$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/886DFB52BE4711F0A5FBDC5FC4F9AE02.roa File: 886DFB52BE4711F0A5FBDC5FC4F9AE02.roa (raw, json) Hash identifier: qIdXJ0ADHeohVK85wcLxaAejqeQhAXKRfdoayVpue1w= Subject key identifier: 53:B8:E0:70:38:1C:81:4F:14:70:24:A0:94:53:D8:DB:11:ED:B7:68 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: 4E Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/886DFB52BE4711F0A5FBDC5FC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:14:41 +0000 ROA not before: Mon 10 Nov 2025 15:11:29 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154332 IP address blocks: 138.252.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Nov 10 15:11:29 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d951-0bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:63:a4:8d:4c:54:14:66:c2:ec:d7:36:c0: a2:89:15:ab:32:e6:fb:94:54:bc:08:66:6f:fe:43: 34:be:bc:c4:8e:0e:fb:c1:2e:de:81:82:a5:0c:78: 22:7d:7c:05:e2:a3:41:6a:14:07:8f:c2:5f:c7:71: 35:7a:0f:b8:04:13:86:26:4f:5d:d9:75:59:8a:43: bd:30:52:46:3b:4a:de:d0:2a:37:bb:fb:99:10:12: 09:4c:08:ef:6d:7f:98:31:c4:52:25:5e:f3:bf:67: d8:ee:ac:0e:d9:4f:ff:f6:ea:c7:fd:de:51:e8:a7: 8a:68:40:4a:22:c0:d5:c8:6f:c9:6d:f8:97:c6:1c: e4:a3:e3:1f:bb:c6:33:7c:30:54:48:f6:88:ab:36: 68:36:1c:bc:f7:f1:14:78:01:ee:07:a8:05:d5:5c: 9d:b1:cc:3a:41:26:75:2e:28:10:8c:d5:27:f1:a5: 63:01:8f:74:98:af:07:bb:77:87:57:05:2d:28:1b: 1f:ee:d8:ff:98:c2:cb:13:d6:41:a5:b9:54:1b:de: 38:3b:94:0e:15:5c:42:0c:a3:23:a3:64:17:16:bc: 5b:6e:a8:54:55:46:85:6e:71:62:21:c1:78:82:7e: 9b:23:a6:aa:b8:36:42:c6:bf:f3:c7:ab:62:84:bb: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B8:E0:70:38:1C:81:4F:14:70:24:A0:94:53:D8:DB:11:ED:B7:68 X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/886DFB52BE4711F0A5FBDC5FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.120.0/24 Signature Algorithm: sha256WithRSAEncryption 22:a1:e6:d4:f7:50:87:60:36:fb:fe:51:c4:6c:67:59:dc:2f: b7:26:9e:4b:41:78:23:58:db:00:df:57:b9:67:13:71:df:37: 65:5d:a5:34:eb:98:89:c3:1b:4c:10:58:ac:9e:fc:f5:97:56: c1:7d:2f:6b:37:39:7c:75:77:b9:ea:66:e9:56:d1:52:87:e1: 72:36:49:ea:0e:e9:16:21:5a:55:d8:e0:e7:ce:58:8c:1e:bd: fd:fc:28:c6:1e:3f:ad:2b:e7:fc:81:17:81:5f:ba:33:6f:37: 78:9d:90:26:72:fb:91:d9:13:c6:f5:3e:28:2c:3e:21:ce:07: d0:f4:d5:bf:7c:4f:53:aa:75:cd:d4:8b:b3:31:bf:37:5c:49: b3:ba:c8:9a:df:1f:8d:cb:83:0f:6e:fe:88:15:62:2a:29:6f: 4f:8d:b9:a2:d5:0d:05:96:0b:fd:a6:b6:7f:09:f5:85:a4:fb: 0a:b6:95:eb:02:1d:74:6b:9d:89:15:5f:27:b7:74:98:28:b7: 5e:65:ad:0e:2a:7c:1e:6c:8b:0c:00:aa:c3:e9:cc:26:32:52: a2:90:61:2f:4b:db:c4:dc:f6:ec:64:3d:0b:7e:d0:c1:10:65: 1b:ce:d6:40:47:da:3a:7e:74:f8:42:fc:3d:f6:95:fc:e5:68: 85:d1:09:99 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzhBNzExMC8GA1UEBRMoMUM1OTY4NTg2Q0I0QzdFMjgzRjE0MTlGNTg1MDQ2OEVE QTU1OTY4MjAeFw0yNTExMTAxNTExMjlaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkOTUxLTBiY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGuGOkjUxUFGbC7Nc2wKKJFasy5vuUVLwIZm/+QzS+vMSODvvBLt6BgqUMeCJ9 fAXio0FqFAePwl/HcTV6D7gEE4YmT13ZdVmKQ70wUkY7St7QKje7+5kQEglMCO9t f5gxxFIlXvO/Z9jurA7ZT//26sf93lHop4poQEoiwNXIb8lt+JfGHOSj4x+7xjN8 MFRI9oirNmg2HLz38RR4Ae4HqAXVXJ2xzDpBJnUuKBCM1SfxpWMBj3SYrwe7d4dX BS0oGx/u2P+YwssT1kGluVQb3jg7lA4VXEIMoyOjZBcWvFtuqFRVRoVucWIhwXiC fpsjpqq4NkLGv/PHq2KEu0S/AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUU7jgcDgc gU8UcCSglFPY2xHtt2gwHwYDVR0jBBgwFoAUHFloWGy0x+KD8UGfWFBGjtpVloIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3OEE3L0ZBRTk2QzRBQjYy MDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSEZsb1dHeTB4LUtEOFVHZldGQkdqdHBWbG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzhBNy9GQUU5NkM0QUI2MjAxMUYwQTc0OTIxMUZDNEY5QUUwMi84ODZERkI1MkJF NDcxMUYwQTVGQkRDNUZDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/HgwDQYJKoZIhvcNAQELBQADggEBACKh5tT3UIdgNvv+UcRsZ1nc L7cmnktBeCNY2wDfV7lnE3HfN2VdpTTrmInDG0wQWKye/PWXVsF9L2s3OXx1d7nq ZulW0VKH4XI2SeoO6RYhWlXY4OfOWIwevf38KMYeP60r5/yBF4FfujNvN3idkCZy +5HZE8b1PigsPiHOB9D01b98T1Oqdc3Ui7MxvzdcSbO6yJrfH43Lgw9u/ogVYiop b0+NuaLVDQWWC/2mtn8J9YWk+wq2lesCHXRrnYkVXye3dJgot15lrQ4qfB5siwwA qsPpzCYyUqKQYS9L28Tc9uxkPQt+0MEQZRvO1kBH2jp+dPhC/D32lfzlaIXRCZk= -----END CERTIFICATE-----Generated at Mon Mar 2 12:03:08 2026 by rpki-client