$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/753E1B20B1B311F0BD0C0785C4F9AE02.roa File: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (raw, json) Hash identifier: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c= Subject key identifier: 69:13:7D:C7:79:82:6C:D3:85:AC:39:5B:17:2E:1A:B8:AF:84:E9:E2 Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Certificate serial: 50 Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/753E1B20B1B311F0BD0C0785C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:56:41 +0000 ROA not before: Sat 25 Oct 2025 15:01:17 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134585 IP address blocks: 138.252.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Validity Not Before: Oct 25 15:01:17 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a59719-6e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:e3:b3:dd:02:c8:c3:23:6a:d8:80:58:f4: 40:26:0d:c1:40:52:89:b0:a1:15:46:62:64:d0:fe: fa:71:4b:f1:fe:f6:22:91:d1:1a:d7:f7:26:0d:66: 93:9b:74:87:c8:9f:2b:f0:f2:ea:da:dc:5c:8e:19: de:61:84:80:b5:1a:a6:14:5a:34:f0:d1:3f:f9:1c: 80:4f:f4:6b:85:91:12:1e:1d:c6:c4:17:0e:1b:6f: 8b:42:54:b3:86:23:ec:7f:40:c4:04:f6:b3:83:1a: 23:fa:a6:fc:fa:0e:0d:42:24:14:e4:8e:af:e6:6d: cc:d0:bf:b9:62:ec:67:c4:78:72:2b:6f:60:e4:5e: 03:fd:b9:20:4d:a6:1b:51:3e:c2:55:12:b5:7b:60: 03:41:64:a6:35:e7:49:1b:11:cd:2f:b5:d0:dc:0a: 99:84:6a:da:b8:51:f4:8a:4f:be:2f:d3:41:ce:8e: 88:c4:93:86:1e:7c:5f:67:70:d5:3b:54:0e:97:0c: 2e:75:f1:5f:33:dd:87:8b:f4:ac:71:53:ad:39:57: e5:c8:ed:24:6b:af:d7:fb:8b:11:b2:ba:b1:8c:fa: 76:5d:19:e6:ca:a5:24:e6:1d:fb:9b:93:9a:3c:aa: 48:9a:49:5e:b5:70:67:36:c6:8b:75:0b:da:18:8c: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:13:7D:C7:79:82:6C:D3:85:AC:39:5B:17:2E:1A:B8:AF:84:E9:E2 X509v3 Authority Key Identifier: keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/753E1B20B1B311F0BD0C0785C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.30.0/24 Signature Algorithm: sha256WithRSAEncryption 71:26:e7:39:87:35:72:89:cd:d0:4c:18:95:0e:9c:48:14:08: 52:4b:07:27:83:f2:a0:2e:bd:d8:3e:1a:28:b8:cc:9e:ab:37: f4:bf:f3:6a:d1:8f:a4:e7:68:af:70:9a:dd:f2:70:f7:6c:34: e5:af:55:3e:a3:20:33:52:03:ec:c3:21:94:2f:35:44:15:79: cb:d3:c4:d2:a9:9d:8e:c3:2b:9e:a8:63:a4:69:09:80:d9:84: 3e:94:79:f1:02:8e:cd:c5:20:40:a0:cb:ff:af:f7:95:a0:45: c5:71:7b:91:30:e2:01:a0:ed:5e:01:51:6d:33:b3:cc:57:57: 75:33:40:f7:27:2b:a4:f3:7e:66:75:fd:a3:ec:5a:45:48:db: a1:de:f8:2a:6c:ef:a7:9f:9b:9f:8e:9a:f7:22:4a:77:09:48: 61:e4:4f:d4:c2:5a:ab:1f:ff:be:18:66:9d:b1:ab:c1:56:16: b4:d1:7a:9a:0a:68:63:bd:f4:3b:05:7a:fa:1a:63:d4:9f:25: 89:bc:1c:61:43:f3:fd:05:44:68:81:61:87:7f:6d:06:d8:07: 5a:d2:16:1c:cf:08:8a:bb:39:1c:5a:34:02:b7:ef:00:44:46: 0a:6e:bd:16:95:f9:a0:83:b6:f7:5d:ca:88:bc:0c:3f:ad:01: c4:7f:d9:9d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjlENzExMC8GA1UEBRMoRkE1QkFGNDZCN0NCMkM4RTM0NjM4M0FBODBDQjM5NkIy QjgxQzY0QzAeFw0yNTEwMjUxNTAxMTdaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU5NzE5LTZlOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrv+Oz3QLIwyNq2IBY9EAmDcFAUomwoRVGYmTQ/vpxS/H+9iKR0RrX9yYNZpOb dIfInyvw8ura3FyOGd5hhIC1GqYUWjTw0T/5HIBP9GuFkRIeHcbEFw4bb4tCVLOG I+x/QMQE9rODGiP6pvz6Dg1CJBTkjq/mbczQv7li7GfEeHIrb2DkXgP9uSBNphtR PsJVErV7YANBZKY150kbEc0vtdDcCpmEatq4UfSKT74v00HOjojEk4YefF9ncNU7 VA6XDC518V8z3YeL9KxxU605V+XI7SRrr9f7ixGyurGM+nZdGebKpSTmHfubk5o8 qkiaSV61cGc2xot1C9oYjMs1AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUaRN9x3mC bNOFrDlbFy4auK+E6eIwHwYDVR0jBBgwFoAU+luvRrfLLI40Y4OqgMs5ayuBxkww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOUQ3L0YyM0M0REYyQUQ3 MzExRjBBRjY1MDI1NEM0RjlBRTAyLy1sdXZScmZMTEk0MFk0T3FnTXM1YXl1Qnhr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWx1dlJyZkxMSTQwWTRPcWdNczVheXVCeGt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlENy9GMjNDNERGMkFENzMxMUYwQUY2NTAyNTRDNEY5QUUwMi83NTNFMUIyMEIx QjMxMUYwQkQwQzA3ODVDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/B4wDQYJKoZIhvcNAQELBQADggEBAHEm5zmHNXKJzdBMGJUOnEgU CFJLByeD8qAuvdg+Gii4zJ6rN/S/82rRj6TnaK9wmt3ycPdsNOWvVT6jIDNSA+zD IZQvNUQVecvTxNKpnY7DK56oY6RpCYDZhD6UefECjs3FIECgy/+v95WgRcVxe5Ew 4gGg7V4BUW0zs8xXV3UzQPcnK6TzfmZ1/aPsWkVI26He+Cps76efm5+OmvciSncJ SGHkT9TCWqsf/74YZp2xq8FWFrTRepoKaGO99DsFevoaY9SfJYm8HGFD8/0FRGiB YYd/bQbYB1rSFhzPCIq7ORxaNAK37wBERgpuvRaV+aCDtvddyoi8DD+tAcR/2Z0= -----END CERTIFICATE-----Generated at Fri Mar 27 00:34:56 2026 by rpki-client