$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/8958E54AB83311F19FBB25854111F970.roa File: 8958E54AB83311F19FBB25854111F970.roa (raw, json) Hash identifier: vJq2xq6zU+p2TfduXb6SjK2hMQkrC4+48H+OODGeDos= Subject key identifier: 8C:39:23:E7:F0:15:48:A7:3E:7F:FE:D4:53:54:EE:08:5D:8A:1C:D9 Certificate issuer: /CN=A91DE342/serialNumber=393ECEB1EDBDC6B16FF678254D9D3658FE62B7FD Certificate serial: 02 Authority key identifier: 39:3E:CE:B1:ED:BD:C6:B1:6F:F6:78:25:4D:9D:36:58:FE:62:B7:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OT7Ose29xrFv9nglTZ02WP5it_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/8958E54AB83311F19FBB25854111F970.roa Signing time: Thu 24 Sep 2026 16:18:12 +0000 ROA not before: Thu 24 Sep 2026 16:18:11 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 42960 IP address blocks: 163.52.242.0/24 maxlen: 24 163.52.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.crl rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OT7Ose29xrFv9nglTZ02WP5it_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE342, serialNumber=393ECEB1EDBDC6B16FF678254D9D3658FE62B7FD Validity Not Before: Sep 24 16:18:11 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ab54d43-7dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:35:32:a9:bb:d8:bd:77:e5:73:5c:97:6d:2d: 78:95:8f:9a:9a:6c:47:08:e7:34:ba:e5:73:67:78: fa:80:86:f7:df:d3:bc:b2:21:de:1c:de:4d:b1:b4: 0f:74:13:25:bd:94:18:49:81:1b:e3:e6:56:4e:a7: d2:48:cc:35:24:4f:cf:dd:c8:0d:18:7f:84:c7:cf: 97:9b:02:e2:bd:dc:10:2c:0b:75:89:a9:58:4b:36: 2b:ad:9e:54:69:29:52:fd:67:0b:b2:b5:7a:d2:99: 4e:7d:10:cd:8e:50:aa:fd:c3:ad:c2:c8:e5:8b:88: e7:a7:52:00:7c:0a:30:35:be:8b:30:00:ec:29:73: 89:56:f1:02:fc:77:27:c7:49:7a:9d:f2:81:f5:bd: 04:30:f5:06:f2:1a:18:9b:be:e3:d6:ab:8f:6b:e2: a2:32:57:3a:ae:28:2b:76:12:cc:bb:45:f5:6f:12: fa:ad:ea:30:3d:45:47:eb:20:26:f8:e7:6b:60:9a: ac:47:f7:dd:b4:85:6a:39:2c:42:d7:7d:12:44:c1: 8c:80:16:d4:74:e6:65:31:c9:90:6c:10:fc:b2:ee: bb:fc:70:e5:83:0a:ce:08:45:1c:82:c1:35:97:b8: d7:59:49:1b:13:37:98:48:31:8d:b7:9e:cb:6d:c3: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:39:23:E7:F0:15:48:A7:3E:7F:FE:D4:53:54:EE:08:5D:8A:1C:D9 X509v3 Authority Key Identifier: keyid:39:3E:CE:B1:ED:BD:C6:B1:6F:F6:78:25:4D:9D:36:58:FE:62:B7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OT7Ose29xrFv9nglTZ02WP5it_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/8958E54AB83311F19FBB25854111F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.242.0/23 