$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/A97ADB48BD6B11F18AE408746311F970.roa File: A97ADB48BD6B11F18AE408746311F970.roa (raw, json) Hash identifier: Xc4Z+Rb4JkWnGmrVhocIM5Gs3PmJ+2vN+vMpj2sU6/w= Subject key identifier: 43:07:7F:D8:83:18:D2:61:1B:13:8A:0F:5D:21:C3:EE:DB:51:E3:B6 Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Certificate serial: C6 Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/A97ADB48BD6B11F18AE408746311F970.roa Signing time: Thu 01 Oct 2026 07:42:33 +0000 ROA not before: Thu 01 Oct 2026 07:42:33 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 140641 IP address blocks: 138.252.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 07:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Validity Not Before: Oct 1 07:42:33 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6abe0ee9-fbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2d:7b:56:3f:8b:e9:ee:38:f5:e7:88:8b:7c: 48:20:68:cc:45:ba:c1:c5:81:90:0f:65:fb:3c:a9: 68:e4:3e:ef:d8:7f:dc:40:89:93:10:e8:09:95:1a: dd:16:a7:ba:74:7b:b2:29:f7:90:db:80:aa:52:ce: 94:9b:07:77:9e:1f:06:1a:26:4a:a9:f5:ee:de:d4: ae:6e:5d:48:43:52:99:2b:a8:d3:22:c0:78:ed:39: 5e:f7:18:d2:38:de:90:5d:ee:d8:60:24:2e:ce:da: 7e:ce:2c:fb:62:f6:eb:98:03:41:8b:f6:18:05:f9: 2c:5e:39:27:07:77:e3:f5:22:10:90:2d:15:68:39: 14:fd:85:4a:f9:f3:8a:48:99:a6:cc:1d:52:08:1a: 75:b0:e0:7e:7e:11:a2:75:ec:ad:6c:5c:3a:86:0b: ed:7a:4a:66:4f:ea:0b:01:a3:f0:3f:4f:bf:73:9b: a2:d9:d9:5d:e7:0c:58:82:8a:cc:c8:c8:a2:8e:ce: 46:8c:8f:1f:33:3a:47:3d:dd:e0:1b:a0:6f:3a:32: f4:63:21:d5:b1:9c:57:78:31:62:b5:00:2e:76:41: 6d:aa:5d:d8:31:ee:38:94:7b:f2:bc:8e:a9:5e:d0: d5:24:c8:50:5c:9f:5a:c3:43:8f:57:95:c0:c7:55: 13:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:07:7F:D8:83:18:D2:61:1B:13:8A:0F:5D:21:C3:EE:DB:51:E3:B6 X509v3 Authority Key Identifier: keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/A97ADB48BD6B11F18AE408746311F970.roa sbgp-ipAddrBlock: critical IPv4: 138.252.3.0/24 Signature Algorithm: sha256WithRSAEncryption 00:90:c3:8c:ac:3c:90:be:7e:0a:8a:ed:11:3a:a7:d7:91:a0: e2:6b:1d:cd:d3:2d:53:54:79:ae:41:b7:35:05:ab:72:ad:e2: ed:8c:61:d1:ed:af:cf:9e:73:da:9f:b3:ec:76:3b:26:87:66: 1c:11:67:de:de:da:bd:00:9a:e9:3c:5d:e7:4a:c3:6d:5a:fd: 35:80:af:bc:1d:dd:b7:ad:87:1b:42:a3:15:78:5d:ba:21:9d: dd:7b:fd:6d:77:31:e8:d7:52:41:7a:74:7f:0b:bc:11:09:71: de:a5:8b:cc:4b:b1:cc:3e:86:d1:bc:06:1d:50:71:b9:fa:88: 85:a9:d3:0c:e8:c8:a3:e1:d0:03:a9:00:57:ca:7f:9b:e4:e4: f4:c3:a6:19:25:c1:04:6b:d0:bf:bf:07:49:ab:98:9c:81:a3: 16:a7:1e:81:3c:9e:54:d9:0c:9c:41:e0:e0:68:5d:31:3e:c9: 98:9e:9b:7e:f8:99:4f:f4:a8:aa:7e:a4:1f:09:cc:03:9f:d3: f0:eb:dd:fe:67:16:02:23:1d:40:fe:dd:4f:cf:94:0b:65:00: 5a:ac:51:eb:4f:0f:60:d8:5e:7d:8b:a8:b2:80:57:59:64:94: c6:f1:5d:7f:dc:79:d6:d6:99:34:bc:04:c4:ef:60:4f:b5:a2: 68:22:4d:01 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZERDAxMTAvBgNVBAUTKDhFMTIxMzE0MjkxNzk2QjJFNTJCODlEODdDNEVENkQ5 RENGQTUyNEIwHhcNMjYxMDAxMDc0MjMzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJlMGVlOS1mYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y17Vj+L6e449eeIi3xIIGjMRbrBxYGQD2X7PKlo5D7v2H/cQImTEOgJlRrd Fqe6dHuyKfeQ24CqUs6Umwd3nh8GGiZKqfXu3tSubl1IQ1KZK6jTIsB47Tle9xjS ON6QXe7YYCQuztp+ziz7YvbrmANBi/YYBfksXjknB3fj9SIQkC0VaDkU/YVK+fOK SJmmzB1SCBp1sOB+fhGideytbFw6hgvtekpmT+oLAaPwP0+/c5ui2dld5wxYgorM yMiijs5GjI8fMzpHPd3gG6BvOjL0YyHVsZxXeDFitQAudkFtql3YMe44lHvyvI6p XtDVJMhQXJ9aw0OPV5XAx1UT+wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEMHf9iD GNJhGxOKD10hw+7bUeO2MB8GA1UdIwQYMBaAFI4SExQpF5ay5SuJ2HxO1tnc+lJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkREMC9DMUM3Q0MxNEM0 NzAxMUYwOTQ1RDYyMzlDNEY5QUUwMi9qaElURkNrWGxyTGxLNG5ZZkU3VzJkejZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2poSVRGQ2tYbHJMbEs0bllmRTdXMmR6NlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZERDAvQzFDN0NDMTRDNDcwMTFGMDk0NUQ2MjM5QzRGOUFFMDIvQTk3QURCNDhC RDZCMTFGMThBRTQwODc0NjMxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAivwDMA0GCSqGSIb3DQEBCwUAA4IBAQAAkMOMrDyQvn4Kiu0ROqfX kaDiax3N0y1TVHmuQbc1BatyreLtjGHR7a/PnnPan7Psdjsmh2YcEWfe3tq9AJrp PF3nSsNtWv01gK+8Hd23rYcbQqMVeF26IZ3de/1tdzHo11JBenR/C7wRCXHepYvM S7HMPobRvAYdUHG5+oiFqdMM6Mij4dADqQBXyn+b5OT0w6YZJcEEa9C/vwdJq5ic gaMWpx6BPJ5U2QycQeDgaF0xPsmYnpt++JlP9KiqfqQfCcwDn9Pw693+ZxYCIx1A /t1Pz5QLZQBarFHrTw9g2F59i6iygFdZZJTG8V1/3HnW1pk0vATE72BPtaJoIk0B -----END CERTIFICATE-----Generated at Sat Oct 10 00:31:56 2026 by rpki-client