$ rpki-client -vvvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/B961E7E2DC2211F1B48E66C01C66CEF9.roa File: B961E7E2DC2211F1B48E66C01C66CEF9.roa (raw, json) Hash identifier: GwKb5kZKjmPvGzWo37bYicskhnfr2Ea9PEV3+DfKotc= Subject key identifier: 40:49:9E:5C:C2:74:EF:F6:A4:E1:53:DC:02:3E:80:E4:95:6D:45:5D Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0B1A Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/B961E7E2DC2211F1B48E66C01C66CEF9.roa Signing time: Mon 09 Nov 2026 09:49:51 +0000 ROA not before: Mon 09 Nov 2026 09:49:51 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 9269 IP address blocks: 138.19.0.0/16 maxlen: 24 155.137.128.0/17 maxlen: 17 155.137.128.0/18 maxlen: 24 155.137.192.0/18 maxlen: 24 165.84.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2842 (0xb1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Nov 9 09:49:51 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6af1973f-9365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c0:95:7e:e1:81:ca:3e:32:e3:b2:9b:da:55: be:79:7f:3d:21:41:b9:9c:0c:5c:0a:a1:a8:62:05: bd:a9:27:6c:7c:f9:73:25:22:9f:f9:d8:27:3f:df: 01:a4:c1:09:d9:1f:10:5c:dc:8d:67:ee:46:3b:91: a4:98:c0:0e:1d:0b:df:17:94:80:1f:0a:78:ae:eb: a3:a1:6e:a0:71:ae:10:ac:47:c9:ac:86:fe:58:93: 23:e3:67:13:6b:83:25:5b:63:68:74:59:69:b0:f7: 88:c6:c0:04:19:d9:8e:6d:ea:60:f5:65:0c:b0:d7: 3b:24:90:b6:b0:7f:31:eb:67:13:95:e6:de:31:b7: 8f:e4:dd:5a:13:3c:40:de:38:84:ff:1e:06:ef:83: db:df:db:ce:18:8b:d9:d4:90:d6:15:35:09:9e:70: 4b:da:12:e0:f1:8b:bc:78:0d:a3:a9:6a:87:0c:27: 60:55:2a:8b:97:d0:19:1b:7c:22:51:91:30:1b:25: 36:1a:2d:0d:37:6e:8d:0c:de:6a:14:59:80:4f:75: 43:9e:b9:aa:9d:ae:9e:4d:75:86:b1:63:9e:b7:6b: fe:49:a9:3e:63:c5:12:18:3d:72:c0:dc:52:d1:00: 7e:f5:fb:81:49:68:2e:e8:20:87:89:49:b5:fa:d6: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:49:9E:5C:C2:74:EF:F6:A4:E1:53:DC:02:3E:80:E4:95:6D:45:5D X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/B961E7E2DC2211F1B48E66C01C66CEF9.roa sbgp-ipAddrBlock: critical IPv4: 138.19.0.0/16 155.137.128.0/17 165.84.128.0/18 Signature Algorithm: sha256WithRSAEncryption a5:08:e7:9c:17:77:ec:4f:e0:a9:f7:69:23:b2:cd:f4:79:1f: e1:09:9a:db:20:90:3a:09:b7:fd:02:b3:93:30:20:66:be:d3: fd:b2:92:7a:b5:f0:40:bd:92:46:f7:2e:33:e7:9c:40:25:77: 5e:df:3b:0d:2b:fb:02:ef:68:4a:fd:41:97:14:2d:ee:cb:39: b5:d5:e4:d9:be:7c:7d:2f:10:f6:c3:ae:36:80:d4:d9:66:6c: 32:de:a0:d6:dd:ed:6a:df:13:f4:16:c9:b6:87:b0:6e:4b:c4: 28:6d:66:02:f5:dc:03:f9:03:8f:68:65:1d:0e:d2:eb:6a:66: 52:e9:f8:90:9c:d0:06:86:5f:14:ec:9e:ab:d4:7f:0d:bc:ac: 56:bc:62:a7:5e:77:f2:0c:4f:9e:97:e9:76:2e:2c:d2:c6:7e: aa:67:d4:69:38:df:37:9d:01:03:80:50:a9:27:c0:d9:dd:3c: 33:8f:9f:4d:b8:dc:8d:c2:60:2e:79:c9:9d:c2:df:09:7c:ef: 76:9a:e7:9e:a0:fe:6b:58:07:dd:4d:c9:7e:69:a9:ad:bf:61: bf:f2:3f:b5:c8:55:4e:5d:c9:30:69:41:1d:5c:f1:11:2b:76: a5:ac:d1:59:35:5c:20:9a:a6:e0:07:9f:3e:55:9a:b2:41:df: 7b:6c:8f:bd -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjYxMTA5MDk0OTUxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWYxOTczZi05MzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cCVfuGByj4y47Kb2lW+eX89IUG5nAxcCqGoYgW9qSdsfPlzJSKf+dgnP98B pMEJ2R8QXNyNZ+5GO5GkmMAOHQvfF5SAHwp4ruujoW6gca4QrEfJrIb+WJMj42cT a4MlW2NodFlpsPeIxsAEGdmObepg9WUMsNc7JJC2sH8x62cTlebeMbeP5N1aEzxA 3jiE/x4G74Pb39vOGIvZ1JDWFTUJnnBL2hLg8Yu8eA2jqWqHDCdgVSqLl9AZG3wi UZEwGyU2Gi0NN26NDN5qFFmAT3VDnrmqna6eTXWGsWOet2v+Sak+Y8USGD1ywNxS 0QB+9fuBSWgu6CCHiUm1+tYjowIDAQABo4ICazCCAmcwHQYDVR0OBBYEFEBJnlzC dO/2pOFT3AI+gOSVbUVdMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY0N0MvM0IxQ0RGQkM4NTEzMTFFQUFBMEIwQTdGQzRGOUFFMDIvQjk2MUU3RTJE QzIyMTFGMUI0OEU2NkMwMUM2NkNFRjkucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAATARAwMAihMDBAebiYADBAalVIAwDQYJKoZIhvcNAQELBQADggEBAKUI55wX d+xP4Kn3aSOyzfR5H+EJmtsgkDoJt/0Cs5MwIGa+0/2yknq18EC9kkb3LjPnnEAl d17fOw0r+wLvaEr9QZcULe7LObXV5Nm+fH0vEPbDrjaA1NlmbDLeoNbd7WrfE/QW ybaHsG5LxChtZgL13AP5A49oZR0O0utqZlLp+JCc0AaGXxTsnqvUfw28rFa8Yqde d/IMT56X6XYuLNLGfqpn1Gk43zedAQOAUKknwNndPDOPn0243I3CYC55yZ3C3wl8 73aa556g/mtYB91NyX5pqa2/Yb/yP7XIVU5dyTBpQR1c8RErdqWs0Vk1XCCapuAH nz5VmrJB33tsj70= -----END CERTIFICATE-----Generated at Sun Nov 15 11:09:52 2026 by rpki-client