$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/8D52A23871A611EF8F5B9755C4F9AE02.roa File: 8D52A23871A611EF8F5B9755C4F9AE02.roa (raw, json) Hash identifier: of9gDmyx98htPYcM2lAvW1XGnxUh1bmJa4MFK/pfI3I= Subject key identifier: D5:46:93:DC:30:51:B8:11:B9:3F:68:31:82:DF:24:DE:3A:2C:B7:3B Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: 016D Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/8D52A23871A611EF8F5B9755C4F9AE02.roa Signing time: Wed 05 Aug 2026 06:55:16 +0000 ROA not before: Wed 05 Aug 2026 06:55:16 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 7310 IP address blocks: 203.5.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 05:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Aug 5 06:55:16 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a72de54-d299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:56:cb:aa:eb:5b:f0:12:2a:67:e7:79:1c: 6e:5d:3f:36:33:08:cb:35:b7:60:c0:f7:51:60:db: f3:82:e8:e7:7d:54:63:98:94:30:d8:f4:68:dd:e3: 08:9b:4c:83:39:11:41:11:0a:64:f2:13:43:84:cf: 13:ab:54:b4:94:03:e7:bc:9a:0f:5c:61:be:3b:91: 0b:0f:6d:64:2c:64:ab:de:f7:cc:ca:30:e2:4e:82: d8:17:27:8d:52:f8:67:e1:a8:47:12:43:15:79:53: f6:ed:63:af:c2:31:ea:19:a8:5a:f8:c1:7c:e2:da: 10:29:8a:27:2f:ea:e1:89:b3:bd:32:5c:0f:78:99: 1f:5f:b2:c5:fb:8c:4c:6d:88:87:f9:eb:01:61:8e: e4:60:3d:70:38:ee:5d:c3:bc:31:98:ff:cb:6c:4d: 8b:56:cb:73:7b:17:7f:b0:d8:d1:38:e3:36:4c:c7: 51:68:85:48:f5:69:0c:2c:33:ef:2d:0a:e3:a3:d6: 52:d4:ef:60:95:29:4e:ea:da:de:22:33:36:bd:4c: b4:a8:71:06:66:83:52:ba:ee:a9:c1:0c:69:05:43: fd:97:25:d4:d0:6e:6e:df:e8:c7:15:81:a1:e6:06: 77:2c:54:53:38:c9:58:ca:ac:9f:10:e1:01:3c:76: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:46:93:DC:30:51:B8:11:B9:3F:68:31:82:DF:24:DE:3A:2C:B7:3B X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/8D52A23871A611EF8F5B9755C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.5.212.0/24 Signature Algorithm: sha256WithRSAEncryption 52:97:4f:8f:26:56:b0:4d:c0:3a:3f:01:12:37:04:84:22:a8: 72:f2:54:da:73:e4:9c:c6:6a:27:93:50:e7:97:77:cd:67:e5: c7:7f:63:23:2e:1d:1d:7e:d0:5d:b0:21:7f:dc:df:2d:29:94: 4e:45:56:31:3f:6a:53:4d:32:ce:96:a8:91:72:3e:99:2e:bc: 0f:6f:15:49:e5:74:c0:84:05:4c:ab:7d:91:39:0b:35:cf:87: 6f:c3:36:04:09:58:6a:dd:3f:f4:af:39:dd:2e:17:6b:86:aa: 11:f4:5c:33:ae:1c:0f:34:97:99:16:3d:85:bb:72:ba:0c:db: 81:97:f6:64:b2:79:a2:56:3d:9b:82:bc:c0:a5:b1:42:ba:55: d3:df:4f:96:4d:b7:fd:db:67:8d:fc:bf:f5:13:26:69:4f:2a: 6f:b7:69:9b:3a:85:4b:a3:c8:fc:f1:b7:07:26:28:09:53:7e: 3c:28:37:2d:e1:16:84:64:fd:f1:2c:a6:11:d3:7e:ca:84:1c: e7:71:7d:73:64:b9:ce:a1:33:52:0b:e3:71:86:54:8c:d6:a9: 35:3d:fb:db:ce:c6:5c:ad:26:d6:e4:d4:ff:20:af:ac:68:ea: 33:5a:c9:c7:0a:6c:ab:b3:85:af:5d:f6:8b:5a:3d:bf:07:d9: 72:1a:1d:03 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjYwODA1MDY1NTE2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcyZGU1NC1kMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyL1Wy6rrW/ASKmfneRxuXT82MwjLNbdgwPdRYNvzgujnfVRjmJQw2PRo3eMI m0yDORFBEQpk8hNDhM8Tq1S0lAPnvJoPXGG+O5ELD21kLGSr3vfMyjDiToLYFyeN Uvhn4ahHEkMVeVP27WOvwjHqGaha+MF84toQKYonL+rhibO9MlwPeJkfX7LF+4xM bYiH+esBYY7kYD1wOO5dw7wxmP/LbE2LVstzexd/sNjROOM2TMdRaIVI9WkMLDPv LQrjo9ZS1O9glSlO6treIjM2vUy0qHEGZoNSuu6pwQxpBUP9lyXU0G5u3+jHFYGh 5gZ3LFRTOMlYyqyfEOEBPHZ+kQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNVGk9ww UbgRuT9oMYLfJN46LLc7MB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE1NEEvQkU4NEE4MjA3MUE1MTFFRjhEODA1Qzc4QzRGOUFFMDIvOEQ1MkEyMzg3 MUE2MTFFRjhGNUI5NzU1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAywXUMA0GCSqGSIb3DQEBCwUAA4IBAQBSl0+PJlawTcA6PwESNwSE Iqhy8lTac+Scxmonk1Dnl3fNZ+XHf2MjLh0dftBdsCF/3N8tKZRORVYxP2pTTTLO lqiRcj6ZLrwPbxVJ5XTAhAVMq32ROQs1z4dvwzYECVhq3T/0rzndLhdrhqoR9Fwz rhwPNJeZFj2Fu3K6DNuBl/ZksnmiVj2bgrzApbFCulXT30+WTbf922eN/L/1EyZp Typvt2mbOoVLo8j88bcHJigJU348KDct4RaEZP3xLKYR037KhBzncX1zZLnOoTNS C+NxhlSM1qk1PfvbzsZcrSbW5NT/IK+saOozWsnHCmyrs4WvXfaLWj2/B9lyGh0D -----END CERTIFICATE-----Generated at Wed Aug 19 14:31:44 2026 by rpki-client