$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/67B0ACBC8E5011EE95DFC141C4F9AE02.roa File: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (raw, json) Hash identifier: 7WBF/67tQLlM0JIff5LKTgy333KC+LPGrQsaWqMRIeQ= Subject key identifier: BB:FA:71:AD:80:C0:82:19:A7:85:42:09:01:FE:62:12:F5:90:EB:5F Certificate issuer: /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Certificate serial: 01C2 Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/67B0ACBC8E5011EE95DFC141C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:38:13 +0000 ROA not before: Tue 02 Sep 2025 16:02:43 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 17705 IP address blocks: 192.138.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Validity Not Before: Sep 2 16:02:43 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44145-a479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:36:d5:b3:73:23:1e:74:60:a2:b4:c3:fd: 15:fe:0a:c8:91:6a:b3:1b:51:66:e8:53:07:0c:5c: e0:df:da:bc:ad:46:68:f3:0d:b9:0f:c9:d5:6b:9d: 9a:de:05:7e:d5:47:7b:58:07:54:c2:6e:d4:e3:9a: 7c:ca:b2:36:f0:7e:b3:35:ac:4b:34:d3:7f:85:b4: 83:e9:63:83:31:cf:39:c4:b2:e7:f6:f8:26:83:c1: d0:e5:8a:03:8f:37:1b:db:80:ba:31:da:ae:83:88: e0:c6:5b:55:14:c0:e8:f4:c4:76:aa:5e:b9:42:0a: 38:f6:5c:fd:ca:61:07:56:91:23:84:ca:c5:14:f1: 91:53:1d:81:89:99:06:72:6d:c7:d4:6f:60:42:3c: da:12:64:22:1c:c6:de:01:9d:e5:f3:39:19:a3:fa: d2:26:41:79:d8:f8:61:08:f0:b0:69:4f:0f:10:53: a6:9c:a1:be:a4:dc:63:3a:65:0f:17:0d:3b:ee:a4: e6:0a:f1:fc:72:d9:d2:d1:3c:e5:4a:4c:51:a7:d5: 27:82:96:03:46:c7:00:f7:d0:1f:be:a1:db:73:09: 95:6c:b5:44:aa:f0:88:97:5a:84:6b:ac:38:c2:d5: 19:24:36:6f:93:d4:6d:b4:fa:e8:15:06:88:d8:00: 47:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FA:71:AD:80:C0:82:19:A7:85:42:09:01:FE:62:12:F5:90:EB:5F X509v3 Authority Key Identifier: keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/67B0ACBC8E5011EE95DFC141C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.138.251.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:7e:e0:f3:72:a4:aa:25:3e:51:82:8c:ee:79:ee:c1:41:9b: 93:ba:93:f1:85:d7:f8:17:a4:c7:6e:c0:91:3d:69:66:7c:67: f7:e9:43:ca:53:7b:81:36:5e:01:f3:60:07:98:80:b5:4c:07: 61:de:12:5e:17:50:9f:74:df:91:e8:82:75:15:b1:41:b6:da: 34:05:68:da:f0:79:06:34:48:64:4f:bb:43:b2:5f:20:78:62: 8b:8f:f5:46:c7:aa:f0:a1:63:eb:d6:12:09:f6:69:20:15:ce: 14:65:d0:b0:9d:50:42:c1:f7:59:3a:18:cc:2d:5c:64:94:f7: 54:5d:1f:b6:88:0a:cc:5b:55:72:4d:dd:c9:f9:61:d9:77:43: 93:da:e1:92:97:da:3d:0b:af:ea:2a:94:e5:f7:28:94:aa:46: 04:4d:14:2f:65:72:89:da:99:36:84:ad:ca:e2:9d:86:3c:01: 72:8b:d4:0c:26:f4:73:66:10:af:d3:b3:89:c3:3d:06:2c:a2: 58:36:bd:1c:b0:2f:35:c6:74:0e:b4:ec:ac:b5:7e:fd:ad:57: 2b:37:3d:c8:04:80:29:e6:0b:8b:c1:f2:1f:8d:d6:c2:90:88: d5:b1:5f:e3:f8:d6:8b:fc:94:77:b6:23:47:b5:51:06:86:8f: eb:86:76:02 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKEZCNUI5Njk1M0NDREIxMUU5MjY4M0IzRUI1QjdBNDU3 NDk0QjI1RjAwHhcNMjUwOTAyMTYwMjQzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDE0NS1hNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfQ21bNzIx50YKK0w/0V/grIkWqzG1Fm6FMHDFzg39q8rUZo8w25D8nVa52a 3gV+1Ud7WAdUwm7U45p8yrI28H6zNaxLNNN/hbSD6WODMc85xLLn9vgmg8HQ5YoD jzcb24C6Mdqug4jgxltVFMDo9MR2ql65Qgo49lz9ymEHVpEjhMrFFPGRUx2BiZkG cm3H1G9gQjzaEmQiHMbeAZ3l8zkZo/rSJkF52PhhCPCwaU8PEFOmnKG+pNxjOmUP Fw077qTmCvH8ctnS0TzlSkxRp9UngpYDRscA99AfvqHbcwmVbLVEqvCIl1qEa6w4 wtUZJDZvk9RttProFQaI2ABHWQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLv6ca2A wIIZp4VCCQH+YhL1kOtfMB8GA1UdIwQYMBaAFPtblpU8zbEekmg7PrW3pFdJSyXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi80RjU2QzAxQzc3 OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNSNlNhRHMtdGJla1YwbExK ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0xdVdsVHpOc1I2U2FEcy10YmVrVjBsTEpmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBNzIvNEY1NkMwMUM3NzlEMTFFRUJCNDlFMjY5QzRGOUFFMDIvNjdCMEFDQkM4 RTUwMTFFRTk1REZDMTQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwIr7MA0GCSqGSIb3DQEBCwUAA4IBAQCMfuDzcqSqJT5Rgozuee7B QZuTupPxhdf4F6THbsCRPWlmfGf36UPKU3uBNl4B82AHmIC1TAdh3hJeF1CfdN+R 6IJ1FbFBtto0BWja8HkGNEhkT7tDsl8geGKLj/VGx6rwoWPr1hIJ9mkgFc4UZdCw nVBCwfdZOhjMLVxklPdUXR+2iArMW1VyTd3J+WHZd0OT2uGSl9o9C6/qKpTl9yiU qkYETRQvZXKJ2pk2hK3K4p2GPAFyi9QMJvRzZhCv07OJwz0GLKJYNr0csC81xnQO tOystX79rVcrNz3IBIAp5guLwfIfjdbCkIjVsV/j+NaL/JR3tiNHtVEGho/rhnYC -----END CERTIFICATE-----Generated at Mon Mar 2 21:10:55 2026 by rpki-client