$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/3B2923CEA59311F1BFA29E7E6111F970.roa File: 3B2923CEA59311F1BFA29E7E6111F970.roa (raw, json) Hash identifier: zc/NW/dPGEzjO8NVANWmITjbMxQww0CXhaNhPAuHH4Q= Subject key identifier: 85:D0:EF:5B:E8:4E:1F:B5:31:96:27:7A:F8:24:79:E1:E1:19:68:B0 Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Certificate serial: B7 Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/3B2923CEA59311F1BFA29E7E6111F970.roa Signing time: Sat 19 Sep 2026 07:56:48 +0000 ROA not before: Sat 19 Sep 2026 07:56:48 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 4764 IP address blocks: 138.252.8.0/24 maxlen: 24 138.252.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Validity Not Before: Sep 19 07:56:48 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6aae4040-784b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:e4:af:df:fe:00:59:84:ec:55:ff:a6:73: db:ad:de:6a:1e:98:9d:ef:58:7a:31:82:14:3d:92: e3:c9:ed:d0:e1:34:37:80:f6:78:9e:da:e7:04:8f: 2e:d9:6b:f3:8c:85:e3:37:e3:fe:f3:2e:2a:d7:a0: a7:14:37:c8:94:a9:bf:70:2e:5e:85:c5:5c:9c:ff: 14:97:a8:2b:17:3b:33:af:72:23:e7:45:d7:e6:bf: dc:43:a6:d6:6e:eb:f7:86:66:24:f4:7d:10:73:2b: 35:51:1b:df:ce:fb:84:87:0f:17:4b:b7:e7:f4:9f: ac:77:e6:89:3e:5e:38:0c:ce:13:64:fc:d1:d0:5d: a8:82:4d:cb:f0:78:3a:18:3b:e3:98:7a:c2:fc:c1: 7f:39:f3:ea:a7:db:ea:4d:cc:aa:65:3f:92:5c:06: 96:e6:74:ef:18:be:7c:1c:34:53:21:06:e0:e6:eb: d5:e0:05:16:b2:59:16:c7:17:98:9b:73:52:73:87: f5:cb:28:92:bc:91:33:c4:cb:bd:8c:75:27:e5:7d: 85:19:89:d4:0a:d2:1f:b8:04:78:77:c8:f1:8d:2b: e1:5c:98:bc:0f:ff:f2:7f:b3:0f:5d:3a:e7:7a:aa: a7:56:62:50:09:2f:9f:0e:ab:36:ce:9f:1b:4d:2d: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D0:EF:5B:E8:4E:1F:B5:31:96:27:7A:F8:24:79:E1:E1:19:68:B0 X509v3 Authority Key Identifier: keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/3B2923CEA59311F1BFA29E7E6111F970.roa sbgp-ipAddrBlock: critical IPv4: 138.252.8.0/23 Signature Algorithm: sha256WithRSAEncryption a0:c7:09:19:aa:f9:fe:f0:eb:de:a1:5b:c9:7d:55:dd:8f:b4: 9e:05:98:15:23:bc:1f:46:6f:6b:e2:cf:5b:2a:71:36:75:2f: d9:e4:83:85:2d:6b:a1:ad:6d:0c:97:d3:25:ce:c9:19:10:19: 9d:f4:8e:1f:c3:e1:f1:a0:04:af:1a:ea:00:37:0d:74:2e:22: ac:78:70:bd:4c:ab:ef:6a:73:5c:6b:1f:e5:46:0e:7e:aa:99: 38:73:c8:6f:ab:27:f2:d5:75:b9:fe:13:d3:d9:a5:24:63:10: 30:71:9a:c3:4e:d0:5b:9f:13:91:74:dd:f2:8f:80:97:8e:78: 0b:59:ce:bf:a2:66:8e:1f:9c:c4:a9:33:2b:0b:02:59:26:85: a9:19:72:7c:af:fd:8d:4f:59:98:80:e9:91:75:4e:e9:48:2c: ac:2e:1b:52:02:a8:61:ea:8f:aa:d2:95:a2:eb:90:a4:bd:f5: 90:77:29:65:1e:94:28:ea:36:bd:2e:50:0e:a1:a9:ca:75:5d: ed:d9:eb:33:44:cf:1e:08:d7:6c:15:ad:ce:36:c9:d9:53:9c: e4:5c:0f:55:a5:ea:23:71:e8:72:8e:cc:d4:bc:1c:49:ea:be: a1:be:05:0b:c7:f7:f5:43:0c:40:50:0a:77:c7:f1:bf:af:13: 4e:63:5b:54 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNzYxMTAvBgNVBAUTKEJEOEUzQ0MyQTkzRDVEQkNEODQyNzUwOTczOEEzMTRC RjkwQzg4N0QwHhcNMjYwOTE5MDc1NjQ4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFlNDA0MC03ODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApejkr9/+AFmE7FX/pnPbrd5qHpid71h6MYIUPZLjye3Q4TQ3gPZ4ntrnBI8u 2WvzjIXjN+P+8y4q16CnFDfIlKm/cC5ehcVcnP8Ul6grFzszr3Ij50XX5r/cQ6bW buv3hmYk9H0Qcys1URvfzvuEhw8XS7fn9J+sd+aJPl44DM4TZPzR0F2ogk3L8Hg6 GDvjmHrC/MF/OfPqp9vqTcyqZT+SXAaW5nTvGL58HDRTIQbg5uvV4AUWslkWxxeY m3NSc4f1yyiSvJEzxMu9jHUn5X2FGYnUCtIfuAR4d8jxjSvhXJi8D//yf7MPXTrn eqqnVmJQCS+fDqs2zp8bTS3LsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIXQ71vo Th+1MZYnevgkeeHhGWiwMB8GA1UdIwQYMBaAFL2OPMKpPV282EJ1CXOKMUv5DIh9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU3Ni9EOUU0QzRDQ0I5 MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi92WTQ4d3FrOVhiellRblVKYzRveFNfa01p SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZZNDh3cWs5WGJ6WVFuVUpjNG94U19rTWlIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkZFNzYvRDlFNEM0Q0NCOTI3MTFGMEI4MEVDNDVFQzRGOUFFMDIvM0IyOTIzQ0VB NTkzMTFGMUJGQTI5RTdFNjExMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivwIMA0GCSqGSIb3DQEBCwUAA4IBAQCgxwkZqvn+8OveoVvJfVXd j7SeBZgVI7wfRm9r4s9bKnE2dS/Z5IOFLWuhrW0Ml9MlzskZEBmd9I4fw+HxoASv GuoANw10LiKseHC9TKvvanNcax/lRg5+qpk4c8hvqyfy1XW5/hPT2aUkYxAwcZrD TtBbnxORdN3yj4CXjngLWc6/omaOH5zEqTMrCwJZJoWpGXJ8r/2NT1mYgOmRdU7p SCysLhtSAqhh6o+q0pWi65CkvfWQdyllHpQo6ja9LlAOoanKdV3t2eszRM8eCNds Fa3ONsnZU5zkXA9VpeojcehyjszUvBxJ6r6hvgULx/f1QwxAUAp3x/G/rxNOY1tU -----END CERTIFICATE-----Generated at Tue Sep 22 10:31:38 2026 by rpki-client