$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/541D17D2B2C811F092F27081C4F9AE02.roa File: 541D17D2B2C811F092F27081C4F9AE02.roa (raw, json) Hash identifier: +uBlVYDCPzZRUmuHurx+A+K3HLAEvtXcUCa/AfvX6ks= Subject key identifier: 82:5B:3B:A8:96:45:AF:F4:46:C3:38:1A:25:58:0E:60:49:95:3A:64 Certificate issuer: /CN=A918049D/serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259 Certificate serial: 43 Authority key identifier: 2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/541D17D2B2C811F092F27081C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:09:28 +0000 ROA not before: Mon 27 Oct 2025 00:03:13 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151497 IP address blocks: 138.252.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918049D, serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259 Validity Not Before: Oct 27 00:03:13 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d818-33e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:12:07:ad:5f:dc:4d:58:50:bb:28:19:81: e7:ab:55:04:72:9e:a5:a7:93:1d:5e:c3:cc:eb:07: 8b:8f:18:ed:3a:17:24:17:e6:8b:63:c9:5b:e6:1d: fb:de:7e:fb:3e:8d:89:fd:ab:72:3e:6e:67:df:36: c8:c4:88:bc:3f:b1:68:db:e2:6a:a6:c7:87:6b:ed: 11:83:96:1e:f7:94:aa:5f:ef:60:30:da:00:0b:d4: 03:69:b4:79:84:f0:cf:31:bf:dd:11:91:80:aa:6e: 59:ac:91:b7:0b:06:f1:c0:9d:b8:78:74:9d:83:eb: 95:ef:81:7a:69:aa:0c:c0:00:f4:34:67:ef:25:a8: 97:d9:1c:6c:7d:7b:c2:a4:f1:ca:b8:5d:6c:95:fa: 13:98:92:b1:6f:8f:46:aa:67:82:11:0f:d3:ec:89: 25:3f:a6:66:73:76:e2:d0:9c:45:0a:49:e4:6a:11: 88:c4:a1:fb:9a:97:9b:d3:e0:87:f5:6e:f8:3d:65: d2:31:9b:4d:94:fe:5e:7b:76:f6:02:6a:68:1f:8d: 07:4c:f2:1b:a3:30:24:91:c9:18:8b:52:2f:dc:80: 6f:06:a3:cb:4d:6a:e1:e6:9c:56:0b:73:e2:f2:fa: 0a:35:ed:c4:94:da:59:82:f1:55:fc:1b:67:04:3d: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5B:3B:A8:96:45:AF:F4:46:C3:38:1A:25:58:0E:60:49:95:3A:64 X509v3 Authority Key Identifier: keyid:2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/541D17D2B2C811F092F27081C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.90.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ca:90:56:16:d8:89:81:f3:5f:8c:1d:f1:6b:06:de:ed:58: 88:57:0d:fd:28:52:b2:55:55:73:4b:e3:06:40:b5:49:40:e1: 4b:a6:d3:36:7a:77:c9:66:08:25:94:d0:f3:76:c7:f1:f9:47: 1f:40:fa:f6:0a:aa:89:a1:83:46:d1:96:5b:5a:db:51:76:a3: f7:3f:7b:49:9f:74:35:c1:58:88:29:28:9d:6f:3f:bb:8b:37: 0e:48:b3:5b:5e:58:b5:a1:50:39:96:b1:6b:05:7c:bf:9f:17: b0:41:ad:e0:dd:63:d2:8a:d5:39:f9:76:33:4b:7f:6b:15:ed: da:73:f0:7e:00:7d:13:24:75:a8:55:5a:4c:b1:cd:6a:08:25: dd:40:ad:bb:d4:4a:11:ef:2e:c2:33:31:b9:b8:d1:38:05:62: ad:79:5a:ec:ba:3f:ff:04:6b:96:d5:a2:cb:d8:5b:11:77:eb: 1f:c6:ac:20:75:d0:3a:92:0d:9b:7c:58:33:04:33:a4:7e:f2: bc:7d:a0:86:8f:b5:a3:1f:00:0c:18:4f:fc:dd:c3:6d:3f:ff: 11:21:0b:a3:5f:d1:82:9b:8b:d3:ae:39:15:c6:5e:9f:20:d7: 4b:09:07:1a:5a:db:0b:e8:2f:65:c4:94:90:10:b6:72:9d:84: 24:2a:dd:5c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDQ5RDExMC8GA1UEBRMoMkY2QkNCNUM1RUJGNzM2NzM2NjU2ODQ0QjExNkM0OERB NTUxMTI1OTAeFw0yNTEwMjcwMDAzMTNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkODE4LTMzZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC15xIHrV/cTVhQuygZgeerVQRynqWnkx1ew8zrB4uPGO06FyQX5otjyVvmHfve fvs+jYn9q3I+bmffNsjEiLw/sWjb4mqmx4dr7RGDlh73lKpf72Aw2gAL1ANptHmE 8M8xv90RkYCqblmskbcLBvHAnbh4dJ2D65XvgXppqgzAAPQ0Z+8lqJfZHGx9e8Kk 8cq4XWyV+hOYkrFvj0aqZ4IRD9PsiSU/pmZzduLQnEUKSeRqEYjEofual5vT4If1 bvg9ZdIxm02U/l57dvYCamgfjQdM8hujMCSRyRiLUi/cgG8Go8tNauHmnFYLc+Ly +go17cSU2lmC8VX8G2cEPaovAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUgls7qJZF r/RGwzgaJVgOYEmVOmQwHwYDVR0jBBgwFoAUL2vLXF6/c2c2ZWhEsRbEjaVRElkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNDlEL0FCNjZFMDkyQjJD NjExRjA5MTM0QkE2REM0RjlBRTAyL0wydkxYRjZfYzJjMlpXaEVzUmJFamFWUkVs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTDJ2TFhGNl9jMmMyWldoRXNSYkVqYVZSRWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDQ5RC9BQjY2RTA5MkIyQzYxMUYwOTEzNEJBNkRDNEY5QUUwMi81NDFEMTdEMkIy QzgxMUYwOTJGMjcwODFDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACK/FowDQYJKoZIhvcNAQELBQADggEBAB/KkFYW2ImB81+MHfFrBt7t WIhXDf0oUrJVVXNL4wZAtUlA4Uum0zZ6d8lmCCWU0PN2x/H5Rx9A+vYKqomhg0bR llta21F2o/c/e0mfdDXBWIgpKJ1vP7uLNw5Is1teWLWhUDmWsWsFfL+fF7BBreDd Y9KK1Tn5djNLf2sV7dpz8H4AfRMkdahVWkyxzWoIJd1ArbvUShHvLsIzMbm40TgF Yq15Wuy6P/8Ea5bVosvYWxF36x/GrCB10DqSDZt8WDMEM6R+8rx9oIaPtaMfAAwY T/zdw20//xEhC6Nf0YKbi9OuORXGXp8g10sJBxpa2wvoL2XElJAQtnKdhCQq3Vw= -----END CERTIFICATE-----Generated at Mon Mar 2 00:10:35 2026 by rpki-client