$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/DB2D63A4EED111F0AB3DEEA1736F56BC.roa File: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (raw, json) Hash identifier: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0= Subject key identifier: 88:04:3A:E4:36:32:9D:E6:CC:D8:8C:E4:3E:9C:30:6D:E4:DC:D6:5A Certificate issuer: /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E Certificate serial: 1D Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/DB2D63A4EED111F0AB3DEEA1736F56BC.roa Signing time: Sun 01 Mar 2026 05:44:45 +0000 ROA not before: Sun 11 Jan 2026 09:42:34 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154321 IP address blocks: 138.252.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E Validity Not Before: Jan 11 09:42:34 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d24d-ee8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:18:8a:ee:72:85:60:7a:38:30:cc:3b:1a: d8:74:e9:3e:f6:8c:6f:b8:1f:4a:dc:08:d7:31:40: 3a:2d:88:f2:4b:a3:10:96:35:fd:90:38:dc:37:e1: a7:8d:bb:a7:c5:4a:95:59:c5:2c:79:78:37:09:5e: be:40:d1:17:c4:c8:e0:c8:fc:49:7e:2a:4e:c6:6b: 33:b9:98:06:97:b5:f6:d0:aa:23:4a:ac:e5:74:be: db:b1:2e:49:02:a3:2d:92:cc:71:05:5b:29:3a:99: 64:c9:84:9d:c0:15:a7:5f:63:6c:e3:c1:66:6f:f1: d8:6e:a9:8f:7e:2c:4d:c7:ea:d5:75:e1:cd:3b:05: da:22:57:8a:1a:ea:59:1b:cc:e6:07:51:e5:dd:90: a3:19:ab:09:5d:bf:26:58:7a:20:fc:06:86:65:f9: 74:0f:3f:79:a7:5a:c5:4b:e3:6a:ee:a9:6a:d4:b2: 02:c8:3e:a0:f5:19:a5:df:de:be:19:da:b7:53:81: 1d:98:e4:2b:87:64:dd:31:a6:24:bb:61:2f:f2:65: 40:f8:79:3a:93:9a:e8:5b:b3:3f:c5:75:4c:70:48: e6:92:df:ab:1c:78:b7:63:48:e3:a7:fc:44:22:c1: 8f:d6:2e:99:b1:6d:39:73:f7:cf:ef:b4:c5:95:b8: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:04:3A:E4:36:32:9D:E6:CC:D8:8C:E4:3E:9C:30:6D:E4:DC:D6:5A X509v3 Authority Key Identifier: keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/DB2D63A4EED111F0AB3DEEA1736F56BC.roa sbgp-ipAddrBlock: critical IPv4: 138.252.106.0/23 Signature Algorithm: sha256WithRSAEncryption b8:65:b7:10:5e:1b:39:32:54:41:d2:cc:83:16:f0:54:9c:b4: 02:8a:41:05:87:ed:a0:d5:51:70:03:2a:ea:fa:9f:ce:c6:45: f7:29:d6:a3:80:5a:23:28:73:18:22:83:d3:cc:a1:44:78:aa: 8d:de:8d:91:3a:eb:cb:23:85:b5:1a:81:03:6d:5b:7e:97:0b: 8e:76:a2:52:b3:a1:f0:1f:4e:cc:4a:f5:d8:b6:c4:00:0a:f4: dc:2b:0a:08:5a:86:dd:06:31:85:20:20:99:a1:b5:07:f3:22: e1:d9:c2:f2:f6:ab:37:fe:fe:6b:9b:72:59:e0:02:2c:4a:ca: 60:c6:cf:96:b1:01:9f:d4:29:46:c5:d7:b7:50:4a:3d:66:31: 3f:c1:39:23:2d:93:23:1d:ba:37:28:57:1d:04:e3:ca:a0:d2: 69:61:f8:27:e6:44:d7:7e:39:6f:00:a9:0a:b8:0b:f4:0b:33: 4c:77:3c:35:f0:f6:61:c7:87:cf:e7:3a:2a:2b:f3:31:11:91: 18:be:09:b3:7c:d6:6e:a9:e4:c4:93:e3:c6:ac:4c:81:f4:88: fb:58:9a:1b:b2:db:3f:05:4c:b1:50:93:53:ad:23:65:6f:70: 11:8a:24:a6:17:37:93:63:0a:68:74:1c:5d:2e:24:61:f8:e6: ab:76:37:94 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OEZGRjExMC8GA1UEBRMoMkQxODY5QjczRUExRTg4RUIxMkJFNjlGMUMwRDRFN0My MTk2QTMzRTAeFw0yNjAxMTEwOTQyMzRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMjRkLWVlOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo4xiK7nKFYHo4MMw7Gth06T72jG+4H0rcCNcxQDotiPJLoxCWNf2QONw34aeN u6fFSpVZxSx5eDcJXr5A0RfEyODI/El+Kk7GazO5mAaXtfbQqiNKrOV0vtuxLkkC oy2SzHEFWyk6mWTJhJ3AFadfY2zjwWZv8dhuqY9+LE3H6tV14c07BdoiV4oa6lkb zOYHUeXdkKMZqwldvyZYeiD8BoZl+XQPP3mnWsVL42ruqWrUsgLIPqD1GaXf3r4Z 2rdTgR2Y5CuHZN0xpiS7YS/yZUD4eTqTmuhbsz/FdUxwSOaS36sceLdjSOOn/EQi wY/WLpmxbTlz98/vtMWVuCfVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUiAQ65DYy nebM2IzkPpwwbeTc1lowHwYDVR0jBBgwFoAULRhptz6h6I6xK+afHA1OfCGWoz4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RkZGLzUwMzU3Q0YwRUVE MTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2eEstYWZIQTFPZkNHV296 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFJocHR6Nmg2STZ4Sy1hZkhBMU9mQ0dXb3o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEZGRi81MDM1N0NGMEVFRDExMUYwQjBBQ0QyNzY3MzZGNTZCQy9EQjJENjNBNEVF RDExMUYwQUIzREVFQTE3MzZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/GowDQYJKoZIhvcNAQELBQADggEBALhltxBeGzkyVEHSzIMW8FSc tAKKQQWH7aDVUXADKur6n87GRfcp1qOAWiMocxgig9PMoUR4qo3ejZE668sjhbUa gQNtW36XC452olKzofAfTsxK9di2xAAK9NwrCghaht0GMYUgIJmhtQfzIuHZwvL2 qzf+/mubclngAixKymDGz5axAZ/UKUbF17dQSj1mMT/BOSMtkyMdujcoVx0E48qg 0mlh+CfmRNd+OW8AqQq4C/QLM0x3PDXw9mHHh8/nOior8zERkRi+CbN81m6p5MST 48asTIH0iPtYmhuy2z8FTLFQk1OtI2VvcBGKJKYXN5NjCmh0HF0uJGH45qt2N5Q= -----END CERTIFICATE-----Generated at Mon Mar 2 11:56:57 2026 by rpki-client