$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/8A3AFC32B83311F19FBB25854111F970.roa File: 8A3AFC32B83311F19FBB25854111F970.roa (raw, json) Hash identifier: ktAQN41mgFKNQWHnlocC2/vzmT/Q5Z1IyFik11yu49A= Subject key identifier: B6:27:32:C3:D2:57:B1:4F:9B:06:C1:75:18:08:F1:0F:77:AD:01:89 Certificate issuer: /CN=A91DE342/serialNumber=393ECEB1EDBDC6B16FF678254D9D3658FE62B7FD Certificate serial: 03 Authority key identifier: 39:3E:CE:B1:ED:BD:C6:B1:6F:F6:78:25:4D:9D:36:58:FE:62:B7:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OT7Ose29xrFv9nglTZ02WP5it_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/8A3AFC32B83311F19FBB25854111F970.roa Signing time: Thu 24 Sep 2026 16:18:13 +0000 ROA not before: Thu 24 Sep 2026 16:18:13 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 932 IP address blocks: 163.52.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.crl rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OT7Ose29xrFv9nglTZ02WP5it_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE342, serialNumber=393ECEB1EDBDC6B16FF678254D9D3658FE62B7FD Validity Not Before: Sep 24 16:18:13 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ab54d45-c863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3c:c3:c0:14:51:93:4f:d8:88:cd:60:9b:af: ea:22:47:d2:cb:b6:c9:b1:f5:2e:b9:22:93:9e:97: 0b:3e:93:16:2b:4d:fd:09:2e:88:ef:f4:30:d4:8f: 96:58:c1:7d:ca:87:c8:7d:6d:e9:3d:2b:9e:ba:ae: b0:ed:d7:59:84:d0:50:28:95:53:ad:73:df:62:9e: e0:88:e5:aa:37:60:e9:61:29:2e:67:92:d8:e9:43: 03:51:f0:6d:ea:39:51:52:a0:19:f0:16:0b:43:21: 33:ae:cf:af:c1:0a:d9:7f:63:ac:3e:bb:6c:64:2d: 92:e3:fc:77:92:40:ac:28:f8:4e:d7:27:f4:ec:16: 0d:9b:76:35:ce:e3:80:2d:09:69:05:9b:59:93:83: 2f:28:69:be:b9:26:c5:db:e3:29:5c:67:ac:0b:9c: 6c:3f:3d:e3:fe:8f:8b:0d:c6:98:02:bf:bf:38:89: 43:fb:d4:bf:45:1d:70:7e:82:53:8f:85:53:46:54: 0b:5f:89:43:55:e3:da:35:a6:ca:72:ab:8f:91:ea: 6a:82:22:56:0b:c7:85:3d:99:cf:49:aa:bb:44:5b: 39:a7:d4:c9:be:2b:de:b0:a0:2c:65:5d:89:d1:96: c1:e1:5a:90:20:db:48:46:58:0a:06:2d:81:47:8b: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:27:32:C3:D2:57:B1:4F:9B:06:C1:75:18:08:F1:0F:77:AD:01:89 X509v3 Authority Key Identifier: keyid:39:3E:CE:B1:ED:BD:C6:B1:6F:F6:78:25:4D:9D:36:58:FE:62:B7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/OT7Ose29xrFv9nglTZ02WP5it_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OT7Ose29xrFv9nglTZ02WP5it_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE342/101E2C80B83311F1B83FB2284111F970/8A3AFC32B83311F19FBB25854111F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.242.0/23 