$ rpki-client -vvvf rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/685D69B6AD0111F1A96326FB3811F970.roa File: 685D69B6AD0111F1A96326FB3811F970.roa (raw, json) Hash identifier: LvvIKRLn4rPKFRZbpCVDTbL1kJsWB+XQ6Nuu2eljFkM= Subject key identifier: E9:C4:7A:D3:F2:A5:97:26:19:47:0A:22:E2:0B:68:C7:BD:4D:C1:95 Certificate issuer: /CN=A91836E8/serialNumber=827D6A3D0F1DEB27BC78CAED44DA987C26B7D3F2 Certificate serial: 02 Authority key identifier: 82:7D:6A:3D:0F:1D:EB:27:BC:78:CA:ED:44:DA:98:7C:26:B7:D3:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/685D69B6AD0111F1A96326FB3811F970.roa Signing time: Thu 10 Sep 2026 10:21:38 +0000 ROA not before: Thu 10 Sep 2026 10:21:38 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 154900 IP address blocks: 163.52.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.crl rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 09:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836E8, serialNumber=827D6A3D0F1DEB27BC78CAED44DA987C26B7D3F2 Validity Not Before: Sep 10 10:21:38 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6aa284b2-4bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:42:90:6b:2a:17:4b:82:66:6d:48:47:32: e6:14:4f:49:53:7b:68:3f:3b:c2:17:0a:b7:d3:df: 4f:25:bc:65:f6:e3:ee:be:f8:cc:75:87:84:ef:7c: d1:07:05:b2:eb:4f:4c:13:68:ae:af:15:1d:29:cc: 11:d5:60:e3:e6:f2:97:86:d3:e0:ab:07:80:a8:83: 08:6e:e7:38:92:16:0b:11:91:e6:05:56:af:e5:cc: 6e:ff:f9:fa:5f:46:88:52:f4:ab:62:c6:5f:db:3a: 0b:6e:cd:4b:f5:ab:c1:99:26:d5:a8:d9:d0:e0:34: ea:07:4d:24:b3:1c:df:0e:ef:ee:bf:62:02:63:b8: df:6f:67:e9:d2:4a:60:e3:dc:64:2f:00:3a:b4:25: 1a:19:4c:af:aa:4b:d9:e2:83:91:ac:0c:35:78:79: ce:eb:eb:c3:ae:c9:7b:66:77:e2:17:95:c7:85:40: 53:2a:d0:74:1b:f2:69:f9:77:f1:42:a1:57:cb:b2: 85:6a:49:fc:65:24:f1:4b:1b:80:7d:61:49:a8:ca: 85:10:e7:66:d0:53:d3:fd:e5:14:34:10:03:92:1b: dd:71:f2:0b:76:58:c3:ad:4f:c1:5c:2f:35:d6:e5: 9f:50:73:ce:c0:a5:b3:24:e0:ee:7d:bd:f8:5c:be: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C4:7A:D3:F2:A5:97:26:19:47:0A:22:E2:0B:68:C7:BD:4D:C1:95 X509v3 Authority Key Identifier: keyid:82:7D:6A:3D:0F:1D:EB:27:BC:78:CA:ED:44:DA:98:7C:26:B7:D3:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/gn1qPQ8d6ye8eMrtRNqYfCa30_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gn1qPQ8d6ye8eMrtRNqYfCa30_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836E8/239884D2AD0111F18D2EB3A23811F970/685D69B6AD0111F1A96326FB3811F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.152.