$ rpki-client -vvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/72F530E2BEF611F08C939B16C4F9AE02.roa File: 72F530E2BEF611F08C939B16C4F9AE02.roa (raw, json) Hash identifier: yhMTNzO+SsDCmy0S8wXFM6nSSpWZDvT6nvy+5GJLY5A= Subject key identifier: F1:B9:30:BB:C5:A5:E0:A1:36:B1:A9:F0:2E:E8:57:6B:51:33:50:E3 Certificate issuer: /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Certificate serial: 3B Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/72F530E2BEF611F08C939B16C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:04:26 +0000 ROA not before: Tue 11 Nov 2025 12:03:35 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154024 IP address blocks: 138.252.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88 Validity Not Before: Nov 11 12:03:35 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d6ea-cf6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f9:1d:b1:b2:02:d6:c6:d5:ff:02:30:61:d0: 20:24:e0:1e:3f:b8:a7:19:77:a4:3a:44:3c:36:b5: b1:3a:c9:24:06:83:3b:dc:b1:7f:a5:c7:6e:0b:35: 1d:4b:19:24:9a:15:48:cb:d1:8b:d4:2e:18:06:fb: 97:14:7c:1e:5c:89:f7:a2:57:da:0d:10:37:31:90: 71:b0:c6:02:f8:61:8d:0b:a5:0c:9a:e3:69:ec:ee: 4e:8e:10:de:b4:59:a0:ef:6f:e7:9b:dc:ec:60:1b: 5e:85:d9:04:fa:07:1c:b9:f9:9a:cc:9e:ab:19:86: 3c:bc:ec:30:09:c1:05:5a:aa:ea:c6:7c:2c:28:4b: 79:51:41:73:c9:e0:af:ac:3c:7d:25:b8:cc:c1:5a: 74:1f:88:6c:19:51:37:15:70:ac:bf:87:cb:76:f9: 38:b6:3b:4c:51:ba:f9:61:04:aa:f4:7d:ea:10:d8: ef:6a:ed:71:81:67:e4:6f:4e:99:00:50:16:90:a4: 95:e4:a5:cb:29:a7:fa:0e:7b:2c:98:18:38:dc:0d: 38:65:16:09:c2:b6:69:e7:a8:21:a2:9c:fa:48:ec: e4:2a:91:e6:b3:dc:f8:da:98:c4:4d:56:09:68:db: 90:06:3c:fb:1f:11:ed:90:36:f9:e4:3b:3d:cb:7f: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B9:30:BB:C5:A5:E0:A1:36:B1:A9:F0:2E:E8:57:6B:51:33:50:E3 X509v3 Authority Key Identifier: keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/72F530E2BEF611F08C939B16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.170.0/23 Signature Algorithm: sha256WithRSAEncryption 68:6c:b8:f7:d0:c4:82:35:5d:ca:ef:f4:72:64:50:98:4d:80: 3c:b7:9c:88:bc:bd:09:42:b4:c7:55:1e:41:12:ec:6c:1c:46: e8:8c:cc:98:70:1f:34:55:06:07:61:5c:65:16:a4:c0:4a:04: 69:da:41:14:45:ca:55:02:e7:b2:7e:0f:11:39:38:03:76:d8: 50:f2:dd:02:6b:26:30:14:b0:ea:40:18:90:d8:c5:9e:5a:25: c4:77:78:6e:e4:55:c8:b6:6b:5c:20:4b:14:86:eb:22:48:86: 39:16:d8:8c:90:e4:bf:2c:eb:83:08:3c:8e:59:14:91:58:21: bb:ad:84:66:63:cc:c0:ea:0f:c7:6a:48:8d:47:fc:f2:dd:aa: d9:ac:5c:fd:5b:49:47:af:6b:82:98:e1:5e:75:bb:d8:ac:ba: 8b:15:96:c8:22:2f:06:41:cf:19:45:6e:4e:e4:11:a5:3a:e9: ad:23:98:2b:6e:7d:e7:57:22:8f:70:18:c1:37:c3:2a:18:f3: 0f:29:d7:f1:f1:73:6e:28:a3:21:bd:2e:be:e9:62:d4:8e:a0: 57:a0:49:fd:4e:d7:f7:c6:7c:0b:03:15:bb:a3:5e:7b:b3:ca: 5c:5b:46:27:83:de:81:99:1f:66:cb:42:cc:ae:50:59:54:ac: 9a:06:b2:c0 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDlCQTExMC8GA1UEBRMoRTg3OTAzMDE3QUIxRjA2QTlDQjQ2QUIwMjFCRDBCOTIx QzlBRkE4ODAeFw0yNTExMTExMjAzMzVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNmVhLWNmNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDq+R2xsgLWxtX/AjBh0CAk4B4/uKcZd6Q6RDw2tbE6ySQGgzvcsX+lx24LNR1L GSSaFUjL0YvULhgG+5cUfB5cifeiV9oNEDcxkHGwxgL4YY0LpQya42ns7k6OEN60 WaDvb+eb3OxgG16F2QT6Bxy5+ZrMnqsZhjy87DAJwQVaqurGfCwoS3lRQXPJ4K+s PH0luMzBWnQfiGwZUTcVcKy/h8t2+Ti2O0xRuvlhBKr0feoQ2O9q7XGBZ+RvTpkA UBaQpJXkpcspp/oOeyyYGDjcDThlFgnCtmnnqCGinPpI7OQqkeaz3PjamMRNVglo 25AGPPsfEe2QNvnkOz3Lf2OHAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU8bkwu8Wl 4KE2sanwLuhXa1EzUOMwHwYDVR0jBBgwFoAU6HkDAXqx8GqctGqwIb0Lkhya+ogw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0OUJBL0UzNjdGNkM2QkVG NTExRjA5QjdFNzIwOUM0RjlBRTAyLzZIa0RBWHF4OEdxY3RHcXdJYjBMa2h5YS1v Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNkhrREFYcXg4R3FjdEdxd0liMExraHlhLW9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDlCQS9FMzY3RjZDNkJFRjUxMUYwOUI3RTcyMDlDNEY5QUUwMi83MkY1MzBFMkJF RjYxMUYwOEM5MzlCMTZDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGK/KowDQYJKoZIhvcNAQELBQADggEBAGhsuPfQxII1Xcrv9HJkUJhN gDy3nIi8vQlCtMdVHkES7GwcRuiMzJhwHzRVBgdhXGUWpMBKBGnaQRRFylUC57J+ DxE5OAN22FDy3QJrJjAUsOpAGJDYxZ5aJcR3eG7kVci2a1wgSxSG6yJIhjkW2IyQ 5L8s64MIPI5ZFJFYIbuthGZjzMDqD8dqSI1H/PLdqtmsXP1bSUeva4KY4V51u9is uosVlsgiLwZBzxlFbk7kEaU66a0jmCtufedXIo9wGME3wyoY8w8p1/Hxc24ooyG9 Lr7pYtSOoFegSf1O1/fGfAsDFbujXnuzylxbRieD3oGZH2bLQsyuUFlUrJoGssA= -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:51 2026 by rpki-client