$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/0FE42DACE16811F0AD117D783A6F56BC.roa File: 0FE42DACE16811F0AD117D783A6F56BC.roa (raw, json) Hash identifier: c9KXGFBUEAhMxd6F/BpLXSZoY9CxETEfzOzJpxwZ6lE= Subject key identifier: 60:A5:FF:44:3C:26:7A:C2:A3:58:62:61:5E:97:86:19:76:CE:3A:8E Certificate issuer: /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6 Certificate serial: 32 Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/0FE42DACE16811F0AD117D783A6F56BC.roa Signing time: Sun 01 Mar 2026 05:57:23 +0000 ROA not before: Thu 25 Dec 2025 08:02:31 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133851 IP address blocks: 138.252.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6 Validity Not Before: Dec 25 08:02:31 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d542-9865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:b1:af:52:69:4c:a1:75:e0:e7:2a:17:dd: fe:ae:09:13:d8:3b:d8:3b:7e:4d:e5:af:d2:05:ad: 07:d9:44:d9:dc:50:9f:25:52:dc:e6:64:91:01:ba: 62:b2:02:fc:f5:7a:d4:10:fb:48:02:0e:8e:4a:e6: d3:0d:51:e0:3f:f4:ce:39:30:0c:bd:1c:12:a6:e5: 57:0a:84:52:7c:d4:cf:44:8a:4e:b4:77:92:30:4f: be:6c:b3:6e:e4:fc:75:14:37:85:c2:d8:dd:88:8d: 1e:1f:f0:64:33:b9:a3:78:e2:b2:dc:9d:a6:17:4d: f8:71:10:05:08:81:4f:0b:22:ad:b3:a3:c1:a9:8e: c5:30:12:e0:75:16:ed:f8:8d:0b:d3:71:0b:14:1b: 2d:2f:fa:51:6a:f4:ac:68:81:71:01:45:24:43:03: 27:ed:40:9e:60:5a:db:f0:fd:24:4f:b7:d4:bc:1e: 47:79:2f:f6:b5:f2:3b:36:2d:83:b0:a7:e2:b2:5c: 5e:07:41:0e:db:a1:f0:f6:3e:13:a9:a9:8e:0d:d3: b7:0f:95:6b:c0:fc:57:e4:fa:b1:e3:33:6d:72:ae: e7:c3:ca:0b:be:13:0c:d4:56:e4:f1:d5:d9:64:b6: 11:f8:97:4a:35:e6:f6:e6:41:7b:7b:7f:ec:5f:37: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A5:FF:44:3C:26:7A:C2:A3:58:62:61:5E:97:86:19:76:CE:3A:8E X509v3 Authority Key Identifier: keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/0FE42DACE16811F0AD117D783A6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 138.252.220.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:01:3a:32:ac:1e:cf:03:cf:cc:49:50:bc:2c:2a:23:a9:f5: de:cc:95:d0:19:57:53:42:5b:73:68:b2:a0:1d:f3:84:3f:69: 05:f5:82:1e:08:1a:9e:29:dc:c1:40:3a:12:2f:ff:11:e4:ab: df:bc:8b:68:33:05:dd:bb:40:c9:df:e7:8f:1a:ce:3e:c9:c0: 6a:0f:ae:ec:87:9f:08:74:08:e4:07:e4:aa:98:80:cc:f0:8b: 53:0e:53:9e:59:aa:23:85:60:35:e8:b4:4b:18:59:d3:8f:a9: 50:25:81:0a:16:9e:4a:fc:a5:3d:45:19:24:9f:51:2a:3c:40: 00:93:d6:e3:a0:5b:6f:59:ab:50:f8:9e:b1:55:6f:2e:3d:3e: 98:aa:18:ac:d0:3d:91:a3:33:77:cf:dd:a8:ef:dc:3a:33:ce: c4:33:7c:af:c8:44:b7:e1:67:83:0d:3d:97:93:71:90:6c:0b: c8:bd:f4:2e:2a:0c:1a:ec:f3:11:9c:cb:57:e3:0e:38:da:ca: 49:c5:58:55:7b:b7:0e:97:fb:90:56:e6:b6:d9:8d:60:97:5e: 2b:8b:7d:18:63:10:5d:8b:05:3b:a1:00:c2:5a:4a:df:8a:25: 6d:35:c6:2a:21:be:9a:d1:f2:7d:ff:49:bb:a9:50:25:75:d6: 94:b9:6a:77 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QkU4RTExMC8GA1UEBRMoREIwODg3RTI1Q0MwRDBDRjc2ODhEQjVERERGNDE5NjUz MkNENDdBNjAeFw0yNTEyMjUwODAyMzFaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNTQyLTk4NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxg7GvUmlMoXXg5yoX3f6uCRPYO9g7fk3lr9IFrQfZRNncUJ8lUtzmZJEBumKy Avz1etQQ+0gCDo5K5tMNUeA/9M45MAy9HBKm5VcKhFJ81M9Eik60d5IwT75ss27k /HUUN4XC2N2IjR4f8GQzuaN44rLcnaYXTfhxEAUIgU8LIq2zo8GpjsUwEuB1Fu34 jQvTcQsUGy0v+lFq9KxogXEBRSRDAyftQJ5gWtvw/SRPt9S8Hkd5L/a18js2LYOw p+KyXF4HQQ7bofD2PhOpqY4N07cPlWvA/Ffk+rHjM21yrufDygu+EwzUVuTx1dlk thH4l0o15vbmQXt7f+xfNy2/AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUYKX/RDwm esKjWGJhXpeGGXbOOo4wHwYDVR0jBBgwFoAU2wiH4lzA0M92iNtd3fQZZTLNR6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCRThFLzQ5Qzc3NDg4RTE0 NjExRjA5MTY0RTBBODcxNkY1NkJDLzJ3aUg0bHpBME05MmlOdGQzZlFaWlRMTlI2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMndpSDRsekEwTTkyaU50ZDNmUVpaVExOUjZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkU4RS80OUM3NzQ4OEUxNDYxMUYwOTE2NEUwQTg3MTZGNTZCQy8wRkU0MkRBQ0Ux NjgxMUYwQUQxMTdENzgzQTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/NwwDQYJKoZIhvcNAQELBQADggEBADoBOjKsHs8Dz8xJULwsKiOp 9d7MldAZV1NCW3NosqAd84Q/aQX1gh4IGp4p3MFAOhIv/xHkq9+8i2gzBd27QMnf 548azj7JwGoPruyHnwh0COQH5KqYgMzwi1MOU55ZqiOFYDXotEsYWdOPqVAlgQoW nkr8pT1FGSSfUSo8QACT1uOgW29Zq1D4nrFVby49PpiqGKzQPZGjM3fP3ajv3Doz zsQzfK/IRLfhZ4MNPZeTcZBsC8i99C4qDBrs8xGcy1fjDjjayknFWFV7tw6X+5BW 5rbZjWCXXiuLfRhjEF2LBTuhAMJaSt+KJW01xiohvprR8n3/SbupUCV11pS5anc= -----END CERTIFICATE-----Generated at Tue Mar 3 00:30:04 2026 by rpki-client