$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/485C422CA5FF11F08004B67CC4F9AE02.roa File: 485C422CA5FF11F08004B67CC4F9AE02.roa (raw, json) Hash identifier: XydHxRvO+DZnu1noJEcNd2CkT2aR/0Xo6Zf7EHDRHc4= Subject key identifier: EC:A9:DE:2D:1C:5F:60:C5:C0:78:38:13:C5:E8:36:11:8F:8E:AB:12 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: EF Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/485C422CA5FF11F08004B67CC4F9AE02.roa Signing time: Fri 16 Oct 2026 23:44:38 +0000 ROA not before: Fri 16 Oct 2026 23:44:38 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 19527 IP address blocks: 152.65.192.0/18 maxlen: 21 152.65.192.0/19 maxlen: 24 152.65.224.0/20 maxlen: 24 152.65.240.0/21 maxlen: 24 152.65.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 23:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Oct 16 23:44:38 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ad2b6e6-c561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:45:ea:99:b3:a9:1b:a8:39:1c:05:8d:da: ca:30:c0:fe:44:2a:5b:55:0a:90:1b:e9:2f:57:f9: 2a:34:bf:90:45:dd:12:89:86:b2:59:42:23:0f:0a: c5:fc:5a:70:41:1e:41:8a:9c:15:ee:f3:ce:68:f3: 32:45:d9:fa:79:60:22:e8:4e:9f:20:e5:c7:59:f4: 91:47:d0:7d:95:cf:a9:bd:86:25:78:70:6a:aa:15: c1:e1:48:2e:41:33:fc:9b:e6:ff:5e:84:cc:bd:36: 02:e8:ea:20:6e:e2:20:cf:a2:ba:a6:69:99:fb:bc: 24:6b:23:e4:78:23:a3:34:7d:be:ef:4f:0b:1d:ba: 18:83:6f:b6:af:df:20:77:4b:9d:4f:22:6a:1f:ef: 43:a1:40:11:a4:26:c8:65:fb:d2:94:f0:21:0e:f4: 65:5d:3e:3e:0b:36:8d:c3:c3:68:24:ad:3d:70:4b: 50:be:d7:25:f8:f9:06:d5:6a:09:27:b5:15:41:2f: 5d:ae:4e:25:d1:8f:96:c1:9f:31:b4:ea:ff:bc:da: 13:c8:5c:f1:bc:2f:e8:15:7e:78:7e:c5:f4:35:91: 0b:39:51:d1:48:37:14:2f:b8:af:72:9a:33:a4:2f: 36:25:71:1e:88:a0:5d:1c:5d:93:84:d5:aa:de:3d: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A9:DE:2D:1C:5F:60:C5:C0:78:38:13:C5:E8:36:11:8F:8E:AB:12 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/485C422CA5FF11F08004B67CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 Signature Algorithm: sha256WithRSAEncryption 58:47:06:dd:8b:7f:10:ef:49:ad:84:bf:de:84:d3:04:cd:ba: cd:6a:5d:fc:7a:53:22:c5:4f:49:38:2f:69:f8:a4:c7:4a:f1: ef:8e:ef:14:f7:42:2e:6b:e3:cd:3b:6c:48:6d:5a:d1:3a:0f: 64:d6:ef:62:a1:98:9e:01:ac:e3:16:72:31:e1:0f:03:17:1d: fd:4b:13:24:bd:08:79:09:af:9f:3c:4d:28:75:87:76:25:d3: 2e:98:5a:6d:05:3e:93:57:ff:ae:99:38:b8:2e:44:61:23:c0: e0:83:e8:d0:a7:b3:ce:d9:de:8e:47:5b:05:df:2c:18:e0:77: 21:77:cc:88:e7:a7:53:0b:a8:2e:c5:e9:6e:4d:d9:de:0d:6a: a6:f1:9f:4f:00:0c:d9:dd:c5:2c:66:d5:1b:31:40:dc:76:7c: fd:f5:89:78:f2:57:6e:c5:a6:5d:b8:7d:e3:59:de:38:1e:a0: bc:fe:96:bb:be:90:85:57:a1:46:c9:f0:ae:c4:89:b1:68:9d: 4c:48:be:ac:24:09:2b:15:d0:dd:ec:a3:eb:f9:14:be:cd:91: 4b:51:f0:e4:34:75:50:c5:38:d3:b3:e9:89:e5:6c:fe:70:7e: 91:0e:e3:d2:d5:36:ad:2d:51:e7:1b:f6:93:9a:e2:5b:58:a2: 21:ad:0a:95 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYxMDE2MjM0NDM4WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQyYjZlNi1jNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzs9F6pmzqRuoORwFjdrKMMD+RCpbVQqQG+kvV/kqNL+QRd0SiYayWUIjDwrF /FpwQR5BipwV7vPOaPMyRdn6eWAi6E6fIOXHWfSRR9B9lc+pvYYleHBqqhXB4Ugu QTP8m+b/XoTMvTYC6OogbuIgz6K6pmmZ+7wkayPkeCOjNH2+708LHboYg2+2r98g d0udTyJqH+9DoUARpCbIZfvSlPAhDvRlXT4+CzaNw8NoJK09cEtQvtcl+PkG1WoJ J7UVQS9drk4l0Y+WwZ8xtOr/vNoTyFzxvC/oFX54fsX0NZELOVHRSDcUL7ivcpoz pC82JXEeiKBdHF2ThNWq3j1i8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOyp3i0c X2DFwHg4E8XoNhGPjqsSMB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM0OTMvRTUyQzE0QzA5RkZBMTFGMEJBRDUwQjYxQzRGOUFFMDIvNDg1QzQyMkNB NUZGMTFGMDgwMDRCNjdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGmEHAMA0GCSqGSIb3DQEBCwUAA4IBAQBYRwbdi38Q70mthL/ehNME zbrNal38elMixU9JOC9p+KTHSvHvju8U90Iua+PNO2xIbVrROg9k1u9ioZieAazj FnIx4Q8DFx39SxMkvQh5Ca+fPE0odYd2JdMumFptBT6TV/+umTi4LkRhI8Dgg+jQ p7PO2d6OR1sF3ywY4Hchd8yI56dTC6guxeluTdneDWqm8Z9PAAzZ3cUsZtUbMUDc dnz99Yl48lduxaZduH3jWd44HqC8/pa7vpCFV6FGyfCuxImxaJ1MSL6sJAkrFdDd 7KPr+RS+zZFLUfDkNHVQxTjTs+mJ5Wz+cH6RDuPS1TatLVHnG/aTmuJbWKIhrQqV -----END CERTIFICATE-----Generated at Sat Oct 24 18:45:27 2026 by rpki-client