$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/8988B2165DB111F1AB23B9ACA3833773.roa File: 8988B2165DB111F1AB23B9ACA3833773.roa (raw, json) Hash identifier: ad65XTYzHUp3cWmiBJTHs+rg9KKlQlfXiUUJuwHLk8k= Subject key identifier: 1F:28:77:D7:39:0C:85:27:40:20:00:F5:71:17:75:4A:43:A1:20:1D Certificate issuer: /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24 Certificate serial: 82 Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/8988B2165DB111F1AB23B9ACA3833773.roa Signing time: Mon 01 Jun 2026 12:00:52 +0000 ROA not before: Mon 01 Jun 2026 12:00:52 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154295 IP address blocks: 138.252.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 12:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24 Validity Not Before: Jun 1 12:00:52 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a1d7474-0c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:07:8d:4a:1f:00:e3:a9:40:bf:4b:dc:ab: c8:bf:fd:2e:d2:e9:c8:62:20:ef:37:6a:56:dc:22: 49:ae:35:09:45:70:60:13:04:cd:fd:6d:af:0c:05: f9:66:6a:11:4a:57:f4:1d:f0:bb:4c:0f:0d:90:2b: 48:cc:f1:d7:d4:b0:3e:80:8c:9a:8a:a3:8b:0b:97: ea:73:ed:79:ad:dc:cc:e0:12:87:81:5e:41:9b:c2: 86:26:b7:ec:37:4a:bd:86:2f:92:f7:03:e9:0f:88: f4:db:6e:e5:3b:10:92:21:31:7b:0e:94:7c:f0:0b: d6:62:63:d0:a5:81:87:c7:e9:59:cd:cb:3c:74:b9: 94:94:38:df:61:3c:b5:01:bc:8a:77:76:2c:22:9c: 15:b7:ce:6f:1b:1b:90:1e:d9:ff:4f:1d:de:5e:62: 6a:0f:a6:cb:30:4b:c5:e2:48:11:b0:a7:2e:63:5a: 1f:55:e9:1c:1d:eb:91:5c:3b:f0:b9:26:75:a7:df: f6:94:77:44:31:33:be:1f:7b:f6:e2:40:c2:75:4b: 4d:07:6d:45:d4:0c:96:50:fe:16:f7:a2:3c:51:9f: dd:7b:aa:2b:0d:2e:65:d2:c3:1d:22:37:ce:b2:19: f4:2e:91:18:0d:2b:32:39:4c:7b:ea:16:07:61:7f: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:28:77:D7:39:0C:85:27:40:20:00:F5:71:17:75:4A:43:A1:20:1D X509v3 Authority Key Identifier: keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/8988B2165DB111F1AB23B9ACA3833773.roa sbgp-ipAddrBlock: critical IPv4: 138.252.40.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:17:94:bc:ed:ea:77:10:dd:d8:1f:02:23:5c:45:f3:52:04: 2e:43:e0:01:8d:98:dd:4e:1d:4e:89:14:61:04:ad:3c:ca:b1: 8a:7b:08:4e:69:1e:92:3f:d3:73:1e:fb:a7:8e:e5:52:86:87: 63:01:29:94:ea:81:2c:08:bc:10:9d:37:86:f3:5b:dc:a3:ca: 2c:b4:21:40:9f:70:be:f3:ef:5d:f8:88:79:da:dc:4c:5c:a3: 0c:e3:90:b3:04:70:7e:55:9d:3e:ee:a2:9a:0e:ec:59:3a:55: 1a:cf:12:eb:a8:c7:1f:c7:5a:80:62:98:a0:a3:c7:d4:7b:d9: cb:42:25:ea:19:a1:7e:e7:d0:fe:d9:e2:0c:af:b2:90:65:4d: ac:9a:82:46:57:e3:83:06:ba:76:c4:42:dc:33:d1:8f:ec:74: 65:f9:70:ad:25:a5:14:82:c7:c1:9e:57:31:f8:ec:7e:ef:60: 98:5c:75:e9:f4:e0:f2:68:9f:4b:d3:43:7b:e8:58:57:4c:fb: 52:12:3a:60:66:f2:f5:23:6c:73:d0:2c:59:26:ee:04:cc:ae: b6:29:8f:9f:5e:71:53:8e:73:4b:6c:7e:d8:b1:88:ec:2b:b6: 5d:ee:3f:1c:cd:d0:ec:95:77:a1:50:a4:a5:03:c6:4c:41:34: 09:1c:f2:89 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQzMEIxMTAvBgNVBAUTKEQxOUJCNjhFM0NDREM0Qjc4Q0UzNkY4N0Y5NEU3Rjcx MDUxMjNBMjQwHhcNMjYwNjAxMTIwMDUyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFkNzQ3NC0wYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGMHjUofAOOpQL9L3KvIv/0u0unIYiDvN2pW3CJJrjUJRXBgEwTN/W2vDAX5 ZmoRSlf0HfC7TA8NkCtIzPHX1LA+gIyaiqOLC5fqc+15rdzM4BKHgV5Bm8KGJrfs N0q9hi+S9wPpD4j0227lOxCSITF7DpR88AvWYmPQpYGHx+lZzcs8dLmUlDjfYTy1 AbyKd3YsIpwVt85vGxuQHtn/Tx3eXmJqD6bLMEvF4kgRsKcuY1ofVekcHeuRXDvw uSZ1p9/2lHdEMTO+H3v24kDCdUtNB21F1AyWUP4W96I8UZ/de6orDS5l0sMdIjfO shn0LpEYDSsyOUx76hYHYX/B+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB8od9c5 DIUnQCAA9XEXdUpDoSAdMB8GA1UdIwQYMBaAFNGbto48zcS3jONvh/lOf3EFEjok MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDMwQi84MjM2RTI2MEE3 Q0UxMUYwOTc4OTQ1MjhDNEY5QUUwMi8wWnUyamp6TnhMZU00Mi1ILVU1X2NRVVNP aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBadTJqanpOeExlTTQyLUgtVTVfY1FVU09pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQzMEIvODIzNkUyNjBBN0NFMTFGMDk3ODk0NTI4QzRGOUFFMDIvODk4OEIyMTY1 REIxMTFGMUFCMjNCOUFDQTM4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAivwoMA0GCSqGSIb3DQEBCwUAA4IBAQBeF5S87ep3EN3YHwIjXEXz UgQuQ+ABjZjdTh1OiRRhBK08yrGKewhOaR6SP9NzHvunjuVShodjASmU6oEsCLwQ nTeG81vco8ostCFAn3C+8+9d+Ih52txMXKMM45CzBHB+VZ0+7qKaDuxZOlUazxLr qMcfx1qAYpigo8fUe9nLQiXqGaF+59D+2eIMr7KQZU2smoJGV+ODBrp2xELcM9GP 7HRl+XCtJaUUgsfBnlcx+Ox+72CYXHXp9ODyaJ9L00N76FhXTPtSEjpgZvL1I2xz 0CxZJu4EzK62KY+fXnFTjnNLbH7YsYjsK7Zd7j8czdDslXehUKSlA8ZMQTQJHPKJ -----END CERTIFICATE-----Generated at Tue Jun 2 22:00:48 2026 by rpki-client