$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/8F62775EC9B311F08EBFD366C4F9AE02.roa File: 8F62775EC9B311F08EBFD366C4F9AE02.roa (raw, json) Hash identifier: IhKjrimtkW5GZgmr5nVxZh5rfh7SBgszAIZRuKiFWrU= Subject key identifier: 2F:F6:91:9F:13:86:ED:27:84:68:1B:C7:9D:4D:D1:7F:E7:6B:E9:88 Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61 Certificate serial: 34 Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/8F62775EC9B311F08EBFD366C4F9AE02.roa Signing time: Sun 01 Mar 2026 05:58:46 +0000 ROA not before: Tue 25 Nov 2025 04:02:29 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154283 IP address blocks: 138.252.4.0/23 maxlen: 23 138.252.4.0/24 maxlen: 24 138.252.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61 Validity Not Before: Nov 25 04:02:29 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3d596-a12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:06:27:c7:a8:90:bf:e3:94:60:29:46:7c: 6b:44:43:bb:1d:d0:63:6c:6d:a5:1d:ed:50:8b:21: 77:70:c3:18:6f:85:49:c6:46:c8:40:51:1e:b7:02: 4a:f1:f1:52:b9:8a:b4:75:d0:1a:dc:f7:14:25:9f: a4:bf:55:66:82:12:1a:c6:15:fd:76:6b:86:3c:07: 14:5b:26:c2:3f:f1:8c:dc:e8:15:cb:24:b6:4a:4d: bc:90:4a:88:ca:fc:62:aa:a5:29:3b:52:90:27:8e: da:09:bf:4b:79:93:91:59:36:86:a1:2e:c6:eb:ea: a8:70:37:87:05:cd:c1:43:e8:0c:e8:c7:a9:fd:52: c0:d0:37:50:6f:4d:6f:69:2c:42:e8:c8:c0:66:35: b8:81:cf:bd:26:9a:5b:b2:49:a5:14:8a:6f:0b:5b: 34:4d:44:42:46:30:b1:1d:df:e8:c9:76:78:a8:38: be:ca:a6:f2:bb:51:35:72:cd:20:83:4f:21:de:74: 96:e7:b3:e7:c3:75:33:7b:db:68:80:7c:fa:62:c3: af:cc:74:b1:64:7e:a7:9e:06:10:97:d8:07:18:33: 4c:dc:77:87:8f:81:1b:11:e4:6e:2e:21:f9:8f:ab: da:9e:c2:50:43:3e:6b:3b:9d:24:a3:81:d9:eb:e4: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F6:91:9F:13:86:ED:27:84:68:1B:C7:9D:4D:D1:7F:E7:6B:E9:88 X509v3 Authority Key Identifier: keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/8F62775EC9B311F08EBFD366C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.4.0/23 Signature Algorithm: sha256WithRSAEncryption 34:8f:50:a2:49:28:2e:ea:db:10:25:b0:54:e0:8c:6f:6c:c6: 84:c5:56:b0:5b:e5:3d:92:48:e8:6d:5a:cd:63:7d:ae:66:18: 07:c4:61:fd:0d:40:f0:0b:ca:87:04:5f:28:27:f7:2b:e6:de: 8a:9c:ae:72:de:7d:d0:64:1f:27:32:7e:c6:96:5b:5c:98:79: f4:6f:57:9e:47:63:f2:5b:b5:7c:17:86:60:98:51:03:88:d2: 2d:b4:84:37:aa:a3:61:21:ee:dd:fb:b2:27:06:fb:f5:9d:c0: 43:24:85:93:13:60:b4:cb:d9:aa:3d:9a:f8:83:45:1a:1e:48: d4:64:e2:b2:00:96:1f:01:84:ce:93:3c:7f:ab:67:0a:78:a3: f6:e8:f5:3c:fd:a3:73:51:b1:5d:e6:e2:91:de:98:40:1a:53: 54:fc:ec:16:38:c9:1a:65:77:8a:51:5e:5c:63:39:56:24:12: 7c:5e:b2:f0:a9:3e:30:13:da:05:32:82:0a:f6:4d:e5:4b:e1: 0c:ab:a2:55:a4:c5:b3:cc:9e:1c:08:db:a7:9c:c8:30:57:88: 07:f5:e3:79:86:7d:76:ee:da:8a:2e:7a:0c:1d:19:9c:40:8d: a6:7b:24:f6:81:d0:b9:eb:59:bd:ff:19:56:4d:29:31:01:a2: 22:d6:fe:7d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEY1MDExMC8GA1UEBRMoMUJFQTM4MTE0RTlFRTgyRTQwNjRFQjNCRjkxMzI4MDg2 QzM1N0I2MTAeFw0yNTExMjUwNDAyMjlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNTk2LWExMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ9wYnx6iQv+OUYClGfGtEQ7sd0GNsbaUd7VCLIXdwwxhvhUnGRshAUR63Akrx 8VK5irR10Brc9xQln6S/VWaCEhrGFf12a4Y8BxRbJsI/8Yzc6BXLJLZKTbyQSojK /GKqpSk7UpAnjtoJv0t5k5FZNoahLsbr6qhwN4cFzcFD6Azox6n9UsDQN1BvTW9p LELoyMBmNbiBz70mmluySaUUim8LWzRNREJGMLEd3+jJdnioOL7KpvK7UTVyzSCD TyHedJbns+fDdTN722iAfPpiw6/MdLFkfqeeBhCX2AcYM0zcd4ePgRsR5G4uIfmP q9qewlBDPms7nSSjgdnr5IkfAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUL/aRnxOG 7SeEaBvHnU3Rf+dr6YgwHwYDVR0jBBgwFoAUG+o4EU6e6C5AZOs7+RMoCGw1e2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RjUwLzAzM0VDRDcyQzlC MzExRjBBRDYzRkM3OEM0RjlBRTAyL0ctbzRFVTZlNkM1QVpPczctUk1vQ0d3MWUy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRy1vNEVVNmU2QzVBWk9zNy1STW9DR3cxZTJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEY1MC8wMzNFQ0Q3MkM5QjMxMUYwQUQ2M0ZDNzhDNEY5QUUwMi84RjYyNzc1RUM5 QjMxMUYwOEVCRkQzNjZDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/AQwDQYJKoZIhvcNAQELBQADggEBADSPUKJJKC7q2xAlsFTgjG9s xoTFVrBb5T2SSOhtWs1jfa5mGAfEYf0NQPALyocEXygn9yvm3oqcrnLefdBkHycy fsaWW1yYefRvV55HY/JbtXwXhmCYUQOI0i20hDeqo2Eh7t37sicG+/WdwEMkhZMT YLTL2ao9mviDRRoeSNRk4rIAlh8BhM6TPH+rZwp4o/bo9Tz9o3NRsV3m4pHemEAa U1T87BY4yRpld4pRXlxjOVYkEnxesvCpPjAT2gUyggr2TeVL4QyrolWkxbPMnhwI 26ecyDBXiAf143mGfXbu2oouegwdGZxAjaZ7JPaB0LnrWb3/GVZNKTEBoiLW/n0= -----END CERTIFICATE-----Generated at Mon Mar 2 08:51:04 2026 by rpki-client