$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/3D85F9E653BB11F19AC0B954B9833773.roa File: 3D85F9E653BB11F19AC0B954B9833773.roa (raw, json) Hash identifier: U51mlMalJmZBrqYY1BoCbXpfjv9sa1XXUb3od6K2Xgo= Subject key identifier: FF:A7:3D:16:32:1F:AA:8A:08:90:12:88:4B:AC:78:D3:9F:55:E6:B6 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: F1 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/3D85F9E653BB11F19AC0B954B9833773.roa Signing time: Fri 16 Oct 2026 23:44:42 +0000 ROA not before: Fri 16 Oct 2026 23:44:42 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 43515 IP address blocks: 152.65.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Oct 16 23:44:42 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ad2b6ea-8861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d7:69:e3:42:e4:48:68:ed:c5:e5:c4:2f:4e: 16:49:73:c2:d1:6a:8d:05:b3:49:f0:59:31:69:48: 7c:13:63:de:1e:21:eb:38:2a:bb:bb:3a:b1:f6:87: 40:bd:5a:cf:3f:36:a0:b2:18:0e:16:d4:cf:3f:73: 73:11:18:32:86:22:03:74:d6:54:a7:80:7d:16:e6: e2:a2:cd:15:c2:06:88:e0:0b:f6:ad:4c:c3:84:ff: 3d:ea:fb:98:9e:3e:76:37:29:f8:b6:ec:84:af:b4: f9:e6:fa:bc:fb:53:be:b7:c9:d6:6a:47:3a:5a:10: 75:5b:92:13:6b:d9:7a:25:b8:20:49:d4:70:b3:f4: 62:b2:0f:d6:27:6f:e0:fd:0b:1e:c0:c0:a4:16:61: 95:f5:f7:ad:c3:98:78:b2:f2:a3:54:c0:85:7a:7e: ea:e8:15:6f:2f:f0:8f:3a:b9:ea:a0:82:fa:d2:47: 24:e7:d3:e9:fb:87:d4:63:78:10:83:b0:f7:03:5f: ec:f3:46:c6:3d:f8:59:4f:d2:12:36:40:5d:0a:17: 1c:47:49:d7:d7:68:39:26:5b:5b:82:84:57:2f:51: 06:20:6e:3c:cc:81:52:75:a8:52:c3:bb:45:81:36: d9:a1:5b:3f:84:34:f9:d0:b0:5c:c1:f3:7a:4b:3c: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A7:3D:16:32:1F:AA:8A:08:90:12:88:4B:AC:78:D3:9F:55:E6:B6 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/3D85F9E653BB11F19AC0B954B9833773.roa sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 Signature Algorithm: sha256WithRSAEncryption 64:a5:ea:85:44:51:21:fb:bb:60:73:1b:98:52:9b:fd:b3:e5: 9d:f9:3b:af:c8:ac:db:8e:81:00:9c:01:27:4a:45:6b:17:d9: 4a:0e:b8:58:90:d1:cb:d8:da:4a:04:59:45:f2:be:c3:c1:b7: 79:f9:d5:25:b8:c6:97:c5:32:3b:d2:c5:23:d2:eb:c8:f2:8b: 0a:8e:29:fa:7d:02:46:a5:b2:14:04:21:ef:fc:25:78:17:6f: 90:e7:44:9e:67:4c:49:80:50:ee:a5:1e:1b:ca:3b:c4:2a:99: 89:1b:54:e4:53:87:9e:15:8a:3b:a9:3d:e3:79:45:c1:e0:00: b6:a6:88:21:cc:a3:4e:95:38:17:93:26:ce:b7:4e:be:3e:d1: 27:09:0d:a7:b4:6c:19:6d:79:97:f3:ff:89:f8:7e:3b:59:cc: 47:01:55:a9:5e:dc:ee:7c:5e:cd:ad:4c:29:fb:02:3a:02:5e: 09:eb:dc:f9:ea:2c:bf:01:3a:32:b4:c5:e5:85:e2:32:57:6d: b5:4d:e0:74:53:76:24:f7:40:c6:58:6d:46:5c:b1:a8:58:c4: 27:92:e0:1c:80:48:d0:78:a4:8c:ca:6a:2c:f8:f8:97:d0:09: a6:4f:26:f8:af:e8:92:9d:f5:5e:eb:6d:42:e9:9e:ad:6a:04: 29:45:95:d5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYxMDE2MjM0NDQyWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQyYjZlYS04ODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ndp40LkSGjtxeXEL04WSXPC0WqNBbNJ8FkxaUh8E2PeHiHrOCq7uzqx9odA vVrPPzagshgOFtTPP3NzERgyhiIDdNZUp4B9Fubios0VwgaI4Av2rUzDhP896vuY nj52Nyn4tuyEr7T55vq8+1O+t8nWakc6WhB1W5ITa9l6JbggSdRws/Risg/WJ2/g /QsewMCkFmGV9fetw5h4svKjVMCFen7q6BVvL/CPOrnqoIL60kck59Pp+4fUY3gQ g7D3A1/s80bGPfhZT9ISNkBdChccR0nX12g5JltbgoRXL1EGIG48zIFSdahSw7tF gTbZoVs/hDT50LBcwfN6Szz2pQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP+nPRYy H6qKCJASiEuseNOfVea2MB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM0OTMvRTUyQzE0QzA5RkZBMTFGMEJBRDUwQjYxQzRGOUFFMDIvM0Q4NUY5RTY1 M0JCMTFGMTlBQzBCOTU0Qjk4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGmEHAMA0GCSqGSIb3DQEBCwUAA4IBAQBkpeqFRFEh+7tgcxuYUpv9 s+Wd+TuvyKzbjoEAnAEnSkVrF9lKDrhYkNHL2NpKBFlF8r7Dwbd5+dUluMaXxTI7 0sUj0uvI8osKjin6fQJGpbIUBCHv/CV4F2+Q50SeZ0xJgFDupR4byjvEKpmJG1Tk U4eeFYo7qT3jeUXB4AC2poghzKNOlTgXkybOt06+PtEnCQ2ntGwZbXmX8/+J+H47 WcxHAVWpXtzufF7NrUwp+wI6Al4J69z56iy/AToytMXlheIyV221TeB0U3Yk90DG WG1GXLGoWMQnkuAcgEjQeKSMymos+PiX0AmmTyb4r+iSnfVe621C6Z6tagQpRZXV -----END CERTIFICATE-----Generated at Tue Oct 27 17:43:44 2026 by rpki-client