$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/961A909E2D2811F181F3AA41B9833773.roa File: 961A909E2D2811F181F3AA41B9833773.roa (raw, json) Hash identifier: dYzmlzKtC22HQCzv3r68DO5+DJnISkpljTZWCe4Wn+k= Subject key identifier: 00:A6:60:98:11:21:B7:66:A3:CC:A4:B5:AC:F7:B1:83:0E:9E:5B:F1 Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Certificate serial: 4A Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/961A909E2D2811F181F3AA41B9833773.roa Signing time: Tue 31 Mar 2026 17:39:36 +0000 ROA not before: Tue 31 Mar 2026 17:39:36 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154352 IP address blocks: 138.252.180.0/23 maxlen: 23 138.252.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Validity Not Before: Mar 31 17:39:36 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69cc06d8-5135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:a1:7b:3e:10:5e:09:0e:d0:c5:87:31:56: 9f:7c:43:23:19:e1:10:35:3e:6c:68:dd:3c:61:ad: b7:af:6c:46:ed:18:cb:30:57:b7:6d:e6:35:01:3f: 45:56:b6:7f:e6:a8:0f:13:6b:7d:62:83:80:7b:b6: fb:12:3a:2d:db:0a:b7:97:ba:d7:a6:6a:a2:44:fc: e9:5b:88:fe:c1:31:74:07:5d:f2:2e:5e:1e:00:1c: f8:51:db:9d:97:12:89:e0:d8:36:05:02:74:77:32: c7:46:3a:2c:51:8f:97:22:c3:ad:85:e1:fa:f6:fc: 38:2c:57:c8:c3:7f:a9:25:13:ab:c4:cd:75:1f:b4: 63:6e:aa:fd:6e:43:1a:e4:0a:71:66:00:32:36:cb: b7:50:da:b7:9c:59:a4:a4:b1:25:24:52:70:df:04: 56:44:e7:1a:56:4b:99:ba:e3:2a:fe:63:e9:7a:71: ea:4f:b0:b1:5f:fe:8f:de:7c:69:51:81:53:b6:58: ff:27:99:05:da:ec:c3:a4:97:85:dc:a1:dd:bd:e0: 95:e5:cd:50:aa:e9:50:52:a6:29:72:1a:1d:6c:ff: 91:38:07:0b:57:15:f7:73:07:ad:bf:ad:7a:89:49: f6:e5:43:d8:35:0b:4a:27:4f:0b:ba:57:d8:1c:6e: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A6:60:98:11:21:B7:66:A3:CC:A4:B5:AC:F7:B1:83:0E:9E:5B:F1 X509v3 Authority Key Identifier: keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/961A909E2D2811F181F3AA41B9833773.roa sbgp-ipAddrBlock: critical IPv4: 138.252.180.0/23 Signature Algorithm: sha256WithRSAEncryption ab:e2:ae:30:27:3e:f8:ae:fa:86:69:49:12:7d:94:95:a9:05: e9:8b:ee:74:cb:68:d5:11:04:64:76:b8:8f:81:78:27:21:a2: 39:4e:35:e3:03:5f:f1:02:3a:7e:09:2c:48:2e:00:ad:dd:45: 77:e7:52:b8:e6:59:8e:61:0f:74:e7:58:5f:f5:65:8b:2d:f3: 3c:95:f4:85:64:37:ba:4d:45:7f:2e:1b:53:1f:17:15:bf:e8: 71:dd:da:66:12:87:33:0c:ad:3b:e9:dc:c0:d6:dc:87:54:f8: 5b:a0:a2:be:9e:79:b3:7b:11:8d:24:35:84:3f:c0:5e:1e:ee: 88:f8:26:e4:53:62:a1:71:5c:47:52:da:2c:74:79:25:7b:72: 89:d2:d2:22:98:36:52:13:c4:4d:95:8d:5e:8c:3b:e8:94:d5: 6e:45:96:77:1d:bd:e9:f8:39:df:8a:f7:45:87:89:b0:63:51: 0b:86:ad:5f:48:71:93:eb:ba:45:f3:61:51:8d:44:19:82:fb: f9:87:33:20:90:e1:3f:5e:b4:a5:c4:52:10:ab:dc:ee:90:0d: e3:09:79:c9:ad:1b:65:22:89:4f:84:23:87:74:ef:a1:28:4a: 1f:b6:da:55:db:e7:3f:20:97:38:90:e2:d2:31:a5:c0:99:33: f7:4e:4b:05 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoQjA0REM3QUI0ODIzMzM4OTBDMjhBNzY1NzVEOEFERTY0 MjlDM0ZDQjAeFw0yNjAzMzExNzM5MzZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5Y2MwNmQ4LTUxMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7eKF7PhBeCQ7QxYcxVp98QyMZ4RA1Pmxo3TxhrbevbEbtGMswV7dt5jUBP0VW tn/mqA8Ta31ig4B7tvsSOi3bCreXutemaqJE/OlbiP7BMXQHXfIuXh4AHPhR252X Eong2DYFAnR3MsdGOixRj5ciw62F4fr2/DgsV8jDf6klE6vEzXUftGNuqv1uQxrk CnFmADI2y7dQ2recWaSksSUkUnDfBFZE5xpWS5m64yr+Y+l6cepPsLFf/o/efGlR gVO2WP8nmQXa7MOkl4Xcod294JXlzVCq6VBSpilyGh1s/5E4BwtXFfdzB62/rXqJ SfblQ9g1C0onTwu6V9gcbtstAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUAKZgmBEh t2ajzKS1rPexgw6eW/EwHwYDVR0jBBgwFoAUsE3Hq0gjM4kMKKdlddit5kKcP8sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzY4MkIzOUE2QzM3 QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc0UzSHEwZ2pNNGtNS0tkbGRkaXQ1a0tjUDhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkJBRi82ODJCMzlBNkMzN0MxMUYwOURDNUE1MzJDNEY5QUUwMi85NjFBOTA5RTJE MjgxMUYxODFGM0FBNDFCOTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/LQwDQYJKoZIhvcNAQELBQADggEBAKvirjAnPviu+oZpSRJ9lJWp BemL7nTLaNURBGR2uI+BeCchojlONeMDX/ECOn4JLEguAK3dRXfnUrjmWY5hD3Tn WF/1ZYst8zyV9IVkN7pNRX8uG1MfFxW/6HHd2mYShzMMrTvp3MDW3IdU+Fugor6e ebN7EY0kNYQ/wF4e7oj4JuRTYqFxXEdS2ix0eSV7conS0iKYNlITxE2VjV6MO+iU 1W5Flncdven4Od+K90WHibBjUQuGrV9IcZPrukXzYVGNRBmC+/mHMyCQ4T9etKXE UhCr3O6QDeMJecmtG2UiiU+EI4d076EoSh+22lXb5z8glziQ4tIxpcCZM/dOSwU= -----END CERTIFICATE-----Generated at Fri Apr 17 21:07:08 2026 by rpki-client