$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/3B2923CEA59311F1BFA29E7E6111F970.roa File: 3B2923CEA59311F1BFA29E7E6111F970.roa (raw, json) Hash identifier: BGk+JAG9Q8bpLUQg39UqHykiJjuDj09FHL88WqmA/WE= Subject key identifier: E2:4E:01:B9:46:BB:9B:A7:BD:32:07:1B:D4:D0:A5:C2:61:03:40:CA Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Certificate serial: A9 Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/3B2923CEA59311F1BFA29E7E6111F970.roa Signing time: Tue 01 Sep 2026 23:12:18 +0000 ROA not before: Tue 01 Sep 2026 23:12:18 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 4764 IP address blocks: 138.252.8.0/24 maxlen: 24 138.252.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 07:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Validity Not Before: Sep 1 23:12:18 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a975bd2-b4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:ee:ef:2d:79:55:07:39:04:d8:8e:32:9b: 3f:46:27:8d:be:12:fb:ae:49:66:1b:fd:8e:7c:63: 67:c7:84:15:c9:9f:b6:7a:08:89:d9:db:82:1c:6a: 9b:a3:4e:da:09:3b:15:d6:6b:6c:20:37:3a:a2:50: df:06:97:16:62:f1:a4:61:7b:1c:ab:9a:5d:da:2d: cd:6e:53:07:81:41:01:ce:ce:71:a3:5d:3f:a5:e8: fa:ea:d0:b9:1d:b5:f7:c6:05:04:d0:fe:be:4c:fc: ae:b9:8b:7e:b4:c3:4f:8e:91:80:77:58:4b:56:b4: c0:ab:98:31:96:0e:65:b5:a6:49:f8:b0:be:e4:8a: 9f:13:03:96:e3:de:c7:4f:69:3a:20:29:dd:fd:0a: 89:6f:83:a6:51:e8:67:5e:4e:08:41:42:00:72:34: c0:fb:f7:90:63:b6:59:b9:f2:e5:e9:68:47:8f:5c: 60:94:5b:2c:6d:0d:44:7e:37:40:59:54:7c:d3:b5: f3:53:e6:e9:9f:0c:a2:fc:7e:75:39:ab:95:d7:cf: c9:90:84:20:ba:22:29:0f:db:29:b7:78:9d:a1:77: f3:c3:fa:96:dd:4a:f3:1f:fa:96:ab:f4:96:de:69: 2c:d4:2c:1b:32:52:fe:cb:d6:51:32:fd:f3:69:91: c1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4E:01:B9:46:BB:9B:A7:BD:32:07:1B:D4:D0:A5:C2:61:03:40:CA X509v3 Authority Key Identifier: keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/3B2923CEA59311F1BFA29E7E6111F970.roa sbgp-ipAddrBlock: critical IPv4: 138.252.8.0/23 Signature Algorithm: sha256WithRSAEncryption 02:ba:3e:ab:d4:bc:70:34:87:74:25:eb:ee:01:00:d5:2b:06: 09:24:3a:1e:bb:66:54:8b:a2:c2:54:69:d9:9d:3c:3a:b8:23: a4:db:87:2f:70:32:23:49:12:f5:8e:ee:78:a3:2f:59:e6:15: 86:81:6d:db:3a:59:22:79:f3:7d:26:34:b0:d9:01:77:ad:01: 37:6a:35:2f:76:24:6f:61:53:24:98:10:75:67:76:47:3f:e6: f1:db:99:04:dd:0a:aa:92:a3:1a:3b:c8:d1:c9:70:26:72:38: a9:11:ee:3f:fe:60:85:b2:01:e9:15:d4:9e:4e:f6:cc:72:97: ed:33:d8:43:30:de:7b:3c:5f:d0:8c:53:88:77:1e:de:fc:9c: 72:9d:1b:e1:21:85:fa:86:08:66:55:c2:33:8f:fd:79:d8:77: f7:60:64:17:53:84:82:a5:a9:41:02:69:75:9d:2c:f8:d3:89: a6:ec:9b:61:02:a8:2b:5b:f2:24:e4:39:c8:c3:b2:ee:40:80: 81:40:a1:49:27:41:69:45:11:74:f0:e9:19:9c:97:1b:fb:ba: 5e:71:e6:d3:bd:eb:1e:b6:bd:3a:f4:87:ff:95:63:62:e3:51: 19:27:1b:ed:6f:00:c8:41:54:e4:51:95:6b:67:1c:96:f2:08: 44:f9:0a:a4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNzYxMTAvBgNVBAUTKEJEOEUzQ0MyQTkzRDVEQkNEODQyNzUwOTczOEEzMTRC RjkwQzg4N0QwHhcNMjYwOTAxMjMxMjE4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk3NWJkMi1iNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6bu7y15VQc5BNiOMps/RieNvhL7rklmG/2OfGNnx4QVyZ+2egiJ2duCHGqb o07aCTsV1mtsIDc6olDfBpcWYvGkYXscq5pd2i3NblMHgUEBzs5xo10/pej66tC5 HbX3xgUE0P6+TPyuuYt+tMNPjpGAd1hLVrTAq5gxlg5ltaZJ+LC+5IqfEwOW497H T2k6ICnd/QqJb4OmUehnXk4IQUIAcjTA+/eQY7ZZufLl6WhHj1xglFssbQ1EfjdA WVR807XzU+bpnwyi/H51OauV18/JkIQguiIpD9spt3idoXfzw/qW3UrzH/qWq/SW 3mks1CwbMlL+y9ZRMv3zaZHBCwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOJOAblG u5unvTIHG9TQpcJhA0DKMB8GA1UdIwQYMBaAFL2OPMKpPV282EJ1CXOKMUv5DIh9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU3Ni9EOUU0QzRDQ0I5 MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi92WTQ4d3FrOVhiellRblVKYzRveFNfa01p SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZZNDh3cWs5WGJ6WVFuVUpjNG94U19rTWlIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkZFNzYvRDlFNEM0Q0NCOTI3MTFGMEI4MEVDNDVFQzRGOUFFMDIvM0IyOTIzQ0VB NTkzMTFGMUJGQTI5RTdFNjExMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivwIMA0GCSqGSIb3DQEBCwUAA4IBAQACuj6r1LxwNId0JevuAQDV KwYJJDoeu2ZUi6LCVGnZnTw6uCOk24cvcDIjSRL1ju54oy9Z5hWGgW3bOlkiefN9 JjSw2QF3rQE3ajUvdiRvYVMkmBB1Z3ZHP+bx25kE3QqqkqMaO8jRyXAmcjipEe4/ /mCFsgHpFdSeTvbMcpftM9hDMN57PF/QjFOIdx7e/JxynRvhIYX6hghmVcIzj/15 2Hf3YGQXU4SCpalBAml1nSz404mm7JthAqgrW/Ik5DnIw7LuQICBQKFJJ0FpRRF0 8OkZnJcb+7pecebTvesetr069If/lWNi41EZJxvtbwDIQVTkUZVrZxyW8ghE+Qqk -----END CERTIFICATE-----Generated at Sat Sep 5 08:59:40 2026 by rpki-client