$ rpki-client -vvvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/F0F521DEC10B11F0B1AC197FC4F9AE02.roa File: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (raw, json) Hash identifier: iAkewnx6BgcuJ8z2OY/Gtym4Q1T4cwUo4T8+QFvfvUI= Subject key identifier: 48:F3:67:D4:88:4B:02:5A:19:FF:85:70:D6:62:C8:F0:E8:81:EE:40 Certificate issuer: /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Certificate serial: B4 Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/F0F521DEC10B11F0B1AC197FC4F9AE02.roa Signing time: Fri 09 Oct 2026 07:56:09 +0000 ROA not before: Fri 09 Oct 2026 07:56:09 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 154364 IP address blocks: 138.252.206.0/23 maxlen: 23 138.252.206.0/24 maxlen: 24 138.252.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 07:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E Validity Not Before: Oct 9 07:56:09 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ac89e19-482f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:d4:3d:07:31:47:6e:79:ed:2e:65:52:ab: 13:a0:db:bf:3e:92:95:90:6d:85:3e:4e:87:a0:cf: 5b:d4:5a:64:15:6c:c9:21:bc:54:3f:db:96:57:e3: de:74:42:50:a9:2c:28:e6:90:2f:35:b9:44:2d:d1: 46:bc:d3:61:62:e2:74:9a:f5:87:56:fd:e2:b2:da: 21:23:17:85:5b:20:cd:16:82:92:83:08:85:22:39: fd:3a:5a:ca:0a:7f:d0:bf:ad:e8:0f:b6:6a:fc:65: e0:b6:82:ca:b2:b2:db:4a:6a:bc:9c:84:70:03:36: 49:e7:26:35:f2:73:3c:3e:b9:f5:1e:02:f7:7c:bf: 40:34:09:e5:95:ce:3b:81:1b:dd:ea:67:62:16:0e: 06:f8:7b:4d:0c:58:4c:6a:26:ad:97:da:c0:e7:34: be:67:db:e1:d8:10:29:7a:5b:7b:fd:19:30:e1:34: 95:f1:d7:67:e2:f7:6b:92:17:0b:04:d5:72:70:69: 1e:fe:82:d7:4c:7b:e4:4d:43:b1:8d:5f:17:49:e5: 94:94:23:96:d1:50:f1:cc:30:79:de:ff:6c:29:04: de:ad:43:c5:ca:2d:98:35:a4:b0:98:4f:0e:bf:b4: 33:c7:2d:ad:d6:76:fe:f3:aa:6c:33:b2:2e:35:4f: 7f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F3:67:D4:88:4B:02:5A:19:FF:85:70:D6:62:C8:F0:E8:81:EE:40 X509v3 Authority Key Identifier: keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/F0F521DEC10B11F0B1AC197FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.206.0/23 Signature Algorithm: sha256WithRSAEncryption 63:58:86:63:d8:c3:29:b3:42:07:2a:ec:e7:c6:e9:e7:1a:9d: 95:cd:18:e0:69:b8:80:9c:e5:23:8c:80:fa:5e:8e:e3:f0:d3: 9d:b0:c1:19:af:2c:4c:c9:ce:46:4a:f8:22:1f:b3:1c:ae:d0: ed:d6:8a:50:83:ae:eb:b6:d2:58:89:b4:d1:5a:97:19:dd:7d: c4:bb:c3:d1:7b:e5:a7:24:80:0e:fe:6a:b2:3a:05:6a:a7:af: 0d:6d:3c:98:8c:7d:31:55:ba:1b:67:8b:c0:4c:64:a1:d6:8a: 55:73:8d:30:ef:c9:aa:30:23:13:d8:57:d1:07:10:43:37:29: 12:80:df:1a:47:a1:74:fa:c9:99:4c:48:d2:40:9d:3a:b9:7c: 12:74:ee:d6:d8:bb:b9:1a:c5:6e:e4:00:81:49:bf:c0:ca:70: b8:98:78:d4:3b:74:68:7d:b1:34:6b:1b:39:52:d3:d4:fb:d2: 6b:c7:35:b0:50:4f:bf:96:35:42:af:a3:0d:af:d4:8d:f3:b8: 8b:40:38:c5:6c:88:af:de:f0:54:92:8c:0a:53:28:b9:c2:ec: c0:cd:29:18:52:19:3a:1d:83:a6:b0:8f:23:cb:ba:85:eb:0b: 9b:34:57:83:bd:34:6b:32:88:43:9c:ea:43:6e:32:19:a0:1b: 66:29:6e:35 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUyRDExMTAvBgNVBAUTKDdEMzU4NTI4M0RGMzNFQjUwQjlDMzg4RDU5Q0Q3ODZD QkI5REMzOUUwHhcNMjYxMDA5MDc1NjA5WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM4OWUxOS00ODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsH7UPQcxR2557S5lUqsToNu/PpKVkG2FPk6HoM9b1FpkFWzJIbxUP9uWV+Pe dEJQqSwo5pAvNblELdFGvNNhYuJ0mvWHVv3istohIxeFWyDNFoKSgwiFIjn9OlrK Cn/Qv63oD7Zq/GXgtoLKsrLbSmq8nIRwAzZJ5yY18nM8Prn1HgL3fL9ANAnllc47 gRvd6mdiFg4G+HtNDFhMaiatl9rA5zS+Z9vh2BApelt7/Rkw4TSV8ddn4vdrkhcL BNVycGke/oLXTHvkTUOxjV8XSeWUlCOW0VDxzDB53v9sKQTerUPFyi2YNaSwmE8O v7Qzxy2t1nb+86psM7IuNU9/9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEjzZ9SI SwJaGf+FcNZiyPDoge5AMB8GA1UdIwQYMBaAFH01hSg98z61C5w4jVnNeGy7ncOe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTJEMS82NEE1QUI4NEMw RUExMUYwOUJBOURCNzRDNEY5QUUwMi9mVFdGS0QzelByVUxuRGlOV2MxNGJMdWR3 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZUV0ZLRDN6UHJVTG5EaU5XYzE0Ykx1ZHc1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzUyRDEvNjRBNUFCODRDMEVBMTFGMDlCQTlEQjc0QzRGOUFFMDIvRjBGNTIxREVD MTBCMTFGMEIxQUMxOTdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivzOMA0GCSqGSIb3DQEBCwUAA4IBAQBjWIZj2MMps0IHKuznxunn Gp2VzRjgabiAnOUjjID6Xo7j8NOdsMEZryxMyc5GSvgiH7McrtDt1opQg67rttJY ibTRWpcZ3X3Eu8PRe+WnJIAO/mqyOgVqp68NbTyYjH0xVbobZ4vATGSh1opVc40w 78mqMCMT2FfRBxBDNykSgN8aR6F0+smZTEjSQJ06uXwSdO7W2Lu5GsVu5ACBSb/A ynC4mHjUO3RofbE0axs5UtPU+9JrxzWwUE+/ljVCr6MNr9SN87iLQDjFbIiv3vBU kowKUyi5wuzAzSkYUhk6HYOmsI8jy7qF6wubNFeDvTRrMohDnOpDbjIZoBtmKW41 -----END CERTIFICATE-----Generated at Sat Oct 10 22:42:36 2026 by rpki-client