$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/D08BF898AEDA11F09093014EC4F9AE02.roa File: D08BF898AEDA11F09093014EC4F9AE02.roa (raw, json) Hash identifier: wqLpcKHrfI2BsLIwUexp8InQ6/8sgjO0g9gMMs8I8rg= Subject key identifier: 04:F2:B5:C1:ED:16:5A:4A:32:70:22:A7:DC:FD:65:16:5F:30:04:2A Certificate issuer: /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871 Certificate serial: CB Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/D08BF898AEDA11F09093014EC4F9AE02.roa Signing time: Thu 05 Nov 2026 07:54:22 +0000 ROA not before: Thu 05 Nov 2026 07:54:22 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 154309 IP address blocks: 138.252.80.0/23 maxlen: 23 138.252.80.0/24 maxlen: 24 138.252.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871 Validity Not Before: Nov 5 07:54:22 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6aec362e-5cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:3a:ff:36:ee:4a:69:d7:9b:3a:95:da:b1: 44:0b:dd:5a:25:d1:9f:eb:f1:70:bd:be:35:e6:47: 72:61:31:b1:80:65:3e:d6:0e:c0:0b:65:c8:80:37: e0:3b:cb:8b:4b:1b:43:52:9c:55:b2:d0:85:1f:fe: 7a:54:0a:d5:b4:d4:14:e8:9a:0f:85:a2:ff:e2:b6: 64:3d:98:57:6e:6c:95:88:dd:ae:20:8c:3a:2f:78: 0f:33:4b:4e:3a:76:66:10:f0:85:cc:6f:d1:24:05: 7d:8b:ff:4a:7f:d9:b6:67:d2:af:84:55:cf:ca:d5: a2:03:c1:1b:15:74:85:3b:80:f9:4a:33:91:15:97: f6:3a:d4:3a:cf:88:a4:5e:13:9c:9c:c4:45:a0:9e: 77:2a:2c:a8:60:6d:19:76:79:ec:52:e1:1a:04:5a: c2:87:bf:22:f6:15:66:42:3e:2b:a9:22:05:f5:3a: b7:95:a9:89:a3:1e:40:94:ed:1d:f9:0b:6d:b0:11: bb:05:a8:1a:32:a9:8e:0a:a0:b9:1d:bf:a2:aa:bc: 25:41:e2:0b:ef:55:5d:04:27:a0:79:94:6a:e6:ef: c6:94:93:49:7f:8f:94:f2:90:c2:c6:51:2d:b7:e4: 89:c9:04:0a:8d:41:a8:13:c9:cd:84:17:ab:c1:da: f1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F2:B5:C1:ED:16:5A:4A:32:70:22:A7:DC:FD:65:16:5F:30:04:2A X509v3 Authority Key Identifier: keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/D08BF898AEDA11F09093014EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.80.0/23 Signature Algorithm: sha256WithRSAEncryption 02:3d:d3:9a:76:ad:23:fa:1e:36:b1:f9:e7:1f:10:50:d8:79: 7f:31:18:d3:2f:94:da:d5:19:6a:28:b5:f1:92:93:65:76:95: 53:c1:2a:28:92:be:dd:34:f2:9f:87:31:d4:36:1c:3a:59:12: 10:fd:17:2c:14:26:87:71:77:03:45:3e:0d:92:37:c5:2d:76: bb:20:c4:ea:f1:62:e5:f1:ba:bb:ac:e8:37:2e:f6:da:bd:24: a8:cd:99:8a:82:b8:4f:a7:06:0c:68:23:61:d7:a7:a4:18:df: c6:f9:d0:92:e7:01:d9:9a:81:17:0f:e9:a3:ef:8c:98:6a:6b: 57:29:7d:6c:ce:b5:a8:d4:fc:53:95:a4:84:be:c9:4e:94:57: 20:9d:03:2f:15:d4:33:75:29:57:51:a6:59:e4:1a:c5:aa:ec: be:6a:33:2b:53:39:80:6e:01:b5:1a:fd:c9:a9:30:2c:c0:41: 7d:0e:f7:ef:5f:fb:e7:4b:f7:a8:01:e8:cc:19:3a:0b:76:b2: e2:fd:2f:6d:ef:69:a7:a4:a4:0c:fe:8c:2d:b8:de:07:3f:4b: 86:b4:3e:65:41:b0:23:e5:64:96:65:b0:1a:2f:3e:12:dd:27: 79:a5:36:46:05:a1:af:24:c2:30:14:63:d1:1f:cd:50:3a:ee: 7e:00:db:64 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0RTIxMTAvBgNVBAUTKEE3Rjc3RjIwNDdEMzU2OEMwNDNBMzM4Qzc5MzJCMEEy M0M4RjY4NzEwHhcNMjYxMTA1MDc1NDIyWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWVjMzYyZS01Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqo6/zbuSmnXmzqV2rFEC91aJdGf6/Fwvb415kdyYTGxgGU+1g7AC2XIgDfg O8uLSxtDUpxVstCFH/56VArVtNQU6JoPhaL/4rZkPZhXbmyViN2uIIw6L3gPM0tO OnZmEPCFzG/RJAV9i/9Kf9m2Z9KvhFXPytWiA8EbFXSFO4D5SjORFZf2OtQ6z4ik XhOcnMRFoJ53KiyoYG0ZdnnsUuEaBFrCh78i9hVmQj4rqSIF9Tq3lamJox5AlO0d +QttsBG7BagaMqmOCqC5Hb+iqrwlQeIL71VdBCegeZRq5u/GlJNJf4+U8pDCxlEt t+SJyQQKjUGoE8nNhBerwdrxLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFATytcHt FlpKMnAip9z9ZRZfMAQqMB8GA1UdIwQYMBaAFKf3fyBH01aMBDozjHkysKI8j2hx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRFMi8xNEQyRTdCQUFF REExMUYwOUQ0M0UyMkVDNEY5QUUwMi9wX2RfSUVmVFZvd0VPak9NZVRLd29qeVBh SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BfZF9JRWZUVm93RU9qT01lVEt3b2p5UGFIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQ0RTIvMTREMkU3QkFBRURBMTFGMDlENDNFMjJFQzRGOUFFMDIvRDA4QkY4OThB RURBMTFGMDkwOTMwMTRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivxQMA0GCSqGSIb3DQEBCwUAA4IBAQACPdOadq0j+h42sfnnHxBQ 2Hl/MRjTL5Ta1RlqKLXxkpNldpVTwSookr7dNPKfhzHUNhw6WRIQ/RcsFCaHcXcD RT4NkjfFLXa7IMTq8WLl8bq7rOg3LvbavSSozZmKgrhPpwYMaCNh16ekGN/G+dCS 5wHZmoEXD+mj74yYamtXKX1szrWo1PxTlaSEvslOlFcgnQMvFdQzdSlXUaZZ5BrF quy+ajMrUzmAbgG1Gv3JqTAswEF9DvfvX/vnS/eoAejMGToLdrLi/S9t72mnpKQM /owtuN4HP0uGtD5lQbAj5WSWZbAaLz4S3Sd5pTZGBaGvJMIwFGPRH81QOu5+ANtk -----END CERTIFICATE-----Generated at Sun Nov 15 12:58:54 2026 by rpki-client