$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/21C6EACAE7B011F0A5419645536F56BC.roa File: 21C6EACAE7B011F0A5419645536F56BC.roa (raw, json) Hash identifier: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI= Subject key identifier: EC:0E:E2:B4:D9:D7:82:FC:65:31:4C:E8:48:D9:72:FF:5B:EF:64:45 Certificate issuer: /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Certificate serial: 22 Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/21C6EACAE7B011F0A5419645536F56BC.roa Signing time: Sun 01 Mar 2026 05:47:41 +0000 ROA not before: Fri 02 Jan 2026 07:53:31 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154358 IP address blocks: 138.252.188.0/23 maxlen: 23 138.252.188.0/24 maxlen: 24 138.252.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F Validity Not Before: Jan 2 07:53:31 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d2fc-9276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:cf:b1:79:30:b2:ee:f7:e3:d4:c0:b7:ab: 2f:82:57:1b:ac:ff:8b:47:9f:24:08:4f:33:ec:12: f9:87:85:f0:22:bd:92:56:a9:f8:a5:ae:2e:0d:30: c2:72:a0:92:2d:d3:8c:76:98:66:0e:94:ab:80:7b: 5f:89:0f:9d:76:ba:b5:13:25:bc:2b:7a:fd:ee:a6: 47:19:99:1b:cc:f3:3a:13:02:8f:6a:60:00:5a:2f: 3e:e7:26:b6:84:2f:a6:33:8b:7b:8a:6f:ac:e8:0f: 44:59:ec:ed:4f:73:d1:41:ea:8d:09:a5:d4:e2:3c: 19:3e:82:63:bc:7e:98:fb:2c:bb:9d:f9:9a:f7:1d: 39:30:3d:90:cd:e7:64:88:5f:dc:96:7c:3b:bd:a8: 01:40:c5:d3:f9:56:58:64:b8:79:ab:4a:1b:65:60: ee:6a:41:a6:2d:ca:d3:86:37:47:a5:f5:cf:75:85: 03:30:83:63:c4:ff:35:58:7b:d0:36:8c:fa:89:a8: c4:5b:3f:7b:f0:7e:a8:c8:a4:80:a5:8f:89:fa:d8: f3:15:b0:d2:39:4c:7c:ec:e6:a8:b6:fa:72:53:a4: ce:d1:47:68:36:c2:07:49:bf:15:aa:6e:39:38:cd: 23:9b:52:9a:2c:f7:38:da:12:c1:28:2d:80:6f:e9: 72:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0E:E2:B4:D9:D7:82:FC:65:31:4C:E8:48:D9:72:FF:5B:EF:64:45 X509v3 Authority Key Identifier: keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/21C6EACAE7B011F0A5419645536F56BC.roa sbgp-ipAddrBlock: critical IPv4: 138.252.188.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:b0:b9:80:e6:c7:1a:98:75:6d:c1:ca:9b:9b:7d:a0:5f:12: 74:e8:ae:43:f4:09:84:a6:cb:c9:aa:92:5d:ac:d6:7c:ef:0d: 4d:51:14:77:3e:8e:6c:f9:8e:6e:87:f6:04:25:64:75:df:89: d4:a9:72:cd:cb:8d:11:0f:c6:52:a9:89:c1:4a:25:14:d6:92: 05:d9:cf:6c:5b:5f:a6:2d:5f:90:29:83:17:57:fc:b2:be:e7: ba:3c:84:a4:f2:78:d0:32:25:63:cf:65:a7:f0:fc:5f:51:d2: ce:e1:74:81:a4:24:00:85:4c:3e:45:23:28:c4:23:a4:6f:1e: c4:07:5e:59:78:ac:78:64:dd:a0:24:f9:d7:a8:b7:93:13:75: d2:b7:26:fd:c7:b2:7b:ad:d8:2b:9d:a2:3d:13:4d:f6:57:50: d6:1a:94:54:6b:df:7d:66:2e:e9:91:4f:24:5f:bb:25:24:c7: 0e:56:29:62:b4:85:2b:aa:f4:ac:d8:e5:5d:c5:86:59:8a:19: 1e:31:21:f1:7c:b4:1d:2d:cc:11:11:d4:ae:c1:6a:4d:31:88: 00:cc:2d:63:76:e1:bb:c2:74:3c:0a:44:7a:63:89:f9:57:35: b4:ec:af:78:11:82:5c:2a:60:79:f2:ce:a1:7c:96:0d:d4:64: 26:01:ee:e6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RThGNjExMC8GA1UEBRMoQTFBQTJBMkM1NkU2NEE5RDlCQkFBMzM3QjZENkFCMzYx NzJEMzY4RjAeFw0yNjAxMDIwNzUzMzFaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMmZjLTkyNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh3s+xeTCy7vfj1MC3qy+CVxus/4tHnyQITzPsEvmHhfAivZJWqfilri4NMMJy oJIt04x2mGYOlKuAe1+JD512urUTJbwrev3upkcZmRvM8zoTAo9qYABaLz7nJraE L6Yzi3uKb6zoD0RZ7O1Pc9FB6o0JpdTiPBk+gmO8fpj7LLud+Zr3HTkwPZDN52SI X9yWfDu9qAFAxdP5VlhkuHmrShtlYO5qQaYtytOGN0el9c91hQMwg2PE/zVYe9A2 jPqJqMRbP3vwfqjIpIClj4n62PMVsNI5THzs5qi2+nJTpM7RR2g2wgdJvxWqbjk4 zSObUpos9zjaEsEoLYBv6XLNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU7A7itNnX gvxlMUzoSNly/1vvZEUwHwYDVR0jBBgwFoAUoaoqLFbmSp2buqM3ttarNhctNo8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFOEY2LzNENkQ4RkYwRTdB RjExRjA5QjA2QTM0MjUzNkY1NkJDL29hb3FMRmJtU3AyYnVxTTN0dGFyTmhjdE5v OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb2FvcUxGYm1TcDJidXFNM3R0YXJOaGN0Tm84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RThGNi8zRDZEOEZGMEU3QUYxMUYwOUIwNkEzNDI1MzZGNTZCQy8yMUM2RUFDQUU3 QjAxMUYwQTU0MTk2NDU1MzZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/LwwDQYJKoZIhvcNAQELBQADggEBAC+wuYDmxxqYdW3BypubfaBf EnTorkP0CYSmy8mqkl2s1nzvDU1RFHc+jmz5jm6H9gQlZHXfidSpcs3LjREPxlKp icFKJRTWkgXZz2xbX6YtX5ApgxdX/LK+57o8hKTyeNAyJWPPZafw/F9R0s7hdIGk JACFTD5FIyjEI6RvHsQHXll4rHhk3aAk+deot5MTddK3Jv3Hsnut2Cudoj0TTfZX UNYalFRr331mLumRTyRfuyUkxw5WKWK0hSuq9KzY5V3FhlmKGR4xIfF8tB0tzBER 1K7Bak0xiADMLWN24bvCdDwKRHpjiflXNbTsr3gRglwqYHnyzqF8lg3UZCYB7uY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:49:40 2026 by rpki-client