$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa File: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (raw, json) Hash identifier: JcAxzRv81BEK8q/J7k6ROwCVG10hKzG1+sw20R/B8ek= Subject key identifier: 07:A2:C5:C3:CF:EE:F0:54:50:F5:EF:15:A4:10:79:39:1F:E9:70:BF Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: 51 Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:46:54 +0000 ROA not before: Mon 27 Oct 2025 05:35:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137453 IP address blocks: 138.252.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Oct 27 05:35:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a5a2de-a087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:b6:6e:81:a1:2a:59:16:60:1c:62:5a:4a: f2:8d:aa:24:55:d7:db:d7:ef:ef:63:e4:06:c6:7d: 92:b2:44:2f:2a:ba:14:96:a6:b5:6d:c4:e4:80:20: 4a:94:60:b1:36:3a:ee:2b:1f:4b:d9:2a:f8:67:df: 95:37:0e:d5:48:d1:21:7e:5d:d2:53:04:e9:30:ee: a4:57:ac:c5:4f:c9:e0:69:e7:44:a2:a5:9a:bd:27: 32:fb:f8:16:19:6f:40:eb:bb:56:b8:e7:fb:2e:82: 8e:92:23:80:ff:f2:16:d1:cd:9d:e8:40:7b:9b:46: 55:ed:45:71:83:fc:c9:ad:04:44:47:49:27:63:75: 4b:2a:a6:64:4e:8c:b6:13:3b:3b:b6:a3:ed:71:45: ba:76:fa:53:ff:02:ff:e5:45:6e:0d:0c:8c:4f:e6: d2:f8:38:b8:3d:37:c3:2d:f1:37:4c:04:70:83:15: bc:76:62:cc:01:bb:12:fe:18:03:7b:65:37:04:23: d2:76:d2:34:b2:06:ab:25:e0:15:a8:59:21:d7:42: 2e:41:76:d7:5f:af:85:ed:d3:fd:9f:5a:b8:53:a2: 5d:2d:d1:2a:6f:0d:d7:1e:48:4e:9b:76:7d:a8:0c: 08:97:73:4f:28:18:50:29:3e:7a:dd:f9:85:fa:32: bc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A2:C5:C3:CF:EE:F0:54:50:F5:EF:15:A4:10:79:39:1F:E9:70:BF X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.89.0/24 Signature Algorithm: sha256WithRSAEncryption b7:c4:bd:24:9f:5a:7b:53:59:52:3d:b7:25:84:24:63:d9:67: e6:5e:5b:26:aa:66:dd:d8:58:98:82:62:b5:4c:1a:62:c6:e0: 3f:fd:cd:72:2e:8e:5d:1c:92:6f:83:0c:f2:d0:8f:17:a1:83: 22:56:5c:f1:e0:85:06:e0:0b:82:03:80:bf:0b:13:ce:98:f0: 32:dd:a7:86:df:8d:c5:21:23:f2:62:f5:48:82:b6:df:02:96: 23:91:6e:de:71:a7:d1:c1:c7:dd:d9:ab:01:dd:a5:31:cd:9c: ac:50:a5:9d:df:28:bc:8f:17:3a:78:97:a4:1f:11:3b:be:e7: ed:cb:2d:4a:ef:38:a8:f3:c1:32:63:ce:58:1f:90:bb:34:7a: ac:b0:e7:0f:34:60:67:c7:b6:65:4e:5d:33:3f:9e:7c:56:4c: 4e:f3:2f:c0:7b:db:5b:c2:1d:fd:6c:f4:b8:47:eb:41:56:f7: 8c:76:ed:b0:36:81:64:30:41:0d:11:96:a1:23:62:c2:57:d6: 77:59:ae:e2:f0:e4:85:d3:f3:f1:58:f2:22:f4:12:6c:b7:bb: a1:c2:89:b4:2b:44:98:e8:01:b8:e8:ab:91:31:f8:25:d4:d8: fe:9c:2f:b8:9a:61:da:d1:9c:fa:4e:c7:45:22:84:01:f1:dd: 80:ea:2b:00 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDY1NjExMC8GA1UEBRMoMTlFMDVBRkQxRTZCMzYyNTRBNUNCMTUwMzYzOTM4NEI2 QTIyQTgyNjAeFw0yNTEwMjcwNTM1NTNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTVhMmRlLWEwODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzd7ZugaEqWRZgHGJaSvKNqiRV19vX7+9j5AbGfZKyRC8quhSWprVtxOSAIEqU YLE2Ou4rH0vZKvhn35U3DtVI0SF+XdJTBOkw7qRXrMVPyeBp50SipZq9JzL7+BYZ b0Dru1a45/sugo6SI4D/8hbRzZ3oQHubRlXtRXGD/MmtBERHSSdjdUsqpmROjLYT Ozu2o+1xRbp2+lP/Av/lRW4NDIxP5tL4OLg9N8Mt8TdMBHCDFbx2YswBuxL+GAN7 ZTcEI9J20jSyBqsl4BWoWSHXQi5Bdtdfr4Xt0/2fWrhTol0t0SpvDdceSE6bdn2o DAiXc08oGFApPnrd+YX6Mrx/AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUB6LFw8/u 8FRQ9e8VpBB5OR/pcL8wHwYDVR0jBBgwFoAUGeBa/R5rNiVKXLFQNjk4S2oiqCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwNjU2LzRBNzA5NTY0QjAw RDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2VCYV9SNXJOaVZLWExGUU5qazRTMm9pcUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDY1Ni80QTcwOTU2NEIwMEQxMUYwOERFNEVEN0JDNEY5QUUwMi9DRDRGRTVBMkIy RjYxMUYwOEVDNDFCMUVDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/FkwDQYJKoZIhvcNAQELBQADggEBALfEvSSfWntTWVI9tyWEJGPZ Z+ZeWyaqZt3YWJiCYrVMGmLG4D/9zXIujl0ckm+DDPLQjxehgyJWXPHghQbgC4ID gL8LE86Y8DLdp4bfjcUhI/Ji9UiCtt8CliORbt5xp9HBx93ZqwHdpTHNnKxQpZ3f KLyPFzp4l6QfETu+5+3LLUrvOKjzwTJjzlgfkLs0eqyw5w80YGfHtmVOXTM/nnxW TE7zL8B721vCHf1s9LhH60FW94x27bA2gWQwQQ0RlqEjYsJX1ndZruLw5IXT8/FY 8iL0Emy3u6HCibQrRJjoAbjoq5Ex+CXU2P6cL7iaYdrRnPpOx0UihAHx3YDqKwA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:41 2026 by rpki-client