$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/72D41724AD7411F088D5C855C4F9AE02.roa File: 72D41724AD7411F088D5C855C4F9AE02.roa (raw, json) Hash identifier: Vl1VQKAynu971TVI0soxLdBKcaj1rhvA/gqy8oNUKiE= Subject key identifier: 69:22:EB:5A:EE:D9:42:24:65:E6:8E:C8:45:0D:DD:21:91:AB:B5:42 Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Certificate serial: 02 Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/72D41724AD7411F088D5C855C4F9AE02.roa Signing time: Mon 20 Oct 2025 05:20:10 +0000 ROA not before: Mon 20 Oct 2025 05:20:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134585 IP address blocks: 138.252.30.0/23 maxlen: 23 138.252.30.0/24 maxlen: 24 138.252.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 05:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Validity Not Before: Oct 20 05:20:10 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=68f5c68a-962d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:d1:bf:ba:c0:99:9f:82:3a:e8:20:2d:f8: 45:01:4f:70:de:d2:52:55:ff:d7:d3:cf:37:24:ea: c6:aa:f1:bc:fd:b5:7e:05:69:4f:15:6a:9c:11:7c: 93:bd:42:08:1f:37:68:a6:1a:d7:db:78:87:9b:a7: e7:d0:f1:15:6c:81:a0:5e:d5:5f:16:5f:d1:9a:32: d2:b4:bd:4b:d1:72:39:8c:55:02:51:fe:de:d3:8f: 7c:35:0d:c5:44:c4:5c:79:bb:fd:9e:66:7b:5e:96: 77:5d:04:3c:40:42:5e:39:45:fd:29:72:94:8e:4e: 18:44:3a:e2:56:c0:c5:94:ac:0d:99:db:60:13:81: 42:c6:f1:d1:a6:07:71:60:02:02:01:48:6b:43:ee: 1f:5e:74:26:12:52:51:48:3c:58:a4:97:eb:59:91: d5:10:ac:25:93:ed:5d:a0:8b:77:27:0e:b1:3e:78: bb:9a:f1:75:0f:2a:9c:74:a8:51:06:32:5a:77:f1: 72:a5:3e:d0:7f:0a:cc:19:71:a3:d3:65:61:b3:94: ba:a4:8f:a6:8f:b7:b7:e4:dc:e3:97:c7:67:84:d5: 79:6b:e1:22:f2:13:8d:8c:a5:e0:52:2c:c4:80:14: aa:4d:5a:b6:94:85:be:b8:1f:b1:75:23:b6:9b:ce: 87:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:22:EB:5A:EE:D9:42:24:65:E6:8E:C8:45:0D:DD:21:91:AB:B5:42 X509v3 Authority Key Identifier: keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/72D41724AD7411F088D5C855C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.30.0/23 Signature Algorithm: sha256WithRSAEncryption 47:97:f8:78:e2:d8:cc:49:70:ad:ae:ff:f2:5d:10:82:f4:58: b0:a7:40:77:0e:49:b8:d8:34:b2:c5:d2:ef:02:b6:8a:09:ac: f9:9d:12:61:30:6b:e3:a4:9e:f7:d1:0e:ad:ba:23:76:09:49: 74:f6:fe:3f:90:64:10:90:8a:6a:3f:b8:b3:25:54:39:43:24: 41:be:37:a9:bc:bc:49:32:ab:e0:f9:45:11:20:43:42:a9:85: b9:9a:80:35:6a:6b:6b:16:44:9e:9e:72:0e:fd:33:7c:bc:19: cf:1c:58:74:e7:9b:f4:d1:7a:90:58:08:b2:c9:a6:9b:02:e6: 74:18:8c:9e:fb:60:2f:9e:ca:88:19:35:a2:a8:e5:7b:f6:9e: 36:9e:a9:ec:c8:ac:a0:1f:a1:72:e0:de:bf:19:4b:cb:43:4a: ab:ff:bd:58:0f:6d:c0:36:03:00:a6:de:10:e6:a9:79:39:af: ba:44:84:1f:31:4c:87:ad:d0:7e:87:3a:30:19:c1:95:b8:cc: 9a:13:e5:dd:7e:a9:40:77:0a:7b:cc:7c:5a:f7:9c:4f:04:c5: c4:5d:04:12:25:d3:10:99:3c:ea:0e:ca:ca:40:6a:23:51:8b: 20:21:3f:eb:9b:12:74:7d:eb:ff:ca:08:52:54:d5:f4:51:08: f4:be:95:98 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjlENzExMC8GA1UEBRMoRkE1QkFGNDZCN0NCMkM4RTM0NjM4M0FBODBDQjM5NkIy QjgxQzY0QzAeFw0yNTEwMjAwNTIwMTBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZjVjNjhhLTk2MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6oNG/usCZn4I66CAt+EUBT3De0lJV/9fTzzck6saq8bz9tX4FaU8VapwRfJO9 QggfN2imGtfbeIebp+fQ8RVsgaBe1V8WX9GaMtK0vUvRcjmMVQJR/t7Tj3w1DcVE xFx5u/2eZntelnddBDxAQl45Rf0pcpSOThhEOuJWwMWUrA2Z22ATgULG8dGmB3Fg AgIBSGtD7h9edCYSUlFIPFikl+tZkdUQrCWT7V2gi3cnDrE+eLua8XUPKpx0qFEG Mlp38XKlPtB/CswZcaPTZWGzlLqkj6aPt7fk3OOXx2eE1Xlr4SLyE42MpeBSLMSA FKpNWraUhb64H7F1I7abzod/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUaSLrWu7Z QiRl5o7IRQ3dIZGrtUIwHwYDVR0jBBgwFoAU+luvRrfLLI40Y4OqgMs5ayuBxkww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOUQ3L0YyM0M0REYyQUQ3 MzExRjBBRjY1MDI1NEM0RjlBRTAyLy1sdXZScmZMTEk0MFk0T3FnTXM1YXl1Qnhr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWx1dlJyZkxMSTQwWTRPcWdNczVheXVCeGt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlENy9GMjNDNERGMkFENzMxMUYwQUY2NTAyNTRDNEY5QUUwMi83MkQ0MTcyNEFE NzQxMUYwODhENUM4NTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8HjANBgkqhkiG9w0BAQsFAAOCAQEAR5f4eOLYzElwra7/ 8l0QgvRYsKdAdw5JuNg0ssXS7wK2igms+Z0SYTBr46Se99EOrbojdglJdPb+P5Bk EJCKaj+4syVUOUMkQb43qby8STKr4PlFESBDQqmFuZqANWpraxZEnp5yDv0zfLwZ zxxYdOeb9NF6kFgIssmmmwLmdBiMnvtgL57KiBk1oqjle/aeNp6p7MisoB+hcuDe vxlLy0NKq/+9WA9twDYDAKbeEOapeTmvukSEHzFMh63Qfoc6MBnBlbjMmhPl3X6p QHcKe8x8WvecTwTFxF0EEiXTEJk86g7KykBqI1GLICE/65sSdH3r/8oIUlTV9FEI 9L6VmA== -----END CERTIFICATE-----Generated at Tue Oct 21 04:26:25 2025 by rpki-client