$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa File: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (raw, json) Hash identifier: UHoZmq0paQ48NlRRluqfsVDQh3Q2DcM666YtqeY10Y8= Subject key identifier: D0:7B:05:35:E4:24:46:DE:39:32:64:68:F9:34:E7:AC:D0:CA:F3:B3 Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 07AD Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa Signing time: Sat 26 Sep 2026 20:40:55 +0000 ROA not before: Sat 26 Sep 2026 20:40:55 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 17439 IP address blocks: 217.18.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 20:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Sep 26 20:40:55 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ab82dd7-b6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:a0:ee:78:a3:92:a3:44:d8:52:a0:26:ed: 9a:6a:05:21:c2:c2:95:86:5d:af:fb:a4:21:32:32: 67:42:9b:61:c4:62:2a:8b:c6:ee:34:ae:d0:c7:53: d2:33:33:e8:38:8f:d0:02:37:f2:b1:fd:1c:5c:a2: 06:0a:b4:92:ca:19:23:dc:d2:67:db:c3:76:5b:9e: da:f2:2f:8c:87:ed:fb:09:dc:03:b6:b9:97:da:94: 59:d7:44:8f:37:3a:94:c7:39:63:97:fa:c5:f7:ed: ea:f2:b3:e0:03:be:7c:cd:cf:91:51:99:18:92:07: 28:91:7f:32:6e:e4:ed:68:97:a7:0f:10:a8:3d:98: 5e:fe:1b:b5:81:98:7a:51:f8:55:15:88:4c:e2:b7: a4:8c:3c:ee:58:f8:be:ff:d6:0c:dd:c8:af:31:84: a2:19:f1:f6:a4:23:90:78:21:c8:95:1f:40:ae:35: 60:94:fc:48:8f:a5:01:d0:77:93:fb:29:5b:e0:41: 71:60:ba:b4:82:06:52:35:95:8b:34:31:cb:99:ad: b3:87:e7:36:b5:36:d4:cd:50:ab:f3:e1:dc:02:f9: 7d:92:b6:25:29:a2:03:78:32:00:af:55:92:d3:fd: 8e:3e:cd:6e:95:b6:00:47:93:29:61:75:a4:12:f5: e3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7B:05:35:E4:24:46:DE:39:32:64:68:F9:34:E7:AC:D0:CA:F3:B3 X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 217.18.52.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:10:cb:c4:e9:2d:92:0b:26:e3:16:de:bb:35:dc:5e:99:98: 21:6a:6a:74:4a:70:5d:ed:ef:f2:88:8c:bf:ae:7b:16:af:9e: 4a:90:0b:8a:cd:fb:d0:29:36:33:e0:b8:85:c1:ba:6d:91:1c: 6a:ef:df:da:d8:6c:26:64:fd:3c:5f:94:51:51:c7:dc:9c:cc: e6:b3:c6:a6:94:92:ec:94:32:eb:f5:45:f9:3f:b7:19:90:9a: 05:ca:10:9a:79:1b:41:0f:56:43:54:f0:68:b4:2a:81:d1:17: 73:3b:b2:e1:b0:1d:ff:be:ef:65:30:29:fe:4f:48:b9:d4:8c: ad:bc:61:d4:ca:ce:29:b8:56:31:59:08:36:c3:ca:6c:fc:71: f8:13:e2:5f:b2:da:c9:e5:e9:a2:03:f9:90:fc:b0:05:39:09: c4:70:31:80:3a:d5:65:43:b3:9a:c9:01:65:e1:82:ca:c7:71: 45:0c:cc:de:9e:70:c7:46:71:83:54:88:5f:83:be:a7:da:3c: 9e:a4:41:e7:be:1b:18:ad:ac:29:aa:d2:a2:0e:3d:2b:a2:00: eb:8b:ab:49:74:b5:f2:4b:8f:2d:ec:32:59:da:88:f4:15:b0: 9f:49:2c:af:00:ca:8c:1d:65:19:87:46:c2:ac:86:a7:4e:5c: a0:4f:8d:d9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjYwOTI2MjA0MDU1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI4MmRkNy1iNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEqg7nijkqNE2FKgJu2aagUhwsKVhl2v+6QhMjJnQpthxGIqi8buNK7Qx1PS MzPoOI/QAjfysf0cXKIGCrSSyhkj3NJn28N2W57a8i+Mh+37CdwDtrmX2pRZ10SP NzqUxzljl/rF9+3q8rPgA758zc+RUZkYkgcokX8ybuTtaJenDxCoPZhe/hu1gZh6 UfhVFYhM4rekjDzuWPi+/9YM3civMYSiGfH2pCOQeCHIlR9ArjVglPxIj6UB0HeT +ylb4EFxYLq0ggZSNZWLNDHLma2zh+c2tTbUzVCr8+HcAvl9krYlKaIDeDIAr1WS 0/2OPs1ulbYAR5MpYXWkEvXjKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNB7BTXk JEbeOTJkaPk056zQyvOzMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDQjYvNkU5QUM4MDY3MUQ4MTFFQjgwNDc3MjFEQzRGOUFFMDIvNDhENjVCQzJE MjhGMTFFQjlGODM2ODNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC2RI0MA0GCSqGSIb3DQEBCwUAA4IBAQBvEMvE6S2SCybjFt67Ndxe mZghamp0SnBd7e/yiIy/rnsWr55KkAuKzfvQKTYz4LiFwbptkRxq79/a2GwmZP08 X5RRUcfcnMzms8amlJLslDLr9UX5P7cZkJoFyhCaeRtBD1ZDVPBotCqB0RdzO7Lh sB3/vu9lMCn+T0i51IytvGHUys4puFYxWQg2w8ps/HH4E+JfstrJ5emiA/mQ/LAF OQnEcDGAOtVlQ7OayQFl4YLKx3FFDMzennDHRnGDVIhfg76n2jyepEHnvhsYrawp qtKiDj0rogDri6tJdLXyS48t7DJZ2oj0FbCfSSyvAMqMHWUZh0bCrIanTlygT43Z -----END CERTIFICATE-----Generated at Wed Oct 21 18:19:10 2026 by rpki-client