$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/B27ED5E6C11311F089B2CF23C4F9AE02.roa File: B27ED5E6C11311F089B2CF23C4F9AE02.roa (raw, json) Hash identifier: +u62azMd4pOnj3CpAjZP1k28yAPQXoJe4iMoi3wUC8U= Subject key identifier: 3C:B4:F5:22:5F:58:51:B9:AA:93:43:6E:56:19:CC:42:E2:86:F6:38 Certificate issuer: /CN=A91F4130/serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2 Certificate serial: 39 Authority key identifier: 88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/B27ED5E6C11311F089B2CF23C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:02:32 +0000 ROA not before: Fri 14 Nov 2025 04:37:59 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 206888 IP address blocks: 138.252.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4130, serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2 Validity Not Before: Nov 14 04:37:59 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d678-e3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7a:4c:12:99:f2:a6:22:c3:5a:da:f2:a4:31: 58:d8:97:ff:67:99:2f:86:ce:60:45:82:a3:99:90: d8:d7:50:38:cd:82:78:13:4a:6e:fa:64:a8:d1:06: 02:82:c5:80:21:cf:b1:1e:48:a6:84:f7:55:cb:59: 74:13:6b:63:6b:36:08:b7:17:f0:26:3c:58:ad:92: 6e:c4:b7:4b:8e:ec:74:02:10:18:db:35:a1:26:bd: fa:41:aa:5f:81:cd:7a:1c:c7:db:42:42:24:a2:c2: 0b:9b:6e:5e:ad:ea:8a:14:ec:ee:2f:7c:de:8b:d4: b4:d6:c2:31:db:04:a6:e0:65:44:6d:0e:67:01:fc: 01:4f:b1:c0:9c:a2:ec:18:8d:3e:e4:ea:de:d9:52: ab:19:9f:90:ee:b4:d7:72:06:7c:20:1b:53:ee:19: af:81:c6:fc:67:80:70:72:81:e9:02:42:d4:45:a5: 1b:e7:fd:c8:d1:bc:25:71:49:76:a2:b0:58:4f:97: 1d:93:79:0f:33:40:47:c9:e4:9a:4c:7e:a6:e8:77: a1:85:e3:26:3b:56:9b:49:8e:9f:41:3a:a4:16:d4: b4:4e:36:b5:84:2a:bc:cc:da:5e:7f:b2:b2:bb:2f: c6:5b:8e:ac:33:3d:3e:a8:f2:5d:ee:00:1c:21:98: 17:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B4:F5:22:5F:58:51:B9:AA:93:43:6E:56:19:CC:42:E2:86:F6:38 X509v3 Authority Key Identifier: keyid:88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/B27ED5E6C11311F089B2CF23C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.208.0/24 Signature Algorithm: sha256WithRSAEncryption 30:00:e6:22:d4:e5:b4:23:ed:e4:ec:25:78:f2:fa:b2:0f:66: 46:a8:8a:44:80:67:e9:dd:18:9c:47:6e:50:bf:c4:6e:bf:6e: cf:13:14:e1:f5:a8:1c:7a:c2:14:12:e8:9f:01:65:5f:31:7f: f8:5b:41:48:7b:e5:5d:91:3a:3f:46:44:44:76:5b:60:9b:3e: 2d:0d:3c:f1:53:3b:1a:25:5c:b8:71:4e:b7:c9:df:ab:66:5a: 34:fd:ef:fe:cd:d8:65:b6:7b:cd:80:eb:a5:e1:da:36:09:98: 5d:9c:1b:6f:d4:9e:68:37:47:ab:e8:85:01:6c:a5:68:7c:c3: d1:c7:45:29:1a:bc:b2:f3:0a:ae:55:c7:46:93:40:e9:eb:bf: bf:39:09:df:1e:df:ff:d0:09:fb:ad:f3:71:8f:dc:20:14:55: d9:22:b5:b8:66:3a:c5:be:cf:27:7e:0c:98:5f:05:94:b9:f0: 80:38:ed:77:33:39:e3:1b:00:94:b6:e1:86:c9:a0:b0:30:75: 0b:1f:b4:85:f5:ea:3b:d5:30:e5:e6:2b:ef:77:34:9d:ca:04: 69:1e:18:c1:1c:8d:b7:ba:03:7e:2b:85:0b:3c:33:36:7a:2d: 0b:bc:b5:87:74:f3:f3:7f:3a:15:b4:3a:1b:e4:33:c0:64:4e: 1d:91:94:2a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDEzMDExMC8GA1UEBRMoODgzNzIyODI4RUNGOUU4RERERkQyNDZGM0M2NzhFOUYw NTE1RjlEMjAeFw0yNTExMTQwNDM3NTlaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNjc4LWUzY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbekwSmfKmIsNa2vKkMVjYl/9nmS+GzmBFgqOZkNjXUDjNgngTSm76ZKjRBgKC xYAhz7EeSKaE91XLWXQTa2NrNgi3F/AmPFitkm7Et0uO7HQCEBjbNaEmvfpBql+B zXocx9tCQiSiwgubbl6t6ooU7O4vfN6L1LTWwjHbBKbgZURtDmcB/AFPscCcouwY jT7k6t7ZUqsZn5DutNdyBnwgG1PuGa+BxvxngHBygekCQtRFpRvn/cjRvCVxSXai sFhPlx2TeQ8zQEfJ5JpMfqbod6GF4yY7VptJjp9BOqQW1LRONrWEKrzM2l5/srK7 L8ZbjqwzPT6o8l3uABwhmBcXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUPLT1Il9Y Ubmqk0NuVhnMQuKG9jgwHwYDVR0jBBgwFoAUiDcigo7Pno3d/SRvPGeOnwUV+dIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MTMwL0Y0MEVFODRFQzEx MjExRjBCQjVBMTQyMEM0RjlBRTAyL2lEY2lnbzdQbm8zZF9TUnZQR2VPbndVVi1k SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaURjaWdvN1BubzNkX1NSdlBHZU9ud1VWLWRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDEzMC9GNDBFRTg0RUMxMTIxMUYwQkI1QTE0MjBDNEY5QUUwMi9CMjdFRDVFNkMx MTMxMUYwODlCMkNGMjNDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/NAwDQYJKoZIhvcNAQELBQADggEBADAA5iLU5bQj7eTsJXjy+rIP ZkaoikSAZ+ndGJxHblC/xG6/bs8TFOH1qBx6whQS6J8BZV8xf/hbQUh75V2ROj9G RER2W2CbPi0NPPFTOxolXLhxTrfJ36tmWjT97/7N2GW2e82A66Xh2jYJmF2cG2/U nmg3R6vohQFspWh8w9HHRSkavLLzCq5Vx0aTQOnrv785Cd8e3//QCfut83GP3CAU VdkitbhmOsW+zyd+DJhfBZS58IA47XczOeMbAJS24YbJoLAwdQsftIX16jvVMOXm K+93NJ3KBGkeGMEcjbe6A34rhQs8MzZ6LQu8tYd08/N/OhW0OhvkM8BkTh2RlCo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:54 2026 by rpki-client