$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/CB294B74BD6811F1A0CF111C6311F970.roa File: CB294B74BD6811F1A0CF111C6311F970.roa (raw, json) Hash identifier: 7YtUMPY0BMzW/YApFdmy21gxHlg0xlr/SpcejgaxP1c= Subject key identifier: 9B:1C:46:37:2A:53:8B:2F:05:00:D3:B7:A0:F6:CF:38:77:0C:49:C5 Certificate issuer: /CN=A9151CB1/serialNumber=FA8BA6C16F6676F0840EEBE4C2B25E194CDF697C Certificate serial: 04 Authority key identifier: FA:8B:A6:C1:6F:66:76:F0:84:0E:EB:E4:C2:B2:5E:19:4C:DF:69:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oumwW9mdvCEDuvkwrJeGUzfaXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/CB294B74BD6811F1A0CF111C6311F970.roa Signing time: Thu 01 Oct 2026 07:22:02 +0000 ROA not before: Thu 01 Oct 2026 07:22:02 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 154843 IP address blocks: 163.52.20.0/23 maxlen: 24 2001:df7:6140::/46 maxlen: 46 2001:df7:6140::/48 maxlen: 48 2001:df7:6141::/48 maxlen: 48 2001:df7:6142::/48 maxlen: 48 2001:df7:6143::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/-oumwW9mdvCEDuvkwrJeGUzfaXw.crl rsync://rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/-oumwW9mdvCEDuvkwrJeGUzfaXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oumwW9mdvCEDuvkwrJeGUzfaXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151CB1, serialNumber=FA8BA6C16F6676F0840EEBE4C2B25E194CDF697C Validity Not Before: Oct 1 07:22:02 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abe0a19-72d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:32:c0:ef:de:f5:8c:8a:f1:c4:df:29:1c: 1e:35:62:c4:4c:38:09:f5:d4:95:81:35:5d:9d:8d: 16:1e:37:39:fd:21:c8:c4:7a:a9:ce:02:a0:62:5f: e6:ce:75:31:00:c4:f5:e7:b6:b8:3e:69:84:4f:4f: f0:63:67:8a:65:65:d7:f1:9e:2a:84:a8:9e:7c:b3: 1f:47:42:e5:6f:ac:40:54:d4:3c:df:a3:a8:2b:eb: 9d:db:e6:52:8a:ab:83:1c:14:57:61:1d:0f:1d:91: b5:9d:6f:38:6c:bb:2f:b2:37:f7:90:91:33:3a:77: c4:6e:ec:83:67:6c:80:6b:ba:68:64:51:1c:8c:be: a7:82:90:b1:ee:b5:0b:bf:96:22:29:94:ca:35:46: fb:2e:f8:b6:0e:83:e4:87:57:9b:f8:fa:8d:c0:a3: d1:f5:84:4f:07:28:90:32:7a:47:ab:3e:ca:45:ce: b7:f5:ea:53:46:fb:f7:32:c5:4e:fd:c6:d4:db:5b: 5a:a8:1c:fd:f7:8f:45:1e:57:31:6c:3c:f2:81:2d: 82:cd:dd:42:44:46:a6:bc:4d:f9:dd:2a:92:5e:e6: aa:a1:b6:1f:a4:6f:fc:96:e3:32:81:44:56:f3:cb: 2d:4f:95:11:1c:ab:2b:0d:13:6a:a1:21:e6:62:b5: ef:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1C:46:37:2A:53:8B:2F:05:00:D3:B7:A0:F6:CF:38:77:0C:49:C5 X509v3 Authority Key Identifier: keyid:FA:8B:A6:C1:6F:66:76:F0:84:0E:EB:E4:C2:B2:5E:19:4C:DF:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/-oumwW9mdvCEDuvkwrJeGUzfaXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oumwW9mdvCEDuvkwrJeGUzfaXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151CB1/A1A59B28BD6711F1A63092F26211F970/CB294B74BD6811F1A0CF111C6311F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.20.0/23 