$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/81D5DEE47F5D11EDB4309B54C4F9AE02.roa File: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (raw, json) Hash identifier: j7B/95L7AiZyWXgQXJSIhJL56zEjU/YoNoxOzPBnzyM= Subject key identifier: DF:4D:6F:DB:4B:CF:07:65:2C:A6:75:97:B0:77:41:FA:D3:13:0D:39 Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Certificate serial: 02D1 Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/81D5DEE47F5D11EDB4309B54C4F9AE02.roa Signing time: Wed 07 Oct 2026 01:50:47 +0000 ROA not before: Wed 07 Oct 2026 01:50:47 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 7575 IP address blocks: 138.7.0.0/18 maxlen: 18 138.7.64.0/24 maxlen: 24 138.7.66.0/24 maxlen: 24 138.7.67.0/24 maxlen: 24 138.7.69.0/24 maxlen: 24 138.7.120.0/24 maxlen: 24 138.7.121.0/24 maxlen: 24 138.7.152.0/23 maxlen: 23 138.7.191.0/24 maxlen: 24 138.7.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Validity Not Before: Oct 7 01:50:47 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac5a577-568a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3e:80:68:f2:8e:28:c4:30:09:bd:89:80:49: 4b:9d:bc:8a:47:4d:68:c4:6a:0c:5f:29:5c:8b:c0: dc:59:bc:87:c6:76:a2:8f:2d:10:2b:41:6f:fa:e3: 8c:e2:16:b6:74:ec:d5:00:36:61:07:24:9b:1a:fe: 44:83:d9:e4:3f:48:2e:e4:12:4a:64:49:84:84:7d: 33:4f:3e:32:45:7b:96:ee:27:ec:2b:51:5c:93:2c: 2b:a8:8d:69:47:12:24:02:ca:41:9d:04:a5:a9:0c: 10:f0:7d:db:46:5b:a8:39:53:84:c9:19:b6:5c:58: 50:ff:ba:b6:09:4f:7e:f8:f7:0d:68:e3:72:c9:51: 6c:de:c5:a2:c9:6b:48:40:80:b3:b6:94:78:95:de: 21:d9:97:82:0a:e2:a1:92:a8:65:e1:44:2b:73:46: ba:c4:bb:32:d3:3e:40:9d:62:1d:d2:f8:e4:4b:94: db:86:44:dc:08:9f:74:7d:58:25:c5:d1:88:bf:6b: be:36:1f:f2:d4:33:c6:9f:78:b7:58:2b:2b:c9:5e: 48:03:14:63:85:38:8f:f5:0d:ae:30:6b:ad:aa:23: 75:2f:44:ae:16:82:5b:0f:b2:86:67:b5:64:c2:3a: f3:b6:88:84:f4:c6:28:14:07:54:ee:31:b1:11:b5: a1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4D:6F:DB:4B:CF:07:65:2C:A6:75:97:B0:77:41:FA:D3:13:0D:39 X509v3 Authority Key Identifier: keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/81D5DEE47F5D11EDB4309B54C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.7.0.0-138.7.64.255 138.7.66.0/23 138.7.69.0/24 138.7.120.0/23 138.7.152.0/23 138.7.191.0/24 138.7.193.0/24 Signature Algorithm: sha256WithRSAEncryption 45:06:d5:51:33:fe:62:f2:58:50:85:b0:52:81:a2:8d:cf:27: 9e:02:77:2d:49:b4:e7:cc:7a:71:82:37:1e:fd:1b:d4:9a:6c: 91:3f:06:f9:04:53:26:6a:05:c8:1b:5c:a8:43:04:9b:69:1d: f3:d8:e1:99:57:10:f5:d3:07:22:c8:91:e8:4e:ad:23:05:90: c2:aa:2c:d7:c6:3a:eb:01:3a:46:72:20:7f:ef:31:03:b5:4c: 46:05:1d:d4:3c:1c:3b:85:77:be:71:7e:81:88:9c:93:d8:70: 8c:6d:64:50:d7:c7:67:ed:d3:7c:5c:c7:19:4b:a9:8b:32:ed: 30:30:a0:57:27:41:de:36:71:1a:c6:4b:c6:20:4f:c6:c5:d7: fb:96:51:ce:aa:8b:03:af:52:6f:ea:1a:01:84:7e:7b:b6:91: 56:48:58:3e:e8:35:2c:67:3b:e5:78:ae:9d:7c:c4:4a:f0:6b: 21:5b:d3:c4:0c:b8:fb:e5:17:24:49:ad:ab:98:42:da:ad:11: a7:54:af:1f:7a:d0:53:d6:e1:94:cc:c7:91:f3:d5:26:ff:56: 08:42:d4:ae:1e:93:04:17:d0:fd:ea:95:a7:d1:cd:97:40:f9: 56:64:63:81:6e:03:79:9a:3b:5f:6b:95:a5:c3:12:29:64:56: ee:83:46:3e -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3 QTcyRUYwRjMwHhcNMjYxMDA3MDE1MDQ3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM1YTU3Ny01NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqT6AaPKOKMQwCb2JgElLnbyKR01oxGoMXylci8DcWbyHxnaijy0QK0Fv+uOM 4ha2dOzVADZhBySbGv5Eg9nkP0gu5BJKZEmEhH0zTz4yRXuW7ifsK1FckywrqI1p RxIkAspBnQSlqQwQ8H3bRluoOVOEyRm2XFhQ/7q2CU9++PcNaONyyVFs3sWiyWtI QICztpR4ld4h2ZeCCuKhkqhl4UQrc0a6xLsy0z5AnWId0vjkS5TbhkTcCJ90fVgl xdGIv2u+Nh/y1DPGn3i3WCsryV5IAxRjhTiP9Q2uMGutqiN1L0SuFoJbD7KGZ7Vk wjrztoiE9MYoFAdU7jGxEbWhnwIDAQABo4ICizCCAocwHQYDVR0OBBYEFN9Nb9tL zwdlLKZ1l7B3QfrTEw05MB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdGNkEvMDY3OTI1MDA3RjQyMTFFREI0RTc4Qzg2QzRGOUFFMDIvODFENURFRTQ3 RjVEMTFFREI0MzA5QjU0QzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTA3 BAIAATAxMAsDAwCKBwMEAIoHQAMEAYoHQgMEAIoHRQMEAYoHeAMEAYoHmAMEAIoH vwMEAIoHwTANBgkqhkiG9w0BAQsFAAOCAQEARQbVUTP+YvJYUIWwUoGijc8nngJ3 LUm058x6cYI3Hv0b1JpskT8G+QRTJmoFyBtcqEMEm2kd89jhmVcQ9dMHIsiR6E6t IwWQwqos18Y66wE6RnIgf+8xA7VMRgUd1DwcO4V3vnF+gYick9hwjG1kUNfHZ+3T fFzHGUupizLtMDCgVydB3jZxGsZLxiBPxsXX+5ZRzqqLA69Sb+oaAYR+e7aRVkhY Pug1LGc75XiunXzESvBrIVvTxAy4++UXJEmtq5hC2q0Rp1SvH3rQU9bhlMzHkfPV Jv9WCELUrh6TBBfQ/eqVp9HNl0D5VmRjgW4DeZo7X2uVpcMSKWRW7oNGPg== -----END CERTIFICATE-----Generated at Thu Oct 8 13:00:27 2026 by rpki-client