$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/97B6FD12A81611F0BBD11A74C4F9AE02.roa File: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (raw, json) Hash identifier: +o1CGO8tcRdORT+HUDRB+r7Vejjj6YH1/8uUwSB82zw= Subject key identifier: 86:FC:A1:CF:F5:48:ED:26:1A:4F:A2:78:84:DC:B0:05:4C:B6:3B:6A Certificate issuer: /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Certificate serial: 4D Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/97B6FD12A81611F0BBD11A74C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:14:34 +0000 ROA not before: Tue 14 Oct 2025 12:45:48 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133323 IP address blocks: 138.252.0.0/23 maxlen: 23 138.252.0.0/24 maxlen: 24 138.252.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Validity Not Before: Oct 14 12:45:48 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3d94a-78b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:ac:25:07:0d:3e:62:57:1a:aa:af:3c:95: 29:71:7a:2b:45:f4:05:e2:0f:de:e9:c2:eb:be:33: 51:8f:0a:d0:6a:e2:5e:6d:8b:64:fe:4e:09:99:2c: d7:ed:57:68:12:b3:b0:c8:2b:04:8b:70:18:70:8c: 1b:73:bf:00:a7:df:96:7b:12:7f:06:ff:0d:8f:e7: 33:66:b6:71:a5:87:0a:a4:47:f2:1b:0e:4c:62:9e: d8:80:6c:5f:e2:ce:d1:9b:15:41:60:5a:89:f1:8e: 05:7c:53:c8:1c:50:74:90:37:45:80:ea:39:dc:b0: da:de:d0:a0:f1:21:ea:9c:d3:98:27:3d:84:ac:d1: 07:ca:90:a7:af:c0:48:9b:bf:03:a4:f5:1f:a6:d4: b4:a8:d4:01:ae:db:32:8d:75:d1:17:fa:d5:4f:bd: 72:e3:ef:b4:5e:48:61:a5:21:d1:39:1e:62:d2:05: b0:22:a1:1e:60:be:a4:cc:45:c2:04:8b:d3:61:8a: fb:9c:ee:78:b0:63:49:f3:0d:02:8d:cd:9d:7a:1f: d3:d9:6d:8f:56:2d:26:48:f2:0f:3e:d6:49:f8:8c: 7d:d4:28:03:88:dc:33:4b:54:08:d2:9f:42:0e:44: ae:8c:f4:86:99:fa:c0:86:0f:ea:e2:90:5c:43:d1: 31:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FC:A1:CF:F5:48:ED:26:1A:4F:A2:78:84:DC:B0:05:4C:B6:3B:6A X509v3 Authority Key Identifier: keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/97B6FD12A81611F0BBD11A74C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.0.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:73:86:1a:d3:4c:f0:6c:0d:02:1e:01:d6:52:31:df:75:56: 28:d5:41:a7:9e:1d:d9:5b:c2:88:cf:df:c7:66:d3:54:1c:0a: ae:5c:a0:e7:56:b9:fc:3e:a1:7c:c1:3c:c0:5f:4c:05:c4:04: 7d:ae:4c:77:f1:c6:fc:68:7f:0a:12:41:21:49:9a:82:de:91: 8b:dd:7d:44:3d:c5:d5:87:09:fe:d1:e8:2f:b3:d9:cf:cf:66: b6:99:f9:35:ca:8c:fb:2f:d0:d1:7a:40:ae:15:7d:7f:12:43: 9a:b6:9d:61:2a:6e:c5:c3:af:a2:5c:ec:d3:99:fe:dc:5f:14: 64:85:f2:36:47:f1:2e:85:1a:e3:c8:fd:b6:a1:0f:ae:9b:1e: bd:47:c2:c4:be:df:8a:fe:17:15:3a:b6:a7:42:e2:85:2d:1d: fb:b8:8e:e8:db:02:1e:cd:a0:1e:40:9d:ac:ba:13:b9:ed:20: 0a:c7:20:ff:01:7f:c1:09:4d:d8:1a:5a:ac:a5:b8:c0:53:e1: 33:cb:18:1b:1f:5c:5b:74:ea:00:9e:3d:45:7d:0d:c7:37:f7: 49:63:83:41:ca:ee:23:2f:8b:f3:14:be:37:e0:9a:aa:54:5d: 3b:09:0d:b2:05:c4:f3:fa:c4:76:83:33:40:12:58:50:77:df: 99:b1:d9:14 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTMzNzExMC8GA1UEBRMoQUMzQ0NCN0E0MDE5MTFDOEU1MTUzRjMwMTY2QTU0QzlB NzE2M0Y3QjAeFw0yNTEwMTQxMjQ1NDhaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkOTRhLTc4YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8rKwlBw0+Ylcaqq88lSlxeitF9AXiD97pwuu+M1GPCtBq4l5ti2T+TgmZLNft V2gSs7DIKwSLcBhwjBtzvwCn35Z7En8G/w2P5zNmtnGlhwqkR/IbDkxintiAbF/i ztGbFUFgWonxjgV8U8gcUHSQN0WA6jncsNre0KDxIeqc05gnPYSs0QfKkKevwEib vwOk9R+m1LSo1AGu2zKNddEX+tVPvXLj77ReSGGlIdE5HmLSBbAioR5gvqTMRcIE i9Nhivuc7niwY0nzDQKNzZ16H9PZbY9WLSZI8g8+1kn4jH3UKAOI3DNLVAjSn0IO RK6M9IaZ+sCGD+rikFxD0TFDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUhvyhz/VI 7SYaT6J4hNywBUy2O2owHwYDVR0jBBgwFoAUrDzLekAZEcjlFT8wFmpUyacWP3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzNFMDlGMEU0QTgx NjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNqbEZUOHdGbXBVeWFjV1Az cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvckR6TGVrQVpFY2psRlQ4d0ZtcFV5YWNXUDNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTMzNy8zRTA5RjBFNEE4MTYxMUYwODQ5OEFFNzBDNEY5QUUwMi85N0I2RkQxMkE4 MTYxMUYwQkJEMTFBNzRDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/AAwDQYJKoZIhvcNAQELBQADggEBAB5zhhrTTPBsDQIeAdZSMd91 VijVQaeeHdlbwojP38dm01QcCq5coOdWufw+oXzBPMBfTAXEBH2uTHfxxvxofwoS QSFJmoLekYvdfUQ9xdWHCf7R6C+z2c/PZraZ+TXKjPsv0NF6QK4VfX8SQ5q2nWEq bsXDr6Jc7NOZ/txfFGSF8jZH8S6FGuPI/bahD66bHr1HwsS+34r+FxU6tqdC4oUt Hfu4jujbAh7NoB5Anay6E7ntIArHIP8Bf8EJTdgaWqyluMBT4TPLGBsfXFt06gCe PUV9Dcc390ljg0HK7iMvi/MUvjfgmqpUXTsJDbIFxPP6xHaDM0ASWFB335mx2RQ= -----END CERTIFICATE-----Generated at Mon Mar 2 17:13:50 2026 by rpki-client