IPv6: 2001:df7:6140::/46 Signature Algorithm: sha256WithRSAEncryption 51:e0:73:c7:14:80:ba:3c:2e:97:7b:86:4b:2f:a3:f7:69:10: e0:a1:f8:d1:0b:9a:98:63:86:94:33:eb:c9:1b:ac:60:fb:2d: eb:da:f0:46:4c:bf:2a:ce:ab:a1:4c:49:7f:50:39:08:f2:8b: c4:e1:3c:aa:c5:7a:33:6e:36:c5:61:f3:d9:13:3c:b3:d3:2c: 46:97:c5:3b:ee:21:88:ca:d6:cc:f9:8f:58:c9:96:0d:37:df: 61:13:e5:a6:dd:84:d1:37:35:a9:24:12:31:09:e2:bd:43:8b: a9:06:09:09:c0:4d:48:0d:14:1e:20:d8:1d:d3:03:97:6e:86: 67:e5:6b:1a:9f:19:b8:4a:0a:a5:40:70:c7:c3:dc:0c:00:9b: 1e:c1:aa:8c:9c:d2:93:55:e7:f1:c9:8e:9c:5b:a1:32:0e:10: 1f:13:1b:61:27:9e:33:14:2f:27:98:98:d8:6d:25:76:05:f5: a4:03:ae:3c:21:1f:0a:a1:26:70:03:38:f2:c3:c3:d7:ce:d9: 78:f5:94:6c:38:16:e9:61:77:d6:2d:6d:25:2b:2c:a4:bf:37: 64:0a:10:36:c9:16:2b:89:6e:eb:dd:6a:3e:00:7a:d7:c1:b8: 70:00:f0:35:5d:5a:c7:b4:f3:6c:23:44:f4:62:a3:2d:2b:5f: 0a:8e:30:02 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MUNCMTExMC8GA1UEBRMoRkE4QkE2QzE2RjY2NzZGMDg0MEVFQkU0QzJCMjVFMTk0 Q0RGNjk3QzAeFw0yNjEwMDEwNzIyMDJaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYmUwYTE5LTcyZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaBTLA7971jIrxxN8pHB41YsRMOAn11JWBNV2djRYeNzn9IcjEeqnOAqBiX+bO dTEAxPXntrg+aYRPT/BjZ4plZdfxniqEqJ58sx9HQuVvrEBU1Dzfo6gr653b5lKK q4McFFdhHQ8dkbWdbzhsuy+yN/eQkTM6d8Ru7INnbIBrumhkURyMvqeCkLHutQu/ liIplMo1Rvsu+LYOg+SHV5v4+o3Ao9H1hE8HKJAyekerPspFzrf16lNG+/cyxU79 xtTbW1qoHP33j0UeVzFsPPKBLYLN3UJERqa8TfndKpJe5qqhth+kb/yW4zKBRFbz yy1PlREcqysNE2qhIeZite9XAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUmxxGNypT iy8FANO3oPbPOHcMScUwHwYDVR0jBBgwFoAU+oumwW9mdvCEDuvkwrJeGUzfaXww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxQ0IxL0ExQTU5QjI4QkQ2 NzExRjFBNjMwOTJGMjYyMTFGOTcwLy1vdW13VzltZHZDRUR1dmt3ckplR1V6ZmFY dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLW91bXdXOW1kdkNFRHV2a3dySmVHVXpmYVh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUNCMS9BMUE1OUIyOEJENjcxMUYxQTYzMDkyRjI2MjExRjk3MC9DQjI5NEI3NEJE NjgxMUYxQTBDRjExMUM2MzExRjk3MC5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBAGjNBQwDwQCAAIwCQMHAiABDfdhQDANBgkqhkiG9w0BAQsFAAOCAQEA UeBzxxSAujwul3uGSy+j92kQ4KH40QuamGOGlDPryRusYPst69rwRky/Ks6roUxJ f1A5CPKLxOE8qsV6M242xWHz2RM8s9MsRpfFO+4hiMrWzPmPWMmWDTffYRPlpt2E 0Tc1qSQSMQnivUOLqQYJCcBNSA0UHiDYHdMDl26GZ+VrGp8ZuEoKpUBwx8PcDACb HsGqjJzSk1Xn8cmOnFuhMg4QHxMbYSeeMxQvJ5iY2G0ldgX1pAOuPCEfCqEmcAM4 8sPD187ZePWUbDgW6WF31i1tJSsspL83ZAoQNskWK4lu691qPgB618G4cADwNV1a x7TzbCNE9GKjLStfCo4wAg== -----END CERTIFICATE-----Generated at Tue Oct 6 08:49:11 2026 by rpki-client