$ rpki-client -vvvf rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/684F3480C73311F19D5B56326511F970.roa File: 684F3480C73311F19D5B56326511F970.roa (raw, json) Hash identifier: HvilzmgwqsMvwj3kIghXQBXMIyhP3RZkA5Q7G6hhSQg= Subject key identifier: 17:D6:47:8B:63:A8:43:2E:5E:D7:C1:6D:E9:9F:89:19:E7:EE:F7:31 Certificate issuer: /CN=A91836E8/serialNumber=827D6A3D0F1DEB27BC78CAED44DA987C26B7D3F2 Certificate serial: 15 Authority key identifier: 82:7D:6A:3D:0F:1D:EB:27:BC:78:CA:ED:44:DA:98:7C:26:B7:D3:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/684F3480C73311F19D5B56326511F970.roa Signing time: Tue 13 Oct 2026 18:25:03 +0000 ROA not before: Tue 13 Oct 2026 18:25:03 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 218420 IP address blocks: 163.52.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.crl rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 09:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836E8, serialNumber=827D6A3D0F1DEB27BC78CAED44DA987C26B7D3F2 Validity Not Before: Oct 13 18:25:03 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ace777f-78c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:a2:28:d6:f0:9e:68:a5:7e:b3:ca:9c:da: 27:ae:e3:d0:92:02:b5:54:d0:1f:bc:4d:dc:11:e3: 3b:0f:a1:84:df:83:33:ea:09:06:5c:21:28:e9:d9: d6:05:4c:50:46:fe:fb:ff:7e:0e:27:11:67:44:82: b6:a1:21:14:1f:59:ca:ac:c0:23:f0:40:c2:66:77: c6:77:cd:a3:5c:ae:b8:f6:17:ac:f7:c8:7d:28:c8: 1a:a8:d0:20:be:20:6e:a3:54:68:64:9c:f7:9f:76: 30:05:39:31:eb:b1:62:af:3f:26:fb:52:35:4c:80: 54:fa:17:5d:4e:fb:f0:47:b0:d7:89:f3:9c:55:0e: d3:b0:09:f6:71:f1:1a:d7:46:7d:40:9e:ff:9b:10: 43:30:7f:f0:ce:71:98:78:5f:c7:ad:50:74:89:53: 6e:14:fc:46:5c:91:56:bd:78:76:84:1b:58:56:17: 36:1a:f9:89:62:0e:80:6f:09:0b:d5:2c:bc:83:82: a9:34:d5:ee:a0:48:e3:71:c8:3a:37:d6:62:30:0d: 2d:c7:ea:f8:e9:ed:bb:1c:08:67:f4:d8:0d:d1:fe: 5e:eb:eb:32:d2:d0:2a:ea:55:0a:df:9e:fe:bb:21: 65:66:0e:3c:aa:d4:50:d2:db:f9:34:08:64:5a:2b: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:47:8B:63:A8:43:2E:5E:D7:C1:6D:E9:9F:89:19:E7:EE:F7:31 X509v3 Authority Key Identifier: keyid:82:7D:6A:3D:0F:1D:EB:27:BC:78:CA:ED:44:DA:98:7C:26:B7:D3:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/684F3480C73311F19D5B56326511F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.152.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:95:ee:95:44:fd:09:b3:bb:9c:62:e5:5a:13:09:0a:d0:f4: 02:b5:a1:fa:91:57:de:ae:84:24:a1:45:c3:17:74:e0:11:7b: 7c:50:ec:b3:f6:67:e3:a0:ff:f0:1f:16:29:ee:e4:1a:2e:08: d6:4c:82:06:e4:80:9c:79:5f:e6:97:2c:fb:27:6a:6d:f9:0e: 14:0a:66:68:c5:d0:6d:9b:58:8e:3e:f2:3b:c2:b3:2e:f4:a6: 6a:af:57:18:09:70:64:c7:7f:06:b6:20:23:7c:87:e6:9e:7c: 4c:97:5f:48:e8:2a:d8:0e:b7:4e:6f:48:cd:38:eb:c0:4d:f6: 42:1e:aa:68:ec:04:f1:b2:e6:77:76:e0:5f:af:f4:f4:e0:1c: 56:95:8a:22:9d:63:be:21:0a:e8:a3:ff:9e:c0:6c:c2:3d:31: cd:f2:ae:47:0f:43:25:fa:d7:c1:95:70:af:c6:6d:4e:e9:c7: 69:21:23:9c:24:24:16:3d:6a:42:94:cf:0c:39:ca:3a:77:19: fe:b3:32:ac:d1:cd:5f:90:f7:f7:a6:7d:5f:54:73:b3:4b:6d: 2f:40:af:f4:16:9d:0a:88:a4:2b:2b:b3:3c:17:54:78:47:58: ed:09:eb:c0:4d:4e:c0:f0:6c:fd:da:7d:62:37:5b:13:0e:c2: 2f:98:23:bb -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZFODExMC8GA1UEBRMoODI3RDZBM0QwRjFERUIyN0JDNzhDQUVENDREQTk4N0My NkI3RDNGMjAeFw0yNjEwMTMxODI1MDNaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhY2U3NzdmLTc4YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmeKIo1vCeaKV+s8qc2ieu49CSArVU0B+8TdwR4zsPoYTfgzPqCQZcISjp2dYF TFBG/vv/fg4nEWdEgrahIRQfWcqswCPwQMJmd8Z3zaNcrrj2F6z3yH0oyBqo0CC+ IG6jVGhknPefdjAFOTHrsWKvPyb7UjVMgFT6F11O+/BHsNeJ85xVDtOwCfZx8RrX Rn1Anv+bEEMwf/DOcZh4X8etUHSJU24U/EZckVa9eHaEG1hWFzYa+YliDoBvCQvV LLyDgqk01e6gSONxyDo31mIwDS3H6vjp7bscCGf02A3R/l7r6zLS0CrqVQrfnv67 IWVmDjyq1FDS2/k0CGRaKy3FAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUF9ZHi2Oo Qy5e18Ft6Z+JGefu9zEwHwYDVR0jBBgwFoAUgn1qPQ8d6ye8eMrtRNqYfCa30/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkU4LzIzOTg4NEQyQUQw MTExRjE4RDJFQjNBMjM4MTFGOTcwL2duMXFQUThkNnllOGVNcnRSTnFZZkNhMzBf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ24xcVBROGQ2eWU4ZU1ydFJOcVlmQ2EzMF9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZFOC8yMzk4ODREMkFEMDExMUYxOEQyRUIzQTIzODExRjk3MC82ODRGMzQ4MEM3 MzMxMUYxOUQ1QjU2MzI2NTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGjNJgwDQYJKoZIhvcNAQELBQADggEBAD6V7pVE/Qmzu5xi5VoTCQrQ 9AK1ofqRV96uhCShRcMXdOARe3xQ7LP2Z+Og//AfFinu5BouCNZMggbkgJx5X+aX LPsnam35DhQKZmjF0G2bWI4+8jvCsy70pmqvVxgJcGTHfwa2ICN8h+aefEyXX0jo KtgOt05vSM0468BN9kIeqmjsBPGy5nd24F+v9PTgHFaViiKdY74hCuij/57AbMI9 Mc3yrkcPQyX618GVcK/GbU7px2khI5wkJBY9akKUzww5yjp3Gf6zMqzRzV+Q9/em fV9Uc7NLbS9Ar/QWnQqIpCsrszwXVHhHWO0J68BNTsDwbP3afWI3WxMOwi+YI7s= -----END CERTIFICATE-----Generated at Sat Oct 24 12:46:41 2026 by rpki-client