$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/3806439029D111F18571726A97833773.roa File: 3806439029D111F18571726A97833773.roa (raw, json) Hash identifier: vJfFiKVcht0hhV43KX2YNwRRC3QJu1SPSzD28SejiPg= Subject key identifier: 1E:58:17:10:39:44:61:27:F3:C7:21:D4:31:2F:9E:C5:47:9B:72:3D Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 10 Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/3806439029D111F18571726A97833773.roa Signing time: Fri 27 Mar 2026 11:36:39 +0000 ROA not before: Fri 27 Mar 2026 11:36:39 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 29889 IP address blocks: 209.9.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 17:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 27 11:36:39 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69c66bc7-9e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:28:ad:84:96:59:56:75:f3:75:02:36:5c: 79:fe:df:c7:85:92:c4:60:db:63:a8:e7:7c:ea:60: e6:25:83:5e:bb:dc:8c:9e:f3:33:24:56:51:76:9f: db:bf:43:cf:f6:84:52:a6:17:a7:bb:da:20:df:81: 7c:2b:f4:69:c0:d6:08:f2:ac:18:6b:cf:c3:2c:4a: 6c:07:a8:34:8e:81:d7:5f:15:83:af:7f:fc:6f:d2: 27:51:1e:ca:45:db:a9:50:4a:d6:f3:33:dd:7c:62: 9b:c7:d2:5f:8c:b0:39:82:11:a0:9e:4e:8e:e7:00: a9:30:83:90:a5:8f:61:3d:fa:2e:29:4a:4f:dd:d3: 14:44:ae:03:69:d2:7a:20:17:dc:23:37:d1:73:99: 7b:d0:dc:ae:22:75:eb:01:37:e9:08:9e:12:c9:cb: 93:cb:c2:95:25:99:5c:68:57:9a:0b:f4:9c:f6:19: 2b:e1:b6:23:90:7d:de:8a:35:d9:a4:43:a4:1a:60: fc:80:37:40:0b:6f:60:51:59:9f:82:84:f3:59:16: 3f:38:f2:9d:66:d0:d1:65:f9:24:02:2d:a0:f9:54: 5d:d1:d9:be:c0:85:24:bf:f6:b9:49:17:85:f6:d5: 21:30:8f:fd:8c:aa:4a:87:dc:f7:7e:45:1f:19:bc: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:58:17:10:39:44:61:27:F3:C7:21:D4:31:2F:9E:C5:47:9B:72:3D X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/3806439029D111F18571726A97833773.roa sbgp-ipAddrBlock: critical IPv4: 209.9.238.0/24 Signature Algorithm: sha256WithRSAEncryption 96:1e:66:27:aa:58:2b:60:10:09:17:7c:00:66:28:58:5f:7a: 67:8b:02:06:c7:91:69:cc:da:00:1a:43:60:0f:12:64:73:18: 22:4f:91:95:41:27:a5:34:7f:7f:97:ca:55:ed:7d:7c:ae:2a: 5b:65:f3:4c:57:f1:19:55:9e:4d:57:21:f4:c2:96:6c:6b:e9: bd:3d:4d:15:f0:2d:dc:83:51:6c:bb:cd:1b:07:29:14:95:c5: 78:a6:96:3e:f9:82:85:51:77:fd:91:99:fc:c7:ca:6b:cd:e7: 00:b9:6d:08:d1:42:58:d9:27:15:2e:88:31:ed:09:3d:41:9a: 21:f2:4c:9a:ad:59:48:69:1d:d1:62:ec:05:a9:b9:21:6c:44: 38:68:c1:c7:d4:1e:83:b6:43:2c:2d:20:f2:0d:75:74:09:e6: 50:80:31:5f:fe:c4:ef:e9:df:de:9f:b8:cb:57:aa:ba:22:78: a8:87:c7:10:27:5c:24:51:41:ba:38:de:5b:77:8d:aa:a0:9d: 57:e1:2b:36:42:30:6a:76:5e:04:8d:7b:32:c9:32:cf:ef:e5: fe:51:4c:06:3d:dd:ba:a0:e0:1f:a4:b9:e0:c4:92:0c:8f:8c: 0a:e6:88:da:6f:69:34:e4:1e:b5:83:93:b7:4c:3c:4b:17:23: eb:40:57:58 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky OTFFNjgzQTAeFw0yNjAzMjcxMTM2MzlaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzY2YmM3LTllNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb5yithJZZVnXzdQI2XHn+38eFksRg22Oo53zqYOYlg1673Iye8zMkVlF2n9u/ Q8/2hFKmF6e72iDfgXwr9GnA1gjyrBhrz8MsSmwHqDSOgddfFYOvf/xv0idRHspF 26lQStbzM918YpvH0l+MsDmCEaCeTo7nAKkwg5Clj2E9+i4pSk/d0xRErgNp0nog F9wjN9FzmXvQ3K4idesBN+kInhLJy5PLwpUlmVxoV5oL9Jz2GSvhtiOQfd6KNdmk Q6QaYPyAN0ALb2BRWZ+ChPNZFj848p1m0NFl+SQCLaD5VF3R2b7AhSS/9rlJF4X2 1SEwj/2MqkqH3Pd+RR8ZvIDjAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUHlgXEDlE YSfzxyHUMS+exUebcj0wHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0 NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS8zODA2NDM5MDI5 RDExMUYxODU3MTcyNkE5NzgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADRCe4wDQYJKoZIhvcNAQELBQADggEBAJYeZieqWCtgEAkXfABmKFhf emeLAgbHkWnM2gAaQ2APEmRzGCJPkZVBJ6U0f3+XylXtfXyuKltl80xX8RlVnk1X IfTClmxr6b09TRXwLdyDUWy7zRsHKRSVxXimlj75goVRd/2RmfzHymvN5wC5bQjR QljZJxUuiDHtCT1BmiHyTJqtWUhpHdFi7AWpuSFsRDhowcfUHoO2QywtIPINdXQJ 5lCAMV/+xO/p396fuMtXqroieKiHxxAnXCRRQbo43lt3jaqgnVfhKzZCMGp2XgSN ezLJMs/v5f5RTAY93bqg4B+kueDEkgyPjArmiNpvaTTkHrWDk7dMPEsXI+tAV1g= -----END CERTIFICATE-----Generated at Sat Mar 28 19:00:22 2026 by rpki-client