$ rpki-client -vvf rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/390B7BFAC62311F092B8183CC4F9AE02.roa File: 390B7BFAC62311F092B8183CC4F9AE02.roa (raw, json) Hash identifier: OdFik9QbQwbDNwBO8NmeHTSCxxItyVwP3BUltpegtXI= Subject key identifier: B3:6D:D5:57:38:2A:94:D1:59:3B:2B:01:A6:41:A2:25:0C:35:67:F0 Certificate issuer: /CN=A913E614/serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Certificate serial: 44 Authority key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/390B7BFAC62311F092B8183CC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:59:06 +0000 ROA not before: Thu 20 Nov 2025 15:11:43 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 136905 IP address blocks: 138.252.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661 Validity Not Before: Nov 20 15:11:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a58999-c3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:ea:c0:30:0b:19:8b:13:45:c5:2d:b5:01: b0:e3:18:44:69:95:2b:82:f5:9f:89:53:9f:66:2c: 6d:f9:8d:7b:a9:6d:38:f8:29:17:40:39:fd:34:1e: cd:e5:e8:fb:ce:80:df:75:77:4f:05:c9:ab:bf:3e: 86:1a:81:f7:76:5e:63:ca:dd:13:d8:cb:ed:f8:f8: 44:d6:50:a5:55:a9:02:5d:7c:f6:55:b0:0d:58:96: 57:07:d7:00:8e:39:09:43:73:6d:94:42:01:b9:8d: 58:15:1d:32:42:70:9b:02:74:03:0b:bc:ae:e8:94: a6:c6:2b:9f:e0:aa:3e:b3:e4:c9:d5:97:f1:eb:10: 33:4b:d8:a6:84:54:d3:fc:81:f5:a8:d2:6d:76:c8: 3e:19:75:59:24:98:f9:52:4b:4c:22:31:93:3f:e6: 79:03:c7:6b:6e:4f:60:e1:85:c5:49:e7:02:67:80: 6e:cc:72:83:51:be:ad:f2:82:85:09:31:ab:02:48: ad:56:00:1c:7a:37:df:d3:e1:fa:7f:90:71:90:41: f1:24:41:04:b5:b5:da:46:72:19:f3:f1:e0:f2:2d: 96:1c:06:c8:c7:c3:e3:e8:b8:b5:7a:3f:ee:80:20: a5:8a:a2:12:ea:ea:12:ea:62:43:cd:0b:7f:84:2b: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6D:D5:57:38:2A:94:D1:59:3B:2B:01:A6:41:A2:25:0C:35:67:F0 X509v3 Authority Key Identifier: keyid:55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/390B7BFAC62311F092B8183CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.150.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:95:f5:b2:ff:22:d6:2f:6a:b8:e6:f4:8d:57:99:e4:0c:b4: cc:79:a1:ef:59:da:ef:6a:da:3c:bc:0d:86:20:9e:b4:2f:75: 57:d2:e6:c2:28:de:f7:6a:dd:f8:a9:cc:1b:ce:79:3a:81:18: 10:2e:f7:82:ce:f8:f9:85:67:d0:4c:a6:39:9c:59:99:b8:18: 00:19:84:ac:55:a8:94:c6:2e:d9:c1:f8:c7:90:1a:fe:01:48: 5a:d5:35:1f:d1:48:29:cb:b8:34:8b:67:d9:3a:3e:51:95:f8: 3d:67:f3:90:8c:40:0d:e8:b4:c1:ff:a9:15:12:72:70:58:b8: ca:13:3a:85:da:e2:6b:a1:2a:8f:76:49:16:1d:78:63:06:f5: 23:b0:fd:ee:12:42:19:32:9d:78:e7:30:19:92:db:cc:05:52: a3:86:61:d9:d4:67:41:30:dc:61:41:50:81:33:35:1f:03:86: 5c:95:a8:4b:5d:f9:e9:5a:f5:be:6c:2c:90:1d:9f:17:0a:ef: d5:55:b0:3d:60:9b:2c:a9:3e:84:f7:15:5e:34:3a:f1:64:28: 5a:a0:43:1e:70:dc:79:58:68:a3:f6:cf:30:7d:32:3b:a0:0e: 01:59:69:60:c9:c1:81:03:3a:07:be:cf:7c:54:e8:e0:58:8f: 82:25:e9:17 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYxNDExMC8GA1UEBRMoNTU3M0M1NjhBRTAxNDgxNEQxQjRERUFGNjhGQTQ2NEY0 OTUyMzY2MTAeFw0yNTExMjAxNTExNDNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU4OTk5LWMzYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1lerAMAsZixNFxS21AbDjGERplSuC9Z+JU59mLG35jXupbTj4KRdAOf00Hs3l 6PvOgN91d08Fyau/PoYagfd2XmPK3RPYy+34+ETWUKVVqQJdfPZVsA1YllcH1wCO OQlDc22UQgG5jVgVHTJCcJsCdAMLvK7olKbGK5/gqj6z5MnVl/HrEDNL2KaEVNP8 gfWo0m12yD4ZdVkkmPlSS0wiMZM/5nkDx2tuT2DhhcVJ5wJngG7McoNRvq3ygoUJ MasCSK1WABx6N9/T4fp/kHGQQfEkQQS1tdpGchnz8eDyLZYcBsjHw+PouLV6P+6A IKWKohLq6hLqYkPNC3+EK9YXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUs23VVzgq lNFZOysBpkGiJQw1Z/AwHwYDVR0jBBgwFoAUVXPFaK4BSBTRtN6vaPpGT0lSNmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjE0LzJGRDkwMEUwQzNB MTExRjA5QjFCQzMzOUM0RjlBRTAyL1ZYUEZhSzRCU0JUUnRONnZhUHBHVDBsU05t RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhQRmFLNEJTQlRSdE42dmFQcEdUMGxTTm1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTYxNC8yRkQ5MDBFMEMzQTExMUYwOUIxQkMzMzlDNEY5QUUwMi8zOTBCN0JGQUM2 MjMxMUYwOTJCODE4M0NDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/JYwDQYJKoZIhvcNAQELBQADggEBAEyV9bL/ItYvarjm9I1XmeQM tMx5oe9Z2u9q2jy8DYYgnrQvdVfS5sIo3vdq3fipzBvOeTqBGBAu94LO+PmFZ9BM pjmcWZm4GAAZhKxVqJTGLtnB+MeQGv4BSFrVNR/RSCnLuDSLZ9k6PlGV+D1n85CM QA3otMH/qRUScnBYuMoTOoXa4muhKo92SRYdeGMG9SOw/e4SQhkynXjnMBmS28wF UqOGYdnUZ0Ew3GFBUIEzNR8DhlyVqEtd+ela9b5sLJAdnxcK79VVsD1gmyypPoT3 FV40OvFkKFqgQx5w3HlYaKP2zzB9MjugDgFZaWDJwYEDOge+z3xU6OBYj4Il6Rc= -----END CERTIFICATE-----Generated at Wed Mar 4 09:47:48 2026 by rpki-client