$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/9D44176C781211F09ADE4979C4F9AE02.roa File: 9D44176C781211F09ADE4979C4F9AE02.roa (raw, json) Hash identifier: 9s9UccmvDib+3f8WOaZFbdAH5cE8XM+qxKQerClV9pk= Subject key identifier: 9A:77:77:E0:D0:76:E0:73:AB:25:F4:0C:73:ED:EB:E7:DB:18:28:A1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 016A Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/9D44176C781211F09ADE4979C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:31:54 +0000 ROA not before: Wed 13 Aug 2025 07:16:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138607 IP address blocks: 78.138.12.0/24 maxlen: 24 78.138.13.0/24 maxlen: 24 213.255.200.0/22 maxlen: 22 213.255.200.0/24 maxlen: 24 213.255.201.0/24 maxlen: 24 213.255.202.0/24 maxlen: 24 213.255.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Aug 13 07:16:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a59f5a-e05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:14:8a:9c:d7:0e:be:84:a7:e9:f8:15:47: 42:7b:aa:cc:43:a6:06:36:69:a0:af:71:52:84:f5: aa:e9:20:4c:8c:e9:89:72:fe:c4:d2:4d:a9:41:21: 54:10:76:c4:8b:0b:cc:4f:c4:c9:be:21:4c:b4:d7: 00:1e:84:f9:ae:92:10:e4:51:71:6d:ce:56:5c:a7: ef:f0:43:f2:ed:e5:41:64:87:87:a8:08:a9:ed:50: 00:e7:d1:b7:50:48:ae:54:2f:1f:42:7e:57:ab:df: 6d:7a:3e:77:c4:52:95:8a:52:09:03:6b:a5:d3:e6: 52:2f:b0:95:49:20:45:f9:c9:f8:fd:50:9c:ec:18: 24:45:c3:a1:31:ca:b0:85:0e:82:1d:2f:da:8a:1d: d7:2f:93:f2:a3:e5:6d:f6:09:cc:f4:6c:39:ef:82: 41:9b:a9:64:5a:2e:16:36:4b:7b:7e:0c:dd:d8:af: 04:1a:54:88:7a:61:9a:60:3b:8e:86:b4:71:4f:ab: 3f:eb:ef:b1:b6:dd:51:b8:81:c6:12:fd:7c:29:44: 6f:49:27:08:89:c4:68:ad:9f:2c:4f:e6:4e:a7:d7: 55:64:09:c2:59:3e:81:ef:72:48:2d:8c:41:aa:a1: e8:08:de:75:e2:a3:69:3f:f1:da:93:cf:53:1a:2f: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:77:77:E0:D0:76:E0:73:AB:25:F4:0C:73:ED:EB:E7:DB:18:28:A1 X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/9D44176C781211F09ADE4979C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 78.138.12.0/23 213.255.200.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:4f:f6:42:f5:df:d8:7f:21:c5:3a:5b:0e:9d:7f:b7:0b:07: f1:cb:ce:00:d6:3c:ae:15:e4:ca:7f:97:53:a3:8f:ae:6f:65: b8:0d:c1:01:d7:a6:2c:c0:84:bc:34:f1:6c:8d:9a:3d:52:f5: 11:9a:20:ff:37:ae:50:a1:b1:c4:a7:c5:ee:5b:fa:ae:20:6c: 1c:69:95:f5:bb:cc:96:b4:70:ac:a7:e9:8a:8b:b8:81:1d:60: 96:ec:8e:16:21:e8:aa:96:61:40:e9:f8:67:60:af:b5:b5:f9: bd:c3:c1:f4:b8:89:fb:6e:c2:49:34:94:b9:3c:33:85:6e:05: 75:88:f6:80:94:1c:b2:38:ee:4a:a5:be:a6:a7:02:a7:3f:30: cf:4d:c1:0c:00:07:68:36:a5:41:ba:76:77:85:4f:a9:7d:90: fd:18:56:17:97:3e:c2:05:c7:48:f8:4e:19:a5:3c:86:c8:78: d9:36:72:47:eb:03:28:a7:9d:cc:c1:fa:ae:ee:f9:5a:84:c2: ca:40:3e:93:4a:e5:96:6c:12:0a:95:0d:5c:b9:c6:d1:d6:36: c3:7d:53:19:f9:70:e2:4b:65:fa:b5:67:57:ac:4b:a8:75:98: 59:15:cb:93:fe:06:ce:68:10:d6:94:b4:08:27:83:5f:61:1f: ae:31:71:bf -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjUwODEzMDcxNjMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWY1YS1lMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6sUipzXDr6Ep+n4FUdCe6rMQ6YGNmmgr3FShPWq6SBMjOmJcv7E0k2pQSFU EHbEiwvMT8TJviFMtNcAHoT5rpIQ5FFxbc5WXKfv8EPy7eVBZIeHqAip7VAA59G3 UEiuVC8fQn5Xq99tej53xFKVilIJA2ul0+ZSL7CVSSBF+cn4/VCc7BgkRcOhMcqw hQ6CHS/aih3XL5Pyo+Vt9gnM9Gw574JBm6lkWi4WNkt7fgzd2K8EGlSIemGaYDuO hrRxT6s/6++xtt1RuIHGEv18KURvSScIicRorZ8sT+ZOp9dVZAnCWT6B73JILYxB qqHoCN514qNpP/Hak89TGi92HwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJp3d+DQ duBzqyX0DHPt6+fbGCihMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY1Q0EvOUU3QzJDRUUwMjRGMTFFRkFDNjVGNTc3QzRGOUFFMDIvOUQ0NDE3NkM3 ODEyMTFGMDlBREU0OTc5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBTooMAwQC1f/IMA0GCSqGSIb3DQEBCwUAA4IBAQCaT/ZC9d/YfyHF OlsOnX+3Cwfxy84A1jyuFeTKf5dTo4+ub2W4DcEB16YswIS8NPFsjZo9UvURmiD/ N65QobHEp8XuW/quIGwcaZX1u8yWtHCsp+mKi7iBHWCW7I4WIeiqlmFA6fhnYK+1 tfm9w8H0uIn7bsJJNJS5PDOFbgV1iPaAlByyOO5Kpb6mpwKnPzDPTcEMAAdoNqVB unZ3hU+pfZD9GFYXlz7CBcdI+E4ZpTyGyHjZNnJH6wMop53Mwfqu7vlahMLKQD6T SuWWbBIKlQ1cucbR1jbDfVMZ+XDiS2X6tWdXrEuodZhZFcuT/gbOaBDWlLQIJ4Nf YR+uMXG/ -----END CERTIFICATE-----Generated at Sat Mar 7 16:12:00 2026 by rpki-client