$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa File: EC11B380D4D911F0BE68C020C4F9AE02.roa (raw, json) Hash identifier: vvNvcRMcXT7nbodOBoHYN93VWo7IxnD5AzCriDktais= Subject key identifier: 5A:AC:14:23:60:A6:21:2B:1D:18:4A:C3:E5:A6:0E:96:F9:2A:1D:7B Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2D1B Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:51:48 +0000 ROA not before: Fri 27 Feb 2026 11:59:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154408 IP address blocks: 138.252.214.0/23 maxlen: 24 144.79.166.0/24 maxlen: 24 144.79.192.0/24 maxlen: 24 192.232.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11547 (0x2d1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Feb 27 11:59:01 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c304-0192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:b4:69:d9:25:53:28:c5:59:64:54:a8:dd: e2:0c:2f:88:93:77:f9:88:95:7d:cc:72:cb:43:80: 32:5d:93:79:ff:d6:d8:af:c3:9b:b8:31:e2:e4:bd: dc:78:01:91:59:cb:3f:e4:de:c9:d1:7c:fb:d7:ae: 3a:b7:c0:39:0b:8a:95:7c:4d:3c:7e:95:83:8b:5a: 9f:81:5c:a5:b2:e5:b2:f5:c6:c1:5e:d0:db:d4:71: 03:63:bf:55:08:a3:fd:7a:bd:2c:dd:28:41:59:83: 4d:e8:85:0e:7b:aa:08:e3:c9:fd:21:eb:cc:33:c2: 82:ae:48:4d:90:8a:a6:26:82:b1:f9:06:a3:6c:74: 26:cf:a4:09:b2:f8:c1:ba:67:5d:11:d8:a6:ab:98: 62:40:e8:a9:20:b3:15:1d:bb:7b:5b:36:75:53:af: 97:4a:c5:65:ec:d6:92:a1:71:44:5b:59:6f:32:90: 78:f5:31:41:6c:07:ee:4e:13:71:6d:5e:8f:2f:22: a0:d4:35:91:f6:5c:95:a2:db:aa:bb:00:ac:b0:e5: 6f:9f:37:eb:e6:01:49:d9:bd:cb:fa:10:ca:bc:dc: 40:a1:8b:8e:dc:65:72:2c:2d:fe:85:49:db:1e:69: 88:22:1f:24:f5:87:e8:b7:02:72:b0:d3:63:66:63: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AC:14:23:60:A6:21:2B:1D:18:4A:C3:E5:A6:0E:96:F9:2A:1D:7B X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EC11B380D4D911F0BE68C020C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.214.0/23 144.79.166.0/24 144.79.192.0/24 192.232.57.0/24 Signature Algorithm: sha256WithRSAEncryption 32:e7:a3:ab:f6:e4:5b:a5:0e:72:8f:f2:14:bc:49:8f:b4:bc: 42:7a:74:12:72:4f:6e:33:fd:cd:dd:04:e3:24:15:a5:5e:84: a1:7d:76:ae:2c:11:35:37:2e:d3:f0:55:5c:2d:5f:ef:e0:05: 63:39:d2:01:2c:97:50:39:61:20:b8:f9:f6:2e:ab:ce:df:0c: 92:52:de:f9:2e:64:b8:b6:f3:2e:8c:d7:57:e0:f4:79:be:c8: 21:69:2f:d0:e9:2f:c1:d8:71:35:65:4b:73:6a:8f:65:c3:26: 03:80:8a:65:44:d9:3f:ef:51:83:85:f2:5e:9b:c8:f7:02:41: f0:d2:bc:10:79:89:e3:3d:22:2e:ba:f6:52:19:45:66:f3:b4: 9e:a8:3c:90:c7:1e:5f:f3:ca:c0:5c:3d:90:50:d1:dc:f3:8f: b7:25:ee:c9:f8:e4:a9:01:f2:75:67:72:bb:d2:56:f9:fd:30: 26:ad:09:cb:d8:62:9d:e1:02:30:cf:df:39:c5:e9:3d:fd:fd: 9e:c3:3e:76:d6:d1:4d:f9:b1:d8:6f:17:48:b4:e9:f5:4a:ea: 33:82:39:2a:cf:e1:09:30:76:35:8b:ac:21:f9:fc:18:e3:9d: 54:e8:40:20:d0:27:06:74:bd:16:31:90:b6:37:ae:c3:38:76: e7:73:90:7d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICLRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwMjI3MTE1OTAxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzMwNC0wMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwu0adklUyjFWWRUqN3iDC+Ik3f5iJV9zHLLQ4AyXZN5/9bYr8ObuDHi5L3c eAGRWcs/5N7J0Xz71646t8A5C4qVfE08fpWDi1qfgVylsuWy9cbBXtDb1HEDY79V CKP9er0s3ShBWYNN6IUOe6oI48n9IevMM8KCrkhNkIqmJoKx+QajbHQmz6QJsvjB umddEdimq5hiQOipILMVHbt7WzZ1U6+XSsVl7NaSoXFEW1lvMpB49TFBbAfuThNx bV6PLyKg1DWR9lyVotuquwCssOVvnzfr5gFJ2b3L+hDKvNxAoYuO3GVyLC3+hUnb HmmIIh8k9YfotwJysNNjZmNZ0QIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFFqsFCNg piErHRhKw+WmDpb5Kh17MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUMxMUIzODBE NEQ5MTFGMEJFNjhDMDIwQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQBivzWAwQAkE+mAwQAkE/AAwQAwOg5MA0GCSqGSIb3DQEBCwUAA4IB AQAy56Or9uRbpQ5yj/IUvEmPtLxCenQSck9uM/3N3QTjJBWlXoShfXauLBE1Ny7T 8FVcLV/v4AVjOdIBLJdQOWEguPn2LqvO3wySUt75LmS4tvMujNdX4PR5vsghaS/Q 6S/B2HE1ZUtzao9lwyYDgIplRNk/71GDhfJem8j3AkHw0rwQeYnjPSIuuvZSGUVm 87SeqDyQxx5f88rAXD2QUNHc84+3Je7J+OSpAfJ1Z3K70lb5/TAmrQnL2GKd4QIw z985xek9/f2ewz521tFN+bHYbxdItOn1Suozgjkqz+EJMHY1i6wh+fwY451U6EAg 0CcGdL0WMZC2N67DOHbnc5B9 -----END CERTIFICATE-----Generated at Mon Mar 2 06:24:41 2026 by rpki-client