$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF71D19AB94E11F0A3C60216C4F9AE02.roa File: FF71D19AB94E11F0A3C60216C4F9AE02.roa (raw, json) Hash identifier: MaJ3mgfA3wzHE3zmL/pUOI7mFDeVYi2KlEu9S29ZYYY= Subject key identifier: 22:4D:11:8C:FE:0F:8B:FB:00:EC:E3:75:81:0D:72:AB:8D:32:B5:97 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CC9 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF71D19AB94E11F0A3C60216C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:49:52 +0000 ROA not before: Tue 04 Nov 2025 07:22:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154298 IP address blocks: 138.252.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11465 (0x2cc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Nov 4 07:22:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c290-4865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ad:2b:43:d0:41:4d:05:10:4e:59:e2:64:2e: 37:a4:4b:33:18:70:35:43:65:5c:08:ad:12:cc:b8: 06:bf:1b:2d:f0:21:ef:18:c7:ce:b7:b1:c3:a7:7d: 1a:b0:1f:a1:2c:a3:5e:9b:93:4f:dd:d0:d4:f7:27: 5b:9e:b3:ab:12:b6:99:21:a3:96:81:49:48:04:00: 1f:ac:ef:fe:f9:77:67:31:10:52:80:f7:d3:51:5a: ec:2a:3c:de:04:b9:c6:32:32:be:34:1e:a1:17:e3: 70:51:e4:c5:7c:1f:c2:57:ee:ea:4d:c8:2b:74:ad: 68:b1:42:c7:06:07:91:4d:f9:b0:79:30:48:e9:6e: f0:47:fb:aa:22:9f:34:24:61:03:c9:21:23:4b:f9: 4b:fb:f2:3a:92:12:81:28:7d:83:ab:1e:eb:ba:9f: bc:e1:32:76:72:77:e1:0e:02:a8:3b:df:08:11:8a: 40:87:38:3e:85:cb:35:ba:59:fc:54:13:6f:7c:b8: 25:24:5f:04:5e:87:83:3a:4b:78:eb:28:38:14:32: c9:6a:57:2a:10:0f:0d:90:0c:b3:97:fb:56:8d:a4: 8e:de:bd:8b:d0:45:28:38:50:01:d2:db:72:94:e2: 98:82:eb:d9:7d:f6:33:ba:e7:50:65:e6:22:03:82: ce:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4D:11:8C:FE:0F:8B:FB:00:EC:E3:75:81:0D:72:AB:8D:32:B5:97 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF71D19AB94E11F0A3C60216C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.36.0/23 Signature Algorithm: sha256WithRSAEncryption ab:c7:e2:07:2e:bf:df:31:68:1e:fa:74:6d:8a:01:69:c9:43: 04:de:4d:06:ff:9c:34:1e:cd:d2:9a:36:16:3b:ee:8e:98:bb: 98:3a:88:a6:af:a3:7a:05:3f:d1:54:13:55:a5:c5:9b:01:25: 62:f1:65:dd:34:e0:4a:88:1c:17:90:00:1d:7f:72:cc:a3:3b: d1:ae:5d:dd:b3:ea:db:58:a9:83:11:1a:ac:03:b9:fc:79:c3: 5a:37:ca:4a:29:fc:a5:46:e0:fe:74:78:dd:8f:f7:e2:6f:4c: dd:91:b9:a1:4e:5e:f2:e4:61:12:71:af:de:bc:4a:d7:3a:af: 96:65:56:e2:ca:8b:af:a8:5b:bd:2b:09:82:15:eb:ef:7b:2c: 0e:79:0b:f3:4a:bb:f4:b3:16:19:e3:70:fb:c7:b5:29:b8:e9: c6:c3:10:9f:bf:92:f7:db:7c:9f:1e:52:b1:70:ed:9f:48:08: 9a:85:a1:d9:12:15:e6:61:5b:6f:94:6f:18:50:ae:76:30:1e: 12:87:ca:95:17:c2:68:ed:58:4e:f0:84:d6:0b:0a:83:de:1c: 00:86:97:45:ff:32:2f:f4:0a:21:c0:f3:65:f9:c5:b1:cd:71: f9:aa:3f:43:7e:b4:5d:75:c7:3d:cf:5c:cb:09:83:35:a5:a3: d3:3b:d8:b3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMTA0MDcyMjE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzI5MC00ODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA560rQ9BBTQUQTlniZC43pEszGHA1Q2VcCK0SzLgGvxst8CHvGMfOt7HDp30a sB+hLKNem5NP3dDU9ydbnrOrEraZIaOWgUlIBAAfrO/++XdnMRBSgPfTUVrsKjze BLnGMjK+NB6hF+NwUeTFfB/CV+7qTcgrdK1osULHBgeRTfmweTBI6W7wR/uqIp80 JGEDySEjS/lL+/I6khKBKH2Dqx7rup+84TJ2cnfhDgKoO98IEYpAhzg+hcs1uln8 VBNvfLglJF8EXoeDOkt46yg4FDLJalcqEA8NkAyzl/tWjaSO3r2L0EUoOFAB0tty lOKYguvZffYzuudQZeYiA4LOXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCJNEYz+ D4v7AOzjdYENcquNMrWXMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkY3MUQxOUFC OTRFMTFGMEEzQzYwMjE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivwkMA0GCSqGSIb3DQEBCwUAA4IBAQCrx+IHLr/fMWge+nRtigFp yUME3k0G/5w0Hs3SmjYWO+6OmLuYOoimr6N6BT/RVBNVpcWbASVi8WXdNOBKiBwX kAAdf3LMozvRrl3ds+rbWKmDERqsA7n8ecNaN8pKKfylRuD+dHjdj/fib0zdkbmh Tl7y5GESca/evErXOq+WZVbiyouvqFu9KwmCFevveywOeQvzSrv0sxYZ43D7x7Up uOnGwxCfv5L323yfHlKxcO2fSAiahaHZEhXmYVtvlG8YUK52MB4Sh8qVF8Jo7VhO 8ITWCwqD3hwAhpdF/zIv9AohwPNl+cWxzXH5qj9DfrRddcc9z1zLCYM1paPTO9iz -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:46 2026 by rpki-client