$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DF68D5ACAA9C11F19F04260F3311F970.roa File: DF68D5ACAA9C11F19F04260F3311F970.roa (raw, json) Hash identifier: WPsEj0kc/u7fp3yWYz5NbDeFJGi70xZk5MXwb7AW1SU= Subject key identifier: CA:F8:BF:3B:EE:80:68:9C:69:6A:41:59:F0:07:C2:DC:38:3F:1C:7E Certificate issuer: /CN=A91D7818/serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9 Certificate serial: 05 Authority key identifier: 42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DF68D5ACAA9C11F19F04260F3311F970.roa Signing time: Mon 07 Sep 2026 09:16:56 +0000 ROA not before: Mon 07 Sep 2026 09:16:56 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 38193 IP address blocks: 163.52.68.0/24 maxlen: 24 163.52.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7818, serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9 Validity Not Before: Sep 7 09:16:56 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9e8108-79cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:e4:dd:58:4d:2c:6e:64:5c:be:b9:b3:c1: 9a:b1:a0:a6:4a:c3:f7:91:1c:82:32:1b:10:d7:2b: db:8d:1d:e3:73:cc:cd:1b:0a:b5:f4:c7:d0:fe:aa: 24:df:41:2b:b4:67:0b:c0:97:a0:eb:9d:45:e8:be: c4:c0:55:0e:fe:26:c9:c0:52:09:d2:6a:e8:13:4f: 43:c1:86:78:68:3d:1f:1e:c3:9a:a1:49:9e:47:bf: 1a:a4:a2:27:ff:86:e2:d3:2f:c0:17:b8:01:c8:74: b2:d3:fd:98:f3:86:2d:99:6a:50:c8:69:ad:0e:20: 96:95:fe:ab:e3:36:e7:e7:2c:ad:59:6c:10:76:e0: 0f:53:b2:d4:16:9b:02:92:af:02:f1:33:8f:06:2d: 82:c7:28:ba:a8:e0:cc:aa:c4:bd:21:c2:56:48:51: 81:78:45:54:0f:35:d7:c1:d5:a0:53:1c:d9:33:18: ef:25:5c:d1:c9:1d:39:21:86:fd:6f:1e:d5:ae:f6: e9:3d:92:fb:d9:f8:f4:6f:a2:fc:fa:1d:ba:2c:65: ed:3b:74:1e:93:e9:9d:d6:11:91:bb:80:a6:ad:67: 54:fc:f8:e9:8e:52:13:47:ad:f2:7a:b8:9e:22:2c: 39:ac:98:a6:0f:3a:96:01:66:bb:b8:50:b4:b6:9c: a8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F8:BF:3B:EE:80:68:9C:69:6A:41:59:F0:07:C2:DC:38:3F:1C:7E X509v3 Authority Key Identifier: keyid:42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DF68D5ACAA9C11F19F04260F3311F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.68.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:70:d8:09:97:58:26:fb:75:64:74:9a:08:73:9e:b3:ba:6d: 20:01:55:57:5d:70:93:7d:1e:de:6a:ab:c7:8a:3a:21:19:93: 45:f2:03:f7:63:01:ad:6c:5d:07:0c:7a:89:ba:95:f9:a2:f4: 10:41:11:ab:b0:c5:97:91:14:73:4f:6d:ed:72:6d:ac:d9:1a: 05:7b:ab:62:68:d3:70:46:77:b6:6b:95:e8:ac:6e:7d:9e:2d: 83:2b:41:7f:fd:fb:51:77:27:99:60:2d:2f:d9:cf:4a:94:f1: 5c:77:80:8a:b0:78:b1:4b:5a:c1:2e:5e:91:a7:db:5e:00:7a: 3e:ce:81:e4:b1:b8:bb:e4:27:89:a4:fd:c6:66:75:b3:6c:0b: 81:04:a9:d5:d0:7f:4d:d2:a0:f2:6e:21:19:4f:52:ab:5b:f6: 65:ea:d2:45:b9:93:7a:e1:67:b8:b8:48:c9:3d:2a:62:9a:22: a2:55:c0:21:55:9a:e7:ae:33:0e:ee:8c:ae:e0:cb:70:6d:93: d1:38:37:0e:f4:b5:dc:66:5e:2b:ae:ce:cb:c3:0b:02:89:f9: 20:c0:b8:54:e4:cc:53:6b:46:bd:ea:af:ac:24:09:c0:4f:6e: 22:d8:24:d2:72:03:8f:16:eb:e9:3d:84:af:e8:7a:de:33:81: 56:33:7b:1a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzgxODExMC8GA1UEBRMoNDI1QTY3OUY2QjlERURFMzFDNTM4MEYwODM3QkUwMjIz N0Q0Q0NCOTAeFw0yNjA5MDcwOTE2NTZaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOWU4MTA4LTc5Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIXuTdWE0sbmRcvrmzwZqxoKZKw/eRHIIyGxDXK9uNHeNzzM0bCrX0x9D+qiTf QSu0ZwvAl6DrnUXovsTAVQ7+JsnAUgnSaugTT0PBhnhoPR8ew5qhSZ5Hvxqkoif/ huLTL8AXuAHIdLLT/Zjzhi2ZalDIaa0OIJaV/qvjNufnLK1ZbBB24A9TstQWmwKS rwLxM48GLYLHKLqo4MyqxL0hwlZIUYF4RVQPNdfB1aBTHNkzGO8lXNHJHTkhhv1v HtWu9uk9kvvZ+PRvovz6HbosZe07dB6T6Z3WEZG7gKatZ1T8+OmOUhNHrfJ6uJ4i LDmsmKYPOpYBZru4ULS2nKhvAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUyvi/O+6A aJxpakFZ8AfC3Dg/HH4wHwYDVR0jBBgwFoAUQlpnn2ud7eMcU4Dwg3vgIjfUzLkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3ODE4LzdBNDg0QUI4QUE5 QzExRjFBM0Q3NERDRTMyMTFGOTcwL1FscG5uMnVkN2VNY1U0RHdnM3ZnSWpmVXpM ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWxwbm4ydWQ3ZU1jVTREd2czdmdJamZVekxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzgxOC83QTQ4NEFCOEFBOUMxMUYxQTNENzREQ0UzMjExRjk3MC9ERjY4RDVBQ0FB OUMxMUYxOUYwNDI2MEYzMzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGjNEQwDQYJKoZIhvcNAQELBQADggEBABpw2AmXWCb7dWR0mghznrO6 bSABVVddcJN9Ht5qq8eKOiEZk0XyA/djAa1sXQcMeom6lfmi9BBBEauwxZeRFHNP be1ybazZGgV7q2Jo03BGd7Zrleisbn2eLYMrQX/9+1F3J5lgLS/Zz0qU8Vx3gIqw eLFLWsEuXpGn214Aej7OgeSxuLvkJ4mk/cZmdbNsC4EEqdXQf03SoPJuIRlPUqtb 9mXq0kW5k3rhZ7i4SMk9KmKaIqJVwCFVmueuMw7ujK7gy3Btk9E4Nw70tdxmXiuu zsvDCwKJ+SDAuFTkzFNrRr3qr6wkCcBPbiLYJNJyA48W6+k9hK/oet4zgVYzexo= -----END CERTIFICATE-----Generated at Fri Sep 11 13:15:35 2026 by rpki-client