$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/2A400140AB4711F18E8A34C87111F970.roa File: 2A400140AB4711F18E8A34C87111F970.roa (raw, json) Hash identifier: CUggDrBAvzXvaQYrMSRg9yvdzFs6xCvDyXhOQ31B8a4= Subject key identifier: 43:A1:38:8B:16:A9:AD:36:CF:67:AC:9E:50:21:48:A9:C5:44:9F:BE Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Certificate serial: B6 Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/2A400140AB4711F18E8A34C87111F970.roa Signing time: Tue 08 Sep 2026 05:35:57 +0000 ROA not before: Tue 08 Sep 2026 05:35:57 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 23672 IP address blocks: 138.252.2.0/23 maxlen: 23 138.252.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Validity Not Before: Sep 8 05:35:57 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a9f9ebc-c5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:db:6f:64:d2:1c:f7:6b:f8:db:f0:f2:29:c5: 4b:34:c5:87:4c:4a:d8:d8:92:df:6d:22:50:d9:e5: e7:06:0f:a4:14:ee:d7:6a:af:3b:81:da:4f:bc:39: 82:2f:be:a3:d7:27:d8:57:3d:00:2e:03:16:60:67: 76:c5:8c:5f:86:d7:4b:c6:e2:11:17:9f:8f:95:98: 15:69:5a:98:bb:2b:87:07:da:1d:2e:bb:48:2f:07: d5:e8:b1:d4:a6:de:f9:0f:7f:ee:0f:50:7c:18:fa: 0b:fb:36:95:4b:05:a7:63:f7:bd:13:c2:7e:28:d9: fe:cc:ce:7a:79:9e:58:c1:e5:32:aa:51:aa:e3:70: ea:e2:02:03:29:73:e5:88:0f:79:9b:7a:d8:ab:5d: 94:79:99:c0:2d:33:a6:a5:4d:91:39:a7:d3:7f:a1: 04:a3:ad:ee:94:5a:fc:15:9c:dc:f0:db:ac:8b:00: 0b:bf:99:b8:f5:25:6f:2f:1f:72:85:20:21:42:27: 39:7b:f7:28:36:bc:ce:a9:44:2e:6c:6c:12:e8:20: 50:34:07:25:c4:39:cd:5d:cd:7e:0a:d5:49:00:e8: 31:92:b6:f5:f0:8d:33:20:18:cf:4d:02:66:e0:8d: a0:93:00:01:ae:99:21:ea:25:3c:d1:31:59:e8:d8: 07:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A1:38:8B:16:A9:AD:36:CF:67:AC:9E:50:21:48:A9:C5:44:9F:BE X509v3 Authority Key Identifier: keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/2A400140AB4711F18E8A34C87111F970.roa sbgp-ipAddrBlock: critical IPv4: 138.252.2.0/23 Signature Algorithm: sha256WithRSAEncryption 47:a0:10:22:d9:10:92:ad:92:21:d3:36:76:a0:e1:ed:6d:04: b5:9a:37:b5:3c:f8:46:de:4d:c2:b3:37:02:3a:e6:29:d8:b2: 8c:a8:31:7e:6b:e2:83:a0:30:ae:d5:e0:fc:25:13:3e:87:1f: 06:b9:f8:aa:c4:db:54:f8:1f:f6:76:86:31:3b:b1:e1:de:7c: ea:d3:9a:03:3e:49:9a:86:27:98:de:e8:00:ac:67:51:b9:f0: 52:23:a3:64:47:51:9f:22:75:02:46:e7:a1:34:8e:c6:61:a9: c8:76:fd:41:c0:73:4c:95:3b:e2:40:f4:7e:a1:b8:5c:3c:48: 0e:bc:87:79:c6:ed:4c:3c:be:e5:40:e9:7a:3b:d4:18:2c:c1: 5e:11:27:25:96:f4:3f:77:71:23:e5:a8:9c:0b:6d:b3:a4:6e: 51:6c:ba:95:c2:64:58:57:b9:9c:a2:64:a1:01:62:70:87:08: 8a:19:d9:0e:e5:79:75:10:15:ea:dc:ad:7b:7d:21:87:94:25: 52:de:58:77:4f:5f:b3:91:e8:b2:0c:73:f5:fa:b5:b6:22:7f: 1e:2e:55:51:27:db:c3:ba:60:11:3d:c2:65:6d:c0:e7:28:0e: 46:c3:7b:66:5f:d8:2c:f8:36:87:f9:83:69:1f:79:05:09:11: 57:cb:86:1a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZERDAxMTAvBgNVBAUTKDhFMTIxMzE0MjkxNzk2QjJFNTJCODlEODdDNEVENkQ5 RENGQTUyNEIwHhcNMjYwOTA4MDUzNTU3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlmOWViYy1jNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAottvZNIc92v42/DyKcVLNMWHTErY2JLfbSJQ2eXnBg+kFO7Xaq87gdpPvDmC L76j1yfYVz0ALgMWYGd2xYxfhtdLxuIRF5+PlZgVaVqYuyuHB9odLrtILwfV6LHU pt75D3/uD1B8GPoL+zaVSwWnY/e9E8J+KNn+zM56eZ5YweUyqlGq43Dq4gIDKXPl iA95m3rYq12UeZnALTOmpU2ROafTf6EEo63ulFr8FZzc8NusiwALv5m49SVvLx9y hSAhQic5e/coNrzOqUQubGwS6CBQNAclxDnNXc1+CtVJAOgxkrb18I0zIBjPTQJm 4I2gkwABrpkh6iU80TFZ6NgHWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEOhOIsW qa02z2esnlAhSKnFRJ++MB8GA1UdIwQYMBaAFI4SExQpF5ay5SuJ2HxO1tnc+lJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkREMC9DMUM3Q0MxNEM0 NzAxMUYwOTQ1RDYyMzlDNEY5QUUwMi9qaElURkNrWGxyTGxLNG5ZZkU3VzJkejZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2poSVRGQ2tYbHJMbEs0bllmRTdXMmR6NlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZERDAvQzFDN0NDMTRDNDcwMTFGMDk0NUQ2MjM5QzRGOUFFMDIvMkE0MDAxNDBB QjQ3MTFGMThFOEEzNEM4NzExMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivwCMA0GCSqGSIb3DQEBCwUAA4IBAQBHoBAi2RCSrZIh0zZ2oOHt bQS1mje1PPhG3k3CszcCOuYp2LKMqDF+a+KDoDCu1eD8JRM+hx8GufiqxNtU+B/2 doYxO7Hh3nzq05oDPkmahieY3ugArGdRufBSI6NkR1GfInUCRuehNI7GYanIdv1B wHNMlTviQPR+obhcPEgOvId5xu1MPL7lQOl6O9QYLMFeEScllvQ/d3Ej5aicC22z pG5RbLqVwmRYV7mcomShAWJwhwiKGdkO5Xl1EBXq3K17fSGHlCVS3lh3T1+zkeiy DHP1+rW2In8eLlVRJ9vDumARPcJlbcDnKA5Gw3tmX9gs+DaH+YNpH3kFCRFXy4Ya -----END CERTIFICATE-----Generated at Wed Sep 23 18:29:07 2026 by rpki-client