D911F0BE68C020C4F9AE02.roa (raw, json) Hash identifier: lPZMpT6sZdZ+/eq8EEWftJX/NB6pMZ30MSJg/9PZfK0= Subject key identifier: 90:7F:89:54:F2:A9:75:B1:1B:96:E3:69:91:2A:0E:8B:CB:1A:7F:A5 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2FE3 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa Signing time: Sun 31 May 2026 16:29:47 +0000 ROA not before: Sun 31 May 2026 16:29:47 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 154408 IP address blocks: 138.252.214.0/23 maxlen: 24 144.79.166.0/24 maxlen: 24 144.79.192.0/24 maxlen: 24 162.4.146.0/24 maxlen: 24 192.232.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 15:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12259 (0x2fe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:29:47 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c61fb-bab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:1c:6d:c9:48:f1:56:c4:14:6f:34:e5:75: 2d:ce:bd:02:e7:fc:83:94:0a:02:6b:f9:80:24:70: 10:57:c6:1a:74:f8:a1:51:e1:9d:7e:11:84:79:4d: 5a:96:1a:82:b3:10:67:55:13:ef:96:63:42:18:8a: 00:96:6c:dd:14:28:7d:14:31:23:5d:9e:8a:e0:ed: 6d:a9:6b:41:0d:81:3a:ed:8e:e0:38:61:fd:3a:b4: bc:96:9e:a5:98:97:46:5c:22:10:f8:f9:18:94:13: c6:58:69:f6:b9:3b:23:8b:8a:d8:eb:bc:ce:b9:51: f1:2e:0f:c6:70:56:61:80:08:db:a4:c8:5c:e8:af: 34:51:0d:bd:6c:2b:99:24:2a:18:96:7d:c6:0b:f4: 96:28:99:c5:e3:34:ca:81:8f:27:eb:e2:2a:c2:c0: b7:1a:e9:eb:bb:98:d2:8b:b1:ae:c8:84:13:cd:66: 75:11:08:9c:52:3f:aa:7d:7e:0d:b8:ff:a9:a2:b2: 8e:45:f9:3b:9d:aa:a2:c8:09:a2:a6:7e:a6:3f:75: 40:a8:fb:3f:9d:44:6a:01:de:87:69:a1:f2:3a:be: 39:ac:ff:fd:b6:81:8d:82:ef:82:31:80:9b:82:69: 02:54:81:f6:96:be:4b:88:a4:08:a1:95:28:05:f5: a4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7F:89:54:F2:A9:75:B1:1B:96:E3:69:91:2A:0E:8B:CB:1A:7F:A5 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.214.0/23 144.79.166.0/24 144.79.192.0/24 162.4.146.0/24 192.232.57.0/24 Signature Algorithm: sha256WithRSAEncryption 99:be:62:60:71:66:32:d2:d5:2e:ca:2d:cb:f1:64:40:89:3f: 7c:92:fb:b3:c2:ad:6a:aa:37:c2:fc:4b:91:90:df:57:31:18: 6d:05:47:bc:aa:bd:ec:34:b7:ef:5b:02:b4:ca:53:f1:74:a1: dd:ba:5f:30:4b:d7:d9:49:41:44:7b:b8:e0:29:3a:07:57:4d: 5c:e8:15:41:9e:8c:77:9b:fa:8e:c6:9c:43:72:0e:a9:b3:92: 5a:21:7f:39:74:7c:8e:0c:36:17:36:15:64:46:44:ac:46:6c: d6:1a:7b:21:ea:f4:7e:eb:0d:55:69:e5:12:cd:19:25:8b:d6: 8a:f9:b6:37:e3:a4:a2:5d:84:3e:f0:c3:89:7f:c0:51:6d:8f: 70:af:6f:e5:04:09:be:12:f1:9d:d1:32:8d:e2:ff:92:9d:7d: d3:f9:04:0a:b7:80:64:80:31:c6:5b:00:bb:48:f7:29:6c:8b: dc:29:92:64:a4:49:7b:6e:47:9b:8f:3c:34:1b:1f:9b:7a:08: 01:87:12:ce:2a:99:00:26:e2:83:35:99:b8:f8:30:af:72:95: 86:29:4d:65:7d:2c:c8:7c:3b:cc:32:71:67:ab:ac:a2:1a:9c: 40:e5:a9:be:76:8a:e4:dc:d8:c7:7f:8d:3d:80:aa:27:c9:e6: f4:e1:ed:06 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICL+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYyOTQ3WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNjFmYi1iYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnwcbclI8VbEFG805XUtzr0C5/yDlAoCa/mAJHAQV8YadPihUeGdfhGEeU1a lhqCsxBnVRPvlmNCGIoAlmzdFCh9FDEjXZ6K4O1tqWtBDYE67Y7gOGH9OrS8lp6l mJdGXCIQ+PkYlBPGWGn2uTsji4rY67zOuVHxLg/GcFZhgAjbpMhc6K80UQ29bCuZ JCoYln3GC/SWKJnF4zTKgY8n6+IqwsC3Gunru5jSi7GuyIQTzWZ1EQicUj+qfX4N uP+porKORfk7naqiyAmipn6mP3VAqPs/nURqAd6HaaHyOr45rP/9toGNgu+CMYCb gmkCVIH2lr5LiKQIoZUoBfWkjwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFJB/iVTy qXWxG5bjaZEqDovLGn+lMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUMxMUIzODBE NEQ5MTFGMEJFNjhDMDIwQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQBivzWAwQAkE+mAwQAkE/AAwQAogSSAwQAwOg5MA0GCSqGSIb3DQEB CwUAA4IBAQCZvmJgcWYy0tUuyi3L8WRAiT98kvuzwq1qqjfC/EuRkN9XMRhtBUe8 qr3sNLfvWwK0ylPxdKHdul8wS9fZSUFEe7jgKToHV01c6BVBnox3m/qOxpxDcg6p s5JaIX85dHyODDYXNhVkRkSsRmzWGnsh6vR+6w1VaeUSzRkli9aK+bY346SiXYQ+ 8MOJf8BRbY9wr2/lBAm+EvGd0TKN4v+SnX3T+QQKt4BkgDHGWwC7SPcpbIvcKZJk pEl7bkebjzw0Gx+beggBhxLOKpkAJuKDNZm4+DCvcpWGKU1lfSzIfDvMMnFnq6yi GpxA5am+dork3NjHf409gKonyeb04e0G -----END CERTIFICATE-----Generated at Sat Jun 13 15:37:59 2026 by rpki-client