$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/753E1B20B1B311F0BD0C0785C4F9AE02.roa File: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (raw, json) Hash identifier: ZEgQ8tbj5F35NBxvxNkrasJNkBRbUBDhID22q1DgVs8= Subject key identifier: 84:4A:36:A3:7F:32:93:4D:9D:B8:CB:53:9C:F6:CA:CF:B7:E9:C4:5F Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Certificate serial: 07 Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/753E1B20B1B311F0BD0C0785C4F9AE02.roa Signing time: Sat 25 Oct 2025 15:01:17 +0000 ROA not before: Sat 25 Oct 2025 15:01:17 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134585 IP address blocks: 138.252.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Validity Not Before: Oct 25 15:01:17 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=68fce63d-aebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:48:ff:70:9f:37:1d:b4:bc:f5:da:3d:ed: d5:92:0c:09:f0:5a:29:41:3c:2a:8f:17:42:ca:30: 79:61:a1:b9:25:35:96:e4:ca:24:4d:96:f5:36:7b: f7:0a:c9:c3:cb:2a:c3:aa:66:96:37:76:1b:9e:96: b5:71:86:bd:2d:44:d0:5b:8b:37:12:94:c3:e4:a1: 70:9d:9c:df:07:89:56:64:2a:48:b3:d2:a7:91:6c: 2e:3a:88:40:dc:45:2e:2c:90:c2:d3:dd:9f:45:1e: 95:c5:38:33:79:8e:c3:63:5b:c7:48:35:9c:0c:aa: 6c:7b:c5:cb:06:37:8b:2b:0b:07:65:f9:d5:ef:08: f9:c4:72:2d:5b:80:bd:e6:a8:89:d6:d0:67:83:84: 7f:10:eb:33:1b:6a:d9:c5:60:47:a4:9a:8b:6f:25: e6:3e:7e:4e:08:fa:59:85:81:1a:25:f0:e9:82:bc: 4a:f0:40:46:3f:b5:6a:c5:e8:68:66:90:02:91:cb: 04:f4:12:c8:b7:4b:e4:cd:e4:23:92:63:20:d1:d4: b0:4a:ad:1a:41:2f:50:9d:04:25:7a:9c:a3:84:32: ac:5a:1f:5e:c6:bc:b1:2d:15:fb:9a:7c:ad:f9:f5: e7:82:8c:8f:e9:b1:eb:7f:6f:45:c9:fa:c8:64:0d: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:36:A3:7F:32:93:4D:9D:B8:CB:53:9C:F6:CA:CF:B7:E9:C4:5F X509v3 Authority Key Identifier: keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/753E1B20B1B311F0BD0C0785C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.30.0/24 Signature Algorithm: sha256WithRSAEncryption 82:bd:4d:47:b8:8d:6b:9c:fa:6c:26:2f:1b:68:06:18:c4:b8: 4e:d6:9d:c5:9d:de:8d:2b:43:70:2c:cd:a2:6e:ff:60:95:ed: e3:ec:f0:c6:96:19:28:a8:2a:0e:e7:69:8a:63:e3:56:4b:43: d1:bd:86:e1:20:1f:e6:cd:42:9d:13:78:cf:8f:d8:a1:0e:d0: a6:29:8d:3c:3a:47:79:b6:bd:a8:2d:91:98:99:cc:ca:2d:8c: 5e:4a:fa:5f:60:ca:e7:0e:56:94:dc:65:98:96:13:ea:6a:fc: c3:1e:3c:23:c1:dd:55:94:99:c8:e9:e5:4f:d8:36:35:82:73: 71:4f:e4:5e:1c:ed:56:f3:64:22:4b:c5:1e:71:5a:ac:29:e8: 13:01:44:87:62:eb:48:b8:34:b7:88:54:8d:33:95:2f:ef:bc: 48:88:7f:99:6c:47:f7:d1:5c:40:6f:c3:68:05:92:f8:50:66: 20:67:79:e8:98:5a:b9:9f:53:78:e8:ab:87:64:c4:34:db:59: 1c:33:9c:cc:d3:d9:81:d1:23:12:3f:35:40:c3:5b:f7:ba:be: f6:bc:78:47:dc:11:6f:53:8f:78:53:79:c3:54:2d:6d:46:3f: 12:60:ab:3a:87:53:01:1a:ff:6e:d9:d4:49:17:8c:65:b5:07: c6:35:e2:a6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjlENzExMC8GA1UEBRMoRkE1QkFGNDZCN0NCMkM4RTM0NjM4M0FBODBDQjM5NkIy QjgxQzY0QzAeFw0yNTEwMjUxNTAxMTdaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZmNlNjNkLWFlYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCHEj/cJ83HbS89do97dWSDAnwWilBPCqPF0LKMHlhobklNZbkyiRNlvU2e/cK ycPLKsOqZpY3dhuelrVxhr0tRNBbizcSlMPkoXCdnN8HiVZkKkiz0qeRbC46iEDc RS4skMLT3Z9FHpXFODN5jsNjW8dINZwMqmx7xcsGN4srCwdl+dXvCPnEci1bgL3m qInW0GeDhH8Q6zMbatnFYEekmotvJeY+fk4I+lmFgRol8OmCvErwQEY/tWrF6Ghm kAKRywT0Esi3S+TN5COSYyDR1LBKrRpBL1CdBCV6nKOEMqxaH17GvLEtFfuafK35 9eeCjI/pset/b0XJ+shkDYnzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUhEo2o38y k02duMtTnPbKz7fpxF8wHwYDVR0jBBgwFoAU+luvRrfLLI40Y4OqgMs5ayuBxkww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOUQ3L0YyM0M0REYyQUQ3 MzExRjBBRjY1MDI1NEM0RjlBRTAyLy1sdXZScmZMTEk0MFk0T3FnTXM1YXl1Qnhr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWx1dlJyZkxMSTQwWTRPcWdNczVheXVCeGt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlENy9GMjNDNERGMkFENzMxMUYwQUY2NTAyNTRDNEY5QUUwMi83NTNFMUIyMEIx QjMxMUYwQkQwQzA3ODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIr8HjANBgkqhkiG9w0BAQsFAAOCAQEAgr1NR7iNa5z6bCYv G2gGGMS4TtadxZ3ejStDcCzNom7/YJXt4+zwxpYZKKgqDudpimPjVktD0b2G4SAf 5s1CnRN4z4/YoQ7QpimNPDpHeba9qC2RmJnMyi2MXkr6X2DK5w5WlNxlmJYT6mr8 wx48I8HdVZSZyOnlT9g2NYJzcU/kXhztVvNkIkvFHnFarCnoEwFEh2LrSLg0t4hU jTOVL++8SIh/mWxH99FcQG/DaAWS+FBmIGd56JhauZ9TeOirh2TENNtZHDOczNPZ gdEjEj81QMNb97q+9rx4R9wRb1OPeFN5w1QtbUY/EmCrOodTARr/btnUSReMZbUH xjXipg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:47:54 2025 by rpki-client