$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/341BBBECA99411F093BBAA15C4F9AE02.roa File: 341BBBECA99411F093BBAA15C4F9AE02.roa (raw, json) Hash identifier: pkkx4zZGCNXTpRTSxpbchOTdZve5NBSRW5RTVv6mqwo= Subject key identifier: 38:8E:B2:25:B4:CA:E0:2C:BD:A9:CD:F2:6B:CD:3C:CD:3F:B7:3C:24 Certificate issuer: /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Certificate serial: B3 Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/341BBBECA99411F093BBAA15C4F9AE02.roa Signing time: Mon 21 Sep 2026 07:57:39 +0000 ROA not before: Mon 21 Sep 2026 07:57:39 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 9484 IP address blocks: 138.252.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Validity Not Before: Sep 21 07:57:39 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ab0e373-8e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:54:9f:f6:51:46:a2:b0:ab:4c:4d:43:0e:83: 5e:65:59:92:27:05:96:dc:23:df:02:0e:4f:0f:fd: ce:9a:71:3a:ae:1c:9a:e5:83:35:f3:2b:84:7d:42: b9:f2:e0:0d:ca:c6:e0:3d:6f:02:59:50:d3:56:67: e8:71:4d:ef:46:3a:6d:eb:83:59:45:0f:a6:a9:0f: 72:4a:c4:f1:16:ae:25:58:83:7e:2f:8d:d5:a8:55: 78:e4:fb:3e:8f:3d:04:a8:b3:f4:69:0f:7d:a0:db: 9f:22:10:af:69:43:a9:a0:cf:30:74:7f:01:da:6c: 99:9c:53:85:4b:39:8b:6d:a0:6d:45:3b:fc:82:bc: c1:97:a0:77:c3:2c:a3:aa:18:8c:30:92:e1:5a:22: 5a:68:a0:7a:35:e3:53:9f:59:04:a0:f2:c2:95:5d: ef:3b:ad:48:64:6f:11:2e:81:c9:8b:d8:24:57:81: c5:d8:b8:d3:ca:a6:67:53:ee:6a:de:1e:d6:ec:db: 61:a1:78:f7:57:8c:2d:58:98:43:86:e2:4b:e4:16: fd:9f:de:e6:13:e1:29:4b:18:3b:ff:f0:72:87:ec: 59:e1:30:a7:77:49:15:95:da:b4:16:1c:a4:c4:4c: d4:48:d0:ed:8a:a5:19:24:a6:73:e1:f7:3a:26:07: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8E:B2:25:B4:CA:E0:2C:BD:A9:CD:F2:6B:CD:3C:CD:3F:B7:3C:24 X509v3 Authority Key Identifier: keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/341BBBECA99411F093BBAA15C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.28.0/23 Signature Algorithm: sha256WithRSAEncryption 61:4a:da:61:93:d5:f9:5c:25:44:17:e1:95:d8:48:3a:87:78: 25:a9:0c:11:e2:c1:70:c9:03:94:b9:f3:6d:1b:93:ab:62:59: c8:98:4c:26:2f:bc:d9:8b:6e:38:44:df:57:02:32:97:f1:7d: 73:0e:ac:60:86:22:40:4a:18:4d:98:48:20:43:56:42:9b:6f: 6f:12:8e:53:53:77:b6:87:b8:ca:38:f4:e6:23:80:cd:92:d4: ba:b9:70:a3:84:ce:d5:bd:22:b1:64:66:44:a3:07:36:36:d6: e2:27:c0:9f:95:f8:c1:5b:b4:0e:0b:d2:b9:50:52:86:7d:48: e2:74:ba:4c:48:3c:54:98:b0:40:47:dc:27:0c:2b:ac:10:ce: 7c:ae:99:d6:55:21:e8:79:c6:cc:fc:cc:30:09:69:92:57:ac: 15:32:d5:cc:60:64:95:74:99:d1:69:33:1f:af:4c:22:1c:a2: 9f:5a:e0:f1:c9:33:1f:52:7f:38:d9:4d:50:e2:53:f1:ae:32: af:4e:45:d0:3a:08:db:1b:e9:14:cd:14:3d:c9:be:e8:9c:77: fe:b3:b1:b2:9e:ee:22:47:65:70:e7:03:8f:4c:b3:83:e5:6f: 4b:89:b2:f0:5f:48:ba:2f:4a:b3:7d:1d:c0:d9:0b:1b:9a:db: f3:ac:98:c1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwREUxMTAvBgNVBAUTKEI2NDNGRUIzMDMyNzQyMTQ4RjNBRjlDMzUzOTMzOEQ1 NTQ5MzcyMjgwHhcNMjYwOTIxMDc1NzM5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIwZTM3My04ZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lSf9lFGorCrTE1DDoNeZVmSJwWW3CPfAg5PD/3OmnE6rhya5YM18yuEfUK5 8uANysbgPW8CWVDTVmfocU3vRjpt64NZRQ+mqQ9ySsTxFq4lWIN+L43VqFV45Ps+ jz0EqLP0aQ99oNufIhCvaUOpoM8wdH8B2myZnFOFSzmLbaBtRTv8grzBl6B3wyyj qhiMMJLhWiJaaKB6NeNTn1kEoPLClV3vO61IZG8RLoHJi9gkV4HF2LjTyqZnU+5q 3h7W7NthoXj3V4wtWJhDhuJL5Bb9n97mE+EpSxg7//Byh+xZ4TCnd0kVldq0Fhyk xEzUSNDtiqUZJKZz4fc6JgcKqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDiOsiW0 yuAsvanN8mvNPM0/tzwkMB8GA1UdIwQYMBaAFLZD/rMDJ0IUjzr5w1OTONVUk3Io MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDBERS80Rjc2OUQ1OEE5 OEYxMUYwQjFGQTUwNjZDNEY5QUUwMi90a1Atc3dNblFoU1BPdm5EVTVNNDFWU1Rj aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RrUC1zd01uUWhTUE92bkRVNU00MVZTVGNpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QwREUvNEY3NjlENThBOThGMTFGMEIxRkE1MDY2QzRGOUFFMDIvMzQxQkJCRUNB OTk0MTFGMDkzQkJBQTE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivwcMA0GCSqGSIb3DQEBCwUAA4IBAQBhStphk9X5XCVEF+GV2Eg6 h3glqQwR4sFwyQOUufNtG5OrYlnImEwmL7zZi244RN9XAjKX8X1zDqxghiJAShhN mEggQ1ZCm29vEo5TU3e2h7jKOPTmI4DNktS6uXCjhM7VvSKxZGZEowc2NtbiJ8Cf lfjBW7QOC9K5UFKGfUjidLpMSDxUmLBAR9wnDCusEM58rpnWVSHoecbM/MwwCWmS V6wVMtXMYGSVdJnRaTMfr0wiHKKfWuDxyTMfUn842U1Q4lPxrjKvTkXQOgjbG+kU zRQ9yb7onHf+s7Gynu4iR2Vw5wOPTLOD5W9LibLwX0i6L0qzfR3A2QsbmtvzrJjB -----END CERTIFICATE-----Generated at Tue Sep 22 18:47:38 2026 by rpki-client