$ rpki-client -vvvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/8C538C5AEFCF11F0889DE39E746F56BC.roa File: 8C538C5AEFCF11F0889DE39E746F56BC.roa (raw, json) Hash identifier: IYXOhXL6bJ68pYNK/kTrLKmd+mngJz9PldPbItCSzvQ= Subject key identifier: 86:D5:20:38:99:6E:2B:9F:E5:00:0A:48:13:E5:B1:7B:B9:CD:42:81 Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: DF Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/8C538C5AEFCF11F0889DE39E746F56BC.roa Signing time: Mon 31 Aug 2026 07:56:19 +0000 ROA not before: Mon 31 Aug 2026 07:56:18 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 135413 IP address blocks: 165.101.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Aug 31 07:56:18 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9533a2-9bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:97:e5:ae:d0:d3:2c:d8:7f:2a:9b:95:83: 61:2a:8a:f6:8c:c4:82:35:da:94:ef:8e:d5:dc:75: 77:8e:11:23:5c:7f:b2:6b:94:67:50:22:24:4b:7b: 9f:d2:e9:a7:2a:bc:67:ca:9b:fe:52:e6:1a:55:8c: 3e:2d:b3:cc:54:f3:f5:dc:f5:1a:f6:71:5e:56:b9: 5e:54:42:ca:d0:f2:eb:1a:14:72:49:d9:07:c3:ab: 4e:7a:1a:5e:35:ca:24:ee:29:1f:45:18:a9:06:a8: 17:2d:f7:f0:a6:22:c1:0d:5a:31:21:d6:f4:05:ad: 85:99:03:0d:63:a0:2f:b9:ac:9a:52:41:76:32:f9: d5:ca:11:43:5f:f4:96:55:05:90:43:ad:0e:a4:b2: f2:46:3a:64:6e:82:2a:5a:3a:b0:56:80:50:2a:d9: 6a:f9:ab:3b:36:26:df:59:3e:44:05:0a:ce:a5:3a: 25:ac:42:8d:77:2b:f1:09:9c:54:08:ba:ec:4e:46: 9a:b3:65:11:62:46:37:18:1c:49:43:32:79:9a:6d: 36:6d:18:92:a3:5b:83:b5:01:82:cf:9e:39:de:1a: f4:87:6a:0b:d6:3f:a1:be:13:bc:a3:ea:54:7d:95: e9:61:a4:0c:a9:f5:1d:82:3b:3d:36:0d:96:00:f3: 3b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D5:20:38:99:6E:2B:9F:E5:00:0A:48:13:E5:B1:7B:B9:CD:42:81 X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/8C538C5AEFCF11F0889DE39E746F56BC.roa sbgp-ipAddrBlock: critical IPv4: 165.101.239.0/24 Signature Algorithm: sha256WithRSAEncryption 69:f3:9f:ac:5d:c6:ed:04:f9:38:00:99:37:1f:f5:cf:f7:2e: 62:4e:ef:c6:92:90:97:b3:2f:2f:ca:30:69:44:dd:8a:28:ee: dd:15:ac:57:6d:17:f0:f6:92:c4:5d:3a:b5:01:0b:31:3d:09: 89:22:fa:6a:bf:73:e0:b9:30:d8:13:29:2f:79:f5:5a:fe:20: 49:66:d8:a8:74:19:52:fa:e0:ea:7d:33:f7:7d:c1:eb:28:65: e4:3f:63:04:0d:86:37:61:c1:a2:d8:b9:6a:54:e7:2a:a9:93: bd:ab:44:48:3c:d8:df:30:70:74:0c:54:e4:46:23:19:c9:fd: c9:3d:3f:ab:f6:0e:7b:9b:90:e8:bb:35:e2:fc:8a:97:71:b2: 82:94:c2:44:af:06:62:39:a4:89:95:19:c9:d7:7f:8a:96:ef: ca:40:f8:fa:99:cb:b4:d1:ab:c0:84:df:87:c3:a3:12:65:71: 2f:43:09:f4:e7:69:3a:c7:ac:1f:2f:7f:a7:bc:e7:09:3e:17: e7:4e:10:63:0b:cd:69:86:31:97:87:74:cf:bb:fc:a1:b0:cc: 56:51:ad:11:c2:dd:34:4c:40:d5:e7:38:7f:46:95:c3:ee:73: 08:f6:f6:3a:83:fa:14:10:98:75:1b:e2:04:a9:20:30:a5:1a: 45:41:fb:41 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1QzMxMTAvBgNVBAUTKDlFQkRBMTIzRDlFRTgzMDk0MzA1QTExODBDMkEwODA1 N0ZFNTQwNkEwHhcNMjYwODMxMDc1NjE4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1MzNhMi05YmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKuX5a7Q0yzYfyqblYNhKor2jMSCNdqU747V3HV3jhEjXH+ya5RnUCIkS3uf 0umnKrxnypv+UuYaVYw+LbPMVPP13PUa9nFeVrleVELK0PLrGhRySdkHw6tOehpe Ncok7ikfRRipBqgXLffwpiLBDVoxIdb0Ba2FmQMNY6AvuayaUkF2MvnVyhFDX/SW VQWQQ60OpLLyRjpkboIqWjqwVoBQKtlq+as7NibfWT5EBQrOpTolrEKNdyvxCZxU CLrsTkaas2URYkY3GBxJQzJ5mm02bRiSo1uDtQGCz5453hr0h2oL1j+hvhO8o+pU fZXpYaQMqfUdgjs9Ng2WAPM7vwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIbVIDiZ biuf5QAKSBPlsXu5zUKBMB8GA1UdIwQYMBaAFJ69oSPZ7oMJQwWhGAwqCAV/5UBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yMzI2QzYzRTY2 MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3bERCYUVZRENvSUJYX2xR R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI1QzMvMjMyNkM2M0U2NjA0MTFGMEE0QzUxOTJCQzRGOUFFMDIvOEM1MzhDNUFF RkNGMTFGMDg4OURFMzlFNzQ2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApWXvMA0GCSqGSIb3DQEBCwUAA4IBAQBp85+sXcbtBPk4AJk3H/XP 9y5iTu/GkpCXsy8vyjBpRN2KKO7dFaxXbRfw9pLEXTq1AQsxPQmJIvpqv3PguTDY EykvefVa/iBJZtiodBlS+uDqfTP3fcHrKGXkP2MEDYY3YcGi2LlqVOcqqZO9q0RI PNjfMHB0DFTkRiMZyf3JPT+r9g57m5DouzXi/IqXcbKClMJErwZiOaSJlRnJ13+K lu/KQPj6mcu00avAhN+Hw6MSZXEvQwn052k6x6wfL3+nvOcJPhfnThBjC81phjGX h3TPu/yhsMxWUa0Rwt00TEDV5zh/RpXD7nMI9vY6g/oUEJh1G+IEqSAwpRpFQftB -----END CERTIFICATE-----Generated at Fri Sep 25 15:54:55 2026 by rpki-client