$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/0EFA4E50BEB111F0B971EF51C4F9AE02.roa File: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (raw, json) Hash identifier: U7Wzt+B8FiIYGK+MKYg3UA1qAj6b/eB2Gqgc5UuWazk= Subject key identifier: 2B:58:EC:BA:72:E7:EA:5E:87:C6:C2:F9:5E:E1:F1:88:84:BD:16:66 Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E Certificate serial: 6D Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/0EFA4E50BEB111F0B971EF51C4F9AE02.roa Signing time: Wed 29 Apr 2026 05:40:49 +0000 ROA not before: Wed 29 Apr 2026 05:40:49 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 135101 IP address blocks: 138.252.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E Validity Not Before: Apr 29 05:40:49 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=69f199e1-336c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:71:40:54:a4:31:38:c7:dc:b4:79:0e:3b: 6c:b2:13:cb:2f:9d:a5:e3:8c:eb:78:1d:61:20:d6: f9:52:de:5b:18:0f:3e:84:5e:6d:9c:48:a0:db:81: 0b:5a:73:bf:88:92:e9:a6:8c:c1:8e:ae:32:f0:9e: 72:49:68:37:98:34:73:3e:3a:99:f8:f6:27:d1:de: e6:a7:54:de:1c:f8:4f:3d:fe:8b:24:ce:59:85:c5: 5a:5f:4f:48:d2:fd:b0:ce:fb:12:f1:8c:7d:9f:f9: 05:2d:41:fe:18:88:eb:de:47:5c:2c:fc:b1:24:2d: 40:65:f8:98:55:d2:55:5f:ee:dd:dc:7f:75:0d:5c: 8f:d5:be:9e:e2:a0:7c:b8:80:74:e2:ef:8b:03:e1: 1b:96:ca:d3:b6:57:09:a5:82:45:3a:0c:c6:ff:9b: ae:fc:a4:70:68:51:38:dd:08:59:13:18:19:6b:0a: de:10:85:f4:82:c1:aa:6c:d6:e0:63:22:ae:60:e6: da:1e:82:a0:1b:f0:19:3e:bc:97:cd:8f:4f:2c:88: 05:88:3e:be:81:73:d7:67:cd:f9:ab:26:5b:15:d3: 5a:4b:ed:80:86:bc:23:5c:8f:c5:44:b2:c7:e2:96: 71:34:70:55:ef:52:79:9c:46:3e:4b:42:31:7d:ad: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:58:EC:BA:72:E7:EA:5E:87:C6:C2:F9:5E:E1:F1:88:84:BD:16:66 X509v3 Authority Key Identifier: keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/0EFA4E50BEB111F0B971EF51C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.64.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:21:1e:45:9a:cb:68:59:28:bd:ad:24:09:c0:7c:5e:14:63: da:61:33:de:2f:a6:24:1b:56:61:f7:f4:73:ba:4e:30:7b:c4: f4:c2:29:17:9c:bb:f7:77:31:e8:86:50:dc:53:ff:34:a1:40: 43:5a:fa:ab:a5:c7:1c:e3:03:63:5b:99:bf:8a:17:aa:0a:88: b9:60:25:27:80:a4:2b:c7:86:5a:06:c0:d0:d9:0b:ae:d4:aa: 71:b3:1a:27:a1:8d:f3:88:07:74:68:ac:f5:87:19:9f:08:30: 21:59:0b:c3:77:03:fb:33:5f:9e:1a:e9:65:bd:c5:83:59:7e: b1:f9:82:40:bd:f8:73:90:45:70:63:40:6a:6f:78:92:78:11: 1d:af:be:26:17:ea:52:a8:79:ad:79:41:f4:48:a1:81:30:8f: 86:a6:39:d8:3d:cf:8d:e4:05:88:d4:d7:50:ba:8f:ac:57:21: f6:7a:99:14:3c:d3:03:bc:f8:d2:6b:e3:31:6a:e6:64:bc:d5: 76:7e:59:fd:1e:da:1a:a6:bf:66:61:d4:6b:41:bd:a6:dd:7b: 3e:8e:45:06:cd:95:1d:06:59:73:0d:30:87:01:6c:ac:fa:b1: d2:ed:12:31:5f:1d:36:f7:c6:a7:90:ac:d8:69:10:d4:e7:29: 6a:92:2c:25 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNTM0OTJCOTlENkQwN0Q5NDlGNjkwQTkzNjk1QjE0OTI4 MjE2OUEyRTAeFw0yNjA0MjkwNTQwNDlaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZjE5OWUxLTMzNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF7XFAVKQxOMfctHkOO2yyE8svnaXjjOt4HWEg1vlS3lsYDz6EXm2cSKDbgQta c7+IkummjMGOrjLwnnJJaDeYNHM+Opn49ifR3uanVN4c+E89/oskzlmFxVpfT0jS /bDO+xLxjH2f+QUtQf4YiOveR1ws/LEkLUBl+JhV0lVf7t3cf3UNXI/Vvp7ioHy4 gHTi74sD4RuWytO2VwmlgkU6DMb/m678pHBoUTjdCFkTGBlrCt4QhfSCwaps1uBj Iq5g5toegqAb8Bk+vJfNj08siAWIPr6Bc9dnzfmrJlsV01pL7YCGvCNcj8VEssfi lnE0cFXvUnmcRj5LQjF9rQdjAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUK1jsunLn 6l6HxsL5XuHxiIS9FmYwHwYDVR0jBBgwFoAUU0krmdbQfZSfaQqTaVsUkoIWmi4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzkwNzAwMEY2QUIy NDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpTZmFRcVRhVnNVa29JV21p NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVTBrcm1kYlFmWlNmYVFxVGFWc1Vrb0lXbWk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTYyMy85MDcwMDBGNkFCMjQxMUYwQUZDRTVEMkZDNEY5QUUwMi8wRUZBNEU1MEJF QjExMUYwQjk3MUVGNTFDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/EAwDQYJKoZIhvcNAQELBQADggEBAHshHkWay2hZKL2tJAnAfF4U Y9phM94vpiQbVmH39HO6TjB7xPTCKRecu/d3MeiGUNxT/zShQENa+qulxxzjA2Nb mb+KF6oKiLlgJSeApCvHhloGwNDZC67UqnGzGiehjfOIB3RorPWHGZ8IMCFZC8N3 A/szX54a6WW9xYNZfrH5gkC9+HOQRXBjQGpveJJ4ER2vviYX6lKoea15QfRIoYEw j4amOdg9z43kBYjU11C6j6xXIfZ6mRQ80wO8+NJr4zFq5mS81XZ+Wf0e2hqmv2Zh 1GtBvabdez6ORQbNlR0GWXMNMIcBbKz6sdLtEjFfHTb3xqeQrNhpENTnKWqSLCU= -----END CERTIFICATE-----Generated at Wed May 13 05:34:25 2026 by rpki-client