$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/22C0B5E8BD3811F0973F9752C4F9AE02.roa File: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (raw, json) Hash identifier: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss= Subject key identifier: 17:A5:AD:5B:C0:D4:3F:3F:CA:21:C7:42:2C:94:CA:24:B6:EE:8C:F1 Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Certificate serial: 3C Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/22C0B5E8BD3811F0973F9752C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:04:48 +0000 ROA not before: Sun 09 Nov 2025 06:48:45 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154335 IP address blocks: 138.252.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Validity Not Before: Nov 9 06:48:45 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d700-563a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:e6:95:73:a7:aa:c5:d4:66:e7:63:80:08: eb:72:87:11:eb:2c:b8:f3:ee:e8:ad:25:db:8c:ea: 66:33:8a:f6:a3:66:3d:6d:bd:a5:69:ff:16:f7:5a: 00:7a:ac:1d:dd:a0:ac:c6:25:26:85:f2:f6:fc:1c: f9:71:47:1f:35:f8:48:3f:69:40:fd:ae:5f:5d:0e: be:d0:5c:2e:cf:63:bc:2d:46:9e:a2:16:c0:c0:37: ba:8a:bd:58:cd:0a:2a:aa:dc:27:40:56:8d:1a:1a: 45:5f:e1:1c:24:2e:2a:44:8b:6c:03:b9:0f:bc:75: 84:ba:42:a4:ff:65:44:1b:c8:ff:e5:1d:62:d5:86: 4a:13:12:88:18:d9:e9:fb:c2:10:df:28:5b:7f:2b: 84:21:f2:e7:b1:8d:e7:86:8c:79:47:80:52:a2:b5: b6:fa:88:22:04:7c:cc:c0:d9:96:79:23:ca:95:3f: 94:24:64:81:66:03:f8:39:70:73:0f:5d:57:01:43: df:4d:aa:0c:65:57:3c:bd:db:eb:94:aa:9a:8d:e9: 10:fe:8e:b0:a7:c3:03:bf:4b:ba:29:58:8f:e4:5d: 35:66:2c:ef:89:39:f8:4c:34:7c:5d:f0:2c:43:5a: 17:15:48:99:34:32:26:0e:1b:0b:8a:8b:d2:e3:43: cf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A5:AD:5B:C0:D4:3F:3F:CA:21:C7:42:2C:94:CA:24:B6:EE:8C:F1 X509v3 Authority Key Identifier: keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/22C0B5E8BD3811F0973F9752C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.130.0/23 Signature Algorithm: sha256WithRSAEncryption 86:e2:cc:33:b0:0e:66:0a:bf:5e:4b:9c:57:c9:b7:21:6e:1d: 8c:ba:32:35:60:13:90:65:e6:40:3b:90:01:ac:10:cc:5e:a8: b8:73:1b:ef:16:ed:bd:53:18:92:ad:c3:bc:c1:b8:6d:03:e4: 19:cc:1b:9d:94:8e:ae:ea:d0:00:25:e8:5b:b1:7b:93:f6:32: 9b:d7:0c:64:51:e7:db:87:bf:68:c4:e5:de:77:0e:41:3b:05: c6:67:bd:f1:27:77:e9:a2:01:cf:4e:8c:b6:4f:19:51:92:52: c7:a7:44:d7:bb:ca:e3:44:84:d6:95:dc:89:bf:93:39:ef:75: 4f:89:a2:42:7c:0c:20:26:45:0d:3e:b6:37:56:e0:4f:30:83: c5:fa:a4:7e:56:1f:95:97:a4:40:0c:b7:89:13:5b:b8:d7:cb: 5b:27:5f:bc:d0:23:be:a9:9b:9f:82:c1:8e:4f:a5:34:c0:1d: 4d:96:38:1e:fb:46:c4:97:14:85:3e:25:7c:62:c9:97:87:cf: e1:aa:b6:94:75:3c:7f:fc:bf:d9:aa:85:b0:ed:7d:e1:78:eb: 45:47:cc:b4:85:ae:f9:09:79:74:60:5c:08:b2:a2:95:e5:18: 06:d1:52:1b:4d:bd:1f:7b:6d:14:d4:81:e2:9b:a6:2f:66:bd: 27:b5:c8:5c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 M0I4NzExMC8GA1UEBRMoOTI0NzA5OUE2N0I2MzhEQzkyNTNCMDJFMjUzREIzQkU3 NDVBQTg1QzAeFw0yNTExMDkwNjQ4NDVaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNzAwLTU2M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdlOaVc6eqxdRm52OACOtyhxHrLLjz7uitJduM6mYzivajZj1tvaVp/xb3WgB6 rB3doKzGJSaF8vb8HPlxRx81+Eg/aUD9rl9dDr7QXC7PY7wtRp6iFsDAN7qKvVjN Ciqq3CdAVo0aGkVf4RwkLipEi2wDuQ+8dYS6QqT/ZUQbyP/lHWLVhkoTEogY2en7 whDfKFt/K4Qh8uexjeeGjHlHgFKitbb6iCIEfMzA2ZZ5I8qVP5QkZIFmA/g5cHMP XVcBQ99NqgxlVzy92+uUqpqN6RD+jrCnwwO/S7opWI/kXTVmLO+JOfhMNHxd8CxD WhcVSJk0MiYOGwuKi9LjQ8/zAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUF6WtW8DU Pz/KIcdCLJTKJLbujPEwHwYDVR0jBBgwFoAUkkcJmme2ONySU7AuJT2zvnRaqFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjg3LzIzRDE1MjhBQkNF MzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055U1U3QXVKVDJ6dm5SYXFG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tjSm1tZTJPTnlTVTdBdUpUMnp2blJhcUZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0I4Ny8yM0QxNTI4QUJDRTMxMUYwOUM1RjcwNDhDNEY5QUUwMi8yMkMwQjVFOEJE MzgxMUYwOTczRjk3NTJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/IIwDQYJKoZIhvcNAQELBQADggEBAIbizDOwDmYKv15LnFfJtyFu HYy6MjVgE5Bl5kA7kAGsEMxeqLhzG+8W7b1TGJKtw7zBuG0D5BnMG52Ujq7q0AAl 6Fuxe5P2MpvXDGRR59uHv2jE5d53DkE7BcZnvfEnd+miAc9OjLZPGVGSUsenRNe7 yuNEhNaV3Im/kznvdU+JokJ8DCAmRQ0+tjdW4E8wg8X6pH5WH5WXpEAMt4kTW7jX y1snX7zQI76pm5+CwY5PpTTAHU2WOB77RsSXFIU+JXxiyZeHz+GqtpR1PH/8v9mq hbDtfeF460VHzLSFrvkJeXRgXAiyopXlGAbRUhtNvR97bRTUgeKbpi9mvSe1yFw= -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:53 2026 by rpki-client