Signature Algorithm: sha256WithRSAEncryption 63:76:45:c2:83:33:fb:e4:ca:e3:bb:29:0b:2f:5a:d2:a3:fc: 93:fe:6c:7d:fe:40:17:3a:05:d0:df:57:0a:c7:53:47:bb:ba: 4d:1f:9f:98:6d:4e:25:78:50:0a:10:1f:b2:2f:eb:3e:ca:b2: 27:30:92:06:63:44:83:cc:9a:85:da:e8:20:f4:d8:fc:ab:4b: 43:bc:4c:1b:c0:2a:0b:64:33:12:b4:8c:5d:4d:29:dd:70:eb: 45:57:37:7e:9e:1b:97:1d:b6:87:31:fa:30:4d:01:d3:79:35: 23:26:e5:76:47:59:7a:99:46:3e:21:cc:ec:5b:21:e8:e0:e9: ae:8b:6b:be:58:63:eb:34:6f:e6:12:87:e3:3c:7b:cc:ce:a0: bc:ca:65:e9:60:7d:71:f4:77:cb:2b:0d:3a:7e:45:9f:8b:cd: d3:7c:47:26:07:5a:45:54:a6:0c:1e:2f:a4:a0:96:2f:cc:5e: 6c:1b:e4:49:8a:48:84:9e:b2:91:79:04:8f:6d:ec:2a:f3:29: f9:40:9e:cc:a7:4f:af:41:92:be:1a:00:0e:16:2a:a3:f0:75: 41:a7:bf:da:93:a0:8c:79:9e:3b:23:4e:5a:79:ad:62:e9:df: 9b:0b:fe:fa:3b:d1:a8:a1:1d:4f:6e:f3:1e:2e:3f:0c:0f:90: a0:56:d7:50 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTM0MjExMC8GA1UEBRMoMzkzRUNFQjFFREJEQzZCMTZGRjY3ODI1NEQ5RDM2NThG RTYyQjdGRDAeFw0yNjA5MjQxNjE4MTNaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYjU0ZDQ1LWM4NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrPMPAFFGTT9iIzWCbr+oiR9LLtsmx9S65IpOelws+kxYrTf0JLojv9DDUj5ZY wX3Kh8h9bek9K566rrDt11mE0FAolVOtc99inuCI5ao3YOlhKS5nktjpQwNR8G3q OVFSoBnwFgtDITOuz6/BCtl/Y6w+u2xkLZLj/HeSQKwo+E7XJ/TsFg2bdjXO44At CWkFm1mTgy8oab65JsXb4ylcZ6wLnGw/PeP+j4sNxpgCv784iUP71L9FHXB+glOP hVNGVAtfiUNV49o1pspyq4+R6mqCIlYLx4U9mc9JqrtEWzmn1Mm+K96woCxlXYnR lsHhWpAg20hGWAoGLYFHi7PBAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUticyw9JX sU+bBsF1GAjxD3etAYkwHwYDVR0jBBgwFoAUOT7Ose29xrFv9nglTZ02WP5it/0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzQyLzEwMUUyQzgwQjgz MzExRjFCODNGQjIyODQxMTFGOTcwL09UN09zZTI5eHJGdjluZ2xUWjAyV1A1aXRf MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1Q3T3NlMjl4ckZ2OW5nbFRaMDJXUDVpdF8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTM0Mi8xMDFFMkM4MEI4MzMxMUYxQjgzRkIyMjg0MTExRjk3MC84QTNBRkMzMkI4 MzMxMUYxOUZCQjI1ODU0MTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGjNPIwDQYJKoZIhvcNAQELBQADggEBAGN2RcKDM/vkyuO7KQsvWtKj /JP+bH3+QBc6BdDfVwrHU0e7uk0fn5htTiV4UAoQH7Iv6z7KsicwkgZjRIPMmoXa 6CD02PyrS0O8TBvAKgtkMxK0jF1NKd1w60VXN36eG5cdtocx+jBNAdN5NSMm5XZH WXqZRj4hzOxbIejg6a6La75YY+s0b+YSh+M8e8zOoLzKZelgfXH0d8srDTp+RZ+L zdN8RyYHWkVUpgweL6Sgli/MXmwb5EmKSISespF5BI9t7CrzKflAnsynT69Bkr4a AA4WKqPwdUGnv9qToIx5njsjTlp5rWLp35sL/vo70aihHU9u8x4uPwwPkKBW11A= -----END CERTIFICATE-----Generated at Thu Oct 8 12:31:42 2026 by rpki-client