$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF71D19AB94E11F0A3C60216C4F9AE02.roa File: FF71D19AB94E11F0A3C60216C4F9AE02.roa (raw, json) Hash identifier: Sse61sioZxbozf5+4xiLl4CWoXPcQqAmyyQCESpOOw4= Subject key identifier: BA:89:F2:18:2C:84:9F:64:A4:01:23:09:B2:6C:93:01:CB:14:C7:27 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1FDE Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF71D19AB94E11F0A3C60216C4F9AE02.roa Signing time: Tue 04 Nov 2025 07:22:19 +0000 ROA not before: Tue 04 Nov 2025 07:22:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154298 IP address blocks: 138.252.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8158 (0x1fde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Nov 4 07:22:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6909a9ab-f61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:dc:02:57:3e:c6:98:ff:3e:70:0c:bc:29: 10:34:a7:32:0a:5e:a7:8d:15:1b:48:50:af:96:96: 7a:e2:56:5f:62:2b:4d:4c:d4:27:16:7c:2b:c2:ab: 49:de:95:c9:99:e3:79:42:5b:77:52:a6:8d:3c:e2: eb:2a:e8:7f:f1:a1:c3:d5:dd:12:50:0d:e5:a4:c9: 9f:69:89:ad:d1:35:82:c5:e6:e6:61:4c:84:80:89: 93:11:00:24:6b:68:25:50:ae:71:7f:8a:be:ad:d2: 0d:94:0c:4e:8d:68:64:7b:51:06:5b:e5:e4:6f:e9: cf:d6:24:4b:e8:0d:54:0a:f6:09:74:be:52:7f:35: d8:80:56:2d:71:32:26:e9:58:5e:80:95:9e:eb:b1: 3a:41:12:5f:7f:ef:48:40:6c:48:27:82:c3:fa:1c: 77:2e:a2:8d:62:4f:0b:f7:23:9f:28:6c:d8:8b:67: 04:bd:86:ea:38:dd:fe:21:76:89:55:7a:c7:34:c2: 72:31:c3:1e:87:9f:33:d1:57:ea:40:ea:ce:78:22: 0e:82:16:34:0f:71:c1:c4:2a:f9:34:0f:8a:83:fe: f9:85:03:9e:21:76:3c:ea:b1:a7:0d:1f:c0:90:a9: 7b:27:ee:9e:fd:13:49:59:a8:54:f7:2a:1f:7d:0b: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:89:F2:18:2C:84:9F:64:A4:01:23:09:B2:6C:93:01:CB:14:C7:27 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF71D19AB94E11F0A3C60216C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.36.0/23 Signature Algorithm: sha256WithRSAEncryption ac:16:ef:18:40:9e:bb:e9:64:45:1a:a1:d9:62:ea:cb:05:25: f1:29:5e:ad:16:a0:c1:ee:9a:d2:bc:0d:e8:de:08:36:75:1c: ee:28:8d:af:1b:91:7b:e0:e4:22:bb:39:18:2a:30:75:6a:49: 5c:d8:60:bc:99:02:c0:df:97:12:20:b0:6f:8f:e5:75:44:d5: ee:22:47:37:16:41:4a:aa:99:52:80:d7:c0:53:19:a3:bb:b5: 32:f6:17:7b:2c:b1:30:82:b3:8b:1c:72:f7:b5:43:83:a2:ee: 00:97:38:0c:dc:06:03:b5:1a:cc:ef:92:07:38:c2:92:02:f5: 1e:6b:f9:c2:3d:0c:ca:64:83:60:37:c1:71:be:23:3a:6f:42: 41:22:79:56:c0:7f:c8:87:4d:8c:48:53:4b:5c:51:fe:be:2b: 46:f1:30:08:1d:47:f2:e9:77:b7:b4:33:1a:d2:0d:37:0e:1b: 10:cd:b5:af:da:9f:44:fb:53:d8:6d:70:ae:24:83:d5:a7:35: 31:69:22:5c:37:1d:32:21:e3:d0:9c:03:55:a4:f9:c3:a3:9d: 0d:6b:bf:18:3b:40:c4:73:ee:f5:4d:1a:8d:b5:86:64:44:c7: b9:93:37:dc:52:7f:6f:a8:1c:6e:77:4f:5e:7f:65:e2:52:81: 80:27:e8:25 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICH94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMTA0MDcyMjE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA5YTlhYi1mNjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzrcAlc+xpj/PnAMvCkQNKcyCl6njRUbSFCvlpZ64lZfYitNTNQnFnwrwqtJ 3pXJmeN5Qlt3UqaNPOLrKuh/8aHD1d0SUA3lpMmfaYmt0TWCxebmYUyEgImTEQAk a2glUK5xf4q+rdINlAxOjWhke1EGW+Xkb+nP1iRL6A1UCvYJdL5SfzXYgFYtcTIm 6VhegJWe67E6QRJff+9IQGxIJ4LD+hx3LqKNYk8L9yOfKGzYi2cEvYbqON3+IXaJ VXrHNMJyMcMeh58z0VfqQOrOeCIOghY0D3HBxCr5NA+Kg/75hQOeIXY86rGnDR/A kKl7J+6e/RNJWahU9yoffQtnCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLqJ8hgs hJ9kpAEjCbJskwHLFMcnMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkY3MUQxOUFC OTRFMTFGMEEzQzYwMjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGK/CQwDQYJKoZIhvcNAQELBQADggEBAKwW7xhAnrvpZEUa odli6ssFJfEpXq0WoMHumtK8DejeCDZ1HO4oja8bkXvg5CK7ORgqMHVqSVzYYLyZ AsDflxIgsG+P5XVE1e4iRzcWQUqqmVKA18BTGaO7tTL2F3sssTCCs4sccve1Q4Oi 7gCXOAzcBgO1Gszvkgc4wpIC9R5r+cI9DMpkg2A3wXG+IzpvQkEieVbAf8iHTYxI U0tcUf6+K0bxMAgdR/Lpd7e0MxrSDTcOGxDNta/an0T7U9htcK4kg9WnNTFpIlw3 HTIh49CcA1Wk+cOjnQ1rvxg7QMRz7vVNGo21hmREx7mTN9xSf2+oHG53T15/ZeJS gYAn6CU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:13:25 2025 by rpki-client