$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/4AAED6B23C1211F19A15FB09B6833773.roa File: 4AAED6B23C1211F19A15FB09B6833773.roa (raw, json) Hash identifier: zaCJCnJ8P+IQJ9n9t86hTBhempUXa3QuJJB9ZKjuD4o= Subject key identifier: 54:41:3E:43:3D:59:A5:45:81:11:9B:3D:FC:71:B5:DE:9F:DA:04:91 Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Certificate serial: 6D Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/4AAED6B23C1211F19A15FB09B6833773.roa Signing time: Sun 19 Apr 2026 17:07:48 +0000 ROA not before: Sun 19 Apr 2026 17:07:48 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 152648 IP address blocks: 138.252.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Validity Not Before: Apr 19 17:07:48 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69e50be4-1dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:61:b1:a2:2d:6a:52:d7:e7:5f:ec:35:c9: 5b:8c:cd:1a:da:a9:9b:0c:af:95:71:47:5d:bc:d2: 29:09:e1:ca:09:81:6b:3e:1b:00:68:98:a0:bd:ee: bd:83:d0:95:a0:f4:6d:b6:09:c2:7c:96:57:9b:ce: 07:14:76:16:e4:92:96:ec:09:b3:12:74:6b:b2:72: 1a:dc:92:85:1c:38:d0:2c:fe:8b:f1:b3:f2:78:c2: 85:3c:b0:31:ac:f5:61:89:9f:3a:20:56:4d:75:fe: 04:34:5c:09:21:87:e4:8b:2b:45:65:04:a6:eb:c0: d3:59:26:47:89:7f:fb:6b:f7:a8:a3:da:86:36:97: 26:4c:17:97:9f:42:dd:c9:cf:fb:27:e2:6d:cf:32: 3a:f6:a0:d3:ce:4d:51:47:31:0d:12:ec:b0:b0:6e: 78:b0:18:0b:df:80:21:8e:24:3d:c3:4c:ab:65:44: b9:fb:91:72:d8:0b:4a:f1:40:5c:81:a5:50:db:9a: 22:73:86:02:c2:6d:b6:1d:8c:9a:49:3f:78:56:a0: ac:7f:85:f5:f8:13:03:7b:11:4e:4c:21:54:e6:72: 66:46:c7:0b:49:8d:0a:ac:37:fa:fa:97:15:2d:ec: 34:57:7b:ec:62:4e:dd:50:62:0e:9c:06:f2:c7:1b: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:41:3E:43:3D:59:A5:45:81:11:9B:3D:FC:71:B5:DE:9F:DA:04:91 X509v3 Authority Key Identifier: keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/4AAED6B23C1211F19A15FB09B6833773.roa sbgp-ipAddrBlock: critical IPv4: 138.252.31.0/24 Signature Algorithm: sha256WithRSAEncryption a1:ff:b8:d1:80:a2:f9:f0:b9:1b:16:40:a2:52:fd:79:2d:13: c7:e7:fa:6c:49:45:7c:15:d1:f9:ee:fb:9d:70:6b:61:63:d7: 05:59:44:6e:68:eb:30:39:5e:02:fe:4f:95:b4:7c:12:5b:a1: 6c:80:19:d3:24:b7:61:bf:da:ab:ae:69:a3:f5:c9:a4:6e:88: 05:a7:39:34:53:d3:bb:04:41:2c:d8:cb:bf:7a:98:9d:17:5a: 97:b9:d6:58:08:8c:d0:59:ff:0c:12:28:62:a5:1f:52:00:da: b4:5f:a6:12:46:44:57:f9:98:74:f6:86:a5:a2:ac:74:47:d3: c5:29:38:15:a2:06:70:a5:a2:ab:05:a4:ae:fe:ea:1e:48:f6: 6f:31:93:2f:e9:14:eb:e6:85:1f:6a:6b:c9:16:0b:b5:9f:c8: d6:76:64:c1:cc:ee:11:e1:56:f4:b3:82:94:1d:13:55:98:4e: 94:70:10:29:dd:08:0b:d0:a8:cf:b4:70:7e:85:fe:b1:0c:84: 2c:70:e0:bb:8c:91:d4:06:e1:71:ef:f1:73:43:de:a4:f2:69: 67:8c:69:04:08:97:df:b8:d5:ac:0f:82:ad:49:f4:cb:fd:b1: cf:44:bb:e8:f3:f5:bd:b6:4d:29:78:15:0a:46:e5:67:06:c6: fe:5a:d6:41 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjlENzExMC8GA1UEBRMoRkE1QkFGNDZCN0NCMkM4RTM0NjM4M0FBODBDQjM5NkIy QjgxQzY0QzAeFw0yNjA0MTkxNzA3NDhaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZTUwYmU0LTFkYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOuWGxoi1qUtfnX+w1yVuMzRraqZsMr5VxR1280ikJ4coJgWs+GwBomKC97r2D 0JWg9G22CcJ8llebzgcUdhbkkpbsCbMSdGuychrckoUcONAs/ovxs/J4woU8sDGs 9WGJnzogVk11/gQ0XAkhh+SLK0VlBKbrwNNZJkeJf/tr96ij2oY2lyZMF5efQt3J z/sn4m3PMjr2oNPOTVFHMQ0S7LCwbniwGAvfgCGOJD3DTKtlRLn7kXLYC0rxQFyB pVDbmiJzhgLCbbYdjJpJP3hWoKx/hfX4EwN7EU5MIVTmcmZGxwtJjQqsN/r6lxUt 7DRXe+xiTt1QYg6cBvLHG8aXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUVEE+Qz1Z pUWBEZs9/HG13p/aBJEwHwYDVR0jBBgwFoAU+luvRrfLLI40Y4OqgMs5ayuBxkww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOUQ3L0YyM0M0REYyQUQ3 MzExRjBBRjY1MDI1NEM0RjlBRTAyLy1sdXZScmZMTEk0MFk0T3FnTXM1YXl1Qnhr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWx1dlJyZkxMSTQwWTRPcWdNczVheXVCeGt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlENy9GMjNDNERGMkFENzMxMUYwQUY2NTAyNTRDNEY5QUUwMi80QUFFRDZCMjND MTIxMUYxOUExNUZCMDlCNjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/B8wDQYJKoZIhvcNAQELBQADggEBAKH/uNGAovnwuRsWQKJS/Xkt E8fn+mxJRXwV0fnu+51wa2Fj1wVZRG5o6zA5XgL+T5W0fBJboWyAGdMkt2G/2quu aaP1yaRuiAWnOTRT07sEQSzYy796mJ0XWpe51lgIjNBZ/wwSKGKlH1IA2rRfphJG RFf5mHT2hqWirHRH08UpOBWiBnCloqsFpK7+6h5I9m8xky/pFOvmhR9qa8kWC7Wf yNZ2ZMHM7hHhVvSzgpQdE1WYTpRwECndCAvQqM+0cH6F/rEMhCxw4LuMkdQG4XHv 8XND3qTyaWeMaQQIl9+41awPgq1J9Mv9sc9Eu+jz9b22TSl4FQpG5WcGxv5a1kE= -----END CERTIFICATE-----Generated at Wed May 13 03:49:02 2026 by rpki-client