$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/F11E4CE6B71811F0B6A0AF50C4F9AE02.roa File: F11E4CE6B71811F0B6A0AF50C4F9AE02.roa (raw, json) Hash identifier: aSB5R0pvuuGdI7d439VW6wudQzDHEJHApfR7PJGS060= Subject key identifier: 3B:C1:E7:B2:BE:36:E7:2B:37:42:87:74:EB:FA:5A:31:80:29:15:CC Certificate issuer: /CN=A9131CF4/serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C Certificate serial: 02 Authority key identifier: 69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/F11E4CE6B71811F0B6A0AF50C4F9AE02.roa Signing time: Sat 01 Nov 2025 11:50:20 +0000 ROA not before: Sat 01 Nov 2025 11:50:20 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 140962 IP address blocks: 138.252.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131CF4, serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C Validity Not Before: Nov 1 11:50:20 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6905f3fc-41c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:33:a6:24:8d:d6:b8:7e:58:56:78:05:65: 42:42:95:47:d9:17:cd:86:21:d1:25:62:02:17:f3: e4:ed:95:92:11:c7:09:a4:06:2d:b9:ee:97:2a:d2: 66:69:94:d1:f3:e7:14:6b:ce:d3:46:46:c2:43:24: e3:03:2a:d5:46:c8:0f:7c:0f:6f:ce:c7:28:83:17: f3:f3:c1:91:4e:02:7e:48:e1:e2:ee:d7:48:84:ee: 38:2b:e8:cd:dc:d5:65:20:a4:eb:57:e4:ec:c1:e5: 26:19:ef:ca:96:38:4e:e2:7b:26:aa:fa:97:da:e0: 95:7b:eb:92:dd:93:e1:64:71:42:10:36:5d:9c:02: 0b:b2:76:ef:16:36:d8:9e:00:3c:10:37:95:3c:4b: 69:6c:87:ce:15:5f:ac:3c:d3:73:66:0f:a4:59:4a: 32:42:85:fa:04:97:9e:94:b2:8a:55:f7:51:dd:22: 2d:7e:23:7f:91:5f:ca:7c:9d:f7:fd:9c:37:41:a2: ee:ab:86:28:81:ab:36:fb:46:e9:a4:c1:e7:a1:39: 5b:ad:53:68:06:05:db:8d:2d:4f:29:13:b7:74:19: 09:65:fa:c5:eb:44:a1:18:df:2c:03:0c:2a:2b:24: b9:a4:44:80:97:a0:72:40:6e:1a:96:60:18:43:12: 2a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C1:E7:B2:BE:36:E7:2B:37:42:87:74:EB:FA:5A:31:80:29:15:CC X509v3 Authority Key Identifier: keyid:69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/F11E4CE6B71811F0B6A0AF50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.59.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:ef:01:66:01:af:36:2b:7f:da:2b:77:f4:34:eb:e5:fb:7c: c1:3d:b9:2b:81:42:24:d1:7f:35:02:b1:f6:be:e1:26:2c:04: 4d:2a:d0:47:de:bc:43:c7:0b:e5:42:1b:0b:1b:ed:39:1c:4f: 9d:e3:b0:b7:68:77:4c:d2:bc:55:2e:b1:80:14:75:84:56:ca: bb:f8:f6:46:ce:20:5a:ac:75:37:43:1c:b3:e1:42:19:d1:b4: b2:a6:e5:6d:c1:ca:3b:29:dc:cb:e4:80:88:21:d8:29:54:8b: d9:24:37:95:e8:7d:22:75:36:ec:c8:24:df:11:04:8a:7e:5c: 9b:d8:4d:fd:4d:85:60:e1:68:f9:ed:59:7a:69:bd:36:af:37: b6:c4:d7:6c:77:50:21:e4:47:6b:e7:de:80:67:37:d6:46:b3: f4:be:cb:2e:1c:3f:0b:c3:55:c9:ed:58:a0:5b:aa:10:69:4a: 3a:3f:c1:d9:6c:19:c2:e4:0c:19:9e:2c:15:08:96:20:0d:18: 96:f3:0a:0a:eb:0f:24:7a:ac:ce:ae:51:2c:d0:4a:68:d0:e8: d5:1d:fc:a8:4a:61:46:4c:1e:c5:84:0f:1a:62:60:99:90:8e: 17:1e:1d:5c:bc:16:38:4c:55:df:28:c5:2f:ad:85:74:fb:5a: 96:ae:f0:aa -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUNGNDExMC8GA1UEBRMoNjlFQ0YwRTJBMUVEOEYwNUNDMjc4QjNFMTNGNjYyRUQw QjM1NDg4QzAeFw0yNTExMDExMTUwMjBaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDVmM2ZjLTQxYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKvDOmJI3WuH5YVngFZUJClUfZF82GIdElYgIX8+TtlZIRxwmkBi257pcq0mZp lNHz5xRrztNGRsJDJOMDKtVGyA98D2/OxyiDF/PzwZFOAn5I4eLu10iE7jgr6M3c 1WUgpOtX5OzB5SYZ78qWOE7ieyaq+pfa4JV765Ldk+FkcUIQNl2cAguydu8WNtie ADwQN5U8S2lsh84VX6w803NmD6RZSjJChfoEl56UsopV91HdIi1+I3+RX8p8nff9 nDdBou6rhiiBqzb7RumkweehOVutU2gGBduNLU8pE7d0GQll+sXrRKEY3ywDDCor JLmkRICXoHJAbhqWYBhDEio5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUO8Hnsr42 5ys3Qod06/paMYApFcwwHwYDVR0jBBgwFoAUaezw4qHtjwXMJ4s+E/Zi7Qs1SIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQ0Y0LzNFQTYzOEM4Qjcx MTExRjBBNUMyODA3M0M0RjlBRTAyL2Flenc0cUh0andYTUo0cy1FX1ppN1FzMVNJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYWV6dzRxSHRqd1hNSjRzLUVfWmk3UXMxU0l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUNGNC8zRUE2MzhDOEI3MTExMUYwQTVDMjgwNzNDNEY5QUUwMi9GMTFFNENFNkI3 MTgxMUYwQjZBMEFGNTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIr8OzANBgkqhkiG9w0BAQsFAAOCAQEAje8BZgGvNit/2it3 9DTr5ft8wT25K4FCJNF/NQKx9r7hJiwETSrQR968Q8cL5UIbCxvtORxPneOwt2h3 TNK8VS6xgBR1hFbKu/j2Rs4gWqx1N0Mcs+FCGdG0sqblbcHKOyncy+SAiCHYKVSL 2SQ3leh9InU27Mgk3xEEin5cm9hN/U2FYOFo+e1Zemm9Nq83tsTXbHdQIeRHa+fe gGc31kaz9L7LLhw/C8NVye1YoFuqEGlKOj/B2WwZwuQMGZ4sFQiWIA0YlvMKCusP JHqszq5RLNBKaNDo1R38qEphRkwexYQPGmJgmZCOFx4dXLwWOExV3yjFL62FdPta lq7wqg== -----END CERTIFICATE-----Generated at Wed Nov 5 12:58:18 2025 by rpki-client