$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/6DD11538BA6711F0A5E1473EC4F9AE02.roa File: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (raw, json) Hash identifier: aZcuk92cPHBLPT7kL0kkLxHikI+2JffenZZL+WJEXRc= Subject key identifier: 5F:C2:0A:56:FB:6E:E2:33:7F:DF:37:92:FC:10:F3:C4:D3:2B:FB:D8 Certificate issuer: /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2 Certificate serial: 42 Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/6DD11538BA6711F0A5E1473EC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:09:24 +0000 ROA not before: Thu 06 Nov 2025 18:12:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154334 IP address blocks: 138.252.124.0/23 maxlen: 23 138.252.124.0/24 maxlen: 24 138.252.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2 Validity Not Before: Nov 6 18:12:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d814-8740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:22:0f:76:7d:11:30:6a:f5:68:21:22:86: a8:22:81:0b:0d:21:8a:68:81:7d:e6:01:9d:90:6d: bc:17:fb:ef:d6:14:6d:34:65:68:fa:25:81:29:79: 2e:20:51:a3:84:59:39:0e:63:e2:56:e9:4b:57:ed: 8b:33:f9:c8:f5:0f:f5:2d:fb:49:90:7d:15:6a:51: cc:f5:39:36:28:b5:a5:66:ae:d5:9c:e9:70:e2:47: e8:a2:48:8c:e9:b8:cb:c5:3c:bf:28:cf:f0:1a:eb: 6d:f9:06:0e:5a:7d:77:f2:08:1a:38:e7:8f:a2:01: 7a:91:c6:73:71:67:66:e5:76:c5:7d:0e:6a:4b:b5: 02:18:db:0b:f3:45:12:27:d0:56:91:66:a3:ab:84: af:79:5e:eb:27:1e:62:56:de:38:a3:d0:ba:18:c8: b5:e8:43:d6:44:04:51:82:66:3b:f4:35:39:bd:c9: e8:ab:31:2c:55:54:d1:ac:25:23:a4:09:d6:eb:65: 2c:1b:a1:72:7d:35:7a:ad:a2:e8:2a:ed:4e:94:e9: 00:aa:9d:4f:81:dc:d3:2d:f6:f3:89:23:02:0d:bf: fa:34:18:6b:50:12:8e:dc:8f:a1:aa:f4:be:ba:46: 15:00:b9:9c:9b:2b:6f:ec:08:a0:14:48:5c:ff:2b: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C2:0A:56:FB:6E:E2:33:7F:DF:37:92:FC:10:F3:C4:D3:2B:FB:D8 X509v3 Authority Key Identifier: keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/6DD11538BA6711F0A5E1473EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.124.0/23 Signature Algorithm: sha256WithRSAEncryption 67:20:5d:b3:68:ba:09:ef:f7:04:26:06:52:97:6b:6d:a3:18: 9a:e4:c8:8d:e2:d6:06:52:3c:99:6e:bb:4e:a6:12:e3:38:b7: 43:15:d9:87:8c:93:64:78:d8:ab:8c:c5:27:c1:df:ab:99:dd: 42:91:9c:e2:b8:e9:c3:20:a6:66:78:59:d5:46:ee:71:e7:c2: 46:f9:44:b4:b0:96:bd:94:10:3d:40:11:65:20:f4:5e:a5:1f: a8:32:dc:b5:9c:6e:81:00:25:29:58:fe:9c:1e:b7:f7:27:9a: 7b:ba:b7:28:b0:ae:bd:5c:b9:6d:e3:93:e8:b7:e4:81:84:4d: a1:3f:f6:8b:70:ba:6a:c0:bf:2b:b4:ff:0d:c4:33:62:81:0c: 0a:7a:cf:76:6d:7e:55:a0:70:b5:66:fc:38:a0:40:35:f8:69: 5c:2c:9e:f4:00:3a:52:d4:55:fe:f1:23:28:26:51:5e:3d:c2: 68:e1:3a:a5:ee:ad:77:b9:b8:b6:b8:3f:da:53:c8:00:48:e1: b0:a9:74:38:ed:17:5d:c8:0a:5f:f2:81:63:a5:03:09:91:25: ee:65:82:9c:8e:fa:7d:13:6a:4a:ec:4a:35:f2:c2:a5:5e:04: 3d:69:a6:ed:84:e6:86:f6:31:7d:f4:4e:bd:fb:4a:fb:10:fc: 27:e1:5d:67 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdBNzExMC8GA1UEBRMoQTBCRjMwNzk0RTZBRTQ5RUMwNjhENTAzOENGOUFGRjU0 MzVEMUREMjAeFw0yNTExMDYxODEyNDZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkODE0LTg3NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzziIPdn0RMGr1aCEihqgigQsNIYpogX3mAZ2QbbwX++/WFG00ZWj6JYEpeS4g UaOEWTkOY+JW6UtX7Ysz+cj1D/Ut+0mQfRVqUcz1OTYotaVmrtWc6XDiR+iiSIzp uMvFPL8oz/Aa6235Bg5afXfyCBo454+iAXqRxnNxZ2bldsV9DmpLtQIY2wvzRRIn 0FaRZqOrhK95XusnHmJW3jij0LoYyLXoQ9ZEBFGCZjv0NTm9yeirMSxVVNGsJSOk CdbrZSwboXJ9NXqtougq7U6U6QCqnU+B3NMt9vOJIwINv/o0GGtQEo7cj6Gq9L66 RhUAuZybK2/sCKAUSFz/K1UDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUX8IKVvtu 4jN/3zeS/BDzxNMr+9gwHwYDVR0jBBgwFoAUoL8weU5q5J7AaNUDjPmv9UNdHdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0E3LzAxMDIyNzgyQkEz ODExRjA5MzQwOEY2QkM0RjlBRTAyL29MOHdlVTVxNUo3QWFOVURqUG12OVVOZEhk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb0w4d2VVNXE1SjdBYU5VRGpQbXY5VU5kSGRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTdBNy8wMTAyMjc4MkJBMzgxMUYwOTM0MDhGNkJDNEY5QUUwMi82REQxMTUzOEJB NjcxMUYwQTVFMTQ3M0VDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/HwwDQYJKoZIhvcNAQELBQADggEBAGcgXbNougnv9wQmBlKXa22j GJrkyI3i1gZSPJluu06mEuM4t0MV2YeMk2R42KuMxSfB36uZ3UKRnOK46cMgpmZ4 WdVG7nHnwkb5RLSwlr2UED1AEWUg9F6lH6gy3LWcboEAJSlY/pwet/cnmnu6tyiw rr1cuW3jk+i35IGETaE/9otwumrAvyu0/w3EM2KBDAp6z3ZtflWgcLVm/DigQDX4 aVwsnvQAOlLUVf7xIygmUV49wmjhOqXurXe5uLa4P9pTyABI4bCpdDjtF13ICl/y gWOlAwmRJe5lgpyO+n0TakrsSjXywqVeBD1ppu2E5ob2MX30Tr37SvsQ/CfhXWc= -----END CERTIFICATE-----Generated at Tue Mar 3 02:11:29 2026 by rpki-client