$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/F29881C82D2811F19656BE60B9833773.roa File: F29881C82D2811F19656BE60B9833773.roa (raw, json) Hash identifier: j49xZ/pNE+6bd9Li6teEM+llvM2db9Ji2DZmBv8OAyg= Subject key identifier: F5:44:A0:4E:63:8B:3A:0A:9B:9F:0F:83:76:7B:E4:3C:2E:0B:A5:B8 Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Certificate serial: 4C Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/F29881C82D2811F19656BE60B9833773.roa Signing time: Tue 31 Mar 2026 17:42:12 +0000 ROA not before: Tue 31 Mar 2026 17:42:12 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 142577 IP address blocks: 138.252.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Validity Not Before: Mar 31 17:42:12 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69cc0774-712c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:57:d1:75:b0:19:58:ea:f6:38:3f:9e:b1:26: 58:f1:a8:76:94:f3:f4:4c:38:76:74:ed:d6:86:83: 3a:c2:c6:d0:2e:11:a1:7c:47:ce:67:44:36:67:f8: 58:4d:d1:e0:97:33:20:cf:db:d2:7e:4c:b2:c6:cc: 4d:5f:ff:4a:73:e9:29:88:f1:d2:f2:6a:7b:22:78: b3:84:8f:8b:cb:2a:28:1f:e7:5e:39:7c:76:40:a0: 64:96:cb:28:89:40:ea:c4:5d:8a:49:76:96:73:37: 95:6a:95:c0:2f:79:bb:3d:3b:8c:26:b1:38:44:41: a7:92:0c:56:02:9c:d5:8d:91:2b:a2:a7:0a:aa:e2: 42:93:ec:70:5c:4e:66:cc:9b:a1:36:72:30:22:33: 76:04:c8:d4:d0:6f:35:75:d3:84:c3:5a:48:a4:42: 3c:95:1c:81:b8:b2:26:c1:74:42:ed:b1:6c:e8:30: 5e:10:3c:29:c0:12:65:7e:f8:83:9d:83:74:00:19: 12:b7:25:92:b2:49:e4:5f:31:67:05:11:de:f7:6b: c7:9b:b5:ea:77:f1:74:43:25:14:ef:12:e3:b1:a0: 27:30:57:09:9c:42:a1:21:4c:da:46:b6:b3:e1:8c: 82:19:c9:7b:fb:6c:12:5a:0d:1f:22:cc:4a:2e:87: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:44:A0:4E:63:8B:3A:0A:9B:9F:0F:83:76:7B:E4:3C:2E:0B:A5:B8 X509v3 Authority Key Identifier: keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/F29881C82D2811F19656BE60B9833773.roa sbgp-ipAddrBlock: critical IPv4: 138.252.181.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:60:f8:6f:af:50:4e:f9:2b:6b:94:1d:dc:51:32:72:a5:66: 96:07:5c:6a:6e:8d:6a:17:e7:c2:45:12:10:99:44:4c:fe:5a: a9:0d:fc:2f:ec:6c:b4:8b:08:15:8e:ba:c6:f4:ff:5f:57:a9: 56:89:f6:96:71:7e:80:53:61:d0:42:92:1c:49:d5:f8:4b:4b: ed:a6:60:ef:8c:df:50:9e:ad:98:16:f3:af:f5:5f:00:30:23: c6:0f:9b:36:34:d7:04:4c:2a:4c:bb:24:f7:f4:9c:e7:3c:91: 73:3c:4e:bf:e7:4e:f7:8c:87:45:fd:f0:5a:85:59:27:b0:a8: eb:67:4e:fd:a3:d6:fa:60:4f:bd:e8:40:25:43:72:1b:eb:d0: c9:7b:7b:7c:53:d7:29:12:89:52:4e:b6:b8:88:ad:80:4d:c7: f0:32:f8:1b:2b:31:b7:a7:ae:af:29:f1:bc:3c:57:e8:70:16: c1:c8:56:19:06:1e:22:20:3d:cc:ed:05:55:44:20:58:fd:e3: 82:34:19:bf:da:1c:d1:a1:85:0c:25:82:d3:ba:c5:18:e4:b4: 29:9d:59:61:8d:4f:e7:e7:1d:33:51:b3:48:66:a2:d6:a7:31: 9d:b3:39:6d:37:d9:fc:12:ff:5d:fd:22:73:72:64:01:e1:c1: 01:9f:75:b0 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoQjA0REM3QUI0ODIzMzM4OTBDMjhBNzY1NzVEOEFERTY0 MjlDM0ZDQjAeFw0yNjAzMzExNzQyMTJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5Y2MwNzc0LTcxMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhV9F1sBlY6vY4P56xJljxqHaU8/RMOHZ07daGgzrCxtAuEaF8R85nRDZn+FhN 0eCXMyDP29J+TLLGzE1f/0pz6SmI8dLyansieLOEj4vLKigf5145fHZAoGSWyyiJ QOrEXYpJdpZzN5VqlcAvebs9O4wmsThEQaeSDFYCnNWNkSuipwqq4kKT7HBcTmbM m6E2cjAiM3YEyNTQbzV104TDWkikQjyVHIG4sibBdELtsWzoMF4QPCnAEmV++IOd g3QAGRK3JZKySeRfMWcFEd73a8ebtep38XRDJRTvEuOxoCcwVwmcQqEhTNpGtrPh jIIZyXv7bBJaDR8izEouh9rbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU9USgTmOL Ogqbnw+DdnvkPC4LpbgwHwYDVR0jBBgwFoAUsE3Hq0gjM4kMKKdlddit5kKcP8sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzY4MkIzOUE2QzM3 QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc0UzSHEwZ2pNNGtNS0tkbGRkaXQ1a0tjUDhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkJBRi82ODJCMzlBNkMzN0MxMUYwOURDNUE1MzJDNEY5QUUwMi9GMjk4ODFDODJE MjgxMUYxOTY1NkJFNjBCOTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/LUwDQYJKoZIhvcNAQELBQADggEBAHpg+G+vUE75K2uUHdxRMnKl ZpYHXGpujWoX58JFEhCZREz+WqkN/C/sbLSLCBWOusb0/19XqVaJ9pZxfoBTYdBC khxJ1fhLS+2mYO+M31CerZgW86/1XwAwI8YPmzY01wRMKky7JPf0nOc8kXM8Tr/n TveMh0X98FqFWSewqOtnTv2j1vpgT73oQCVDchvr0Ml7e3xT1ykSiVJOtriIrYBN x/Ay+BsrMbenrq8p8bw8V+hwFsHIVhkGHiIgPcztBVVEIFj944I0Gb/aHNGhhQwl gtO6xRjktCmdWWGNT+fnHTNRs0hmotanMZ2zOW032fwS/139InNyZAHhwQGfdbA= -----END CERTIFICATE-----Generated at Mon Apr 6 12:40:47 2026 by rpki-client