$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/4AD34C1AC05A11F0B864644DC4F9AE02.roa File: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (raw, json) Hash identifier: fuNnrqSgI2XXye8Z2eFA0jRKqdXrxlxebRTfn3G5134= Subject key identifier: 74:15:E4:64:80:78:7B:36:BC:98:40:E7:D6:B9:02:CC:C3:4B:05:7C Certificate issuer: /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7 Certificate serial: 40 Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/4AD34C1AC05A11F0B864644DC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:07:51 +0000 ROA not before: Thu 13 Nov 2025 06:44:39 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153610 IP address blocks: 138.252.198.0/23 maxlen: 23 138.252.198.0/24 maxlen: 24 138.252.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7 Validity Not Before: Nov 13 06:44:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d7b7-0487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:80:e0:4a:5a:7d:71:25:ed:56:03:08:4c:c3: 84:de:b1:a3:6d:e7:14:fb:87:0d:df:a4:15:2f:ab: ee:b4:ea:a2:84:3f:83:4b:98:d0:44:4e:d0:3f:b5: ee:d6:21:80:48:93:19:56:2a:c0:29:a7:15:39:b9: da:cb:bd:d7:a0:bf:25:48:26:e5:32:d6:60:d1:37: ed:48:63:b6:50:7b:df:e9:dc:4f:ad:72:9c:7a:3d: 14:1a:b6:dc:c6:e1:9f:17:3f:0d:95:ef:1a:f6:90: 27:89:9b:5f:09:05:3d:66:db:f8:f2:75:9f:8d:96: 72:48:ed:4a:8d:91:b1:b2:7c:77:25:bb:16:fb:ea: 3b:5d:9f:85:60:c4:83:23:34:03:da:5e:df:d3:c4: 6a:40:e9:b9:f5:48:f3:85:4d:47:d0:71:94:3d:22: 5c:38:ba:c9:6b:fe:50:0f:e6:47:35:49:8a:ad:09: d1:de:a2:64:13:f8:63:93:8f:03:5b:16:44:2c:7c: 87:20:69:40:34:33:25:5b:01:7e:3b:19:08:b7:3e: 1e:b5:0d:fd:a9:f1:b9:f3:24:43:98:12:e4:a2:ca: 9b:ce:3f:2f:00:a9:9c:99:4d:2e:43:65:36:05:5d: 54:56:15:4f:42:f6:d4:41:a8:29:95:14:55:84:b2: 66:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:15:E4:64:80:78:7B:36:BC:98:40:E7:D6:B9:02:CC:C3:4B:05:7C X509v3 Authority Key Identifier: keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/4AD34C1AC05A11F0B864644DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.198.0/23 Signature Algorithm: sha256WithRSAEncryption a7:2b:fb:2c:b8:0b:11:e8:e9:0d:f1:f4:ef:d4:a6:75:fe:6f: b6:1c:55:cf:76:69:a9:91:09:0b:52:c5:3b:e0:ab:05:63:ea: a6:27:60:b2:e5:29:ca:e9:9a:d1:f1:8b:52:5c:6f:f9:ae:61: d0:79:10:46:c1:43:24:81:b0:9e:ea:e0:85:8f:45:06:a8:b5: b3:b2:3b:d8:18:42:2c:a6:38:83:39:20:39:a1:9b:35:81:ec: 50:a4:5a:2a:52:d8:cb:82:4b:09:53:d2:09:cb:d0:0a:7b:15: f3:d9:5b:7c:ac:ae:77:20:a8:28:04:44:4c:15:53:91:e6:4c: 63:c5:bc:c0:2b:8b:0b:51:f6:8b:c7:d4:e2:21:25:f0:d6:5a: b0:2a:0c:48:d3:31:75:df:f9:25:f2:97:50:4b:5f:f9:84:5f: 2d:48:31:9a:be:4c:8e:ba:45:1a:d4:71:49:9d:6c:4c:6e:98: df:d0:2c:9f:73:4e:03:70:86:c8:91:b5:02:de:87:a0:d9:d1: 50:ea:4a:b4:d8:f5:84:df:11:b8:4d:32:a5:c6:9f:94:be:21: 1f:06:96:85:ff:de:4d:65:ee:11:a9:6d:7f:06:aa:1b:8b:9d: 67:03:e6:68:1a:b7:dc:13:25:09:3a:ad:d6:c4:3d:b0:3a:07: 41:b1:d0:57 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTM4QTExMC8GA1UEBRMoQjdGQjgzRDFDOUMyRjdDMzhCNzAwMjcxNDY0QUMyMzM2 NEUyRTdENzAeFw0yNTExMTMwNjQ0MzlaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkN2I3LTA0ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzgOBKWn1xJe1WAwhMw4TesaNt5xT7hw3fpBUvq+606qKEP4NLmNBETtA/te7W IYBIkxlWKsAppxU5udrLvdegvyVIJuUy1mDRN+1IY7ZQe9/p3E+tcpx6PRQattzG 4Z8XPw2V7xr2kCeJm18JBT1m2/jydZ+NlnJI7UqNkbGyfHcluxb76jtdn4VgxIMj NAPaXt/TxGpA6bn1SPOFTUfQcZQ9Ilw4uslr/lAP5kc1SYqtCdHeomQT+GOTjwNb FkQsfIcgaUA0MyVbAX47GQi3Ph61Df2p8bnzJEOYEuSiypvOPy8AqZyZTS5DZTYF XVRWFU9C9tRBqCmVFFWEsmYLAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUdBXkZIB4 eza8mEDn1rkCzMNLBXwwHwYDVR0jBBgwFoAUt/uD0cnC98OLcAJxRkrCM2Ti59cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMzhBL0E0MEQ0NUYwQzA0 NzExRjBBNzBGN0I3OEM0RjlBRTAyL3RfdUQwY25DOThPTGNBSnhSa3JDTTJUaTU5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdF91RDBjbkM5OE9MY0FKeFJrckNNMlRpNTljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTM4QS9BNDBENDVGMEMwNDcxMUYwQTcwRjdCNzhDNEY5QUUwMi80QUQzNEMxQUMw NUExMUYwQjg2NDY0NERDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/MYwDQYJKoZIhvcNAQELBQADggEBAKcr+yy4CxHo6Q3x9O/UpnX+ b7YcVc92aamRCQtSxTvgqwVj6qYnYLLlKcrpmtHxi1Jcb/muYdB5EEbBQySBsJ7q 4IWPRQaotbOyO9gYQiymOIM5IDmhmzWB7FCkWipS2MuCSwlT0gnL0Ap7FfPZW3ys rncgqCgEREwVU5HmTGPFvMAriwtR9ovH1OIhJfDWWrAqDEjTMXXf+SXyl1BLX/mE Xy1IMZq+TI66RRrUcUmdbExumN/QLJ9zTgNwhsiRtQLeh6DZ0VDqSrTY9YTfEbhN MqXGn5S+IR8GloX/3k1l7hGpbX8GqhuLnWcD5mgat9wTJQk6rdbEPbA6B0Gx0Fc= -----END CERTIFICATE-----Generated at Mon Mar 2 02:51:34 2026 by rpki-client