$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/FE68D63A156B11F1B9AA1492393D8C67.roa File: FE68D63A156B11F1B9AA1492393D8C67.roa (raw, json) Hash identifier: mtMWlsAIdr5mwCsmbmpFSLhMEDfGKHPUCmKxgSWYGI4= Subject key identifier: 94:BB:3F:58:D8:88:D1:98:75:32:51:B4:30:AB:ED:21:DB:D9:92:B0 Certificate issuer: /CN=A9116297/serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Certificate serial: 3C Authority key identifier: 4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/FE68D63A156B11F1B9AA1492393D8C67.roa Signing time: Sun 01 Mar 2026 12:41:40 +0000 ROA not before: Sun 01 Mar 2026 12:41:40 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 46559 IP address blocks: 138.252.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 13:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116297, serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Validity Not Before: Mar 1 12:41:40 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43404-7f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:0b:64:6d:60:09:52:2b:31:dc:7b:f6:9e: 91:ba:6b:38:21:20:5f:59:14:f3:ae:6f:9d:04:1d: 83:93:17:f3:2b:49:cf:7d:34:c9:22:a2:36:0e:45: 88:a0:ad:5e:b5:22:c3:16:79:78:7a:4a:bb:49:c1: 28:7d:05:34:4c:f2:30:9b:cf:c9:53:51:4d:05:46: 4c:52:42:62:50:1d:38:b6:be:44:0e:a2:0a:79:9f: 17:fb:fd:62:65:58:e6:63:8d:30:3f:48:50:aa:b9: 99:c2:2f:1a:03:74:23:34:29:47:73:ec:d7:4f:77: 34:30:c1:69:00:0b:4a:02:5a:88:c4:e4:27:3c:0b: dd:5b:57:fb:d7:9f:da:8f:07:9b:d9:c3:78:b4:e6: 59:63:e0:56:86:4a:43:1a:b5:5a:52:56:d4:70:4f: d6:4b:2d:5d:d1:d6:7c:c9:92:9a:31:80:b7:a3:cf: 80:0b:8b:41:2a:89:b0:e6:f3:1b:aa:30:13:8e:6c: 66:55:56:40:65:ce:3f:ce:ca:1e:24:58:8f:07:91: 9a:1c:3d:37:b7:d1:a9:d2:42:73:d8:69:e0:ce:e2: 40:ac:13:35:fc:10:e1:07:93:5a:71:76:38:6e:6d: 84:ec:a1:bc:8e:1f:0e:2f:b6:be:d1:f1:ce:b6:c8: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BB:3F:58:D8:88:D1:98:75:32:51:B4:30:AB:ED:21:DB:D9:92:B0 X509v3 Authority Key Identifier: keyid:4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/FE68D63A156B11F1B9AA1492393D8C67.roa sbgp-ipAddrBlock: critical IPv4: 138.252.196.0/23 Signature Algorithm: sha256WithRSAEncryption 49:cd:aa:1b:db:b6:a0:be:0b:be:27:4d:5c:7b:df:f5:8f:79: 5b:fa:8c:b9:ab:17:c2:eb:49:51:97:4a:e7:6c:2e:8d:43:3d: e4:ae:c3:49:a3:fd:ba:46:67:22:8e:40:c0:bb:f5:4c:d3:24: 08:b2:12:c0:47:80:05:8d:56:c9:3e:14:81:34:79:09:19:ed: 7b:13:ed:4f:98:1a:68:b1:91:2e:e2:6f:0d:e9:5f:31:21:92: c3:da:a4:b0:4c:3d:c9:2f:37:f4:f6:e4:35:37:c2:dd:3e:a9: 42:08:e4:f7:8f:e5:04:8b:fc:29:35:06:80:30:7a:26:eb:77: 29:8a:ad:e6:55:6a:dd:48:33:1d:79:ca:dc:ca:6a:a6:6d:46: 6d:0a:04:3f:c0:c4:ae:01:f0:b6:2c:5e:f8:eb:35:85:30:d0: 99:72:ec:23:fe:94:81:b8:0a:77:a0:dc:b8:b8:7e:8b:ee:de: 0f:f6:fc:53:a1:ce:1c:54:1d:63:aa:64:a6:16:47:f6:58:91: aa:3e:d7:7d:40:b6:eb:58:e9:96:a8:7b:d2:ec:31:c5:50:b8: 41:dd:17:7d:c2:54:bd:b5:6a:8d:4a:b7:4e:89:cc:a0:dc:2c: 02:96:76:fe:c6:4c:c9:db:b7:ae:d0:69:95:81:42:5d:a2:86: 0a:86:cb:15 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjI5NzExMC8GA1UEBRMoNEM4RjJCNDQ0MzNBQjQ2NEE3MTRBRDhEMzlBOEYxNkU0 QzUwMEE3QzAeFw0yNjAzMDExMjQxNDBaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQzNDA0LTdmOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwAAtkbWAJUisx3Hv2npG6azghIF9ZFPOub50EHYOTF/MrSc99NMkiojYORYig rV61IsMWeXh6SrtJwSh9BTRM8jCbz8lTUU0FRkxSQmJQHTi2vkQOogp5nxf7/WJl WOZjjTA/SFCquZnCLxoDdCM0KUdz7NdPdzQwwWkAC0oCWojE5Cc8C91bV/vXn9qP B5vZw3i05llj4FaGSkMatVpSVtRwT9ZLLV3R1nzJkpoxgLejz4ALi0EqibDm8xuq MBOObGZVVkBlzj/Oyh4kWI8HkZocPTe30anSQnPYaeDO4kCsEzX8EOEHk1pxdjhu bYTsobyOHw4vtr7R8c62yHjxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUlLs/WNiI 0Zh1MlG0MKvtIdvZkrAwHwYDVR0jBBgwFoAUTI8rREM6tGSnFK2NOajxbkxQCnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2Mjk3LzZBNThBRDhFQzVD QjExRjA4NUE5QkM1OEM0RjlBRTAyL1RJOHJSRU02dEdTbkZLMk5PYWp4Ymt4UUNu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEk4clJFTTZ0R1NuRksyTk9hanhia3hRQ253LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjI5Ny82QTU4QUQ4RUM1Q0IxMUYwODVBOUJDNThDNEY5QUUwMi9GRTY4RDYzQTE1 NkIxMUYxQjlBQTE0OTIzOTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/MQwDQYJKoZIhvcNAQELBQADggEBAEnNqhvbtqC+C74nTVx73/WP eVv6jLmrF8LrSVGXSudsLo1DPeSuw0mj/bpGZyKOQMC79UzTJAiyEsBHgAWNVsk+ FIE0eQkZ7XsT7U+YGmixkS7ibw3pXzEhksPapLBMPckvN/T25DU3wt0+qUII5PeP 5QSL/Ck1BoAweibrdymKreZVat1IMx15ytzKaqZtRm0KBD/AxK4B8LYsXvjrNYUw 0Jly7CP+lIG4Cneg3Li4fovu3g/2/FOhzhxUHWOqZKYWR/ZYkao+131AtutY6Zao e9LsMcVQuEHdF33CVL21ao1Kt06JzKDcLAKWdv7GTMnbt67QaZWBQl2ihgqGyxU= -----END CERTIFICATE-----Generated at Mon Mar 2 09:03:01 2026 by rpki-client