$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/195EB36402A311F188F4114D3A3D8C67.roa File: 195EB36402A311F188F4114D3A3D8C67.roa (raw, json) Hash identifier: Q3+7Q8tqgx2V6iG8FYJMHBqK1bLLDXUDmAQGrTWfi6Y= Subject key identifier: 06:39:76:89:C2:D7:A8:68:5B:DB:18:25:30:90:5B:BC:D9:BD:48:19 Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Certificate serial: 3B Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/195EB36402A311F188F4114D3A3D8C67.roa Signing time: Sun 01 Mar 2026 06:01:53 +0000 ROA not before: Thu 05 Feb 2026 14:58:16 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154049 IP address blocks: 138.252.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Validity Not Before: Feb 5 14:58:16 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d650-7f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:96:ab:4a:fb:e9:5e:32:a0:67:fe:f2:85:0d: 73:99:5b:45:b9:78:08:46:34:74:9c:9d:ce:31:4b: 85:75:b2:9a:b4:16:50:0d:ac:60:04:42:7c:ff:ae: 97:7b:33:21:3a:fb:94:3c:b2:69:da:02:9c:73:ab: 58:09:b1:66:a6:96:60:64:13:08:65:4b:81:24:5d: dd:86:61:d5:fb:82:1a:1d:ef:a2:51:b9:00:03:d2: b4:6d:6c:d9:70:7b:d3:eb:4b:fa:41:2d:b7:4e:48: 0c:0c:ee:f9:a8:67:51:7b:8a:8e:a6:9b:e3:05:98: 58:ce:f2:92:1d:e3:ef:e1:7c:76:c6:ca:8f:32:9d: 10:c0:af:0a:bf:56:f7:5f:f4:d0:6a:cd:c2:c7:0a: 87:c6:d5:41:02:22:02:60:f3:14:26:cf:b4:6f:f4: 3d:5d:72:92:71:7c:b7:dd:cc:b4:1b:b6:79:76:c8: 35:24:67:43:c8:4c:af:f9:f4:64:2f:a1:89:0b:b4: e2:7d:0b:d5:a4:a8:4d:f9:76:41:79:5d:7a:52:4c: aa:83:15:4d:78:1b:c8:99:c0:03:f3:1e:9d:5d:9a: 18:dc:ec:2d:e9:f7:27:da:04:57:dd:f9:75:2e:9e: 96:8f:5c:43:bd:01:bd:a9:f0:0e:aa:cc:af:59:00: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:39:76:89:C2:D7:A8:68:5B:DB:18:25:30:90:5B:BC:D9:BD:48:19 X509v3 Authority Key Identifier: keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/195EB36402A311F188F4114D3A3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 138.252.240.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:97:7f:81:70:98:fe:70:c2:b2:e5:b4:fa:0c:ca:bc:23:fd: 87:66:4d:4a:4c:f3:a0:c7:38:3c:79:a9:b1:b8:cd:27:5c:40: c0:2b:9f:97:7d:f0:16:65:04:63:7c:03:9f:6b:e1:1e:32:42: 12:47:ec:94:aa:97:51:68:cc:f8:87:81:65:e1:8e:e6:30:ca: ba:56:2e:d3:96:71:d1:a3:ff:60:b9:85:72:6f:83:1a:e4:3b: 09:e5:fa:1f:50:11:8c:9e:54:35:8f:39:20:7d:b9:c6:3c:09: 3e:c5:e1:d2:17:73:d4:ec:50:3d:f2:19:94:a2:96:e4:34:19: fc:db:c6:b6:e1:2d:fd:34:2d:79:ff:d9:0c:7f:15:d3:6c:d4: de:1f:d0:76:93:09:a9:d8:e8:8e:76:da:93:17:ac:0c:53:da: 35:79:c5:33:c9:74:58:29:8f:2f:0c:c5:1e:1b:3e:8b:69:d1: 7e:f8:be:d6:0e:1e:74:ce:bb:5c:ba:56:c3:1d:52:6f:30:44: a9:e5:24:e5:83:4e:1e:3d:67:d6:f3:86:99:5f:85:c2:35:e0: a6:c4:68:20:a3:1c:61:db:4d:c4:ff:3b:2b:81:36:c3:f9:69: f9:33:92:5b:30:a9:b1:24:3d:e9:08:a8:e6:c4:58:77:6f:4d: c8:03:c8:22 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NBODExMC8GA1UEBRMoMzE4OEQ0MUQwQzA2RUZBMkM5NkE4NzA3MzU2OUU4RTEw MzQ0RTJDRDAeFw0yNjAyMDUxNDU4MTZaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNjUwLTdmNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDelqtK++leMqBn/vKFDXOZW0W5eAhGNHScnc4xS4V1spq0FlANrGAEQnz/rpd7 MyE6+5Q8smnaApxzq1gJsWamlmBkEwhlS4EkXd2GYdX7ghod76JRuQAD0rRtbNlw e9PrS/pBLbdOSAwM7vmoZ1F7io6mm+MFmFjO8pId4+/hfHbGyo8ynRDArwq/Vvdf 9NBqzcLHCofG1UECIgJg8xQmz7Rv9D1dcpJxfLfdzLQbtnl2yDUkZ0PITK/59GQv oYkLtOJ9C9WkqE35dkF5XXpSTKqDFU14G8iZwAPzHp1dmhjc7C3p9yfaBFfd+XUu npaPXEO9Ab2p8A6qzK9ZAH/hAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUBjl2icLX qGhb2xglMJBbvNm9SBkwHwYDVR0jBBgwFoAUMYjUHQwG76LJaocHNWno4QNE4s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0E4LzJEOThDQzVBQzUw NjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZMSmFvY0hOV25vNFFORTRz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVlqVUhRd0c3NkxKYW9jSE5Xbm80UU5FNHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NBOC8yRDk4Q0M1QUM1MDYxMUYwOEM2QkEzMkJDNEY5QUUwMi8xOTVFQjM2NDAy QTMxMUYxODhGNDExNEQzQTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/PAwDQYJKoZIhvcNAQELBQADggEBAH2Xf4FwmP5wwrLltPoMyrwj /YdmTUpM86DHODx5qbG4zSdcQMArn5d98BZlBGN8A59r4R4yQhJH7JSql1FozPiH gWXhjuYwyrpWLtOWcdGj/2C5hXJvgxrkOwnl+h9QEYyeVDWPOSB9ucY8CT7F4dIX c9TsUD3yGZSiluQ0GfzbxrbhLf00LXn/2Qx/FdNs1N4f0HaTCanY6I522pMXrAxT 2jV5xTPJdFgpjy8MxR4bPotp0X74vtYOHnTOu1y6VsMdUm8wRKnlJOWDTh49Z9bz hplfhcI14KbEaCCjHGHbTcT/OyuBNsP5afkzklswqbEkPekIqObEWHdvTcgDyCI= -----END CERTIFICATE-----Generated at Mon Mar 2 02:16:40 2026 by rpki-client