$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/635E7900C51211F093EC3E85C4F9AE02.roa File: 635E7900C51211F093EC3E85C4F9AE02.roa (raw, json) Hash identifier: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw= Subject key identifier: FC:65:E0:75:E1:68:86:FB:CD:E7:85:7B:6A:B3:F0:74:AE:6E:09:4E Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Certificate serial: 3E Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/635E7900C51211F093EC3E85C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:06:43 +0000 ROA not before: Wed 19 Nov 2025 06:39:31 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154377 IP address blocks: 138.252.238.0/23 maxlen: 23 138.252.238.0/24 maxlen: 24 138.252.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Validity Not Before: Nov 19 06:39:31 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d773-5022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:81:ee:d7:5a:c9:c9:81:71:23:27:4a:86: 27:0f:e7:1c:2b:05:da:56:e0:a9:e1:41:d5:94:3a: 57:81:38:45:45:4c:c0:7c:2d:91:2b:11:94:d9:be: e8:85:d9:1e:9e:0a:d1:ef:7b:0f:95:c0:69:b5:44: 03:40:42:73:06:b2:d8:17:b1:d7:79:ee:8d:bb:5d: 70:e8:33:9a:78:a3:d5:25:75:f3:4d:2d:e4:45:61: 89:5f:fd:6d:8d:dc:16:96:6e:7f:ce:4b:18:86:7e: 8d:34:03:f4:54:df:a7:5b:82:c8:44:39:ca:0d:7e: b6:90:46:c1:68:af:da:df:91:25:8a:04:16:27:89: 54:fe:94:45:6d:b7:30:dc:2a:50:23:17:4d:02:36: 80:ed:f1:c5:eb:97:5d:4e:c0:20:3b:ae:e7:5c:87: 56:23:36:fd:e1:86:86:79:89:d3:6b:1a:7a:d3:1d: 2c:35:5a:ea:4a:43:c1:ab:2a:ea:59:04:25:49:59: b1:be:7c:d3:ec:1c:7f:8f:3d:c2:c1:6b:41:63:bb: 13:dc:76:20:6d:8f:ba:54:c0:68:80:01:0a:32:a1: 80:90:39:18:90:b7:bd:33:d1:16:69:7f:e5:d8:73: d1:01:05:5d:ac:b2:d1:18:58:bf:e3:46:fd:60:46: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:65:E0:75:E1:68:86:FB:CD:E7:85:7B:6A:B3:F0:74:AE:6E:09:4E X509v3 Authority Key Identifier: keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/635E7900C51211F093EC3E85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.238.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:74:95:7e:98:76:90:c1:bf:ef:4f:08:a7:14:00:0e:8b:89: 9e:ff:6e:33:06:00:44:d6:e4:59:f2:a9:bd:be:5a:6e:e8:a3: fe:3e:36:98:17:80:8e:ce:29:f5:72:10:9c:fa:3a:b2:f3:b2: bb:95:27:e9:f0:b8:0f:d5:8f:61:ab:41:a4:2e:c7:27:2c:5c: f4:cf:da:68:97:ad:7a:c2:91:99:be:16:39:f1:fe:f9:5e:59: 40:f2:cc:e0:b0:56:ab:78:54:ae:ab:16:13:82:ba:ef:c0:5e: 9d:3c:39:0b:29:95:a7:29:bf:f6:82:62:11:c5:4f:25:4c:eb: 00:7a:7a:a6:d7:34:b3:5c:a5:3a:e9:5a:43:d5:78:6d:4c:5f: c0:2a:f3:c2:2d:d2:52:38:b5:44:e7:cc:d7:b3:e3:d7:0d:63: c9:ac:1e:04:21:cb:64:98:b4:14:ce:21:aa:32:33:00:9a:9c: 5a:96:18:a8:72:d1:09:ba:e0:73:a7:50:ef:1c:f2:59:4c:7e: 03:36:66:e3:ce:0d:1b:ba:81:5a:da:4a:92:99:16:2a:ef:01: a1:3c:6e:6f:f8:a1:7b:07:53:ae:72:55:28:e8:ad:fc:b6:a6: a5:e1:29:d3:d4:8a:a0:8f:b1:ad:09:28:06:63:57:1d:c7:40: 84:39:94:29 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoRjBGRDlFNUE2REM5NDU5QTg4RTAxMTNGMjRGNTYxQTZG REQ3NDA1RjAeFw0yNTExMTkwNjM5MzFaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNzczLTUwMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ7oHu11rJyYFxIydKhicP5xwrBdpW4KnhQdWUOleBOEVFTMB8LZErEZTZvuiF 2R6eCtHvew+VwGm1RANAQnMGstgXsdd57o27XXDoM5p4o9UldfNNLeRFYYlf/W2N 3BaWbn/OSxiGfo00A/RU36dbgshEOcoNfraQRsFor9rfkSWKBBYniVT+lEVttzDc KlAjF00CNoDt8cXrl11OwCA7rudch1YjNv3hhoZ5idNrGnrTHSw1WupKQ8GrKupZ BCVJWbG+fNPsHH+PPcLBa0FjuxPcdiBtj7pUwGiAAQoyoYCQORiQt70z0RZpf+XY c9EBBV2sstEYWL/jRv1gRkTpAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU/GXgdeFo hvvN54V7arPwdK5uCU4wHwYDVR0jBBgwFoAU8P2eWm3JRZqI4BE/JPVhpv3XQF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0RGQjQ5QzQ4QzUx MDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFAyZVdtM0pSWnFJNEJFX0pQVmhwdjNYUUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM4NC9ERkI0OUM0OEM1MTAxMUYwOUQ4REI3NUZDNEY5QUUwMi82MzVFNzkwMEM1 MTIxMUYwOTNFQzNFODVDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/O4wDQYJKoZIhvcNAQELBQADggEBADt0lX6YdpDBv+9PCKcUAA6L iZ7/bjMGAETW5Fnyqb2+Wm7oo/4+NpgXgI7OKfVyEJz6OrLzsruVJ+nwuA/Vj2Gr QaQuxycsXPTP2miXrXrCkZm+Fjnx/vleWUDyzOCwVqt4VK6rFhOCuu/AXp08OQsp lacpv/aCYhHFTyVM6wB6eqbXNLNcpTrpWkPVeG1MX8Aq88It0lI4tUTnzNez49cN Y8msHgQhy2SYtBTOIaoyMwCanFqWGKhy0Qm64HOnUO8c8llMfgM2ZuPODRu6gVra SpKZFirvAaE8bm/4oXsHU65yVSjorfy2pqXhKdPUiqCPsa0JKAZjVx3HQIQ5lCk= -----END CERTIFICATE-----Generated at Mon Mar 2 12:13:23 2026 by rpki-client