$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/53D97C4AB6E011F0AE8E6B74C4F9AE02.roa File: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (raw, json) Hash identifier: TiQZcsUf6hmm4Z9q41HFXcSU+c6S5y0lWjoRYfK9XxA= Subject key identifier: EA:28:3E:F0:C4:2C:C2:F1:7B:D1:CB:7F:E5:B6:D2:E0:FE:9F:BC:63 Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Certificate serial: 45 Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/53D97C4AB6E011F0AE8E6B74C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:10:38 +0000 ROA not before: Sat 01 Nov 2025 05:05:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154310 IP address blocks: 138.252.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Validity Not Before: Nov 1 05:05:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d85e-687e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:c3:ad:1e:ab:59:68:7e:c5:b7:f6:29:34: b4:45:8a:48:df:dc:da:94:e9:32:ce:76:42:bd:2e: 5d:46:01:f3:94:c1:ad:05:d3:5b:2c:3f:2d:17:55: 31:99:7c:e2:c7:26:5a:3f:05:77:42:a4:95:a0:4d: 3e:1c:f8:1c:84:1c:a2:91:55:f6:d9:bc:be:9f:82: 00:08:f3:cb:34:e5:f8:57:17:07:b3:68:5a:f7:a0: 5c:d0:be:bc:a5:c7:e1:d1:cb:7c:ce:74:6a:38:4f: f2:5f:bd:d8:cb:39:10:59:cb:4a:7c:28:b5:a5:fe: 91:b2:81:e2:77:27:86:64:6b:b0:12:26:ea:90:33: 18:c9:d9:23:0c:98:10:25:0b:e7:3a:7a:c8:94:b4: b0:02:c6:c6:03:bf:94:b9:b5:94:c7:b8:d8:31:1d: a8:c5:47:31:9f:60:32:a3:58:ba:ed:5b:1b:4d:68: 0b:d4:b0:1d:83:90:0e:10:a1:ca:69:97:ff:1d:a2: d0:c4:ee:fd:0e:ca:e7:61:1b:cb:98:5e:9b:d8:7b: 10:85:3a:58:71:8c:fc:1e:f7:7c:58:32:a5:c6:03: 22:8c:f8:01:2a:5a:15:a3:5a:fa:d4:ab:51:91:a5: 68:e1:74:61:0a:ca:5e:52:4c:87:67:b5:b8:71:13: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:28:3E:F0:C4:2C:C2:F1:7B:D1:CB:7F:E5:B6:D2:E0:FE:9F:BC:63 X509v3 Authority Key Identifier: keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/53D97C4AB6E011F0AE8E6B74C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.82.0/23 Signature Algorithm: sha256WithRSAEncryption a2:c9:62:60:40:70:39:18:0f:e9:b1:9c:f9:b6:68:35:d9:b0: dc:45:2c:ba:bc:b1:61:ff:ce:0e:43:07:ae:b6:82:2f:b4:7d: dd:0a:fa:ce:dd:fd:f6:3f:4e:01:2a:ed:12:3b:96:24:18:7f: ea:07:e6:71:d0:59:ed:37:ed:08:57:ea:43:68:1b:5a:34:cb: 00:1f:5e:0e:3a:1e:84:26:23:17:72:c0:8d:db:2d:d3:9f:bf: c9:88:3b:d8:95:04:3d:a3:85:9f:44:3c:c2:01:76:a0:50:25: 8a:d7:31:da:d0:0e:ce:a7:09:89:b2:4e:01:f8:6b:5c:55:c6: bb:94:00:9d:81:cc:af:29:0e:c7:2e:66:56:5f:b2:e3:c2:aa: 22:9a:93:2c:c4:9b:27:91:9f:e4:1a:c7:0b:fe:5c:13:5c:1e: 87:7f:9f:3f:77:47:56:7f:f9:45:cd:08:7a:78:ab:e9:36:f1: ec:20:ed:1f:ec:26:46:9c:78:9e:e2:1f:bf:f4:28:86:4f:a1: 62:06:a7:58:c4:ff:99:eb:f6:e3:1b:f8:8b:d3:69:d9:2e:44: 66:1d:29:a9:a0:90:99:fb:90:36:58:27:69:90:1f:05:4d:23: 37:3b:ca:39:6a:a5:43:ae:f5:1c:a4:86:d8:52:51:03:15:b1: 7d:76:87:5e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDMxRTExMC8GA1UEBRMoQ0RDMDU1Njk4N0U1MUI5MzNCRDk2MkQ3RUY0NTk3MUNC QUE3QTJDMzAeFw0yNTExMDEwNTA1MDRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkODVlLTY4N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC31cOtHqtZaH7Ft/YpNLRFikjf3NqU6TLOdkK9Ll1GAfOUwa0F01ssPy0XVTGZ fOLHJlo/BXdCpJWgTT4c+ByEHKKRVfbZvL6fggAI88s05fhXFwezaFr3oFzQvryl x+HRy3zOdGo4T/JfvdjLORBZy0p8KLWl/pGygeJ3J4Zka7ASJuqQMxjJ2SMMmBAl C+c6esiUtLACxsYDv5S5tZTHuNgxHajFRzGfYDKjWLrtWxtNaAvUsB2DkA4Qocpp l/8dotDE7v0OyudhG8uYXpvYexCFOlhxjPwe93xYMqXGAyKM+AEqWhWjWvrUq1GR pWjhdGEKyl5STIdntbhxEy9XAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU6ig+8MQs wvF70ct/5bbS4P6fvGMwHwYDVR0jBBgwFoAUzcBVaYflG5M72WLX70WXHLqnosMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMzFFLzRBM0REMUIyQjRC QjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVNNzJXTFg3MFdYSExxbm9z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNCVmFZZmxHNU03MldMWDcwV1hITHFub3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDMxRS80QTNERDFCMkI0QkIxMUYwQTEzNTM3MjJDNEY5QUUwMi81M0Q5N0M0QUI2 RTAxMUYwQUU4RTZCNzRDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/FIwDQYJKoZIhvcNAQELBQADggEBAKLJYmBAcDkYD+mxnPm2aDXZ sNxFLLq8sWH/zg5DB662gi+0fd0K+s7d/fY/TgEq7RI7liQYf+oH5nHQWe037QhX 6kNoG1o0ywAfXg46HoQmIxdywI3bLdOfv8mIO9iVBD2jhZ9EPMIBdqBQJYrXMdrQ Ds6nCYmyTgH4a1xVxruUAJ2BzK8pDscuZlZfsuPCqiKakyzEmyeRn+Qaxwv+XBNc Hod/nz93R1Z/+UXNCHp4q+k28ewg7R/sJkaceJ7iH7/0KIZPoWIGp1jE/5nr9uMb +IvTadkuRGYdKamgkJn7kDZYJ2mQHwVNIzc7yjlqpUOu9RykhthSUQMVsX12h14= -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:36 2026 by rpki-client