$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/88B9736AA77811F092FD731BC4F9AE02.roa File: 88B9736AA77811F092FD731BC4F9AE02.roa (raw, json) Hash identifier: u+cn9UutTPsBz+rSTM9fD/qL+39w/7zRbkPYbDsgfs4= Subject key identifier: 6C:88:FA:12:A3:FA:DE:09:9D:7E:D7:01:4A:82:8C:09:64:86:79:3D Certificate issuer: /CN=A91CFBA9/serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF Certificate serial: 06 Authority key identifier: 04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/88B9736AA77811F092FD731BC4F9AE02.roa Signing time: Sun 12 Oct 2025 14:34:18 +0000 ROA not before: Sun 12 Oct 2025 14:34:18 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154287 IP address blocks: 138.252.26.0/24 maxlen: 24 138.252.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBA9, serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF Validity Not Before: Oct 12 14:34:18 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68ebbc6a-cb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:1b:89:3b:ab:eb:1b:8f:5e:4d:23:e7:ca: 4c:68:ce:6c:99:b2:79:ea:59:57:43:bb:4d:48:2c: e9:66:52:10:bf:24:f7:7f:a7:45:1b:b3:0b:4f:a0: 68:0a:24:da:b5:6d:67:8c:b4:21:6d:cf:0b:79:72: f8:65:ca:b9:cd:37:89:f2:8f:a4:79:a6:6d:ad:7a: 46:16:08:86:a0:cd:58:72:dd:38:3f:99:0e:5b:ea: e4:25:e7:7a:d4:16:ec:c0:bb:69:06:12:3e:49:44: 3f:5a:e9:8d:6f:94:3f:5c:64:76:89:cb:26:8a:45: 77:73:e5:13:9f:3e:8e:1b:7b:f8:48:64:ab:f9:6a: b4:2a:4f:9d:6f:6e:bc:f6:19:c1:2f:3d:50:b6:36: 88:47:d3:18:03:da:b1:d0:f2:04:de:2b:dd:b3:40: 7c:32:88:17:36:9c:c2:5a:22:33:8b:62:47:bf:d5: 7d:1d:63:25:3c:fc:90:ed:15:26:cd:cf:62:11:ef: 85:60:7b:f6:d4:55:73:9b:d2:ee:e0:69:a0:fa:1c: e2:4e:64:be:3b:6f:99:65:d0:18:48:6c:07:21:a1: 2d:f2:eb:0e:4b:ef:94:9a:43:0d:19:8c:5e:49:97: 44:55:94:01:78:c9:3b:c5:67:25:47:0c:d5:66:28: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:88:FA:12:A3:FA:DE:09:9D:7E:D7:01:4A:82:8C:09:64:86:79:3D X509v3 Authority Key Identifier: keyid:04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/88B9736AA77811F092FD731BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.26.0/23 Signature Algorithm: sha256WithRSAEncryption ac:c2:2a:70:a4:92:79:6d:01:64:c3:87:4f:cd:5d:a1:3b:cd: 77:42:97:63:0d:a4:3c:82:70:2d:44:ae:7f:c3:f8:a1:4e:7e: 40:44:99:c3:14:3f:0f:8c:27:1d:30:99:8d:3e:ea:bb:97:e3: 60:b2:f5:58:72:fa:6c:a9:92:90:c9:fc:b9:29:e6:bd:61:63: 34:67:85:87:56:41:4f:fe:e3:26:a0:90:dc:97:e2:d0:78:00: 54:2a:1a:b4:f5:dd:d2:9f:42:2f:10:e7:9f:b1:fa:d6:d5:c1: 00:b7:55:6f:79:32:21:df:7a:cf:4e:4c:35:5e:3a:93:98:4a: 4c:54:f4:09:36:33:d0:a4:de:b1:a0:ee:b3:61:0a:45:b4:dd: 26:ff:b9:79:b8:46:cc:31:de:76:df:26:aa:c0:ea:b7:8c:6e: f2:b4:ef:20:30:46:d5:87:3c:38:f1:79:52:98:49:db:6e:dd: df:b7:50:9b:c0:e9:b4:e6:6f:bc:90:ed:28:55:50:df:7a:77: db:de:71:e7:84:a0:a2:4f:88:b6:28:8c:ad:fb:bf:cc:b4:aa: 16:65:71:e2:89:1a:68:c6:aa:5d:9d:93:d8:e9:a0:93:af:4b: f2:8b:91:e9:09:4f:6c:a3:49:be:fc:1f:1f:e8:d4:53:95:0a: 4d:86:7d:ca -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJBOTExMC8GA1UEBRMoMDQ1OUJCRjdDQjg0QzE3RUVENTFCNjhDRUFEOTQxOTU3 RDc4NUZBRjAeFw0yNTEwMTIxNDM0MThaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZWJiYzZhLWNiOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/GRuJO6vrG49eTSPnykxozmyZsnnqWVdDu01ILOlmUhC/JPd/p0UbswtPoGgK JNq1bWeMtCFtzwt5cvhlyrnNN4nyj6R5pm2tekYWCIagzVhy3Tg/mQ5b6uQl53rU FuzAu2kGEj5JRD9a6Y1vlD9cZHaJyyaKRXdz5ROfPo4be/hIZKv5arQqT51vbrz2 GcEvPVC2NohH0xgD2rHQ8gTeK92zQHwyiBc2nMJaIjOLYke/1X0dYyU8/JDtFSbN z2IR74Vge/bUVXOb0u7gaaD6HOJOZL47b5ll0BhIbAchoS3y6w5L75SaQw0ZjF5J l0RVlAF4yTvFZyVHDNVmKCNPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUbIj6EqP6 3gmdftcBSoKMCWSGeT0wHwYDVR0jBBgwFoAUBFm798uEwX7tUbaM6tlBlX14X68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkE5LzU3MzAxNTlBQTc3 NTExRjA5NERFQkYyREM0RjlBRTAyL0JGbTc5OHVFd1g3dFViYU02dGxCbFgxNFg2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQkZtNzk4dUV3WDd0VWJhTTZ0bEJsWDE0WDY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkJBOS81NzMwMTU5QUE3NzUxMUYwOTRERUJGMkRDNEY5QUUwMi84OEI5NzM2QUE3 NzgxMUYwOTJGRDczMUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8GjANBgkqhkiG9w0BAQsFAAOCAQEArMIqcKSSeW0BZMOH T81doTvNd0KXYw2kPIJwLUSuf8P4oU5+QESZwxQ/D4wnHTCZjT7qu5fjYLL1WHL6 bKmSkMn8uSnmvWFjNGeFh1ZBT/7jJqCQ3Jfi0HgAVCoatPXd0p9CLxDnn7H61tXB ALdVb3kyId96z05MNV46k5hKTFT0CTYz0KTesaDus2EKRbTdJv+5ebhGzDHedt8m qsDqt4xu8rTvIDBG1Yc8OPF5UphJ227d37dQm8DptOZvvJDtKFVQ33p3295x54Sg ok+ItiiMrfu/zLSqFmVx4okaaMaqXZ2T2Omgk69L8ouR6QlPbKNJvvwfH+jUU5UK TYZ9yg== -----END CERTIFICATE-----Generated at Wed Nov 5 19:37:42 2025 by rpki-client