$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/F0F521DEC10B11F0B1AC197FC4F9AE02.roa File: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (raw, json) Hash identifier: GOuUl8j+KrJKN/gcw/cqwqcTvAUg8ALJCq8KS5t0JeI= Subject key identifier: 19:36:2D:24:7A:FE:D8:4F:78:9A:F0:C0:E2:A4:71:77:C8:F4:B9:C8 Certificate issuer: /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Certificate serial: 40 Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/F0F521DEC10B11F0B1AC197FC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:07:56 +0000 ROA not before: Fri 14 Nov 2025 07:51:56 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154364 IP address blocks: 138.252.206.0/23 maxlen: 23 138.252.206.0/24 maxlen: 24 138.252.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Validity Not Before: Nov 14 07:51:56 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d7bc-4701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:dc:30:58:f1:9c:92:10:16:d8:e8:b1:c7: 28:28:ba:07:f1:86:ce:84:10:0d:dd:46:47:b3:cb: 65:a6:fa:0a:e8:42:b3:b5:0e:a8:bd:5d:17:64:fd: 21:33:97:a6:2d:8d:7c:96:b4:19:6c:5f:c2:d9:f6: 47:7d:69:5f:55:93:5f:78:57:32:51:7f:05:e2:86: d6:c5:3e:43:7e:e8:3c:b5:18:d6:36:29:d2:f4:db: dd:f9:27:d2:87:0c:03:cf:a7:d3:bc:e9:ee:c7:c3: 24:0b:4c:a5:95:1a:49:c4:61:dc:69:8a:20:c8:06: 3f:b0:32:37:58:19:fb:71:77:8a:a5:02:03:23:3a: 45:ec:5a:3f:0b:6c:59:7a:c6:fb:4b:55:45:c5:43: ed:a4:c3:06:59:5a:a4:1e:a2:9f:02:13:19:66:68: 5e:97:4b:4d:27:b0:84:7e:cc:43:33:0b:28:03:50: e7:8b:6d:9f:c2:fb:9e:3a:19:6c:94:c1:12:8f:80: a0:0f:67:31:87:85:20:a3:91:74:39:1c:0e:00:ea: c2:7a:b0:af:5f:71:df:2a:09:9e:cd:53:5f:68:f3: a2:fb:28:22:17:7f:c4:6e:2f:29:70:cc:9c:4d:08: e8:b8:84:4d:20:b3:15:20:4a:46:e4:3d:64:f1:72: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:36:2D:24:7A:FE:D8:4F:78:9A:F0:C0:E2:A4:71:77:C8:F4:B9:C8 X509v3 Authority Key Identifier: keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/F0F521DEC10B11F0B1AC197FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.206.0/23 Signature Algorithm: sha256WithRSAEncryption 38:9a:cd:c9:95:df:4c:c9:de:f3:6b:c7:da:5f:e5:43:dd:1d: 49:00:79:55:b8:1b:d7:0c:e6:00:95:16:32:62:0a:c0:54:a3: ee:5e:e6:a5:47:d1:d3:9d:48:c9:f3:22:6a:b2:1f:a8:ae:9e: 86:e4:24:08:48:c6:33:d3:4c:55:a1:96:b1:91:b3:5a:1f:a5: 56:aa:0c:4b:84:21:6a:ed:54:92:f1:da:1f:c4:30:fb:f6:26: dd:19:aa:46:39:45:fa:fd:b6:28:0a:75:ef:bf:8b:58:9f:7f: 19:e8:09:35:01:da:c4:24:f7:c5:d3:f3:1c:a1:4d:f3:2c:ec: 39:e6:a0:24:db:f6:b8:53:32:1a:0c:16:20:aa:07:3f:96:9c: 1c:e6:4d:21:cd:73:e1:0a:8d:83:6b:e8:a8:92:2c:89:a8:42: cc:20:fe:74:0e:10:f5:ba:6e:b9:9e:e8:b9:be:1c:4f:62:50: 00:c6:2c:34:dc:d6:21:65:a9:2f:5f:7e:f0:66:24:2b:cd:14: dc:c3:f9:6a:d9:f1:ce:f7:48:11:71:10:c2:39:cc:61:03:cd: c7:bf:c7:45:1f:76:cc:37:1e:03:55:da:63:e8:be:96:b5:cb: 02:4e:d7:77:54:2d:91:18:3d:b5:87:e7:4b:81:28:5b:1e:d9: 5e:09:df:ba -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTJEMTExMC8GA1UEBRMoN0QzNTg1MjgzREYzM0VCNTBCOUMzODhENTlDRDc4NkNC QjlEQzM5RTAeFw0yNTExMTQwNzUxNTZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkN2JjLTQ3MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy7NwwWPGckhAW2Oixxygougfxhs6EEA3dRkezy2Wm+groQrO1Dqi9XRdk/SEz l6YtjXyWtBlsX8LZ9kd9aV9Vk194VzJRfwXihtbFPkN+6Dy1GNY2KdL02935J9KH DAPPp9O86e7HwyQLTKWVGknEYdxpiiDIBj+wMjdYGftxd4qlAgMjOkXsWj8LbFl6 xvtLVUXFQ+2kwwZZWqQeop8CExlmaF6XS00nsIR+zEMzCygDUOeLbZ/C+546GWyU wRKPgKAPZzGHhSCjkXQ5HA4A6sJ6sK9fcd8qCZ7NU19o86L7KCIXf8RuLylwzJxN COi4hE0gsxUgSkbkPWTxcttNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUGTYtJHr+ 2E94mvDA4qRxd8j0ucgwHwYDVR0jBBgwFoAUfTWFKD3zPrULnDiNWc14bLudw54w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1MkQxLzY0QTVBQjg0QzBF QTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJVTG5EaU5XYzE0Ykx1ZHc1 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZlRXRktEM3pQclVMbkRpTldjMTRiTHVkdzU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTJEMS82NEE1QUI4NEMwRUExMUYwOUJBOURCNzRDNEY5QUUwMi9GMEY1MjFERUMx MEIxMUYwQjFBQzE5N0ZDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/M4wDQYJKoZIhvcNAQELBQADggEBADiazcmV30zJ3vNrx9pf5UPd HUkAeVW4G9cM5gCVFjJiCsBUo+5e5qVH0dOdSMnzImqyH6iunobkJAhIxjPTTFWh lrGRs1ofpVaqDEuEIWrtVJLx2h/EMPv2Jt0ZqkY5Rfr9tigKde+/i1iffxnoCTUB 2sQk98XT8xyhTfMs7DnmoCTb9rhTMhoMFiCqBz+WnBzmTSHNc+EKjYNr6KiSLImo Qswg/nQOEPW6brme6Lm+HE9iUADGLDTc1iFlqS9ffvBmJCvNFNzD+WrZ8c73SBFx EMI5zGEDzce/x0Ufdsw3HgNV2mPovpa1ywJO13dULZEYPbWH50uBKFse2V4J37o= -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:02 2026 by rpki-client