$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/E9CCD3D8304711F1AA0B4944BF833773.roa File: E9CCD3D8304711F1AA0B4944BF833773.roa (raw, json) Hash identifier: Cfezb8mq7b+Due2G0DCxNN36YmA2ZvpK0RbPIVqNz38= Subject key identifier: A3:F1:4C:67:0D:F7:DD:AF:24:02:17:A0:92:61:B4:A9:E0:CE:B8:7A Certificate issuer: /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856 Certificate serial: 4A Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/E9CCD3D8304711F1AA0B4944BF833773.roa Signing time: Sat 04 Apr 2026 17:01:25 +0000 ROA not before: Sat 04 Apr 2026 17:01:25 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134404 IP address blocks: 138.252.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856 Validity Not Before: Apr 4 17:01:25 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69d143e5-8ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:76:9f:13:ef:11:d0:fc:1c:86:50:20:96: ae:ae:e0:dc:0d:e8:35:ee:4b:8a:45:6a:2d:e3:1a: 5f:a9:ef:5f:17:10:1b:81:79:c4:d4:b7:b7:9b:54: 48:c0:2f:14:40:77:48:76:e3:2c:c3:86:98:3a:7a: 57:78:f3:60:40:cd:3c:af:e7:c2:a4:64:2a:30:e0: be:fa:76:96:99:97:8a:4b:e8:c2:43:32:d9:24:59: 89:60:b9:47:81:66:fd:e1:a3:00:aa:48:c2:03:64: 40:7c:ed:b7:6f:c5:c1:77:3c:f9:98:78:60:5f:f3: b2:62:63:cb:62:63:f1:9c:45:8b:fa:aa:2b:3f:a5: e8:5d:21:a5:d5:bb:3d:ed:bc:a9:d5:f8:c2:d2:e2: 6f:ff:f2:04:53:2e:8a:03:80:4e:53:b4:9b:9b:20: 9b:6b:41:20:4c:2c:f4:29:0a:c6:33:17:b7:0b:d1: f0:4d:b7:a2:c8:42:98:b8:be:e8:b1:b8:75:f4:cb: 8e:77:89:a2:c2:9a:68:4f:a3:05:3e:2e:1a:cd:8c: 4b:48:1d:ee:b6:b9:9b:23:eb:d8:54:0d:2f:b1:dc: 5b:9c:4e:95:13:4e:93:d4:b6:8b:50:51:43:0b:04: 63:76:f5:7c:3e:da:d0:08:8f:b0:e7:2d:2f:f4:78: de:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F1:4C:67:0D:F7:DD:AF:24:02:17:A0:92:61:B4:A9:E0:CE:B8:7A X509v3 Authority Key Identifier: keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/E9CCD3D8304711F1AA0B4944BF833773.roa sbgp-ipAddrBlock: critical IPv4: 138.252.185.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ab:f5:eb:e8:40:e6:6d:68:f4:b6:86:31:e2:b9:36:6b:0c: 2b:a5:4c:5a:44:82:c4:cb:42:92:ad:81:60:33:3a:b0:d6:e9: b4:91:a5:b3:19:25:48:e0:1b:43:5e:80:cb:92:3e:2d:10:cb: 90:76:ee:af:7e:03:a5:61:c3:9b:e2:eb:a3:97:86:89:46:4f: ad:db:17:e1:98:14:ab:44:fc:9a:96:b0:e8:21:cd:28:1d:83: 21:f0:a1:9b:de:cf:e6:11:de:c7:10:7e:37:cc:ca:bf:14:cf: 62:69:47:7a:b9:51:88:7e:39:17:50:f7:b9:ae:85:cc:c8:d5: bc:70:08:59:50:c6:58:78:db:7d:0c:69:f1:8b:53:bf:35:6c: a1:b5:55:ed:40:3e:4c:77:23:44:c0:02:da:94:de:e4:00:a6: b1:24:b4:73:f6:e0:8c:97:01:b8:5e:59:86:12:1d:74:c1:2f: c5:4e:18:68:77:c3:f4:a9:fb:55:e5:c2:fe:fe:fc:5b:5c:67: cc:c5:32:eb:ab:02:6e:b5:6a:7f:13:c2:01:d7:54:aa:9e:63: 48:e6:54:23:aa:77:44:7e:06:14:aa:f0:6e:55:c3:26:fa:12: a9:24:03:02:4e:4d:e3:ab:50:f7:47:e8:c6:56:7e:f5:f6:ab: 80:67:56:79 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDdBMzExMC8GA1UEBRMoMzEyNTc1REU0RDQ2NDNGQURGQUU0ODg3NkRGNDU2N0Q3 RDdDNjg1NjAeFw0yNjA0MDQxNzAxMjVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZDE0M2U1LThjYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCF/3afE+8R0PwchlAglq6u4NwN6DXuS4pFai3jGl+p718XEBuBecTUt7ebVEjA LxRAd0h24yzDhpg6eld482BAzTyv58KkZCow4L76dpaZl4pL6MJDMtkkWYlguUeB Zv3howCqSMIDZEB87bdvxcF3PPmYeGBf87JiY8tiY/GcRYv6qis/pehdIaXVuz3t vKnV+MLS4m//8gRTLooDgE5TtJubIJtrQSBMLPQpCsYzF7cL0fBNt6LIQpi4vuix uHX0y453iaLCmmhPowU+LhrNjEtIHe62uZsj69hUDS+x3FucTpUTTpPUtotQUUML BGN29Xw+2tAIj7DnLS/0eN5lAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUo/FMZw33 3a8kAhegkmG0qeDOuHowHwYDVR0jBBgwFoAUMSV13k1GQ/rfrkiHbfRWfX18aFYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEN0EzLzg2MUIxMTEyQzUy NDExRjA5NTZBREQxQUM0RjlBRTAyL01TVjEzazFHUV9yZnJraUhiZlJXZlgxOGFG WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVNWMTNrMUdRX3JmcmtpSGJmUldmWDE4YUZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDdBMy84NjFCMTExMkM1MjQxMUYwOTU2QUREMUFDNEY5QUUwMi9FOUNDRDNEODMw NDcxMUYxQUEwQjQ5NDRCRjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/LkwDQYJKoZIhvcNAQELBQADggEBAJyr9evoQOZtaPS2hjHiuTZr DCulTFpEgsTLQpKtgWAzOrDW6bSRpbMZJUjgG0NegMuSPi0Qy5B27q9+A6Vhw5vi 66OXholGT63bF+GYFKtE/JqWsOghzSgdgyHwoZvez+YR3scQfjfMyr8Uz2JpR3q5 UYh+ORdQ97muhczI1bxwCFlQxlh4230MafGLU781bKG1Ve1APkx3I0TAAtqU3uQA prEktHP24IyXAbheWYYSHXTBL8VOGGh3w/Sp+1Xlwv7+/FtcZ8zFMuurAm61an8T wgHXVKqeY0jmVCOqd0R+BhSq8G5Vwyb6EqkkAwJOTeOrUPdH6MZWfvX2q4BnVnk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:07:30 2026 by rpki-client