$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1D58E1D6C62D11F0AAC5916FC4F9AE02.roa File: 1D58E1D6C62D11F0AAC5916FC4F9AE02.roa (raw, json) Hash identifier: L/L2zwpffjnFybR5grt3KC7WPPeY+hhZTRbD89kta1I= Subject key identifier: 18:D2:DA:99:1D:7A:02:C4:0A:37:C3:36:E1:13:D5:BB:4F:70:39:7D Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 23E8 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1D58E1D6C62D11F0AAC5916FC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:20:46 +0000 ROA not before: Fri 02 Oct 2026 15:20:46 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154350 IP address blocks: 138.252.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9192 (0x23e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:20:46 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcbce-48dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:ca:5f:43:ae:27:01:cf:d1:af:81:70:c9: b6:f4:b1:c2:c1:37:c9:6c:69:63:c6:c6:e8:a9:e0: da:0a:40:d9:20:d7:c9:bb:f2:d9:ab:0e:7a:0f:10: 4e:46:db:d6:27:ed:40:14:f5:a9:0d:32:ba:02:65: b4:e5:bc:58:4f:9e:34:c0:12:76:4f:2a:82:4a:7e: d2:ca:8e:b8:48:f2:27:3b:0a:a2:3c:e0:93:7f:dd: cc:cc:4b:41:53:f3:14:53:80:69:c6:9c:39:43:29: f6:9f:d1:3e:19:7b:9d:68:93:c8:51:f0:6b:4a:76: 33:38:46:03:ff:9b:33:64:2e:69:76:59:7b:35:2c: a8:50:f3:cd:6f:46:8c:98:de:a7:5f:be:f8:c9:ee: 5a:94:3b:53:8c:fa:bf:97:98:26:3d:30:77:20:1f: 21:b1:1b:d2:74:b9:09:5c:da:7e:d5:35:4f:ea:65: 31:4a:05:62:ec:a4:fa:0d:67:d6:71:40:96:6b:cb: b2:ec:f3:03:40:1c:d5:8f:a7:15:d1:d0:34:cb:aa: c9:1a:48:fb:76:09:2a:5d:69:33:65:78:ee:8c:50: df:7e:61:6d:f1:c5:07:07:02:d8:df:19:a5:68:36: e0:68:d9:1a:9e:5c:fd:8d:de:20:aa:49:22:3f:50: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D2:DA:99:1D:7A:02:C4:0A:37:C3:36:E1:13:D5:BB:4F:70:39:7D X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1D58E1D6C62D11F0AAC5916FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.152.0/23 Signature Algorithm: sha256WithRSAEncryption 31:d8:e9:ee:ef:c3:bb:47:4c:7e:58:48:f8:51:61:b8:dc:3a: b6:37:1c:d1:fc:17:03:56:9e:55:0f:56:9e:82:61:2f:35:23: 0d:a4:3c:90:43:19:4b:20:1d:91:7e:c3:36:3c:f2:28:bf:f6: 62:f9:2c:6f:65:37:e8:3d:3d:ed:f9:0c:b7:90:59:8e:32:92: e6:c3:ca:2e:f5:fb:0f:62:8a:16:87:cf:8b:59:b2:38:18:fa: 34:f8:be:00:92:fb:b0:59:4e:37:11:d2:88:e5:31:e3:99:9a: 50:06:d8:7d:1a:3e:26:2d:4e:46:19:dd:1d:b8:7a:a9:81:fa: c2:de:7c:f0:7b:e3:b4:a1:6c:8b:3b:cc:4d:d3:5b:c6:fd:67: 33:2d:4f:dc:90:2d:9b:02:76:0f:3f:0a:a9:c2:a1:c2:6d:ee: 59:94:c1:c0:55:09:03:e3:fe:e8:3f:e6:e5:78:a8:22:07:fc: 59:cc:06:29:1d:ad:e9:26:e0:e2:d3:a0:35:98:db:ba:3d:cb: c3:9c:7b:f7:a0:9c:30:5c:ee:0f:fc:d3:1c:c9:c5:90:f8:0c: f8:48:f1:df:b5:18:c9:4e:98:1c:b6:21:2c:b4:80:7c:37:54: 0d:99:f1:6f:72:21:1d:f8:df:ac:8b:48:02:07:bc:44:b0:51: bb:4f:f5:02 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICI+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUyMDQ2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2JjZS00OGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYHKX0OuJwHP0a+BcMm29LHCwTfJbGljxsboqeDaCkDZINfJu/LZqw56DxBO RtvWJ+1AFPWpDTK6AmW05bxYT540wBJ2TyqCSn7Syo64SPInOwqiPOCTf93MzEtB U/MUU4Bpxpw5Qyn2n9E+GXudaJPIUfBrSnYzOEYD/5szZC5pdll7NSyoUPPNb0aM mN6nX774ye5alDtTjPq/l5gmPTB3IB8hsRvSdLkJXNp+1TVP6mUxSgVi7KT6DWfW cUCWa8uy7PMDQBzVj6cV0dA0y6rJGkj7dgkqXWkzZXjujFDffmFt8cUHBwLY3xml aDbgaNkanlz9jd4gqkkiP1DBPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBjS2pkd egLECjfDNuET1btPcDl9MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMUQ1OEUxRDZD NjJEMTFGMEFBQzU5MTZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivyYMA0GCSqGSIb3DQEBCwUAA4IBAQAx2Onu78O7R0x+WEj4UWG4 3Dq2NxzR/BcDVp5VD1aegmEvNSMNpDyQQxlLIB2RfsM2PPIov/Zi+SxvZTfoPT3t +Qy3kFmOMpLmw8ou9fsPYooWh8+LWbI4GPo0+L4AkvuwWU43EdKI5THjmZpQBth9 Gj4mLU5GGd0duHqpgfrC3nzwe+O0oWyLO8xN01vG/WczLU/ckC2bAnYPPwqpwqHC be5ZlMHAVQkD4/7oP+bleKgiB/xZzAYpHa3pJuDi06A1mNu6PcvDnHv3oJwwXO4P /NMcycWQ+Az4SPHftRjJTpgctiEstIB8N1QNmfFvciEd+N+si0gCB7xEsFG7T/UC -----END CERTIFICATE-----Generated at Mon Oct 26 03:48:27 2026 by rpki-client