$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/353545B8CFF811F0ACBFF23FC4F9AE02.roa File: 353545B8CFF811F0ACBFF23FC4F9AE02.roa (raw, json) Hash identifier: OsCUxUMJ0Lu6bonoSsAJ3uo6fve+zajfPsbQZT3/f3k= Subject key identifier: 3D:17:23:63:7E:51:ED:FB:EF:49:B1:EF:B1:6D:FC:0A:6C:B5:03:17 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 23E9 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/353545B8CFF811F0ACBFF23FC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:20:48 +0000 ROA not before: Fri 02 Oct 2026 15:20:48 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154388 IP address blocks: 138.252.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9193 (0x23e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:20:48 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcbd0-dd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:93:ec:81:dc:9d:c5:ec:a9:ff:fa:15:52: 62:ea:ff:19:c2:42:99:4c:8c:6f:56:08:18:e1:f2: 3b:35:97:3b:85:22:86:29:cd:cf:39:ca:20:53:05: 23:65:10:6c:f2:4b:65:a3:37:b3:f2:e3:66:6e:5d: 3d:cf:da:66:4a:93:fd:e1:3f:4e:af:53:7e:25:3e: d2:41:44:c4:a5:b7:13:b8:01:87:ab:72:9e:fb:3b: 79:13:6b:2b:0a:e5:3a:e2:6a:8f:2b:d1:e3:f7:48: 93:9e:b8:79:ed:30:11:af:04:0a:f2:b2:e3:30:71: 27:a6:77:01:7d:3b:03:9d:e2:55:47:3a:07:73:c1: 58:14:09:5f:74:35:d0:b0:d9:85:b3:15:ec:2e:fa: d7:6b:56:09:77:51:4b:f5:e1:a1:12:54:78:a8:b7: f3:72:27:47:ab:f0:0f:25:2a:f1:c4:90:c7:7b:3f: f6:78:57:fe:b2:bc:2c:65:0b:62:be:f5:39:95:69: 36:1c:de:46:d1:5e:d9:c8:44:31:c1:47:b2:86:84: 07:d9:ac:b3:2b:5a:db:0d:77:60:60:a2:9d:8a:b5: 06:8f:38:20:e4:a3:76:be:77:c3:24:5b:d6:be:ee: 70:d5:7c:df:06:7e:c5:b2:97:55:0c:ed:36:7c:a5: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:17:23:63:7E:51:ED:FB:EF:49:B1:EF:B1:6D:FC:0A:6C:B5:03:17 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/353545B8CFF811F0ACBFF23FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.244.0/23 Signature Algorithm: sha256WithRSAEncryption b6:83:df:ce:2f:f6:f0:9d:30:00:40:57:d6:d3:99:9a:6b:7a: f5:af:aa:1a:2c:90:9c:e4:fc:ec:f6:f4:86:07:b0:09:fd:3b: 85:0f:54:7f:ed:84:25:ff:9a:97:9b:0c:2b:cf:87:77:20:e5: 4c:05:b0:1f:73:1d:ce:c6:96:af:ad:c7:54:8e:6f:1f:41:a3: 5d:68:cd:7c:32:f2:83:9b:66:c9:4a:72:9a:87:59:7e:95:e6: 30:1c:61:6d:d1:7c:2a:3d:9a:0a:a9:d7:7a:80:ba:d2:24:e3: 73:7d:da:14:c9:a8:60:52:a1:a7:a7:77:0d:4e:e7:f6:bc:92: 6b:fd:59:80:d4:44:80:5d:c0:12:d0:72:f0:22:f6:eb:78:e4: e3:22:c6:62:6f:cb:f4:80:63:dc:97:9b:0f:0b:18:6b:37:37: 12:6a:d7:cf:d6:d4:1d:56:41:e4:46:86:4f:b0:87:8b:17:57: 91:81:fb:33:0b:76:f1:83:c7:81:d1:ec:43:4e:83:08:95:9e: 96:73:a6:6d:81:37:f8:4b:b5:65:8b:51:01:3d:b9:e4:a5:54: 05:c1:95:0d:01:88:22:c1:ef:70:41:f4:c2:5a:2a:a4:78:8b: ef:d9:ae:e5:ae:58:8c:60:1e:73:74:29:02:3b:81:b3:ba:21: fc:8f:fa:96 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICI+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUyMDQ4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2JkMC1kZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WyT7IHcncXsqf/6FVJi6v8ZwkKZTIxvVggY4fI7NZc7hSKGKc3POcogUwUj ZRBs8ktlozez8uNmbl09z9pmSpP94T9Or1N+JT7SQUTEpbcTuAGHq3Ke+zt5E2sr CuU64mqPK9Hj90iTnrh57TARrwQK8rLjMHEnpncBfTsDneJVRzoHc8FYFAlfdDXQ sNmFsxXsLvrXa1YJd1FL9eGhElR4qLfzcidHq/APJSrxxJDHez/2eFf+srwsZQti vvU5lWk2HN5G0V7ZyEQxwUeyhoQH2ayzK1rbDXdgYKKdirUGjzgg5KN2vnfDJFvW vu5w1XzfBn7FspdVDO02fKV2ywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD0XI2N+ Ue3770mx77Ft/ApstQMXMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMzUzNTQ1QjhD RkY4MTFGMEFDQkZGMjNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivz0MA0GCSqGSIb3DQEBCwUAA4IBAQC2g9/OL/bwnTAAQFfW05ma a3r1r6oaLJCc5Pzs9vSGB7AJ/TuFD1R/7YQl/5qXmwwrz4d3IOVMBbAfcx3Oxpav rcdUjm8fQaNdaM18MvKDm2bJSnKah1l+leYwHGFt0XwqPZoKqdd6gLrSJONzfdoU yahgUqGnp3cNTuf2vJJr/VmA1ESAXcAS0HLwIvbreOTjIsZib8v0gGPcl5sPCxhr NzcSatfP1tQdVkHkRoZPsIeLF1eRgfszC3bxg8eB0exDToMIlZ6Wc6ZtgTf4S7Vl i1EBPbnkpVQFwZUNAYgiwe9wQfTCWiqkeIvv2a7lrliMYB5zdCkCO4GzuiH8j/qW -----END CERTIFICATE-----Generated at Sun Oct 25 20:56:30 2026 by rpki-client