$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/1BB9B9E8B1A211F1B29B34E27011F970.roa File: 1BB9B9E8B1A211F1B29B34E27011F970.roa (raw, json) Hash identifier: mo10WGZmq9tNwrK2xvFXV1zwqAuzUaWpjqL/A8EcvWA= Subject key identifier: 12:BD:E1:CB:42:3C:B8:37:91:7E:1A:05:16:93:CD:DB:32:1B:32:EE Certificate issuer: /CN=A91E1EC4/serialNumber=1B728197D1366314A66ED0BFF31EE952DDC117B6 Certificate serial: 02 Authority key identifier: 1B:72:81:97:D1:36:63:14:A6:6E:D0:BF:F3:1E:E9:52:DD:C1:17:B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/1BB9B9E8B1A211F1B29B34E27011F970.roa Signing time: Wed 16 Sep 2026 07:42:03 +0000 ROA not before: Wed 16 Sep 2026 07:42:03 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150439 IP address blocks: 138.252.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1EC4, serialNumber=1B728197D1366314A66ED0BFF31EE952DDC117B6 Validity Not Before: Sep 16 07:42:03 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6aaa484b-34ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:21:37:4d:cd:89:a5:d6:73:fe:6a:b2:eb: 89:f6:84:ef:2e:0a:f3:82:ea:26:dd:d9:2a:a5:31: 6d:66:0f:7b:35:ea:4c:70:5b:70:d3:04:14:9c:c4: 50:30:24:25:34:25:44:fc:79:3a:f4:b1:f7:17:61: 77:de:b5:ae:ce:94:5b:3a:43:49:67:b0:42:c0:8e: 17:ad:6d:27:b2:55:b6:41:49:96:3b:94:d2:cf:c7: dc:ef:ab:78:e1:95:54:0e:7d:48:96:0d:19:68:22: cb:28:0c:69:9f:8d:6e:24:67:c4:da:04:ba:42:93: 1e:7d:47:df:8f:06:8d:95:56:b0:bd:5f:2e:3d:0d: 98:be:fd:0e:ed:74:2b:b1:b5:4c:81:3b:0b:e0:3b: 71:ff:46:ef:56:71:03:c1:79:93:a9:82:a3:ed:1f: e3:04:5e:d3:28:a7:c8:e7:c3:32:b2:ea:d7:10:f0: f9:23:36:96:cc:8c:a4:ed:1e:ec:2d:f6:a0:74:bb: 0f:22:42:1a:64:eb:12:70:7c:03:3c:c2:07:1b:d8: ef:59:a9:64:4c:42:40:89:5c:71:bb:6c:f9:56:ec: 4d:71:45:74:c3:ab:31:f6:50:d2:87:e9:47:58:ff: 16:08:59:ac:27:bf:40:99:c1:7d:6d:01:61:e7:79: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BD:E1:CB:42:3C:B8:37:91:7E:1A:05:16:93:CD:DB:32:1B:32:EE X509v3 Authority Key Identifier: keyid:1B:72:81:97:D1:36:63:14:A6:6E:D0:BF:F3:1E:E9:52:DD:C1:17:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G3KBl9E2YxSmbtC_8x7pUt3BF7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC4/62C1CEE0B1A011F197311F9C7011F970/1BB9B9E8B1A211F1B29B34E27011F970.roa sbgp-ipAddrBlock: critical IPv4: 138.252.182.0/24 Signature Algorithm: sha256WithRSAEncryption 64:32:b4:48:95:cf:96:ad:6c:32:ad:7e:a2:87:5f:b2:52:96: 