$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/970D44E2C54F11F0A154DD09C4F9AE02.roa File: 970D44E2C54F11F0A154DD09C4F9AE02.roa (raw, json) Hash identifier: HyMt0B+pOhVMNXH2gY84/5yQW/j0O4deZoiKvpL1EJk= Subject key identifier: 97:53:BF:E5:53:51:96:5A:17:46:F6:A2:9D:E4:E9:3F:68:F2:8D:9C Certificate issuer: /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Certificate serial: 36 Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/970D44E2C54F11F0A154DD09C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:00:20 +0000 ROA not before: Wed 19 Nov 2025 13:56:48 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154373 IP address blocks: 138.252.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2 Validity Not Before: Nov 19 13:56:48 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d5f4-e49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:3c:5a:50:20:9f:59:02:8b:fe:b3:b6:24: 18:b2:bc:25:02:c2:41:9f:88:af:75:4a:78:64:4f: 61:0f:6c:2f:51:99:b3:76:52:44:f4:63:03:fb:9f: c7:1d:53:d1:92:73:72:19:0f:0e:5b:5f:05:52:43: da:6d:56:8d:d6:8a:1f:0d:41:d6:c2:dd:5a:24:3d: 68:ab:12:05:4a:e9:da:76:70:8d:18:6b:3f:cf:ab: 8d:dc:1f:16:0c:28:59:bc:8d:c7:16:fc:86:cc:1b: 80:de:f0:00:04:94:9c:09:6c:e8:9d:be:c4:51:c1: e2:4e:bc:c5:3a:04:01:05:a1:67:91:34:fb:63:5b: 4f:d3:6f:ea:17:a1:ad:26:b9:54:92:cc:ee:ab:c5: 4a:ef:8b:47:51:2d:14:41:9f:65:19:6b:0c:9d:3a: 71:35:f3:f7:dc:da:9b:3e:7a:61:07:e4:5a:f1:80: 91:63:65:8c:6d:6a:df:f8:25:bc:e0:af:20:6e:bb: 62:7d:16:af:8a:70:a7:32:94:bb:ec:73:c5:27:78: 03:88:f9:7c:40:c3:20:a4:16:8d:ee:a2:3c:98:11: 39:44:23:a6:b7:2d:2b:93:49:c5:6f:79:c3:db:4f: 1c:36:84:2b:12:37:cc:c9:4e:d8:17:8a:6e:06:fe: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:53:BF:E5:53:51:96:5A:17:46:F6:A2:9D:E4:E9:3F:68:F2:8D:9C X509v3 Authority Key Identifier: keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/970D44E2C54F11F0A154DD09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.224.0/23 Signature Algorithm: sha256WithRSAEncryption 61:6d:85:80:0f:8f:db:d2:8a:2d:72:6b:df:40:a9:cf:2a:b5: 8f:4a:5f:33:d4:cb:e3:c4:11:91:b0:a2:cf:86:f3:f3:f0:6b: 9b:76:6c:e2:d6:17:41:a3:0e:e7:45:78:d2:89:3a:96:b5:00: b8:41:f1:25:aa:4b:ad:18:60:b8:aa:78:ff:5c:0e:7c:6f:ab: b6:1d:87:9e:0a:95:4f:b4:d8:7f:55:6a:b4:6e:2f:d4:b7:9d: df:eb:fc:42:12:a7:38:7a:60:b7:0b:a9:c9:bd:c4:24:4a:39: 12:19:b0:a0:ca:60:2b:b9:8f:d2:ea:32:a7:bf:aa:df:3c:01: 27:e8:93:97:f8:b4:4e:0c:36:c7:21:fe:a4:8e:fa:e1:d1:00: ad:81:20:42:88:01:2c:61:36:ab:00:b9:d4:40:be:3c:7d:83: 78:a1:ff:b3:0a:6d:46:2b:df:1b:bb:54:d2:e4:72:49:84:a9: 30:17:df:79:0c:71:28:27:04:31:0d:55:44:ab:db:77:0a:1a: a4:7c:f0:e9:08:ab:28:e6:fd:b8:4e:a0:e5:ee:af:af:41:78: 47:33:95:41:c1:1e:6a:70:31:7e:91:0a:89:0d:db:c7:71:35: 4a:3f:0a:2d:d2:36:7f:43:1e:a2:ce:12:89:3e:72:1d:7c:0b: 8f:a7:19:48 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzA2RjExMC8GA1UEBRMoMEY1MzIwOTZFN0Y1OERFNDAxRjI2NTA3NkRFRkI1Qzgy RTcxRjNFMjAeFw0yNTExMTkxMzU2NDhaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNWY0LWU0OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS/TxaUCCfWQKL/rO2JBiyvCUCwkGfiK91SnhkT2EPbC9RmbN2UkT0YwP7n8cd U9GSc3IZDw5bXwVSQ9ptVo3Wih8NQdbC3VokPWirEgVK6dp2cI0Yaz/Pq43cHxYM KFm8jccW/IbMG4De8AAElJwJbOidvsRRweJOvMU6BAEFoWeRNPtjW0/Tb+oXoa0m uVSSzO6rxUrvi0dRLRRBn2UZawydOnE18/fc2ps+emEH5FrxgJFjZYxtat/4Jbzg ryBuu2J9Fq+KcKcylLvsc8UneAOI+XxAwyCkFo3uojyYETlEI6a3LSuTScVvecPb Txw2hCsSN8zJTtgXim4G/obfAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUl1O/5VNR lloXRvaineTpP2jyjZwwHwYDVR0jBBgwFoAUD1Mgluf1jeQB8mUHbe+1yC5x8+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzMDZGLzYxQzI2OEQ2QzU0 RTExRjA4ODU4NEY4NkM0RjlBRTAyL0QxTWdsdWYxamVRQjhtVUhiZS0xeUM1eDgt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFNZ2x1ZjFqZVFCOG1VSGJlLTF5QzV4OC1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzA2Ri82MUMyNjhENkM1NEUxMUYwODg1ODRGODZDNEY5QUUwMi85NzBENDRFMkM1 NEYxMUYwQTE1NEREMDlDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/OAwDQYJKoZIhvcNAQELBQADggEBAGFthYAPj9vSii1ya99Aqc8q tY9KXzPUy+PEEZGwos+G8/Pwa5t2bOLWF0GjDudFeNKJOpa1ALhB8SWqS60YYLiq eP9cDnxvq7Ydh54KlU+02H9VarRuL9S3nd/r/EISpzh6YLcLqcm9xCRKORIZsKDK YCu5j9LqMqe/qt88ASfok5f4tE4MNsch/qSO+uHRAK2BIEKIASxhNqsAudRAvjx9 g3ih/7MKbUYr3xu7VNLkckmEqTAX33kMcSgnBDENVUSr23cKGqR88OkIqyjm/bhO oOXur69BeEczlUHBHmpwMX6RCokN28dxNUo/Ci3SNn9DHqLOEok+ch18C4+nGUg= -----END CERTIFICATE-----Generated at Sun Mar 1 23:27:18 2026 by rpki-client