$ rpki-client -vvvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/0425F3F4DC1E11F18E4326E71B66CEF9.roa File: 0425F3F4DC1E11F18E4326E71B66CEF9.roa (raw, json) Hash identifier: WLH12jV+x5WkGmhUKP6GQCaGHzrn7Mfj6Nl57Zo1hjE= Subject key identifier: FE:40:13:6F:0F:D0:95:7E:A5:29:9A:DB:27:76:E9:BF:E1:84:06:5C Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0B19 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/0425F3F4DC1E11F18E4326E71B66CEF9.roa Signing time: Mon 09 Nov 2026 09:49:50 +0000 ROA not before: Mon 09 Nov 2026 09:49:49 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 10103 IP address blocks: 138.19.0.0/16 maxlen: 24 155.137.128.0/17 maxlen: 17 155.137.128.0/18 maxlen: 24 155.137.192.0/18 maxlen: 24 165.84.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2841 (0xb19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Nov 9 09:49:49 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6af1973d-89e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:bf:98:fc:ec:59:42:fb:99:49:61:d7:62: d5:bb:ba:ee:12:d5:31:4f:56:3e:33:84:61:f4:41: 73:08:90:3c:2b:92:b5:26:3e:1e:c2:6c:41:17:4e: 5e:01:e3:77:29:34:a0:13:d4:3c:92:9c:b5:42:fb: 91:f1:6f:18:da:25:20:d7:bf:d2:6d:30:3e:55:78: 24:67:08:a3:21:ea:2d:0b:83:c8:41:82:1d:6e:b9: 22:5d:0d:df:95:87:23:46:49:69:de:b1:95:80:dc: 00:9b:25:9e:0a:9f:fc:a5:b6:d2:bc:71:e0:00:fe: 61:41:8a:02:be:4b:b5:49:6b:37:ee:59:78:82:d3: 23:90:8a:32:73:c4:ec:89:cd:e4:c5:b7:76:db:47: 16:56:82:d2:0d:1f:12:fc:3f:0e:d6:fb:ff:1d:a4: a9:5a:a7:78:d4:03:df:44:7e:33:f7:63:3f:91:20: 50:42:3f:54:f0:7d:84:92:f0:15:03:86:7b:4a:1f: 6f:16:72:16:6a:12:1e:4f:62:d0:1c:6e:aa:cc:90: fe:7c:57:5c:c6:13:d2:4b:9b:ec:84:7f:90:29:53: b0:b7:9e:d1:21:06:1a:f8:e6:e2:99:32:ae:03:3a: 26:6c:70:2b:74:aa:5f:b4:ff:c0:4c:3e:9e:47:ee: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:40:13:6F:0F:D0:95:7E:A5:29:9A:DB:27:76:E9:BF:E1:84:06:5C X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/0425F3F4DC1E11F18E4326E71B66CEF9.roa sbgp-ipAddrBlock: critical IPv4: 138.19.0.0/16 155.137.128.0/17 165.84.128.0/18 Signature Algorithm: sha256WithRSAEncryption 58:6d:4e:b4:22:aa:d0:c3:70:af:05:a8:35:52:aa:6b:a4:e2: ea:a8:8e:ef:54:35:2b:10:d3:35:c6:64:1b:01:49:4e:47:4a: fd:d9:d3:d0:35:49:cc:19:17:65:40:c6:e3:72:3d:3c:43:b7: 75:a1:b6:69:fb:ba:41:1f:6a:54:b7:04:29:c8:9d:bf:57:0d: 86:fb:48:80:16:da:32:96:ab:76:69:03:27:ca:56:90:09:bc: b6:5d:68:db:51:29:7b:30:e8:b6:e3:14:6a:d0:51:90:01:ad: 3e:4b:bb:11:d3:2c:d4:a5:b1:10:92:a0:ef:bc:9b:7a:6f:09: a2:cd:37:5f:90:af:c0:2d:f2:39:f0:34:74:8a:bb:a7:1f:b0: 57:31:6e:da:8a:6e:60:6d:36:b5:58:78:35:d1:3c:ad:50:2c: e3:f1:2b:79:10:ec:10:82:ec:36:8d:ac:2f:7b:0d:49:4b:be: 49:7a:b5:a7:a4:dd:1b:39:c1:4d:51:08:58:a7:f8:2a:ed:de: bb:1b:22:80:d5:fd:09:a9:43:2c:f6:3b:9a:a6:19:33:05:20: 79:d9:34:9d:56:6e:2d:1a:f9:2a:24:25:c2:e0:e7:0c:e9:58: 31:80:e4:84:97:4f:ba:b6:64:46:d7:ee:41:53:99:7e:c4:56: 71:ef:dd:6f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICCxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjYxMTA5MDk0OTQ5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWYxOTczZC04OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtye/mPzsWUL7mUlh12LVu7ruEtUxT1Y+M4Rh9EFzCJA8K5K1Jj4ewmxBF05e AeN3KTSgE9Q8kpy1QvuR8W8Y2iUg17/SbTA+VXgkZwijIeotC4PIQYIdbrkiXQ3f lYcjRklp3rGVgNwAmyWeCp/8pbbSvHHgAP5hQYoCvku1SWs37ll4gtMjkIoyc8Ts ic3kxbd220cWVoLSDR8S/D8O1vv/HaSpWqd41APfRH4z92M/kSBQQj9U8H2EkvAV A4Z7Sh9vFnIWahIeT2LQHG6qzJD+fFdcxhPSS5vshH+QKVOwt57RIQYa+ObimTKu AzombHArdKpftP/ATD6eR+4B2QIDAQABo4ICazCCAmcwHQYDVR0OBBYEFP5AE28P 0JV+pSma2yd26b/hhAZcMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY0N0MvM0IxQ0RGQkM4NTEzMTFFQUFBMEIwQTdGQzRGOUFFMDIvMDQyNUYzRjRE QzFFMTFGMThFNDMyNkU3MUI2NkNFRjkucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAATARAwMAihMDBAebiYADBAalVIAwDQYJKoZIhvcNAQELBQADggEBAFhtTrQi qtDDcK8FqDVSqmuk4uqoju9UNSsQ0zXGZBsBSU5HSv3Z09A1ScwZF2VAxuNyPTxD t3Whtmn7ukEfalS3BCnInb9XDYb7SIAW2jKWq3ZpAyfKVpAJvLZdaNtRKXsw6Lbj FGrQUZABrT5LuxHTLNSlsRCSoO+8m3pvCaLNN1+Qr8At8jnwNHSKu6cfsFcxbtqK bmBtNrVYeDXRPK1QLOPxK3kQ7BCC7DaNrC97DUlLvkl6taek3Rs5wU1RCFin+Crt 3rsbIoDV/QmpQyz2O5qmGTMFIHnZNJ1Wbi0a+SokJcLg5wzpWDGA5ISXT7q2ZEbX 7kFTmX7EVnHv3W8= -----END CERTIFICATE-----Generated at Sun Nov 15 11:09:38 2026 by rpki-client