$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/48DA881CA5FF11F08004B67CC4F9AE02.roa File: 48DA881CA5FF11F08004B67CC4F9AE02.roa (raw, json) Hash identifier: tF+L5ozw6GVJsQCQ97D7LBOsSW8qcFqBg2pzc4w+7b0= Subject key identifier: 3E:E8:10:79:40:1A:D3:11:1A:E8:AB:87:3B:41:DB:DA:59:70:2E:62 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: F0 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/48DA881CA5FF11F08004B67CC4F9AE02.roa Signing time: Fri 16 Oct 2026 23:44:40 +0000 ROA not before: Fri 16 Oct 2026 23:44:40 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 396982 IP address blocks: 152.65.192.0/18 maxlen: 21 152.65.192.0/19 maxlen: 24 152.65.224.0/20 maxlen: 24 152.65.240.0/21 maxlen: 24 152.65.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 23:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Oct 16 23:44:40 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ad2b6e8-db69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:11:1e:b8:8a:0f:27:65:cf:df:54:0a:23: 43:c2:c3:fa:5a:46:2d:69:82:e6:c5:7c:8b:d6:77: 0b:d9:4b:7b:9e:f5:c9:8e:c5:a0:b4:13:9b:18:88: 53:6c:aa:e2:5f:9d:b8:b5:1a:e0:77:59:b6:99:99: 30:d3:96:44:0a:e9:56:d8:e3:33:4c:ff:5d:0b:1b: fb:20:b7:15:7e:29:0e:64:5f:2f:1c:23:5c:45:b6: a0:d6:e5:bd:db:c2:5f:ab:80:0b:b5:e1:f2:da:ed: b9:22:51:9b:e2:ef:86:be:f3:37:ad:a8:b6:2f:05: 0b:42:6f:87:8b:65:08:ce:57:04:b5:7b:2d:d9:ca: 81:f4:34:95:74:fb:a5:c7:29:b8:6e:db:a9:d2:12: 22:56:c3:c7:d2:7a:6a:91:3c:2d:65:66:d8:18:19: 83:4f:ee:5c:55:a2:4c:aa:98:60:d8:12:f8:45:8a: 84:9a:2c:ef:fe:c4:07:e0:f3:4c:c1:65:70:2c:34: 4f:a9:de:69:7c:14:7e:a8:51:e9:d6:eb:a3:cb:90: dd:4f:a2:2a:ce:4e:cc:ae:41:9f:f7:e6:bf:f1:b6: 14:0b:8b:83:f8:37:bb:47:7f:ea:4b:be:a8:eb:89: e2:ca:3a:d6:7d:3b:91:39:2f:b3:72:5e:80:49:ec: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:10:79:40:1A:D3:11:1A:E8:AB:87:3B:41:DB:DA:59:70:2E:62 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/48DA881CA5FF11F08004B67CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 Signature Algorithm: sha256WithRSAEncryption 97:96:09:e2:c5:5d:d0:cc:53:c5:84:40:06:09:e8:7a:01:c7: 7f:25:7b:fb:a0:01:89:81:a4:0b:63:32:f4:91:1c:0b:da:c1: b7:51:23:76:a2:d5:0e:51:61:fb:70:3e:05:f0:13:03:4d:ca: ea:d2:59:f1:12:7d:ce:69:4d:11:e8:af:98:4b:1e:09:93:9d: e0:89:27:b9:df:7f:fd:72:fd:86:ab:b4:59:92:a7:b7:cd:a5: a4:d6:9e:cb:88:96:29:99:a7:f2:54:ab:89:7c:7f:ea:e0:96: 3c:18:b0:97:f3:0f:6c:3c:1d:61:bd:be:b8:9d:f0:0f:62:ae: a3:c0:d2:3e:08:7b:8e:60:12:f5:94:d1:b8:1a:e0:71:40:62: 33:a5:17:03:02:0d:84:ca:66:4f:1f:09:80:2d:d7:d6:f8:f3: d8:1f:4b:4d:00:ea:6a:e5:06:10:f5:c3:49:59:6c:25:e2:e2: 63:d0:ba:14:df:55:2b:ff:26:25:7e:e4:24:38:16:b3:5a:df: 56:66:19:b6:1e:48:19:8c:9d:39:ac:15:45:ef:23:36:a3:77: 91:a9:d7:b8:d2:d7:09:e8:51:d8:4e:1b:06:64:e6:db:46:f7: 19:35:71:33:fc:27:51:7f:2d:77:de:fb:f9:3a:16:1d:3c:7c: 41:1f:b8:f9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYxMDE2MjM0NDQwWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQyYjZlOC1kYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnURHriKDydlz99UCiNDwsP6WkYtaYLmxXyL1ncL2Ut7nvXJjsWgtBObGIhT bKriX524tRrgd1m2mZkw05ZECulW2OMzTP9dCxv7ILcVfikOZF8vHCNcRbag1uW9 28Jfq4ALteHy2u25IlGb4u+GvvM3rai2LwULQm+Hi2UIzlcEtXst2cqB9DSVdPul xym4btup0hIiVsPH0npqkTwtZWbYGBmDT+5cVaJMqphg2BL4RYqEmizv/sQH4PNM wWVwLDRPqd5pfBR+qFHp1uujy5DdT6Iqzk7MrkGf9+a/8bYUC4uD+De7R3/qS76o 64niyjrWfTuROS+zcl6ASexvjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD7oEHlA GtMRGuirhztB29pZcC5iMB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM0OTMvRTUyQzE0QzA5RkZBMTFGMEJBRDUwQjYxQzRGOUFFMDIvNDhEQTg4MUNB NUZGMTFGMDgwMDRCNjdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGmEHAMA0GCSqGSIb3DQEBCwUAA4IBAQCXlgnixV3QzFPFhEAGCeh6 Acd/JXv7oAGJgaQLYzL0kRwL2sG3USN2otUOUWH7cD4F8BMDTcrq0lnxEn3OaU0R 6K+YSx4Jk53giSe533/9cv2Gq7RZkqe3zaWk1p7LiJYpmafyVKuJfH/q4JY8GLCX 8w9sPB1hvb64nfAPYq6jwNI+CHuOYBL1lNG4GuBxQGIzpRcDAg2EymZPHwmALdfW +PPYH0tNAOpq5QYQ9cNJWWwl4uJj0LoU31Ur/yYlfuQkOBazWt9WZhm2HkgZjJ05 rBVF7yM2o3eRqde40tcJ6FHYThsGZObbRvcZNXEz/CdRfy133vv5OhYdPHxBH7j5 -----END CERTIFICATE-----Generated at Mon Oct 26 23:02:54 2026 by rpki-client