$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/0EFA4E50BEB111F0B971EF51C4F9AE02.roa File: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (raw, json) Hash identifier: 9GlbWuuC2bE+UdBoyFcAWB1MfE//yKAukP+jTpIhxrI= Subject key identifier: 42:F8:A6:89:15:69:E4:BC:8D:14:D4:35:70:B7:2F:8F:DB:60:C4:CC Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E Certificate serial: 4C Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/0EFA4E50BEB111F0B971EF51C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:25:09 +0000 ROA not before: Tue 11 Nov 2025 03:46:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135101 IP address blocks: 138.252.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 04:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E Validity Not Before: Nov 11 03:46:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a58fb5-b43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:49:50:c6:d0:08:cc:07:cd:28:0b:91:74: cc:fd:cd:b3:81:a2:cb:06:1b:f5:d7:43:7b:c8:fd: 6b:96:b6:c5:c1:30:7b:1a:31:3d:c5:1a:88:60:f6: 69:4c:2b:c2:6f:4e:1e:fa:4a:1b:c1:e0:f0:b0:5a: 24:72:6c:d8:06:f4:a3:d4:c3:7a:9c:73:3c:79:31: c9:69:a2:90:41:da:db:03:b0:43:60:a0:c4:f4:cf: 38:1b:51:2a:73:0b:ef:4e:89:00:c2:44:a6:10:2e: 98:1a:83:64:22:86:c4:8a:ec:8f:e1:1b:7d:02:6e: 20:b1:a6:df:d2:4e:37:61:06:e5:6c:7c:61:9f:3e: ea:4d:56:78:91:58:36:bd:24:0c:31:80:6f:66:06: 10:49:54:5f:93:3e:65:7e:c4:6b:19:44:08:b5:d3: 60:30:8a:60:31:90:07:f3:f8:fe:d1:78:81:a5:49: c8:51:2c:2c:91:fa:a0:af:6d:c2:82:32:34:a6:2f: 81:08:f4:f4:78:60:68:88:58:e1:09:0d:8d:9f:73: 20:7c:65:3a:f4:c8:dc:86:e5:5d:37:0e:23:c5:fa: 7b:46:74:88:c2:52:e5:fe:ec:42:1e:09:e5:2a:ed: e4:e1:b9:96:31:3f:2b:40:54:71:2e:d9:cd:ac:f7: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F8:A6:89:15:69:E4:BC:8D:14:D4:35:70:B7:2F:8F:DB:60:C4:CC X509v3 Authority Key Identifier: keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/0EFA4E50BEB111F0B971EF51C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.64.0/24 Signature Algorithm: sha256WithRSAEncryption 19:40:8f:05:b3:95:69:b8:fc:4b:20:f9:6e:cb:32:e6:ac:5b: 71:90:3e:a1:91:fb:fe:c3:01:87:10:74:bd:2f:dc:12:bf:38: 12:a4:24:06:20:a0:50:af:e6:ee:66:2b:ff:6c:d4:11:36:ef: bf:78:46:2b:01:58:04:0d:2f:92:bb:5d:8f:93:b0:3c:25:2a: 60:ad:fb:86:94:65:4f:1c:7d:96:f6:7c:f9:aa:c3:c8:7b:d8: 28:2c:cf:a3:94:fb:0d:f1:24:08:67:5a:49:87:67:6d:6a:d4: 94:55:90:55:ee:0f:f6:cb:f3:89:2e:43:a4:6b:c7:18:1f:51: df:6c:b7:32:65:7e:52:bf:6d:5a:68:ac:f8:28:13:cc:ee:ea: 06:6c:da:9a:46:29:ac:bc:03:2e:c4:9b:18:0a:8b:c6:66:94: c2:ca:53:ae:ad:96:f9:2c:b6:e8:d2:9b:01:42:d2:4c:a5:42: 46:bd:fe:03:7f:68:cd:b8:65:9d:ae:ba:f7:71:b2:1b:de:23: 86:1a:37:78:65:92:b1:5d:ca:6f:9c:2e:4f:0f:da:d1:49:ce: 84:97:f2:61:0a:3f:5b:98:54:51:cf:ed:6f:dd:5e:86:b7:8c: 28:d8:db:c7:8b:7d:f4:c9:d8:38:83:45:8d:e9:05:3b:44:83: 79:62:5c:9e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNTM0OTJCOTlENkQwN0Q5NDlGNjkwQTkzNjk1QjE0OTI4 MjE2OUEyRTAeFw0yNTExMTEwMzQ2NTJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU4ZmI1LWI0M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSJUlQxtAIzAfNKAuRdMz9zbOBossGG/XXQ3vI/WuWtsXBMHsaMT3FGohg9mlM K8JvTh76ShvB4PCwWiRybNgG9KPUw3qcczx5MclpopBB2tsDsENgoMT0zzgbUSpz C+9OiQDCRKYQLpgag2QihsSK7I/hG30CbiCxpt/STjdhBuVsfGGfPupNVniRWDa9 JAwxgG9mBhBJVF+TPmV+xGsZRAi102AwimAxkAfz+P7ReIGlSchRLCyR+qCvbcKC MjSmL4EI9PR4YGiIWOEJDY2fcyB8ZTr0yNyG5V03DiPF+ntGdIjCUuX+7EIeCeUq 7eThuZYxPytAVHEu2c2s985JAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUQvimiRVp 5LyNFNQ1cLcvj9tgxMwwHwYDVR0jBBgwFoAUU0krmdbQfZSfaQqTaVsUkoIWmi4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzkwNzAwMEY2QUIy NDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpTZmFRcVRhVnNVa29JV21p NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVTBrcm1kYlFmWlNmYVFxVGFWc1Vrb0lXbWk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTYyMy85MDcwMDBGNkFCMjQxMUYwQUZDRTVEMkZDNEY5QUUwMi8wRUZBNEU1MEJF QjExMUYwQjk3MUVGNTFDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/EAwDQYJKoZIhvcNAQELBQADggEBABlAjwWzlWm4/Esg+W7LMuas W3GQPqGR+/7DAYcQdL0v3BK/OBKkJAYgoFCv5u5mK/9s1BE27794RisBWAQNL5K7 XY+TsDwlKmCt+4aUZU8cfZb2fPmqw8h72Cgsz6OU+w3xJAhnWkmHZ21q1JRVkFXu D/bL84kuQ6RrxxgfUd9stzJlflK/bVporPgoE8zu6gZs2ppGKay8Ay7EmxgKi8Zm lMLKU66tlvkstujSmwFC0kylQka9/gN/aM24ZZ2uuvdxshveI4YaN3hlkrFdym+c Lk8P2tFJzoSX8mEKP1uYVFHP7W/dXoa3jCjY28eLffTJ2DiDRY3pBTtEg3liXJ4= -----END CERTIFICATE-----Generated at Wed Mar 4 09:49:00 2026 by rpki-client