$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/9402F1E2B95711F0959B8139C4F9AE02.roa File: 9402F1E2B95711F0959B8139C4F9AE02.roa (raw, json) Hash identifier: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik= Subject key identifier: CF:E5:BE:BF:8D:D5:3B:B9:72:32:0A:D1:80:51:B8:54:AB:AD:47:D9 Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Certificate serial: 40 Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/9402F1E2B95711F0959B8139C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:07:46 +0000 ROA not before: Tue 04 Nov 2025 08:23:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134077 IP address blocks: 138.252.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Validity Not Before: Nov 4 08:23:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d7b2-a18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:ad:f7:10:f7:14:ed:15:b8:70:bb:bb:27: 1c:76:1a:c0:ca:ee:e2:f7:b3:d5:38:fa:fc:54:e9: 3a:a5:05:70:03:29:1a:a1:28:3d:de:8b:62:65:34: 6f:13:1c:6a:2b:c6:7a:38:ee:db:7c:c9:99:46:cc: 25:03:19:93:b3:68:05:99:33:57:96:e0:db:e2:92: ad:b8:b4:7d:ef:9e:3f:f1:dd:38:c3:f8:d7:e7:fb: f1:e5:e7:00:77:d3:c9:b2:9a:c4:4f:e8:7f:bc:68: 8f:c1:2f:2c:bd:d7:89:c4:00:30:a2:d7:14:e6:05: dc:02:65:da:00:e2:92:9f:ed:3c:6b:9b:74:2f:77: 6b:53:b4:b6:a2:8d:4e:a7:15:9c:80:69:b1:8e:b5: d5:9b:a2:ee:fd:5b:e9:23:7a:8f:53:26:43:fe:85: f5:ef:bb:71:2c:51:bb:5e:c3:a4:b2:07:09:8a:12: f9:da:f8:c2:2f:11:dd:31:a6:03:2f:b0:c4:6e:a8: f3:0e:27:b6:8b:13:72:83:d5:e3:82:e3:c5:3e:7c: d8:6f:73:01:5b:43:5e:bd:ec:3f:30:81:f8:58:f5: e2:1f:57:20:8f:ef:ef:e2:ad:41:4c:4b:a6:c4:4f: 6d:3b:2e:3c:07:60:b3:2b:19:23:87:ad:44:28:08: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E5:BE:BF:8D:D5:3B:B9:72:32:0A:D1:80:51:B8:54:AB:AD:47:D9 X509v3 Authority Key Identifier: keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/9402F1E2B95711F0959B8139C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.140.0/23 Signature Algorithm: sha256WithRSAEncryption 91:4e:ca:c2:64:af:75:aa:ab:33:f0:c5:17:43:58:fa:67:7a: 6f:5d:10:79:a5:16:e2:20:cb:6e:a3:29:69:a9:f7:56:2f:cc: 07:8f:35:15:9e:c6:71:46:21:d1:c9:53:d6:f7:6f:78:6b:f4: c3:9f:b4:a6:28:ea:10:a6:9b:74:96:63:b2:a2:b1:44:05:4c: cd:37:55:dd:d6:56:a9:bb:13:99:89:d7:1f:b1:03:a9:d9:b7: 2c:70:38:f9:0d:ae:f1:ce:82:4c:26:fe:0c:26:2d:80:b7:83: d3:11:fe:50:e0:7e:31:34:db:94:67:b3:af:35:01:14:34:67: 03:78:47:82:e5:75:76:25:09:b4:d8:db:ac:79:e6:e1:d9:6e: b7:5d:ca:a7:3f:c4:d5:82:04:0a:80:77:e2:e8:79:a8:fd:0d: c5:cd:98:07:79:c4:dd:f1:8c:3b:e2:67:53:07:c3:b4:48:54: 66:f9:60:56:e3:8c:9e:fd:7c:8d:bf:74:63:d0:b0:79:07:6b: af:18:58:22:1d:17:6a:56:62:a2:f6:26:37:ea:ee:14:af:09: 0c:61:1e:73:53:c5:66:b8:ed:f2:22:69:9b:3a:24:19:79:57: 2b:3e:80:d6:d0:65:01:fa:a0:2e:f4:ab:62:8c:4a:a8:58:ca: bb:43:42:84 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoN0M3ODk1OTZENUEzN0IwNDVDOUQ5RjEzQTQyMDBDMUU4 NzQ3N0Y3NDAeFw0yNTExMDQwODIzNDRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkN2IyLWExOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvVq33EPcU7RW4cLu7Jxx2GsDK7uL3s9U4+vxU6TqlBXADKRqhKD3ei2JlNG8T HGorxno47tt8yZlGzCUDGZOzaAWZM1eW4Nvikq24tH3vnj/x3TjD+Nfn+/Hl5wB3 08mymsRP6H+8aI/BLyy914nEADCi1xTmBdwCZdoA4pKf7Txrm3Qvd2tTtLaijU6n FZyAabGOtdWbou79W+kjeo9TJkP+hfXvu3EsUbtew6SyBwmKEvna+MIvEd0xpgMv sMRuqPMOJ7aLE3KD1eOC48U+fNhvcwFbQ1697D8wgfhY9eIfVyCP7+/irUFMS6bE T207LjwHYLMrGSOHrUQoCEEbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUz+W+v43V O7lyMgrRgFG4VKutR9kwHwYDVR0jBBgwFoAUfHiVltWjewRcnZ8TpCAMHodHf3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0Q0N0Y0OTBDQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZkhpVmx0V2pld1Jjblo4VHBDQU1Ib2RIZjNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNENC9ENDdGNDkwQ0I5NTUxMUYwOUE3RjZENzFDNEY5QUUwMi85NDAyRjFFMkI5 NTcxMUYwOTU5QjgxMzlDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/IwwDQYJKoZIhvcNAQELBQADggEBAJFOysJkr3WqqzPwxRdDWPpn em9dEHmlFuIgy26jKWmp91YvzAePNRWexnFGIdHJU9b3b3hr9MOftKYo6hCmm3SW Y7KisUQFTM03Vd3WVqm7E5mJ1x+xA6nZtyxwOPkNrvHOgkwm/gwmLYC3g9MR/lDg fjE025Rns681ARQ0ZwN4R4LldXYlCbTY26x55uHZbrddyqc/xNWCBAqAd+Loeaj9 DcXNmAd5xN3xjDviZ1MHw7RIVGb5YFbjjJ79fI2/dGPQsHkHa68YWCIdF2pWYqL2 Jjfq7hSvCQxhHnNTxWa47fIiaZs6JBl5Vys+gNbQZQH6oC70q2KMSqhYyrtDQoQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:01:58 2026 by rpki-client