21:d4:e6:a0:22:91:43:1a:c6:c5:17:4c:49:d7:68:22:02:a2: 2d:f1:e4:8a:53:ee:35:e6:76:33:25:52:02:ef:1d:39:11:dd: 01:00:5f:fe:f7:ad:29:48:94:a9:d7:76:87:bb:89:fe:43:49: c5:28:7e:67:79:4d:1d:8c:42:2b:f5:b6:c3:0c:6d:f0:df:e0: 50:cf:0a:46:a5:2f:c7:6a:ae:8a:9e:44:df:37:21:14:23:fe: 8f:6c:d8:14:ed:33:78:d6:9b:0d:ae:4d:c1:7e:7d:81:d0:cd: 70:19:0c:46:23:c3:17:5e:b6:ed:78:20:a6:81:89:55:71:92: e0:f4:6e:8f:e9:ec:33:46:a9:5d:ca:88:06:de:37:65:50:0c: 1d:f8:19:9b:88:40:0e:7c:1f:d5:ca:01:b0:40:ba:fa:78:ed: e2:c5:05:35:1d:2e:01:fc:d1:18:2e:6c:04:ee:4e:67:aa:4c: b7:14:d0:15:a0:fb:ea:5f:86:13:d8:4c:79:8a:43:f4:e2:4f: 3d:49:2f:ce:75:16:d1:7f:7b:c7:b9:b7:a1:e7:78:78:f9:98: 9a:16:b5:d5:fd:37:5d:39:63:42:e3:3d:4b:15:80:e5:ac:26: b1:00:83:46 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUVDNDExMC8GA1UEBRMoMUI3MjgxOTdEMTM2NjMxNEE2NkVEMEJGRjMxRUU5NTJE REMxMTdCNjAeFw0yNjA5MTYwNzQyMDNaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYWE0ODRiLTM0YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrOyE3Tc2JpdZz/mqy64n2hO8uCvOC6ibd2SqlMW1mD3s16kxwW3DTBBScxFAw JCU0JUT8eTr0sfcXYXfeta7OlFs6Q0lnsELAjhetbSeyVbZBSZY7lNLPx9zvq3jh lVQOfUiWDRloIssoDGmfjW4kZ8TaBLpCkx59R9+PBo2VVrC9Xy49DZi+/Q7tdCux tUyBOwvgO3H/Ru9WcQPBeZOpgqPtH+MEXtMop8jnwzKy6tcQ8PkjNpbMjKTtHuwt 9qB0uw8iQhpk6xJwfAM8wgcb2O9ZqWRMQkCJXHG7bPlW7E1xRXTDqzH2UNKH6UdY /xYIWawnv0CZwX1tAWHneSZbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUEr3hy0I8 uDeRfhoFFpPN2zIbMu4wHwYDVR0jBBgwFoAUG3KBl9E2YxSmbtC/8x7pUt3BF7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUM0LzYyQzFDRUUwQjFB MDExRjE5NzMxMUY5QzcwMTFGOTcwL0czS0JsOUUyWXhTbWJ0Q184eDdwVXQzQkY3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzNLQmw5RTJZeFNtYnRDXzh4N3BVdDNCRjdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUVDNC82MkMxQ0VFMEIxQTAxMUYxOTczMTFGOUM3MDExRjk3MC8xQkI5QjlFOEIx QTIxMUYxQjI5QjM0RTI3MDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/LYwDQYJKoZIhvcNAQELBQADggEBAGQytEiVz5atbDKtfqKHX7JS liHU5qAikUMaxsUXTEnXaCICoi3x5IpT7jXmdjMlUgLvHTkR3QEAX/73rSlIlKnX doe7if5DScUofmd5TR2MQiv1tsMMbfDf4FDPCkalL8dqroqeRN83IRQj/o9s2BTt M3jWmw2uTcF+fYHQzXAZDEYjwxdetu14IKaBiVVxkuD0bo/p7DNGqV3KiAbeN2VQ DB34GZuIQA58H9XKAbBAuvp47eLFBTUdLgH80RgubATuTmeqTLcU0BWg++pfhhPY THmKQ/TiTz1JL851FtF/e8e5t6HneHj5mJoWtdX9N105Y0LjPUsVgOWsJrEAg0Y= -----END CERTIFICATE-----Generated at Mon Sep 28 10:30:33 2026 by rpki-client