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:5f:f4:02:8b:f4:fb:01:be:d5:9e:b3:55:8a:5e:ce:94:ac: a4:c4:64:e2:79:19:b2:e1:f8:23:d7:e4:8a:8d:3e:41:b0:1f: a6:e9:c3:03:c8:15:fe:78:1e:e4:a9:7e:d4:f4:c8:ff:2e:58: e4:11:0a:6c:aa:43:0d:c1:4c:a7:0d:4d:2f:c6:65:28:a7:6a: 0b:88:f4:57:8a:53:21:11:6f:47:3b:f2:f7:58:09:ca:5a:a4: 14:d4:91:65:48:cf:46:9f:69:d1:4b:1b:82:96:3a:48:95:d2: ba:b6:be:eb:86:d6:f7:de:f1:59:b9:7b:e9:e7:35:98:bf:d5: b1:34:f3:0b:da:bd:04:69:7b:42:43:5b:0b:8d:63:f7:e4:e1: 3e:b5:e0:87:1b:1b:36:a1:44:e7:2a:9e:ca:b1:63:bf:07:f9: 93:b8:ac:1d:ef:52:40:69:6e:b8:a9:c3:ca:3e:11:3d:f5:09: 9c:a0:82:12:34:7c:79:09:44:bf:68:02:11:78:f3:81:f4:48: 9f:37:6d:30:cd:78:7a:47:fc:04:4e:1b:ba:6e:54:86:94:f5: 33:f2:6d:8e:1b:98:9f:7f:20:3c:5c:b7:74:84:72:37:8a:2a: 2c:17:ff:38:bf:67:0b:ea:8a:cb:7e:d0:13:30:13:3c:19:b5: 47:c2:6b:37 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZFODExMC8GA1UEBRMoODI3RDZBM0QwRjFERUIyN0JDNzhDQUVENDREQTk4N0My NkI3RDNGMjAeFw0yNjA5MTAxMDIxMzhaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTI4NGIyLTRiZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC57EKQayoXS4JmbUhHMuYUT0lTe2g/O8IXCrfT308lvGX24+6++Mx1h4TvfNEH BbLrT0wTaK6vFR0pzBHVYOPm8peG0+CrB4Cogwhu5ziSFgsRkeYFVq/lzG7/+fpf RohS9Ktixl/bOgtuzUv1q8GZJtWo2dDgNOoHTSSzHN8O7+6/YgJjuN9vZ+nSSmDj 3GQvADq0JRoZTK+qS9nig5GsDDV4ec7r68OuyXtmd+IXlceFQFMq0HQb8mn5d/FC oVfLsoVqSfxlJPFLG4B9YUmoyoUQ52bQU9P95RQ0EAOSG91x8gt2WMOtT8FcLzXW 5Z9Qc87ApbMk4O59vfhcvvMxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU6cR60/Kl lyYZRwoi4gtox71NwZUwHwYDVR0jBBgwFoAUgn1qPQ8d6ye8eMrtRNqYfCa30/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkU4LzIzOTg4NEQyQUQw MTExRjE4RDJFQjNBMjM4MTFGOTcwL2duMXFQUThkNnllOGVNcnRSTnFZZkNhMzBf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ24xcVBROGQ2eWU4ZU1ydFJOcVlmQ2EzMF9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZFOC8yMzk4ODREMkFEMDExMUYxOEQyRUIzQTIzODExRjk3MC82ODVENjlCNkFE MDExMUYxQTk2MzI2RkIzODExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGjNJgwDQYJKoZIhvcNAQELBQADggEBAG1f9AKL9PsBvtWes1WKXs6U rKTEZOJ5GbLh+CPX5IqNPkGwH6bpwwPIFf54HuSpftT0yP8uWOQRCmyqQw3BTKcN TS/GZSinaguI9FeKUyERb0c78vdYCcpapBTUkWVIz0afadFLG4KWOkiV0rq2vuuG 1vfe8Vm5e+nnNZi/1bE08wvavQRpe0JDWwuNY/fk4T614IcbGzahROcqnsqxY78H +ZO4rB3vUkBpbripw8o+ET31CZygghI0fHkJRL9oAhF484H0SJ83bTDNeHpH/ARO G7puVIaU9TPybY4bmJ9/IDxct3SEcjeKKiwX/zi/Zwvqist+0BMwEzwZtUfCazc= -----END CERTIFICATE-----Generated at Thu Sep 17 08:16:43 2026 by rpki-client