$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/47D5EEA2A5FF11F08004B67CC4F9AE02.roa File: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (raw, json) Hash identifier: E/Jje5jJPx3HsBr4rPdTqAGYzM44kZ/ZOpAN349E8LM= Subject key identifier: 1A:9B:1C:D2:63:56:FF:AC:8A:5D:37:6C:1F:26:5F:FD:02:C8:75:64 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: ED Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/47D5EEA2A5FF11F08004B67CC4F9AE02.roa Signing time: Fri 16 Oct 2026 23:44:34 +0000 ROA not before: Fri 16 Oct 2026 23:44:34 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 15169 IP address blocks: 152.65.192.0/18 maxlen: 22 152.65.192.0/19 maxlen: 24 152.65.224.0/20 maxlen: 24 152.65.240.0/21 maxlen: 24 152.65.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Oct 16 23:44:34 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ad2b6e2-d333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:80:88:82:cd:36:fc:b6:bc:bf:58:1a:60:28: 39:44:f3:85:d2:32:18:9a:99:9c:f6:29:49:5c:3d: 19:bd:bd:27:71:b1:29:b6:ac:21:53:ca:c5:95:8b: 89:b1:3b:d0:b0:2e:58:42:61:2d:9d:b3:f9:b9:09: 56:6e:e9:c0:64:36:9f:c8:56:3e:db:fa:a8:4f:bd: 8e:bb:79:a3:70:10:1c:05:4f:7d:c9:0c:7f:bb:b0: 4b:94:7b:69:83:61:3d:dc:2b:72:4f:b3:6e:db:57: 72:48:ec:05:21:66:7e:8a:39:d9:ff:9e:b7:89:c5: 54:4e:ce:35:03:0e:21:d5:6d:0e:97:66:14:67:7b: c9:18:cf:2e:2c:53:34:21:a1:dd:90:d6:b8:d6:ef: 6e:b2:04:8a:f1:fb:c9:86:ac:df:8f:33:a3:de:6b: c6:0f:9b:19:5b:70:fc:0f:4e:a8:b5:60:fa:10:85: aa:a9:6b:48:8d:26:1d:9b:8e:33:64:94:26:f7:4a: 4e:48:1e:0d:1a:de:b4:7d:aa:b5:f7:89:9e:e5:b8: af:df:05:61:b4:52:6a:b5:4b:e7:70:4a:63:8c:0b: ee:ca:7f:ee:c2:04:81:81:ae:c6:b9:fa:18:26:7c: 1d:e0:5d:ce:54:d3:89:e5:ab:38:1e:a7:84:fc:65: b7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9B:1C:D2:63:56:FF:AC:8A:5D:37:6C:1F:26:5F:FD:02:C8:75:64 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/47D5EEA2A5FF11F08004B67CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 Signature Algorithm: sha256WithRSAEncryption 6a:c6:e3:9d:38:69:17:0d:df:3d:39:7d:c2:06:c6:1f:62:f1: 6f:95:d2:82:fc:22:fe:2f:5a:f8:6c:9c:fc:9d:37:fd:f6:10: 2d:92:90:fb:f7:7c:7c:8a:3d:f6:e1:58:ed:12:98:f7:ce:32: 97:c0:2b:b1:4d:8c:c7:22:d8:18:40:e0:e0:9c:e1:9e:81:54: 32:fd:e9:99:e5:4f:35:26:b7:1a:70:5a:36:e2:2d:76:d4:98: af:8b:f4:e6:03:39:b1:6a:98:f9:8b:0c:34:fa:49:62:b3:5e: 50:f8:94:06:ec:30:90:c2:97:e6:24:ec:08:dc:19:8a:85:2d: cc:d5:87:e7:56:d1:8d:e9:52:60:31:ad:5e:76:d1:5c:91:32: bd:b3:3d:0d:65:43:7a:08:ef:81:0a:d7:ae:fb:41:3c:2e:2c: 98:23:95:9a:a8:80:b3:34:dd:7f:0b:2d:49:98:93:d1:b5:f6: 87:3f:6b:d5:69:61:d8:5e:79:26:5b:9d:ca:30:62:60:6d:d0: 84:08:b3:c2:eb:7e:0f:63:c3:b3:c6:14:31:90:f6:92:9d:85: 7b:96:35:48:09:d9:48:b6:f6:f7:ce:71:85:b5:27:a1:b4:2f: dd:5b:0a:c6:47:ce:1f:c2:72:19:73:26:71:cc:65:a2:16:7b: 6c:98:aa:cd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYxMDE2MjM0NDM0WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQyYjZlMi1kMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54CIgs02/La8v1gaYCg5RPOF0jIYmpmc9ilJXD0Zvb0ncbEptqwhU8rFlYuJ sTvQsC5YQmEtnbP5uQlWbunAZDafyFY+2/qoT72Ou3mjcBAcBU99yQx/u7BLlHtp g2E93CtyT7Nu21dySOwFIWZ+ijnZ/563icVUTs41Aw4h1W0Ol2YUZ3vJGM8uLFM0 IaHdkNa41u9usgSK8fvJhqzfjzOj3mvGD5sZW3D8D06otWD6EIWqqWtIjSYdm44z ZJQm90pOSB4NGt60faq194me5biv3wVhtFJqtUvncEpjjAvuyn/uwgSBga7GufoY Jnwd4F3OVNOJ5as4HqeE/GW39QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBqbHNJj Vv+sil03bB8mX/0CyHVkMB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM0OTMvRTUyQzE0QzA5RkZBMTFGMEJBRDUwQjYxQzRGOUFFMDIvNDdENUVFQTJB NUZGMTFGMDgwMDRCNjdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGmEHAMA0GCSqGSIb3DQEBCwUAA4IBAQBqxuOdOGkXDd89OX3CBsYf YvFvldKC/CL+L1r4bJz8nTf99hAtkpD793x8ij324VjtEpj3zjKXwCuxTYzHItgY QODgnOGegVQy/emZ5U81JrcacFo24i121Jivi/TmAzmxapj5iww0+klis15Q+JQG 7DCQwpfmJOwI3BmKhS3M1YfnVtGN6VJgMa1edtFckTK9sz0NZUN6CO+BCteu+0E8 LiyYI5WaqICzNN1/Cy1JmJPRtfaHP2vVaWHYXnkmW53KMGJgbdCECLPC634PY8Oz xhQxkPaSnYV7ljVICdlItvb3znGFtSehtC/dWwrGR84fwnIZcyZxzGWiFntsmKrN -----END CERTIFICATE-----Generated at Mon Oct 26 22:59:35 2026 by rpki-client