$ rpki-client -vvvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/F3D0F394A9E811F1B4B821653A11F970.roa File: F3D0F394A9E811F1B4B821653A11F970.roa (raw, json) Hash identifier: Ke4nsI9PbT1sUSAw9ynvVPd9L5zGagRzSrYV1iiyUT0= Subject key identifier: 4C:41:84:B8:BD:7E:28:99:EC:B9:E2:BE:C7:EB:2E:A4:88:08:F4:0D Certificate issuer: /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Certificate serial: A2 Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/F3D0F394A9E811F1B4B821653A11F970.roa Signing time: Sun 06 Sep 2026 11:49:01 +0000 ROA not before: Sun 06 Sep 2026 11:49:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141217 IP address blocks: 138.252.102.0/24 maxlen: 24 138.252.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Validity Not Before: Sep 6 11:49:01 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a9d532d-227b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:89:34:83:bb:4e:69:a2:7a:76:5a:f7:57: 93:43:48:06:64:fd:e1:2e:27:41:52:82:e4:07:15: d9:6a:e8:d2:cb:64:a4:4d:f5:45:91:be:3e:9a:70: 2b:2c:7e:0a:53:21:cc:71:eb:0e:91:94:6e:0d:a3: e9:12:da:56:8a:12:14:1e:21:6c:e8:89:16:01:20: 5c:9f:c8:6a:ae:ae:59:87:3f:f5:5a:d8:2a:60:ec: 72:a1:a2:6c:f4:a3:54:15:37:58:87:99:58:95:0f: 81:c0:99:1c:30:ee:74:a4:85:3d:0f:77:6d:48:27: a8:c0:b5:1c:01:84:c4:19:56:55:9e:ed:43:86:3e: d9:88:05:bd:29:2c:cd:11:24:15:1e:85:70:23:39: a8:7d:e7:27:20:65:0c:04:3e:a4:2b:a8:13:1a:e3: e3:48:c1:21:23:b0:10:eb:9e:85:29:58:9b:82:95: 28:72:62:28:26:01:83:e4:42:bf:9c:20:78:e1:4c: cc:ed:66:d2:2f:c7:0f:ee:d1:b8:fe:04:07:e3:b8: 3f:87:46:5c:44:3a:30:bb:42:77:70:ad:cc:26:83: 93:db:a2:9f:94:be:51:f5:06:cc:e5:86:5b:27:a7: 45:30:a2:c2:fd:a1:80:3a:eb:6a:4e:79:a0:e7:57: d7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:41:84:B8:BD:7E:28:99:EC:B9:E2:BE:C7:EB:2E:A4:88:08:F4:0D X509v3 Authority Key Identifier: keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/F3D0F394A9E811F1B4B821653A11F970.roa sbgp-ipAddrBlock: critical IPv4: 138.252.102.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:ab:ea:53:7c:41:82:a9:e7:19:42:bd:ef:77:f7:f5:d0:71: 43:55:b6:06:cc:bd:0f:ae:26:fb:d9:fa:98:d5:2d:55:21:83: c0:1a:e9:df:eb:5d:94:c2:ba:55:3e:bc:ed:fc:7c:74:16:30: 77:4d:f3:ce:49:c6:9c:90:db:32:1a:0c:3c:13:74:ed:c2:51: f6:bc:d5:df:d4:54:50:17:bf:5d:98:8b:db:97:75:c5:4f:1f: 28:a1:d1:8d:97:27:5b:ef:48:01:79:f9:21:40:b9:8d:5f:08: 78:c8:45:a1:81:7f:ea:34:9b:1d:f3:56:85:1c:51:59:f2:7b: ed:b2:05:9d:33:bf:a9:52:8a:93:1e:50:4d:d4:6c:61:71:21: 32:1d:90:d2:1a:09:f6:5a:8c:c6:22:6f:eb:cb:44:20:a6:37: 3a:d5:23:c2:a6:fd:84:d9:a3:e2:66:bb:3b:a8:0d:49:42:c6: da:42:b8:72:37:1b:24:01:dd:68:88:a8:75:87:99:fe:4f:4d: 26:a4:b5:1b:6c:3c:1d:e0:88:9c:10:72:2d:dc:b2:4a:9c:ca: 27:c8:58:ae:91:d3:08:0c:eb:58:fa:c8:1d:2b:9f:f1:bb:84: 22:2b:70:3f:53:7a:73:a5:68:ae:00:85:0a:51:7d:e3:b7:e0: 54:3f:d6:81 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3RUQxMTAvBgNVBAUTKEQ1RDBEOEUxRjAzRDUxMDA4ODlGNDE4MEE2NUY1NTBB MEQ1ODBCODUwHhcNMjYwOTA2MTE0OTAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlkNTMyZC0yMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwG6JNIO7TmmienZa91eTQ0gGZP3hLidBUoLkBxXZaujSy2SkTfVFkb4+mnAr LH4KUyHMcesOkZRuDaPpEtpWihIUHiFs6IkWASBcn8hqrq5Zhz/1WtgqYOxyoaJs 9KNUFTdYh5lYlQ+BwJkcMO50pIU9D3dtSCeowLUcAYTEGVZVnu1Dhj7ZiAW9KSzN ESQVHoVwIzmofecnIGUMBD6kK6gTGuPjSMEhI7AQ656FKVibgpUocmIoJgGD5EK/ nCB44UzM7WbSL8cP7tG4/gQH47g/h0ZcRDowu0J3cK3MJoOT26KflL5R9QbM5YZb J6dFMKLC/aGAOutqTnmg51fXEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFExBhLi9 fiiZ7LnivsfrLqSICPQNMB8GA1UdIwQYMBaAFNXQ2OHwPVEAiJ9BgKZfVQoNWAuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDdFRC9DOUM2MkRBNENC ODAxMUYwQTY4RTU0MUNDNEY5QUUwMi8xZERZNGZBOVVRQ0luMEdBcGw5VkNnMVlD NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFkRFk0ZkE5VVFDSW4wR0FwbDlWQ2cxWUM0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQ3RUQvQzlDNjJEQTRDQjgwMTFGMEE2OEU1NDFDQzRGOUFFMDIvRjNEMEYzOTRB OUU4MTFGMUI0QjgyMTY1M0ExMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivxmMA0GCSqGSIb3DQEBCwUAA4IBAQAtq+pTfEGCqecZQr3vd/f1 0HFDVbYGzL0Prib72fqY1S1VIYPAGunf612UwrpVPrzt/Hx0FjB3TfPOScackNsy Ggw8E3TtwlH2vNXf1FRQF79dmIvbl3XFTx8oodGNlydb70gBefkhQLmNXwh4yEWh gX/qNJsd81aFHFFZ8nvtsgWdM7+pUoqTHlBN1GxhcSEyHZDSGgn2WozGIm/ry0Qg pjc61SPCpv2E2aPiZrs7qA1JQsbaQrhyNxskAd1oiKh1h5n+T00mpLUbbDwd4Iic EHIt3LJKnMonyFiukdMIDOtY+sgdK5/xu4QiK3A/U3pzpWiuAIUKUX3jt+BUP9aB -----END CERTIFICATE-----Generated at Tue Sep 22 17:53:40 2026 by rpki-client