$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa File: CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa (raw, json) Hash identifier: pzoy5b4jAK7WNQHs94s/PsJ8rZ83uQ8ezld7Xwjun4g= Subject key identifier: 1B:8D:15:A6:E4:E2:B6:50:07:2E:23:19:A4:EE:07:5E:44:05:60:DD Certificate issuer: /CN=A9142187/serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9 Certificate serial: 38 Authority key identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:59:52 +0000 ROA not before: Tue 25 Nov 2025 23:52:29 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139649 IP address blocks: 138.252.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142187, serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9 Validity Not Before: Nov 25 23:52:29 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a597d8-2c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:ef:6f:d6:1c:64:6b:a6:77:3c:9d:8d:80: 3f:43:ba:04:7e:5d:03:ad:fa:8e:9b:e3:c1:a3:15: 88:43:7e:90:1f:b7:da:3e:7e:9f:c9:bc:ad:e9:fc: d0:e6:00:60:c8:95:03:d7:87:ef:cf:f3:72:f1:e2: 54:52:a7:a7:00:94:84:55:af:12:5a:10:06:3a:23: dd:92:75:23:d3:c4:42:64:63:9c:ae:f7:56:69:7c: 21:97:b1:0d:29:88:42:c5:ee:9b:8b:93:73:2c:f6: 1e:17:41:7e:41:a5:c5:51:ee:0a:c9:65:7c:7e:c0: 9a:c0:b9:83:d6:24:4a:1a:ce:bd:f7:59:d6:5f:4e: 52:a2:ed:ad:a3:d5:0a:45:76:7d:df:94:b4:76:94: 05:18:45:00:50:ff:20:1e:cd:7a:2f:be:e4:85:eb: c6:bc:4d:91:3e:43:de:e7:7f:f1:c1:48:c7:38:bf: 5b:1f:0f:4a:e1:cd:20:47:14:57:f1:f2:35:35:01: f0:72:c1:a4:cf:cf:3b:b8:1b:9f:6e:a8:b7:3c:29: 67:84:ad:c4:49:ee:92:8a:33:1f:da:24:13:13:04: ca:fe:09:b4:10:7d:e1:4c:53:41:30:e9:d3:e7:db: 7b:a5:81:36:d6:1e:e1:b5:17:de:f2:07:3b:b0:d6: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8D:15:A6:E4:E2:B6:50:07:2E:23:19:A4:EE:07:5E:44:05:60:DD X509v3 Authority Key Identifier: keyid:D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/CCDDC90CCA5911F0B5ABC06CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.126.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:6f:1f:ad:cc:54:3b:de:18:b7:3e:5d:0f:04:47:d0:ca:e1: 05:dd:f2:51:2d:de:db:8d:0f:d6:dc:53:24:fa:4c:44:a1:12: 93:6d:c0:5e:26:44:9d:df:17:03:a4:c6:27:21:0a:52:ba:93: d7:f0:cf:5f:5e:3d:82:ee:00:80:73:51:33:e3:d1:f5:ed:b3: 39:82:62:d6:ca:05:a3:4f:24:87:25:18:ce:34:cf:eb:4e:3b: f1:2d:cc:c3:45:bd:a9:90:57:1d:6e:09:82:10:ed:43:8e:a5: 4f:bb:35:77:b2:e1:3e:fb:0e:37:86:7f:0a:37:9f:8f:d3:54: 88:14:f4:b3:0e:14:a9:c1:08:18:98:85:36:38:d3:c8:39:c1: 1e:aa:13:e4:43:f6:83:f3:37:54:5b:af:df:d3:10:39:35:50: 09:be:8f:35:f1:f8:99:0f:97:87:cc:01:50:7f:dd:a5:39:b8: a7:70:2f:c1:ea:d4:eb:38:79:b2:ae:6a:b8:1c:dc:79:2e:64: 6f:b7:80:2d:a2:0c:64:c7:a2:13:67:26:a8:5c:b9:07:c9:3c: 26:9a:a8:74:c2:db:90:07:30:b0:8c:e6:4b:d3:9d:65:19:eb: c8:45:d1:cc:00:74:7b:45:d3:bb:d8:81:98:44:cd:46:b3:63: de:dc:a2:72 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjE4NzExMC8GA1UEBRMoRDBDQzA5OEVCQjk2REY2RDFDNUMyOEVFOUI1NUYwQTlC ODI5RkRBOTAeFw0yNTExMjUyMzUyMjlaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU5N2Q4LTJjNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC83e9v1hxka6Z3PJ2NgD9DugR+XQOt+o6b48GjFYhDfpAft9o+fp/JvK3p/NDm AGDIlQPXh+/P83Lx4lRSp6cAlIRVrxJaEAY6I92SdSPTxEJkY5yu91ZpfCGXsQ0p iELF7puLk3Ms9h4XQX5BpcVR7grJZXx+wJrAuYPWJEoazr33WdZfTlKi7a2j1QpF dn3flLR2lAUYRQBQ/yAezXovvuSF68a8TZE+Q97nf/HBSMc4v1sfD0rhzSBHFFfx 8jU1AfBywaTPzzu4G59uqLc8KWeErcRJ7pKKMx/aJBMTBMr+CbQQfeFMU0Ew6dPn 23ulgTbWHuG1F97yBzuw1txxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUG40VpuTi tlAHLiMZpO4HXkQFYN0wHwYDVR0jBBgwFoAU0MwJjruW320cXCjum1Xwqbgp/akw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzMwM0U3NzJDQ0E1 OTExRjA4Mzk5ODQ2QkM0RjlBRTAyLzBNd0pqcnVXMzIwY1hDanVtMVh3cWJncF9h ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvME13SmpydVczMjBjWENqdW0xWHdxYmdwX2FrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjE4Ny8zMDNFNzcyQ0NBNTkxMUYwODM5OTg0NkJDNEY5QUUwMi9DQ0REQzkwQ0NB NTkxMUYwQjVBQkMwNkNDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/H4wDQYJKoZIhvcNAQELBQADggEBAIpvH63MVDveGLc+XQ8ER9DK 4QXd8lEt3tuND9bcUyT6TEShEpNtwF4mRJ3fFwOkxichClK6k9fwz19ePYLuAIBz UTPj0fXtszmCYtbKBaNPJIclGM40z+tOO/EtzMNFvamQVx1uCYIQ7UOOpU+7NXey 4T77DjeGfwo3n4/TVIgU9LMOFKnBCBiYhTY408g5wR6qE+RD9oPzN1Rbr9/TEDk1 UAm+jzXx+JkPl4fMAVB/3aU5uKdwL8Hq1Os4ebKuargc3HkuZG+3gC2iDGTHohNn JqhcuQfJPCaaqHTC25AHMLCM5kvTnWUZ68hF0cwAdHtF07vYgZhEzUazY97conI= -----END CERTIFICATE-----Generated at Mon Mar 2 20:55:54 2026 by rpki-client