$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/603EEC5ED0F811F0A0F75447C4F9AE02.roa File: 603EEC5ED0F811F0A0F75447C4F9AE02.roa (raw, json) Hash identifier: G4U39Fy1SJqtjI6+bD1SjtIDsoBsLGQG30f+ReQTcyM= Subject key identifier: 15:2C:50:2C:3E:52:BE:B7:44:15:66:6E:5E:56:7E:4A:45:A8:43:1B Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Certificate serial: 51 Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/603EEC5ED0F811F0A0F75447C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:56:42 +0000 ROA not before: Thu 04 Dec 2025 10:02:43 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141988 IP address blocks: 138.252.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Validity Not Before: Dec 4 10:02:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a5971a-c011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:3a:03:d6:f1:d8:79:1c:42:8e:25:75:69: f7:0a:c7:e0:37:d1:6d:64:c0:f8:25:d0:d5:b5:56: cf:78:a6:19:c5:af:ad:45:c0:4f:30:5f:cc:d7:f8: 28:50:9b:3a:c2:73:e4:2b:ef:5a:cb:32:cd:20:3b: d3:30:06:60:bf:8e:5c:a5:f2:00:7b:b2:4e:f3:32: 04:47:39:8b:4a:c3:6f:6d:1b:ef:63:71:b7:4e:03: 7f:b2:d2:cf:fe:ee:f9:b0:eb:8b:f3:f9:f0:38:5d: bf:9a:20:e4:ce:77:60:db:08:ab:49:62:b4:69:40: 85:8d:01:27:2b:db:f9:7d:d4:86:60:2d:62:cf:e2: bd:8d:48:d6:77:0b:c6:9a:ba:6c:73:dc:b4:e7:bb: 1b:69:c3:48:10:fb:e1:31:ce:d8:79:12:d9:a2:59: a1:41:16:5e:18:ab:64:0e:9b:f9:c4:8d:17:5f:04: 68:d8:cf:64:6d:ef:e9:16:80:43:56:6a:44:ef:f1: c7:98:e4:c9:c1:ba:c4:ea:be:dd:d2:32:3a:55:f4: ed:66:f8:d2:ff:dd:a3:56:25:e6:bd:dc:5d:ae:69: d3:4d:db:1a:2d:5a:8f:55:11:05:2c:5a:2e:79:c1: 2b:eb:d4:3a:d0:6a:32:c7:53:4e:f9:bb:b0:e4:6b: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2C:50:2C:3E:52:BE:B7:44:15:66:6E:5E:56:7E:4A:45:A8:43:1B X509v3 Authority Key Identifier: keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/603EEC5ED0F811F0A0F75447C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.31.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:77:2c:ad:4b:08:34:b0:8d:e3:59:2c:4c:b4:f4:29:ef:a0: 32:b6:20:79:b7:d6:8b:65:25:56:05:72:1e:0d:d3:f7:ec:b8: 78:88:14:da:6e:be:5a:14:5f:32:ef:f1:23:b0:29:4c:9b:ac: 5e:29:0d:63:a3:b0:b2:8c:47:cd:e8:e6:6f:d1:f9:c6:9e:c8: b1:85:8c:5a:c2:b7:e6:83:56:c2:4f:c6:dc:90:4c:99:97:38: ec:f2:64:7c:9c:8a:0e:41:a3:81:55:1c:cf:1d:4e:9e:4a:0d: f1:37:af:9c:e2:6d:f2:58:45:24:1e:54:e8:11:dd:8d:bc:4e: ee:d2:d6:d2:47:f5:ca:f9:eb:27:51:f9:e3:0a:72:2d:ee:49: 96:e6:df:f9:2a:f7:5e:d3:81:0a:94:b7:de:ae:eb:1b:59:2a: 16:90:ae:ce:fd:28:4f:b7:91:4f:7b:e2:ab:f1:4d:8c:38:18: c4:73:19:6c:ff:2e:9c:f2:5c:cc:12:7e:e4:ca:f6:46:ec:b2: 26:e3:05:10:4c:02:fc:ab:1a:d4:1a:27:6c:ac:e9:75:ad:af: e3:0b:d6:14:06:ec:56:61:a5:3d:1c:88:7b:28:04:c7:64:b7: 01:dc:7e:97:64:5f:0c:99:37:de:a3:5e:f3:f8:34:4e:a3:ed: 25:f5:df:4d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjlENzExMC8GA1UEBRMoRkE1QkFGNDZCN0NCMkM4RTM0NjM4M0FBODBDQjM5NkIy QjgxQzY0QzAeFw0yNTEyMDQxMDAyNDNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU5NzFhLWMwMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXOzoD1vHYeRxCjiV1afcKx+A30W1kwPgl0NW1Vs94phnFr61FwE8wX8zX+ChQ mzrCc+Qr71rLMs0gO9MwBmC/jlyl8gB7sk7zMgRHOYtKw29tG+9jcbdOA3+y0s/+ 7vmw64vz+fA4Xb+aIOTOd2DbCKtJYrRpQIWNAScr2/l91IZgLWLP4r2NSNZ3C8aa umxz3LTnuxtpw0gQ++Exzth5EtmiWaFBFl4Yq2QOm/nEjRdfBGjYz2Rt7+kWgENW akTv8ceY5MnBusTqvt3SMjpV9O1m+NL/3aNWJea93F2uadNN2xotWo9VEQUsWi55 wSvr1DrQajLHU075u7Dka7WtAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUFSxQLD5S vrdEFWZuXlZ+SkWoQxswHwYDVR0jBBgwFoAU+luvRrfLLI40Y4OqgMs5ayuBxkww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOUQ3L0YyM0M0REYyQUQ3 MzExRjBBRjY1MDI1NEM0RjlBRTAyLy1sdXZScmZMTEk0MFk0T3FnTXM1YXl1Qnhr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWx1dlJyZkxMSTQwWTRPcWdNczVheXVCeGt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlENy9GMjNDNERGMkFENzMxMUYwQUY2NTAyNTRDNEY5QUUwMi82MDNFRUM1RUQw RjgxMUYwQTBGNzU0NDdDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/B8wDQYJKoZIhvcNAQELBQADggEBAD13LK1LCDSwjeNZLEy09Cnv oDK2IHm31otlJVYFch4N0/fsuHiIFNpuvloUXzLv8SOwKUybrF4pDWOjsLKMR83o 5m/R+caeyLGFjFrCt+aDVsJPxtyQTJmXOOzyZHycig5Bo4FVHM8dTp5KDfE3r5zi bfJYRSQeVOgR3Y28Tu7S1tJH9cr56ydR+eMKci3uSZbm3/kq917TgQqUt96u6xtZ KhaQrs79KE+3kU974qvxTYw4GMRzGWz/LpzyXMwSfuTK9kbssibjBRBMAvyrGtQa J2ys6XWtr+ML1hQG7FZhpT0ciHsoBMdktwHcfpdkXwyZN96jXvP4NE6j7SX1300= -----END CERTIFICATE-----Generated at Thu Mar 26 19:23:13 2026 by rpki-client