$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/42AD4128C0FD11F0883D987DC4F9AE02.roa File: 42AD4128C0FD11F0883D987DC4F9AE02.roa (raw, json) Hash identifier: fee2kG6DijCDTEasANwWVyTgJqBYFfGoI/ffzNY7VYQ= Subject key identifier: FA:EC:A4:7F:F7:22:33:4E:80:0C:DF:31:9B:6E:4D:77:67:94:6F:A5 Certificate issuer: /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354 Certificate serial: 3D Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/42AD4128C0FD11F0883D987DC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:05:35 +0000 ROA not before: Fri 14 Nov 2025 01:57:23 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154242 IP address blocks: 138.252.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354 Validity Not Before: Nov 14 01:57:23 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3d72f-baf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:f4:ff:77:81:1b:54:9f:57:2d:bd:67:bf: a2:ba:f5:f8:54:ed:e9:1d:a4:f8:47:aa:80:cc:d0: 63:7c:53:38:70:0f:b0:c8:12:b0:1a:9b:e0:69:eb: ed:1f:a2:48:87:a3:e2:91:34:ae:de:72:38:d1:56: 8e:17:05:70:07:c6:7c:46:5a:4e:38:79:b0:ad:88: ae:d5:0b:26:56:67:f1:01:94:84:b6:99:09:9e:94: 9d:c9:84:99:a1:21:12:ef:d8:9f:80:28:15:4b:5a: 3b:8e:ad:db:69:e8:39:cf:48:e5:83:03:72:93:f8: 8b:f4:1d:8f:97:29:db:61:6d:b1:84:54:ea:f0:35: 8e:d1:16:1c:73:79:c3:18:23:dc:15:3e:65:77:90: 29:4a:78:74:03:ee:35:7e:74:d9:48:f3:e9:2d:c8: 3d:3e:d1:30:65:72:0b:72:8d:08:1d:2d:ef:84:b4: fd:2c:53:ef:d8:7f:f1:96:35:f2:37:58:e7:52:b9: f7:48:ac:3b:ed:79:5d:1e:f0:bc:62:3d:39:32:c6: 9c:d1:d8:c8:84:7a:a8:43:3c:1f:f7:10:03:0a:a0: 28:3c:78:a7:1a:27:56:ea:83:62:52:11:c2:ce:d6: e3:19:5b:c6:48:97:28:75:ae:55:a0:09:84:97:3c: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EC:A4:7F:F7:22:33:4E:80:0C:DF:31:9B:6E:4D:77:67:94:6F:A5 X509v3 Authority Key Identifier: keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/42AD4128C0FD11F0883D987DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.167.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:6d:3e:62:e9:9a:48:af:de:b4:32:01:a6:49:eb:42:e7:a5: 15:ff:52:2d:e8:56:df:3d:48:60:97:e4:35:63:32:94:5e:91: cd:2e:22:72:a4:3e:91:ad:1f:3c:2c:21:37:b8:08:9d:39:92: 87:cf:7d:d7:74:57:0e:4d:c0:c7:6f:aa:e6:29:39:2f:8c:a8: 18:ec:92:75:b8:5f:63:06:97:c4:01:95:76:37:8d:51:74:59: b8:cd:96:cc:0c:9c:b9:72:53:6d:12:7b:c2:96:4f:17:ee:42: 00:df:09:d5:2c:b8:b8:d0:3e:48:1d:fb:60:4a:3c:ec:00:13: d9:18:1a:45:2b:79:20:65:07:d2:f7:14:84:f1:43:fa:15:ff: 9c:43:bb:2a:81:e4:c3:42:d2:31:85:50:a3:0d:57:7f:9c:41: 84:71:e2:4a:36:89:a2:bd:07:d4:0f:9e:32:26:47:47:d2:70: ad:42:bd:62:37:10:5a:5a:fb:b1:1d:dc:ed:24:a2:84:20:7a: 2a:e0:7a:be:07:d5:9d:80:1e:71:fe:7e:17:81:7e:27:b5:7a: c3:c2:d8:db:38:1a:f8:b3:77:bd:0f:28:a4:23:01:92:6d:f0: b0:33:fd:0e:91:c8:b0:0a:29:42:97:73:08:5a:2e:6c:c1:3a: b4:5b:ac:5d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzY3MTExMC8GA1UEBRMoOEE1NzcxN0U2MkUxMTVCQUQwQUYxNjc5NDIyMzVCMDFC OUIxRjM1NDAeFw0yNTExMTQwMTU3MjNaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNzJmLWJhZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkn/T/d4EbVJ9XLb1nv6K69fhU7ekdpPhHqoDM0GN8UzhwD7DIErAam+Bp6+0f okiHo+KRNK7ecjjRVo4XBXAHxnxGWk44ebCtiK7VCyZWZ/EBlIS2mQmelJ3JhJmh IRLv2J+AKBVLWjuOrdtp6DnPSOWDA3KT+Iv0HY+XKdthbbGEVOrwNY7RFhxzecMY I9wVPmV3kClKeHQD7jV+dNlI8+ktyD0+0TBlcgtyjQgdLe+EtP0sU+/Yf/GWNfI3 WOdSufdIrDvteV0e8LxiPTkyxpzR2MiEeqhDPB/3EAMKoCg8eKcaJ1bqg2JSEcLO 1uMZW8ZIlyh1rlWgCYSXPJ97AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU+uykf/ci M06ADN8xm25Nd2eUb6UwHwYDVR0jBBgwFoAUildxfmLhFbrQrxZ5QiNbAbmx81Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjcxLzQ2MEIwODA0QkUx RjExRjA5NTQzNUQ2RUM0RjlBRTAyL2lsZHhmbUxoRmJyUXJ4WjVRaU5iQWJteDgx US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWxkeGZtTGhGYnJRcnhaNVFpTmJBYm14ODFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzY3MS80NjBCMDgwNEJFMUYxMUYwOTU0MzVENkVDNEY5QUUwMi80MkFENDEyOEMw RkQxMUYwODgzRDk4N0RDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/KcwDQYJKoZIhvcNAQELBQADggEBAI1tPmLpmkiv3rQyAaZJ60Ln pRX/Ui3oVt89SGCX5DVjMpRekc0uInKkPpGtHzwsITe4CJ05kofPfdd0Vw5NwMdv quYpOS+MqBjsknW4X2MGl8QBlXY3jVF0WbjNlswMnLlyU20Se8KWTxfuQgDfCdUs uLjQPkgd+2BKPOwAE9kYGkUreSBlB9L3FITxQ/oV/5xDuyqB5MNC0jGFUKMNV3+c QYRx4ko2iaK9B9QPnjImR0fScK1CvWI3EFpa+7Ed3O0kooQgeirger4H1Z2AHnH+ fheBfie1esPC2Ns4Gvizd70PKKQjAZJt8LAz/Q6RyLAKKUKXcwhaLmzBOrRbrF0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:03 2026 by rpki-client