$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/3D85F9E653BB11F19AC0B954B9833773.roa File: 3D85F9E653BB11F19AC0B954B9833773.roa (raw, json) Hash identifier: kXyzSAEuWraJGLeRl8Ev4HWfqkONz/RaOPivNONbhAA= Subject key identifier: CC:DF:84:B6:F7:77:8F:4F:7B:33:EC:53:48:DA:61:DB:E9:A8:7F:CC Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 98 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/3D85F9E653BB11F19AC0B954B9833773.roa Signing time: Tue 19 May 2026 19:45:08 +0000 ROA not before: Tue 19 May 2026 19:45:08 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 43515 IP address blocks: 152.65.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 00:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: May 19 19:45:08 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a0cbdc4-5467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:de:93:c6:90:6c:b9:08:ce:c0:8a:0f:22: 1c:ed:f0:83:71:41:f9:65:b6:b2:59:58:be:15:e2: 75:22:13:33:83:24:53:4d:f5:e4:4d:46:75:b1:fa: c1:9e:5f:9d:19:ce:cc:3b:62:ed:1d:79:1a:45:83: 96:f2:2e:60:df:81:5e:ea:43:e8:fe:a0:9b:69:b9: fd:18:1e:ef:16:0d:e5:ba:bd:b2:dc:63:bc:f5:c4: 86:9d:79:23:6f:85:62:60:0c:e0:0a:1d:a1:24:c9: 72:ff:d1:8d:3d:1e:a6:5c:1f:c7:73:db:2f:56:9f: 5d:8a:e8:79:48:3e:36:0f:0d:60:f3:33:7f:c7:a4: 34:54:52:5f:48:0d:d2:ff:82:d3:36:cb:13:cd:f5: 0a:66:33:06:50:00:fd:5f:11:f5:4c:9e:a4:88:49: 83:8c:25:aa:9d:0e:85:d1:7b:d1:e9:45:b0:cb:11: a8:79:f6:fa:fe:35:87:a9:f9:e8:8d:b8:75:62:91: b1:b8:a9:7f:f8:27:44:c7:81:4f:e2:2d:11:11:30: 0c:5e:4d:2b:6b:02:29:70:8f:de:a0:e0:b9:e3:ce: d9:bc:a1:61:8f:90:e3:e5:9c:75:f0:de:87:64:8e: 2d:91:e9:aa:c1:e0:cb:47:57:03:ad:3c:37:7d:fe: d2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DF:84:B6:F7:77:8F:4F:7B:33:EC:53:48:DA:61:DB:E9:A8:7F:CC X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/3D85F9E653BB11F19AC0B954B9833773.roa sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 Signature Algorithm: sha256WithRSAEncryption 27:45:0f:e7:03:43:07:98:b3:5e:7e:de:1d:4f:c6:1f:ef:5e: 73:72:b7:10:fc:1a:5f:d6:5f:ae:40:4e:ad:db:5f:8e:67:6d: 1a:9b:93:60:2f:23:7b:85:1c:15:43:df:75:b6:c6:7d:e7:a1: 68:6d:05:b3:16:04:06:0d:04:a2:2f:ac:49:3f:90:57:02:61: 0f:d0:f9:2d:2e:da:24:bc:1c:70:a8:30:f1:36:12:f4:7f:5c: 65:c1:7d:2a:6c:b3:c8:02:62:7e:82:e2:4d:fb:b9:70:7a:b5: de:79:13:20:f8:5b:9e:71:70:e6:41:02:b4:9b:41:c5:6a:8d: a8:e2:7d:a6:dc:fe:53:ac:2b:42:95:bd:28:6a:eb:58:67:2d: 96:80:21:20:98:2d:be:30:ab:02:79:f5:c1:c1:28:86:56:45: f1:54:4d:ce:12:4e:24:bd:a0:60:69:b3:67:fb:58:4b:3d:17: b1:6e:aa:f3:4d:2c:37:59:51:9a:90:8e:d5:e6:d4:fd:4c:6f: 68:a0:17:85:c2:58:c1:60:96:81:0f:53:72:92:88:b7:f0:af: 58:28:94:7f:d5:9a:5f:5e:d5:ee:b2:72:98:2d:41:ba:b0:ec: 78:38:4f:88:b0:38:e5:0f:87:f0:74:94:0b:e7:4d:20:02:b1: ef:22:1d:2a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYwNTE5MTk0NTA4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBjYmRjNC01NDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2nek8aQbLkIzsCKDyIc7fCDcUH5ZbayWVi+FeJ1IhMzgyRTTfXkTUZ1sfrB nl+dGc7MO2LtHXkaRYOW8i5g34Fe6kPo/qCbabn9GB7vFg3lur2y3GO89cSGnXkj b4ViYAzgCh2hJMly/9GNPR6mXB/Hc9svVp9diuh5SD42Dw1g8zN/x6Q0VFJfSA3S /4LTNssTzfUKZjMGUAD9XxH1TJ6kiEmDjCWqnQ6F0XvR6UWwyxGoefb6/jWHqfno jbh1YpGxuKl/+CdEx4FP4i0RETAMXk0rawIpcI/eoOC5487ZvKFhj5Dj5Zx18N6H ZI4tkemqweDLR1cDrTw3ff7S7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMzfhLb3 d49PezPsU0jaYdvpqH/MMB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM0OTMvRTUyQzE0QzA5RkZBMTFGMEJBRDUwQjYxQzRGOUFFMDIvM0Q4NUY5RTY1 M0JCMTFGMTlBQzBCOTU0Qjk4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGmEHAMA0GCSqGSIb3DQEBCwUAA4IBAQAnRQ/nA0MHmLNeft4dT8Yf 715zcrcQ/Bpf1l+uQE6t21+OZ20am5NgLyN7hRwVQ991tsZ956FobQWzFgQGDQSi L6xJP5BXAmEP0PktLtokvBxwqDDxNhL0f1xlwX0qbLPIAmJ+guJN+7lwerXeeRMg +FuecXDmQQK0m0HFao2o4n2m3P5TrCtClb0oautYZy2WgCEgmC2+MKsCefXBwSiG VkXxVE3OEk4kvaBgabNn+1hLPRexbqrzTSw3WVGakI7V5tT9TG9ooBeFwljBYJaB D1Nykoi38K9YKJR/1ZpfXtXusnKYLUG6sOx4OE+IsDjlD4fwdJQL500gArHvIh0q -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:16 2026 by rpki-client