$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/97B11C3CD29411F09264510FC4F9AE02.roa File: 97B11C3CD29411F09264510FC4F9AE02.roa (raw, json) Hash identifier: QApOxw4AB+QU5Y26DW3TDa/Ln50nbLLZSnM8Pz+sHv4= Subject key identifier: 70:96:1C:4B:79:9E:D5:B1:77:10:C1:DF:8D:AC:30:0F:78:14:8C:1B Certificate issuer: /CN=A91E9B39/serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954 Certificate serial: 2F Authority key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/97B11C3CD29411F09264510FC4F9AE02.roa Signing time: Sun 01 Mar 2026 05:54:38 +0000 ROA not before: Sat 06 Dec 2025 11:13:29 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135147 IP address blocks: 138.252.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954 Validity Not Before: Dec 6 11:13:29 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d49e-7150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:6e:cd:6b:d5:4f:ef:a2:9c:44:fc:08:20: 64:5b:e6:28:2c:25:36:75:68:26:3a:21:e1:e4:c5: b5:1e:2c:31:04:4c:cd:30:e8:7c:8d:00:fb:6e:e6: 2d:bf:5f:a1:c9:ff:69:d7:a1:88:0b:81:95:21:10: a4:e8:d5:e0:3a:1c:52:d2:f0:e4:f8:af:99:a8:e5: e3:02:3e:1d:57:83:bd:d2:37:70:9d:0e:c5:ac:7b: b0:58:8b:92:a9:74:8b:9d:d3:2f:7e:9e:fb:5b:fc: 21:a6:17:f9:94:b4:18:b8:90:ee:34:44:47:a0:3f: 6b:df:b1:f2:17:3c:d3:20:31:6c:82:3f:fc:6c:1c: 35:25:4d:cb:eb:58:d8:04:1f:f9:1c:2e:78:ed:08: b1:ab:e7:fa:31:30:ff:a4:c0:8f:85:89:60:b7:24: 91:5f:5f:81:e8:36:d7:9a:c5:8f:ff:68:49:7b:4b: bc:a2:15:a6:b4:f8:82:31:d5:90:81:45:a0:ff:a8: 85:8a:8a:6c:ec:a3:e8:43:7e:9e:1a:7f:73:3e:9e: 88:b7:a3:af:74:ad:89:d4:82:5a:c0:b0:b3:a0:40: 37:d2:2e:73:25:5a:b0:90:cd:c0:ca:79:ce:d9:9b: 64:df:da:5e:87:1c:1c:ad:a7:d5:25:c5:f9:d2:49: f3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:96:1C:4B:79:9E:D5:B1:77:10:C1:DF:8D:AC:30:0F:78:14:8C:1B X509v3 Authority Key Identifier: keyid:0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/97B11C3CD29411F09264510FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.94.0/24 Signature Algorithm: sha256WithRSAEncryption 39:bf:b0:9a:50:a1:81:4a:75:19:e4:6b:c2:e3:c2:e9:66:4f: c4:e2:f5:14:44:9d:c0:c2:08:68:e4:5c:84:7b:bd:e7:11:ac: 05:f4:6a:ff:be:84:6c:2c:cd:8e:61:46:2d:75:cb:8f:b1:32: 09:20:25:72:a5:8f:3d:87:d2:85:ed:ea:98:d2:0e:fc:3f:97: b1:a2:2b:f8:72:43:65:34:4d:aa:0f:2e:53:8c:a6:02:1c:f0: 4d:41:20:5c:ba:69:3c:60:85:b1:b7:10:e8:28:22:1b:77:f8: 21:80:8e:76:53:14:62:89:11:7b:01:fe:f8:ef:c4:13:76:1a: 07:c5:fa:ee:23:56:70:53:f6:6b:d4:45:f5:98:34:d3:84:f6: e7:be:b7:c7:a2:16:ed:3f:60:d2:93:56:f9:f5:4d:8b:86:60: 3e:33:81:c3:04:a8:a8:30:b3:82:de:a9:18:bf:09:79:64:42: 62:c7:3b:46:c2:27:32:84:e2:c3:76:b5:2c:36:13:27:f7:21: 9d:97:f4:8a:a1:a4:25:65:57:b2:fd:8c:50:fc:36:5a:af:fc: f5:95:0f:ff:4a:30:db:b4:5c:95:1d:ba:25:4a:25:f4:2c:4c: b8:2e:b4:93:65:ec:08:66:d7:ea:8a:aa:4e:ad:6a:24:b8:52: 79:1e:55:3d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUIzOTExMC8GA1UEBRMoMEIwRTRBNEVBQUQxNTBBM0Y2M0U2MTFCMDQ4NDMxMEZF NUZBRjk1NDAeFw0yNTEyMDYxMTEzMjlaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNDllLTcxNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPlm7Na9VP76KcRPwIIGRb5igsJTZ1aCY6IeHkxbUeLDEETM0w6HyNAPtu5i2/ X6HJ/2nXoYgLgZUhEKTo1eA6HFLS8OT4r5mo5eMCPh1Xg73SN3CdDsWse7BYi5Kp dIud0y9+nvtb/CGmF/mUtBi4kO40REegP2vfsfIXPNMgMWyCP/xsHDUlTcvrWNgE H/kcLnjtCLGr5/oxMP+kwI+FiWC3JJFfX4HoNteaxY//aEl7S7yiFaa0+IIx1ZCB RaD/qIWKimzso+hDfp4af3M+noi3o690rYnUglrAsLOgQDfSLnMlWrCQzcDKec7Z m2Tf2l6HHBytp9UlxfnSSfP7AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUcJYcS3me 1bF3EMHfjawwD3gUjBswHwYDVR0jBBgwFoAUCw5KTqrRUKP2PmEbBIQxD+X6+VQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QjM5LzUxQUY5RjY2RDI5 MzExRjA5Qzg2NUQ3N0M0RjlBRTAyL0N3NUtUcXJSVUtQMlBtRWJCSVF4RC1YNi1W US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3c1S1RxclJVS1AyUG1FYkJJUXhELVg2LVZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUIzOS81MUFGOUY2NkQyOTMxMUYwOUM4NjVENzdDNEY5QUUwMi85N0IxMUMzQ0Qy OTQxMUYwOTI2NDUxMEZDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/F4wDQYJKoZIhvcNAQELBQADggEBADm/sJpQoYFKdRnka8Ljwulm T8Ti9RREncDCCGjkXIR7vecRrAX0av++hGwszY5hRi11y4+xMgkgJXKljz2H0oXt 6pjSDvw/l7GiK/hyQ2U0TaoPLlOMpgIc8E1BIFy6aTxghbG3EOgoIht3+CGAjnZT FGKJEXsB/vjvxBN2GgfF+u4jVnBT9mvURfWYNNOE9ue+t8eiFu0/YNKTVvn1TYuG YD4zgcMEqKgws4LeqRi/CXlkQmLHO0bCJzKE4sN2tSw2Eyf3IZ2X9IqhpCVlV7L9 jFD8Nlqv/PWVD/9KMNu0XJUduiVKJfQsTLgutJNl7Ahm1+qKqk6taiS4UnkeVT0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:27:06 2026 by rpki-client