$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/224FBC52EFCF11F0A018F59D746F56BC.roa File: 224FBC52EFCF11F0A018F59D746F56BC.roa (raw, json) Hash identifier: l6zP7eAxKoViI6F3M9uDYfZY33CWARrIielkD1703l4= Subject key identifier: DB:1A:D4:8A:EE:CF:AA:71:AD:41:8E:21:74:9E:5E:DB:A3:3F:36:61 Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: 7E Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/224FBC52EFCF11F0A018F59D746F56BC.roa Signing time: Sun 01 Mar 2026 11:20:41 +0000 ROA not before: Mon 12 Jan 2026 15:55:36 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154071 IP address blocks: 165.101.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Jan 12 15:55:36 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a42108-ba9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:33:c3:b1:77:f3:51:15:bd:6e:8f:d3:3b: 47:dc:32:48:d2:85:75:bb:cf:ba:61:9b:22:56:53: 68:84:21:fb:f0:01:75:74:47:bf:f9:49:ce:dc:76: ed:73:7c:ed:62:68:72:91:4e:1e:bc:c3:5e:11:c4: 24:7e:89:1d:b3:be:ea:82:44:d4:82:7c:b2:33:0a: bd:f2:87:b4:b1:5a:ed:92:05:2c:fe:60:5c:83:1a: 91:73:ca:03:1b:58:2f:7b:ce:44:ef:a3:94:08:6e: 53:c9:84:23:81:6c:33:90:47:92:37:89:e6:a1:59: 85:d7:31:48:2d:59:4b:72:ff:b9:1d:68:38:35:cd: ac:7f:3a:fd:c0:5e:4c:89:20:ec:81:8f:b8:4f:23: 17:dc:14:a4:12:6f:30:3e:17:8d:37:ad:72:c4:00: d4:4c:34:d0:5a:6a:a4:b4:10:9b:8a:b9:89:1c:93: 59:d4:e8:02:1c:75:2b:5f:73:7d:60:44:d1:36:4d: 6b:d4:22:c8:d1:1e:1e:54:ce:45:c6:f0:25:cb:5f: 79:e1:23:c6:cc:d0:91:d1:4e:20:6d:d0:55:75:b9: 99:92:e8:07:75:75:5b:5e:05:16:06:47:a0:cd:83: 04:43:da:46:05:8b:cd:a2:6d:fd:46:7b:a9:2b:56: 74:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1A:D4:8A:EE:CF:AA:71:AD:41:8E:21:74:9E:5E:DB:A3:3F:36:61 X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/224FBC52EFCF11F0A018F59D746F56BC.roa sbgp-ipAddrBlock: critical IPv4: 165.101.238.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:7f:fc:eb:34:4d:16:f9:6a:30:af:21:d5:e6:5d:50:8c:6c: a5:bc:c8:0a:78:d0:22:76:03:85:2f:c5:cf:51:3c:6c:41:34: 11:0a:ab:1a:ca:4c:b2:6b:38:79:76:c6:bf:6b:94:c2:e9:a6: 17:c9:45:6d:93:d9:d5:d6:bf:f4:ef:85:07:fd:82:79:08:da: 25:df:f1:80:23:36:3e:f7:0d:89:6b:4f:0e:cc:0c:04:8b:f4: 55:ae:e7:18:1e:f6:7b:d7:a5:99:6f:71:d6:6c:fd:8b:73:bf: b6:e1:1e:0b:b6:33:e9:6a:44:13:21:7f:5d:88:30:83:81:4b: 57:f8:56:69:60:8d:9b:da:dc:d8:a8:42:43:44:6d:52:84:a1: 97:a7:8a:1a:c5:63:a0:58:83:cf:6c:25:87:56:97:0a:b8:dd: 89:4c:ec:67:7e:e7:36:af:d7:41:a8:26:89:a7:82:9e:35:28: 28:94:5c:b1:3c:81:1b:23:1e:08:7a:52:ea:6c:b3:2e:5b:ab: c2:1f:64:a6:3b:73:e7:c2:e2:2e:ac:24:62:11:3a:9c:e3:56: cf:f6:e2:1b:6d:15:56:c0:5f:b0:88:57:66:8d:ad:cb:4c:2b: 39:84:d7:e2:95:54:58:da:d1:30:b9:8d:42:c9:47:34:87:aa: dd:2e:76:92 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjVDMzExMC8GA1UEBRMoOUVCREExMjNEOUVFODMwOTQzMDVBMTE4MEMyQTA4MDU3 RkU1NDA2QTAeFw0yNjAxMTIxNTU1MzZaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQyMTA4LWJhOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdkzPDsXfzURW9bo/TO0fcMkjShXW7z7phmyJWU2iEIfvwAXV0R7/5Sc7cdu1z fO1iaHKRTh68w14RxCR+iR2zvuqCRNSCfLIzCr3yh7SxWu2SBSz+YFyDGpFzygMb WC97zkTvo5QIblPJhCOBbDOQR5I3ieahWYXXMUgtWUty/7kdaDg1zax/Ov3AXkyJ IOyBj7hPIxfcFKQSbzA+F403rXLEANRMNNBaaqS0EJuKuYkck1nU6AIcdStfc31g RNE2TWvUIsjRHh5UzkXG8CXLX3nhI8bM0JHRTiBt0FV1uZmS6Ad1dVteBRYGR6DN gwRD2kYFi82ibf1Ge6krVnTrAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU2xrUiu7P qnGtQY4hdJ5e26M/NmEwHwYDVR0jBBgwFoAUnr2hI9nugwlDBaEYDCoIBX/lQGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNUMzLzIzMjZDNjNFNjYw NDExRjBBNEM1MTkyQkM0RjlBRTAyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbnIyaEk5bnVnd2xEQmFFWURDb0lCWF9sUUdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi8yMjRGQkM1MkVG Q0YxMUYwQTAxOEY1OUQ3NDZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAClZe4wDQYJKoZIhvcNAQELBQADggEBAJ5//Os0TRb5ajCvIdXmXVCM bKW8yAp40CJ2A4Uvxc9RPGxBNBEKqxrKTLJrOHl2xr9rlMLpphfJRW2T2dXWv/Tv hQf9gnkI2iXf8YAjNj73DYlrTw7MDASL9FWu5xge9nvXpZlvcdZs/Ytzv7bhHgu2 M+lqRBMhf12IMIOBS1f4VmlgjZva3NioQkNEbVKEoZenihrFY6BYg89sJYdWlwq4 3YlM7Gd+5zav10GoJomngp41KCiUXLE8gRsjHgh6Uupssy5bq8IfZKY7c+fC4i6s JGIROpzjVs/24httFVbAX7CIV2aNrctMKzmE1+KVVFja0TC5jULJRzSHqt0udpI= -----END CERTIFICATE-----Generated at Mon Mar 2 05:32:11 2026 by rpki-client