$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/B2C9B10A881311EE8CFB5C43C4F9AE02.roa File: B2C9B10A881311EE8CFB5C43C4F9AE02.roa (raw, json) Hash identifier: 8UoEC8xsE/JTgByqgA9fCAgCWLlJeeUor6dWgZpCQrw= Subject key identifier: 7C:3A:E3:DE:C2:B9:D5:9A:29:56:B6:69:69:60:1C:AE:52:D3:89:32 Certificate issuer: /CN=A91E6856/serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Certificate serial: 023D Authority key identifier: 3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/B2C9B10A881311EE8CFB5C43C4F9AE02.roa Signing time: Fri 28 Aug 2026 17:35:40 +0000 ROA not before: Fri 28 Aug 2026 17:35:40 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24433 IP address blocks: 138.77.0.0/16 maxlen: 17 138.77.96.0/21 maxlen: 21 138.77.104.0/21 maxlen: 21 138.77.168.0/21 maxlen: 21 138.77.208.0/21 maxlen: 21 138.77.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=3A6823A10F03BFACA4068D3398444F3641085485 Validity Not Before: Aug 28 17:35:40 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a91c6eb-bd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:01:66:85:df:1d:fc:db:07:45:1a:f9:06: cd:33:c0:8a:16:94:3d:e3:b4:8e:15:35:1b:0f:13: f7:52:4d:42:53:e3:ab:13:51:96:78:0a:29:24:61: 26:40:44:4b:60:15:75:16:f5:ea:9a:9e:b4:63:cf: 38:0b:61:75:33:36:2f:d5:33:8a:04:d9:0f:c2:d6: ae:30:48:e2:8e:3b:63:a2:05:62:74:82:18:cd:f3: 3e:7c:54:f4:24:11:3b:e4:32:0e:98:ef:b9:24:53: e7:1a:b0:41:73:48:64:70:bf:c2:21:fc:99:36:17: 06:58:0d:a9:58:1c:11:ec:ff:40:f8:7a:b7:2f:fc: a8:07:18:6c:01:7e:14:4c:26:df:ca:00:d4:e7:fc: 6f:7d:85:ed:0e:54:66:ea:99:16:95:04:39:f6:fc: 8a:5d:ab:76:6b:1c:cb:96:fe:54:54:74:82:2c:d3: 2b:d5:b1:55:e4:52:2e:83:50:e2:07:03:be:49:5e: 00:5e:e6:be:bd:7f:7f:5f:92:60:c7:c5:92:80:d3: ef:55:f2:a3:48:b0:16:00:ea:18:63:68:cf:69:98: 42:51:dd:2c:54:b7:6a:76:56:f4:08:04:54:d9:26: c6:8b:8e:c3:b9:17:7d:41:1d:ac:e3:40:3e:7a:ec: 20:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3A:E3:DE:C2:B9:D5:9A:29:56:B6:69:69:60:1C:AE:52:D3:89:32 X509v3 Authority Key Identifier: keyid:3A:68:23:A1:0F:03:BF:AC:A4:06:8D:33:98:44:4F:36:41:08:54:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OmgjoQ8Dv6ykBo0zmERPNkEIVIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2DDB426E486311EEBC0BD213C4F9AE02/B2C9B10A881311EE8CFB5C43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:3a:9a:ad:fa:1b:10:48:c9:c2:fc:03:24:29:49:64:14:0b: 4b:1a:bd:6c:05:90:b9:65:62:04:07:72:f8:3b:b1:f2:17:16: 6f:dd:df:a0:42:88:b9:1b:84:9b:2b:78:56:f5:cd:d9:c3:01: d3:d1:72:22:0e:f6:d8:61:13:6e:71:3b:69:24:cf:b3:87:db: 6b:41:21:35:7d:d9:b9:a3:46:f3:eb:52:a9:6f:bd:9f:11:0e: f5:be:e4:a4:8d:ce:12:78:01:46:99:de:80:c9:92:25:02:bf: ba:3c:2d:fe:ac:34:76:56:78:61:d4:1d:41:6b:38:0f:f0:b0: fc:10:7f:d1:c8:b1:02:bc:73:02:40:d2:e8:61:37:cd:fd:ab: 6e:f8:b0:0e:9e:dc:b1:ba:23:ab:c0:8b:8c:2f:77:a3:ae:99: 99:a7:94:8f:a1:09:29:21:95:0a:66:1a:1d:91:54:65:24:b9: b0:2b:c6:07:cb:d2:44:1f:e3:5b:09:83:bb:92:57:4c:66:a8: 9c:68:2c:eb:50:65:e8:78:79:04:9e:19:1e:27:8b:4a:3a:b6: 4d:6f:d3:75:ce:80:0a:74:60:28:9d:ce:a4:63:10:93:bf:c4: 9f:35:46:c6:2e:3c:a6:96:62:a5:e3:f4:d3:71:1b:29:29:0e: 4b:f9:0c:f7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDNBNjgyM0ExMEYwM0JGQUNBNDA2OEQzMzk4NDQ0RjM2 NDEwODU0ODUwHhcNMjYwODI4MTczNTQwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkxYzZlYi1iZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscEBZoXfHfzbB0Ua+QbNM8CKFpQ947SOFTUbDxP3Uk1CU+OrE1GWeAopJGEm QERLYBV1FvXqmp60Y884C2F1MzYv1TOKBNkPwtauMEjijjtjogVidIIYzfM+fFT0 JBE75DIOmO+5JFPnGrBBc0hkcL/CIfyZNhcGWA2pWBwR7P9A+Hq3L/yoBxhsAX4U TCbfygDU5/xvfYXtDlRm6pkWlQQ59vyKXat2axzLlv5UVHSCLNMr1bFV5FIug1Di BwO+SV4AXua+vX9/X5Jgx8WSgNPvVfKjSLAWAOoYY2jPaZhCUd0sVLdqdlb0CARU 2SbGi47DuRd9QR2s40A+euwgwQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFHw6497C udWaKVa2aWlgHK5S04kyMB8GA1UdIwQYMBaAFDpoI6EPA7+spAaNM5hETzZBCFSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yRERCNDI2RTQ4 NjMxMUVFQkMwQkQyMTNDNEY5QUUwMi9PbWdqb1E4RHY2eWtCbzB6bUVSUE5rRUlW SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09tZ2pvUThEdjZ5a0JvMHptRVJQTmtFSVZJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTY4NTYvMkREQjQyNkU0ODYzMTFFRUJDMEJEMjEzQzRGOUFFMDIvQjJDOUIxMEE4 ODEzMTFFRThDRkI1QzQzQzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAik0wDQYJKoZIhvcNAQELBQADggEBAKg6mq36GxBIycL8AyQpSWQU C0savWwFkLllYgQHcvg7sfIXFm/d36BCiLkbhJsreFb1zdnDAdPRciIO9thhE25x O2kkz7OH22tBITV92bmjRvPrUqlvvZ8RDvW+5KSNzhJ4AUaZ3oDJkiUCv7o8Lf6s NHZWeGHUHUFrOA/wsPwQf9HIsQK8cwJA0uhhN839q274sA6e3LG6I6vAi4wvd6Ou mZmnlI+hCSkhlQpmGh2RVGUkubArxgfL0kQf41sJg7uSV0xmqJxoLOtQZeh4eQSe GR4ni0o6tk1v03XOgAp0YCidzqRjEJO/xJ81RsYuPKaWYqXj9NNxGykpDkv5DPc= -----END CERTIFICATE-----Generated at Sat Sep 5 09:42:05 2026 by rpki-client