Signature Algorithm: sha256WithRSAEncryption db:54:1b:d3:25:74:89:9f:4f:9c:f5:10:66:63:97:5d:ce:06: 3d:00:49:f1:fa:cc:98:4c:3c:3c:07:96:3c:ac:45:07:63:96: aa:1f:38:1f:7c:42:c6:6b:b4:74:23:20:3e:bb:ef:38:55:a6: 8c:eb:6b:e0:49:9e:de:35:0a:86:8d:5a:a9:79:08:48:0d:90: ee:d4:a9:f6:a2:5c:9e:53:5a:d9:f2:ae:45:be:27:dd:aa:88: 07:86:72:84:e5:56:87:be:58:3a:ba:0c:cd:a9:bb:a4:91:dc: 47:0f:91:55:d7:64:f8:97:1e:fc:f2:1a:b2:64:fa:c4:45:31: 8e:8c:0b:9f:51:bb:c2:1d:fc:38:cf:fd:71:ad:43:ea:a7:62: 8a:45:74:4f:01:ef:87:5b:f8:36:b9:d7:6a:55:65:c5:01:f8: 41:dd:dc:b1:73:28:5f:55:45:b4:3f:7f:75:6e:bc:19:63:1e: 4f:ab:38:06:89:0b:50:8e:0d:09:fb:49:0c:97:67:b1:4b:81: 9a:5b:75:d4:45:ed:b0:af:7e:a5:fc:5e:87:2a:89:92:99:28: b6:0c:db:63:dd:04:4e:03:b1:57:ed:f1:79:df:2c:91:f5:bc: 0a:e4:5d:d2:78:e3:36:28:04:6b:43:54:c2:61:7b:f1:09:fb: 3e:20:06:d7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTM0MjExMC8GA1UEBRMoMzkzRUNFQjFFREJEQzZCMTZGRjY3ODI1NEQ5RDM2NThG RTYyQjdGRDAeFw0yNjA5MjQxNjE4MTFaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYjU0ZDQzLTdkY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYNTKpu9i9d+VzXJdtLXiVj5qabEcI5zS65XNnePqAhvff07yyId4c3k2xtA90 EyW9lBhJgRvj5lZOp9JIzDUkT8/dyA0Yf4THz5ebAuK93BAsC3WJqVhLNiutnlRp KVL9ZwuytXrSmU59EM2OUKr9w63CyOWLiOenUgB8CjA1voswAOwpc4lW8QL8dyfH SXqd8oH1vQQw9QbyGhibvuPWq49r4qIyVzquKCt2Esy7RfVvEvqt6jA9RUfrICb4 52tgmqxH9920hWo5LELXfRJEwYyAFtR05mUxyZBsEPyy7rv8cOWDCs4IRRyCwTWX uNdZSRsTN5hIMY23nsttw55vAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUjDkj5/AV SKc+f/7UU1TuCF2KHNkwHwYDVR0jBBgwFoAUOT7Ose29xrFv9nglTZ02WP5it/0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzQyLzEwMUUyQzgwQjgz MzExRjFCODNGQjIyODQxMTFGOTcwL09UN09zZTI5eHJGdjluZ2xUWjAyV1A1aXRf MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1Q3T3NlMjl4ckZ2OW5nbFRaMDJXUDVpdF8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTM0Mi8xMDFFMkM4MEI4MzMxMUYxQjgzRkIyMjg0MTExRjk3MC84OTU4RTU0QUI4 MzMxMUYxOUZCQjI1ODU0MTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGjNPIwDQYJKoZIhvcNAQELBQADggEBANtUG9MldImfT5z1EGZjl13O Bj0ASfH6zJhMPDwHljysRQdjlqofOB98QsZrtHQjID677zhVpozra+BJnt41CoaN Wql5CEgNkO7UqfaiXJ5TWtnyrkW+J92qiAeGcoTlVoe+WDq6DM2pu6SR3EcPkVXX ZPiXHvzyGrJk+sRFMY6MC59Ru8Id/DjP/XGtQ+qnYopFdE8B74db+Da512pVZcUB +EHd3LFzKF9VRbQ/f3VuvBljHk+rOAaJC1CODQn7SQyXZ7FLgZpbddRF7bCvfqX8 XocqiZKZKLYM22PdBE4DsVft8XnfLJH1vArkXdJ44zYoBGtDVMJhe/EJ+z4gBtc= -----END CERTIFICATE-----Generated at Thu Oct 8 12:31:36 2026 by rpki-client