$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/FC73A04E22D611F184630225C8833773.roa File: FC73A04E22D611F184630225C8833773.roa (raw, json) Hash identifier: tJS9rWyhxR4tRPQ8is4B5FOtrK9FChl388SXvR8zyok= Subject key identifier: 6A:33:C5:E0:16:15:40:5A:2F:D6:EC:D8:AE:78:16:44:E5:F4:4F:59 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 0884 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/FC73A04E22D611F184630225C8833773.roa Signing time: Wed 18 Mar 2026 14:30:18 +0000 ROA not before: Wed 18 Mar 2026 14:30:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137166 IP address blocks: 163.53.236.0/24 maxlen: 24 163.53.237.0/24 maxlen: 24 163.53.238.0/24 maxlen: 24 163.53.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Mar 18 14:30:18 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69bab6fa-2ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:bd:77:e4:b9:46:b3:ee:69:54:ec:ee:a8: d9:46:7a:b4:2a:85:57:eb:4d:eb:69:a5:06:cd:83: e7:13:75:44:93:57:0c:6e:84:57:d8:74:d1:42:a4: c3:98:7d:89:ec:f4:23:c5:d1:91:4a:6e:03:e3:1c: 09:82:b6:14:12:a2:18:27:fb:21:55:7e:e6:04:dd: 8c:1a:04:f0:73:b4:19:23:9f:7a:8e:08:30:77:f5: fd:ab:f8:6d:1a:83:7b:02:33:77:fe:48:90:a2:aa: a0:8f:ac:16:9a:9f:91:d4:c3:b3:1e:90:bb:0b:48: fe:a0:4c:db:3f:63:c2:10:9a:a9:4c:40:4f:41:3f: b2:81:6a:b0:0a:40:97:77:94:f9:46:e1:f8:42:7b: de:04:af:04:05:52:4d:b2:54:51:92:28:4f:96:48: 98:46:92:8a:f7:fc:3c:1e:13:ee:0f:47:b3:80:0d: 9c:ed:bf:2a:26:18:c3:37:0b:2d:76:8f:05:be:53: 12:04:bd:10:fa:31:c9:fd:3d:7c:5c:8c:27:55:16: bf:cc:53:b1:c2:17:b9:ea:dc:f4:92:03:30:1f:61: f4:08:4c:1c:32:fa:3c:a3:f8:f8:0e:3b:62:50:5b: 09:5b:d4:92:2b:dc:79:fb:dd:35:60:e0:5a:92:80: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:C5:E0:16:15:40:5A:2F:D6:EC:D8:AE:78:16:44:E5:F4:4F:59 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/FC73A04E22D611F184630225C8833773.roa sbgp-ipAddrBlock: critical IPv4: 163.53.236.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:93:31:9b:66:48:1c:e4:e7:bd:c7:89:45:a0:0c:3f:c4:96: 71:f1:3c:6e:e1:fc:d3:42:89:79:c4:38:35:74:f0:85:89:44: c4:2b:b1:c9:53:88:cc:d0:e1:36:51:ca:bc:80:f6:b2:f7:19: f1:9d:4a:83:c7:c7:1e:21:38:62:7c:ee:91:a3:5b:c2:2e:a7: 24:4e:91:a0:b6:05:64:0e:bd:ae:fe:de:35:ee:43:61:4c:02: 8d:14:a4:a0:fd:42:f5:75:38:40:60:12:66:e5:ea:6a:c1:bf: ec:34:69:88:f1:b3:67:d4:ae:68:84:5e:28:19:d9:09:26:cb: 2f:67:93:04:63:24:3c:34:a3:08:49:3c:f8:ae:d2:81:20:e2: de:5e:ff:d6:e5:20:2d:8d:12:8e:15:d8:07:2e:01:cb:48:c5: 8e:e8:07:9f:44:d3:91:dc:f6:6b:b7:0b:df:ec:81:5d:af:74: 03:24:76:64:ce:4d:c9:06:df:03:f1:1d:7d:10:d4:1e:fe:eb: 43:b0:3d:e4:77:bb:fc:f6:fe:84:27:fd:fa:c5:8d:fe:70:cd: 51:90:9b:0a:0b:fa:6c:10:f8:b8:50:ef:4a:88:31:6b:e3:ad: b6:63:be:a7:ef:a9:91:11:01:7d:fb:bb:4f:ee:e2:76:e7:5d: 07:43:c3:95 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjYwMzE4MTQzMDE4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWJhYjZmYS0yZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+G9d+S5RrPuaVTs7qjZRnq0KoVX603raaUGzYPnE3VEk1cMboRX2HTRQqTD mH2J7PQjxdGRSm4D4xwJgrYUEqIYJ/shVX7mBN2MGgTwc7QZI596jggwd/X9q/ht GoN7AjN3/kiQoqqgj6wWmp+R1MOzHpC7C0j+oEzbP2PCEJqpTEBPQT+ygWqwCkCX d5T5RuH4QnveBK8EBVJNslRRkihPlkiYRpKK9/w8HhPuD0ezgA2c7b8qJhjDNwst do8FvlMSBL0Q+jHJ/T18XIwnVRa/zFOxwhe56tz0kgMwH2H0CEwcMvo8o/j4Djti UFsJW9SSK9x5+901YOBakoA1zwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGozxeAW FUBaL9bs2K54FkTl9E9ZMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RCNTIvNDVGNTU2QkVGMjgwMTFFQTg3MUJBRDZBQzRGOUFFMDIvRkM3M0EwNEUy MkQ2MTFGMTg0NjMwMjI1Qzg4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCozXsMA0GCSqGSIb3DQEBCwUAA4IBAQCPkzGbZkgc5Oe9x4lFoAw/ xJZx8Txu4fzTQol5xDg1dPCFiUTEK7HJU4jM0OE2Ucq8gPay9xnxnUqDx8ceIThi fO6Ro1vCLqckTpGgtgVkDr2u/t417kNhTAKNFKSg/UL1dThAYBJm5epqwb/sNGmI 8bNn1K5ohF4oGdkJJssvZ5MEYyQ8NKMISTz4rtKBIOLeXv/W5SAtjRKOFdgHLgHL SMWO6AefRNOR3PZrtwvf7IFdr3QDJHZkzk3JBt8D8R19ENQe/utDsD3kd7v89v6E J/36xY3+cM1RkJsKC/psEPi4UO9KiDFr4622Y76n76mREQF9+7tP7uJ2510HQ8OV -----END CERTIFICATE-----Generated at Thu Mar 26 23:33:58 2026 by rpki-client