$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DEA91CF8AA9C11F19F04260F3311F970.roa File: DEA91CF8AA9C11F19F04260F3311F970.roa (raw, json) Hash identifier: SCbJOwXSWDEjztL6+Kzjl8eS8WRrj5FuN9JXi9rj2W8= Subject key identifier: 4B:E0:C0:41:F0:6E:3E:5D:67:22:21:01:B1:0B:25:9D:2F:69:60:38 Certificate issuer: /CN=A91D7818/serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9 Certificate serial: 04 Authority key identifier: 42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DEA91CF8AA9C11F19F04260F3311F970.roa Signing time: Mon 07 Sep 2026 09:16:56 +0000 ROA not before: Mon 07 Sep 2026 09:16:56 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 17557 IP address blocks: 163.52.68.0/24 maxlen: 24 163.52.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7818, serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9 Validity Not Before: Sep 7 09:16:56 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9e8107-893a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:b5:e8:ea:d3:10:e5:34:20:bb:a0:a2:08: e0:d4:f9:76:6b:47:e8:ec:e4:09:cf:d7:68:1b:23: 3a:56:5a:0f:2b:a0:3f:48:51:11:c7:4b:5e:58:7f: 28:de:b8:d8:65:ad:43:5b:e3:7c:2f:1a:9f:15:5b: 71:c8:d0:04:1a:3a:51:15:4f:94:8a:7e:4f:85:2f: 12:9a:1f:49:54:b8:54:4f:f5:b1:05:f7:bc:f5:4f: cb:39:ea:7f:c8:1a:c8:16:b0:81:0d:42:f9:43:a4: ac:02:ad:69:b2:02:73:45:ad:79:1a:4f:c6:7b:fb: 8a:14:ed:17:c0:d1:70:65:32:67:1a:d2:61:8e:b8: 79:dc:21:df:ae:bb:c8:f8:43:0f:a1:62:2f:37:a6: f1:a2:65:52:7b:6f:5f:98:90:ce:48:22:b9:8c:46: 64:40:f1:58:4f:ec:0d:90:f6:b8:8d:6b:40:6b:85: 28:07:4f:f8:59:9f:79:4c:7e:6d:2a:f1:d2:65:01: 41:da:88:cf:0c:b0:21:bc:1f:5c:06:5c:25:fa:2d: 6b:ed:3b:61:fa:34:71:d5:e6:33:9e:61:7b:53:d8: bd:fc:d0:fb:e9:11:21:8c:41:75:73:78:8e:42:37: ee:69:d6:be:b2:31:2b:79:41:b6:4f:9a:9c:08:92: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E0:C0:41:F0:6E:3E:5D:67:22:21:01:B1:0B:25:9D:2F:69:60:38 X509v3 Authority Key Identifier: keyid:42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DEA91CF8AA9C11F19F04260F3311F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.68.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:43:93:6c:f5:2b:d1:84:cf:d3:80:db:6d:38:ba:aa:2a:91: 09:a2:a9:90:50:27:bb:a1:55:e4:f2:df:8d:79:34:37:ca:9d: ee:c0:b2:a4:62:0d:ea:0d:e9:fc:d5:97:d1:99:6a:6f:33:20: 54:3f:71:39:b8:01:d6:3b:e0:22:46:27:f1:c2:f3:af:96:49: 5a:be:3d:40:8d:f2:88:2f:27:b8:7c:28:6d:32:71:3e:b2:ed: c3:90:ee:54:00:44:cf:d3:95:24:f9:fa:ab:dc:68:ce:c4:7b: a9:7a:bc:9a:6a:0f:eb:cf:10:25:ba:15:36:9c:82:1f:95:78: 51:61:d6:ba:7b:ee:bf:e1:37:57:56:66:68:02:58:07:0b:13: d1:40:0c:c0:7a:4a:7c:89:44:3d:28:dc:2d:da:91:7a:a2:39: 1f:1a:a1:ec:cd:c0:c1:c6:7e:ba:15:fd:14:19:8f:8b:f0:dd: 98:a2:44:02:70:27:3d:bd:0c:a9:d4:7a:8f:a7:8e:f2:fb:47: e6:3c:ca:40:75:df:c6:39:fb:9c:62:bb:98:26:03:29:fb:ba: 32:ed:ce:c3:6d:4e:53:de:7b:09:a0:cf:76:d0:b7:c2:8d:61: b4:0c:3c:d5:4c:0f:27:c5:6c:1d:b9:e8:fa:12:ab:23:79:c4: 5d:e2:69:60 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzgxODExMC8GA1UEBRMoNDI1QTY3OUY2QjlERURFMzFDNTM4MEYwODM3QkUwMjIz N0Q0Q0NCOTAeFw0yNjA5MDcwOTE2NTZaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOWU4MTA3LTg5M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRDbXo6tMQ5TQgu6CiCODU+XZrR+js5AnP12gbIzpWWg8roD9IURHHS15Yfyje uNhlrUNb43wvGp8VW3HI0AQaOlEVT5SKfk+FLxKaH0lUuFRP9bEF97z1T8s56n/I GsgWsIENQvlDpKwCrWmyAnNFrXkaT8Z7+4oU7RfA0XBlMmca0mGOuHncId+uu8j4 Qw+hYi83pvGiZVJ7b1+YkM5IIrmMRmRA8VhP7A2Q9riNa0BrhSgHT/hZn3lMfm0q 8dJlAUHaiM8MsCG8H1wGXCX6LWvtO2H6NHHV5jOeYXtT2L380PvpESGMQXVzeI5C N+5p1r6yMSt5QbZPmpwIkuUVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUS+DAQfBu Pl1nIiEBsQslnS9pYDgwHwYDVR0jBBgwFoAUQlpnn2ud7eMcU4Dwg3vgIjfUzLkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3ODE4LzdBNDg0QUI4QUE5 QzExRjFBM0Q3NERDRTMyMTFGOTcwL1FscG5uMnVkN2VNY1U0RHdnM3ZnSWpmVXpM ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWxwbm4ydWQ3ZU1jVTREd2czdmdJamZVekxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzgxOC83QTQ4NEFCOEFBOUMxMUYxQTNENzREQ0UzMjExRjk3MC9ERUE5MUNGOEFB OUMxMUYxOUYwNDI2MEYzMzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGjNEQwDQYJKoZIhvcNAQELBQADggEBABpDk2z1K9GEz9OA2204uqoq kQmiqZBQJ7uhVeTy3415NDfKne7AsqRiDeoN6fzVl9GZam8zIFQ/cTm4AdY74CJG J/HC86+WSVq+PUCN8ogvJ7h8KG0ycT6y7cOQ7lQARM/TlST5+qvcaM7Ee6l6vJpq D+vPECW6FTacgh+VeFFh1rp77r/hN1dWZmgCWAcLE9FADMB6SnyJRD0o3C3akXqi OR8aoezNwMHGfroV/RQZj4vw3ZiiRAJwJz29DKnUeo+njvL7R+Y8ykB138Y5+5xi u5gmAyn7ujLtzsNtTlPeewmgz3bQt8KNYbQMPNVMDyfFbB256PoSqyN5xF3iaWA= -----END CERTIFICATE-----Generated at Fri Sep 11 14:23:11 2026 by rpki-client