$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/BE26E0FE212C11F1B452E7B52D3D8C67.roa File: BE26E0FE212C11F1B452E7B52D3D8C67.roa (raw, json) Hash identifier: +cI55DQw6yz3OrGX0lcWX+uNwEvHM5akSnCJD58J/jM= Subject key identifier: CA:19:EC:A5:89:B3:40:64:A5:6D:F4:6B:20:84:A4:71:0D:EE:72:FA Certificate issuer: /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Certificate serial: 58 Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/BE26E0FE212C11F1B452E7B52D3D8C67.roa Signing time: Mon 16 Mar 2026 11:39:08 +0000 ROA not before: Mon 16 Mar 2026 11:39:08 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154049 IP address blocks: 138.252.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD Validity Not Before: Mar 16 11:39:08 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69b7ebdc-d81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:c8:1b:37:c7:5e:a0:85:66:60:05:68:fb: cb:2f:3d:95:13:a6:97:43:81:9a:02:54:0c:f5:92: 76:79:eb:ec:65:14:0c:15:8a:ed:96:52:44:ff:46: ec:3c:b2:e6:68:23:ea:33:ca:94:fb:82:e7:75:d5: 2a:30:42:84:0e:db:cf:91:dd:da:88:67:7d:aa:1a: 25:d3:1a:ca:35:ac:ef:14:8b:90:b4:23:ab:9a:7d: fa:36:6b:6e:18:f8:2d:8d:5f:f4:bf:54:35:f9:df: 5c:76:d9:c8:e6:5d:80:b0:9e:af:c6:f5:84:51:b4: 59:c8:0f:6f:b4:d6:28:0d:21:61:61:3e:6f:65:db: 00:ab:07:e4:a6:06:70:1b:8e:44:67:e4:db:fb:e4: 99:d6:b4:8c:76:90:6a:d7:13:31:13:67:b9:de:d4: 68:69:88:84:ba:2f:af:e1:b1:6f:eb:f2:8f:08:2a: 10:4c:07:0a:af:c0:18:fb:77:83:8a:53:ee:20:85: 29:d6:af:7a:80:73:b4:b3:97:a0:b2:7a:a6:76:37: 94:7d:72:90:78:6d:59:e7:70:8e:a9:d5:97:9c:04: f4:8f:ea:93:6f:e1:39:c8:25:e7:70:94:4e:db:cd: 74:a3:5b:75:28:26:e2:0d:09:9b:65:d0:b8:26:be: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:19:EC:A5:89:B3:40:64:A5:6D:F4:6B:20:84:A4:71:0D:EE:72:FA X509v3 Authority Key Identifier: keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/BE26E0FE212C11F1B452E7B52D3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 138.252.240.0/23 Signature Algorithm: sha256WithRSAEncryption a6:e1:72:85:19:b5:12:a8:e1:5e:7f:df:1a:b9:10:50:4e:ca: 0f:b0:ec:0f:b8:19:2d:ab:78:ef:b9:8e:85:ae:81:62:e9:44: ad:1d:a7:29:a8:00:78:85:7c:54:5b:6f:5d:01:c0:04:28:0f: 3a:8b:d5:35:c4:13:8c:79:49:be:f8:e0:1e:94:5a:0b:eb:65: c4:da:d1:8a:be:5e:82:1c:e6:71:93:b5:a1:cb:86:af:c5:3c: 14:7e:27:d3:f0:d7:f3:3f:e4:0f:00:1a:b6:ef:95:d2:d8:3e: d1:2b:d2:b0:3d:e3:b1:49:49:46:1d:3a:75:b7:4b:be:bb:d2: c4:67:bd:98:81:f9:e0:1a:8a:fe:bf:bd:fb:0d:b4:be:5d:56: 63:a9:37:4c:df:c9:d3:0b:29:3d:9e:f2:92:fe:dc:f2:c6:23: 1d:fe:56:74:49:21:3c:f8:12:78:13:62:f5:51:3e:48:98:31: 0d:d6:6c:cf:c6:c6:47:59:8e:4c:9f:61:f8:7d:bf:d4:bf:0f: da:27:54:b7:54:a6:af:79:48:ed:ff:c7:34:60:d1:47:ce:09: 6a:e2:05:3b:c8:6a:55:61:b5:c4:81:a8:98:8d:10:0a:1f:d6: f0:f5:7f:f5:27:5c:b3:68:5d:83:06:0f:41:32:2f:d5:fe:77: 71:76:1b:eb -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NBODExMC8GA1UEBRMoMzE4OEQ0MUQwQzA2RUZBMkM5NkE4NzA3MzU2OUU4RTEw MzQ0RTJDRDAeFw0yNjAzMTYxMTM5MDhaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjdlYmRjLWQ4MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsscgbN8deoIVmYAVo+8svPZUTppdDgZoCVAz1knZ56+xlFAwViu2WUkT/Ruw8 suZoI+ozypT7gud11SowQoQO28+R3dqIZ32qGiXTGso1rO8Ui5C0I6uaffo2a24Y +C2NX/S/VDX531x22cjmXYCwnq/G9YRRtFnID2+01igNIWFhPm9l2wCrB+SmBnAb jkRn5Nv75JnWtIx2kGrXEzETZ7ne1GhpiIS6L6/hsW/r8o8IKhBMBwqvwBj7d4OK U+4ghSnWr3qAc7Szl6CyeqZ2N5R9cpB4bVnncI6p1ZecBPSP6pNv4TnIJedwlE7b zXSjW3UoJuINCZtl0LgmvsPPAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUyhnspYmz QGSlbfRrIISkcQ3ucvowHwYDVR0jBBgwFoAUMYjUHQwG76LJaocHNWno4QNE4s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0E4LzJEOThDQzVBQzUw NjExRjA4QzZCQTMyQkM0RjlBRTAyL01ZalVIUXdHNzZMSmFvY0hOV25vNFFORTRz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVlqVUhRd0c3NkxKYW9jSE5Xbm80UU5FNHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NBOC8yRDk4Q0M1QUM1MDYxMUYwOEM2QkEzMkJDNEY5QUUwMi9CRTI2RTBGRTIx MkMxMUYxQjQ1MkU3QjUyRDNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/PAwDQYJKoZIhvcNAQELBQADggEBAKbhcoUZtRKo4V5/3xq5EFBO yg+w7A+4GS2reO+5joWugWLpRK0dpymoAHiFfFRbb10BwAQoDzqL1TXEE4x5Sb74 4B6UWgvrZcTa0Yq+XoIc5nGTtaHLhq/FPBR+J9Pw1/M/5A8AGrbvldLYPtEr0rA9 47FJSUYdOnW3S7670sRnvZiB+eAaiv6/vfsNtL5dVmOpN0zfydMLKT2e8pL+3PLG Ix3+VnRJITz4EngTYvVRPkiYMQ3WbM/GxkdZjkyfYfh9v9S/D9onVLdUpq95SO3/ xzRg0UfOCWriBTvIalVhtcSBqJiNEAof1vD1f/UnXLNoXYMGD0EyL9X+d3F2G+s= -----END CERTIFICATE-----Generated at Thu Mar 26 17:12:19 2026 by rpki-client