$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/40506BD64F6311F1B33586E9C4833773.roa File: 40506BD64F6311F1B33586E9C4833773.roa (raw, json) Hash identifier: /xujX/eflt5wRcWaBi7MbQ6JbnMkzZt1Nfl3vZK9gwA= Subject key identifier: 8F:83:69:51:65:C8:F7:F9:74:77:A6:5B:5C:AF:56:E5:F3:F0:31:73 Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Certificate serial: 68 Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/40506BD64F6311F1B33586E9C4833773.roa Signing time: Thu 14 May 2026 07:05:12 +0000 ROA not before: Thu 14 May 2026 07:05:12 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140586 IP address blocks: 138.252.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 08:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Validity Not Before: May 14 07:05:12 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a057428-07f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:a2:4e:67:13:b5:5d:a0:47:4a:54:40:9b: 33:3d:4b:a2:45:52:4c:34:ea:24:69:60:83:f7:b6: c2:03:03:92:1c:81:d0:6b:17:b5:fb:3e:35:fd:3d: 5d:df:6c:b8:84:b9:40:89:4e:ff:87:7f:e4:05:bb: c0:37:3e:9f:a2:11:a8:93:d1:37:e9:cb:bb:eb:24: fe:5a:85:3d:cb:aa:93:d3:a7:34:34:cf:13:ac:63: 5d:3f:4e:d2:27:d4:d3:d3:04:88:e4:6c:64:ad:ad: c6:53:a8:65:2e:ba:bb:b6:72:cd:f3:dc:e3:4f:b5: 27:3a:a0:e0:47:53:16:c1:44:30:ce:4d:11:c4:89: 2c:ed:24:bd:57:11:41:44:74:22:d1:45:b8:aa:61: e2:14:01:3c:12:3c:95:76:96:46:68:d7:22:b1:c6: 91:3a:89:2d:e2:83:74:c3:fb:04:d3:44:05:fe:5d: 75:76:ef:58:75:02:80:f0:20:c7:72:bc:ff:ec:3d: 07:c9:1d:39:64:c3:42:d1:b4:03:da:c6:09:9b:87: 7e:88:fd:8c:89:d1:c4:66:33:34:1d:d6:92:ed:5e: 87:e8:99:28:1b:ae:f0:79:e1:e8:bc:6b:a2:b6:d3: 0f:09:6f:61:e8:47:59:de:72:16:18:8e:f6:c2:9c: 60:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:83:69:51:65:C8:F7:F9:74:77:A6:5B:5C:AF:56:E5:F3:F0:31:73 X509v3 Authority Key Identifier: keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/40506BD64F6311F1B33586E9C4833773.roa sbgp-ipAddrBlock: critical IPv4: 138.252.63.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e9:6f:e6:7b:78:ce:75:db:6f:ce:39:54:a5:92:51:ac:e8: b8:03:d8:2a:5c:94:da:46:90:ee:ce:0c:fe:8f:b1:de:8f:15: ac:b2:83:d6:03:b3:8c:05:af:50:0f:d7:ea:c3:6c:a8:76:59: 4f:4e:ae:24:a0:31:de:1f:27:c5:d1:61:b1:56:6f:86:0e:94: c1:df:e6:5e:02:ba:e0:09:87:d0:55:c6:7f:c8:a2:2c:a7:21: 08:2d:19:62:37:21:fb:0b:ae:b0:99:5f:50:26:9c:fd:42:2c: 75:9f:a3:16:7b:30:ab:2e:d7:90:f9:f7:93:6f:b3:db:6a:f0: dc:f0:c0:e2:c7:7b:3f:a8:55:d5:d7:06:cb:33:8e:5b:de:0e: 95:09:d8:f6:8e:c9:4f:5f:df:f4:45:29:3d:8f:7f:bd:17:c0: 86:f6:49:09:33:e0:ac:ea:5c:e4:bd:bf:d0:6d:97:66:38:88: e3:5e:85:35:40:39:7e:5b:50:2a:18:20:ab:5b:97:00:72:84: 7d:70:dd:5d:a8:12:3b:46:49:7c:fd:15:65:3b:e7:6b:a5:dc: ef:e4:26:27:73:b0:e9:fe:74:1d:9d:1a:3d:db:5d:e7:89:aa: 39:a3:20:3b:a0:3d:d7:a1:4b:11:52:86:c7:70:59:1c:42:bc: b3:19:86:07 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0E1QjExMC8GA1UEBRMoNUQ0RjQxMkFFNDgwMTBGRTU0ODdGMDE4RjE3MUE5QzY0 NjlEOUFDNTAeFw0yNjA1MTQwNzA1MTJaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMDU3NDI4LTA3ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJlKJOZxO1XaBHSlRAmzM9S6JFUkw06iRpYIP3tsIDA5IcgdBrF7X7PjX9PV3f bLiEuUCJTv+Hf+QFu8A3Pp+iEaiT0Tfpy7vrJP5ahT3LqpPTpzQ0zxOsY10/TtIn 1NPTBIjkbGStrcZTqGUuuru2cs3z3ONPtSc6oOBHUxbBRDDOTRHEiSztJL1XEUFE dCLRRbiqYeIUATwSPJV2lkZo1yKxxpE6iS3ig3TD+wTTRAX+XXV271h1AoDwIMdy vP/sPQfJHTlkw0LRtAPaxgmbh36I/YyJ0cRmMzQd1pLtXofomSgbrvB54ei8a6K2 0w8Jb2HoR1nechYYjvbCnGC9AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUj4NpUWXI 9/l0d6ZbXK9W5fPwMXMwHwYDVR0jBBgwFoAUXU9BKuSAEP5Uh/AY8XGpxkadmsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQTVCL0QyNUQ4NjhFQzAz QTExRjA4OEEzNDYyQ0M0RjlBRTAyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1z VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFU5Qkt1U0FFUDVVaF9BWThYR3B4a2FkbXNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0E1Qi9EMjVEODY4RUMwM0ExMUYwODhBMzQ2MkNDNEY5QUUwMi80MDUwNkJENjRG NjMxMUYxQjMzNTg2RTlDNDgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/D8wDQYJKoZIhvcNAQELBQADggEBAI7pb+Z7eM5122/OOVSlklGs 6LgD2CpclNpGkO7ODP6Psd6PFayyg9YDs4wFr1AP1+rDbKh2WU9OriSgMd4fJ8XR YbFWb4YOlMHf5l4CuuAJh9BVxn/IoiynIQgtGWI3IfsLrrCZX1AmnP1CLHWfoxZ7 MKsu15D595Nvs9tq8NzwwOLHez+oVdXXBsszjlveDpUJ2PaOyU9f3/RFKT2Pf70X wIb2SQkz4KzqXOS9v9Btl2Y4iONehTVAOX5bUCoYIKtblwByhH1w3V2oEjtGSXz9 FWU752ul3O/kJidzsOn+dB2dGj3bXeeJqjmjIDugPdehSxFShsdwWRxCvLMZhgc= -----END CERTIFICATE-----Generated at Thu May 28 08:07:02 2026 by rpki-client