$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/8852DDDEBED411ECBA66025BC4F9AE02.roa File: 8852DDDEBED411ECBA66025BC4F9AE02.roa (raw, json) Hash identifier: uxOVHBgcJguEoL3TbnbwZLffly9+xXD6OQ2b9DYKdcg= Subject key identifier: 61:85:A5:47:42:51:F6:3C:59:A3:A3:A5:22:55:91:83:C8:D4:15:C7 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 3575 Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/8852DDDEBED411ECBA66025BC4F9AE02.roa Signing time: Wed 12 Aug 2026 15:16:59 +0000 ROA not before: Wed 12 Aug 2026 15:16:59 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 45172 IP address blocks: 143.96.0.0/16 maxlen: 16 143.96.0.0/24 maxlen: 24 143.96.1.0/24 maxlen: 24 143.96.2.0/23 maxlen: 24 143.96.4.0/23 maxlen: 24 143.96.6.0/24 maxlen: 24 143.96.7.0/24 maxlen: 24 143.96.8.0/22 maxlen: 22 143.96.12.0/24 maxlen: 24 143.96.13.0/24 maxlen: 24 143.96.14.0/24 maxlen: 24 143.96.15.0/24 maxlen: 24 143.96.16.0/20 maxlen: 20 143.96.32.0/19 maxlen: 19 143.96.64.0/18 maxlen: 18 143.96.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13685 (0x3575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: Aug 12 15:16:59 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7c8e6b-c58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:15:ae:cc:18:1b:be:97:8d:0c:6d:9a:68: aa:80:f9:9b:23:60:48:3b:a3:d2:80:c4:30:8e:c2: ec:6a:a0:de:93:de:38:4d:82:b1:c4:34:68:55:42: 1c:00:1c:eb:25:54:9e:00:8b:d6:06:0b:aa:a5:1c: 95:9a:c9:9a:cf:c7:36:5a:f6:a0:1d:c7:06:98:c2: 35:42:8d:4d:dc:b0:32:a2:b0:d1:f5:6a:cd:89:13: 9e:f0:08:ed:a8:40:8e:c4:0b:ab:67:3e:fc:17:d8: 44:45:9b:55:96:63:e3:a9:89:ce:4d:ed:b1:68:7d: 71:6d:fe:ab:35:1b:42:e6:94:3d:a6:33:d5:dd:b0: d1:10:31:8f:f0:d0:6d:35:98:ad:02:63:8f:b9:c0: 3e:a0:c2:7b:8f:cf:1a:03:e3:0d:9e:36:c9:62:85: 2d:7c:93:72:a3:24:96:d9:5f:80:74:f3:3b:52:72: 57:70:96:87:3d:17:45:f8:92:f9:4a:b6:d6:6b:84: 77:e2:f0:9b:9a:a7:3f:c9:73:76:8d:6f:9e:13:99: 3f:d6:ae:b5:82:6f:82:af:60:d5:85:14:50:59:82: a2:bc:ea:f6:42:95:49:b8:9c:14:87:b8:71:31:fb: 42:7b:7d:61:22:84:3b:c1:0e:ed:dc:08:c3:d3:3f: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:85:A5:47:42:51:F6:3C:59:A3:A3:A5:22:55:91:83:C8:D4:15:C7 X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/8852DDDEBED411ECBA66025BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 143.96.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1a:90:05:ad:a4:17:29:0e:5d:58:14:9e:34:2e:01:b5:7d:8c: 94:2d:52:2a:5b:fc:61:54:f9:35:8c:3a:ce:3b:68:fb:6c:99: b7:57:43:5c:e5:6c:51:17:97:1e:ee:c7:d9:99:ce:e5:94:bf: 67:c2:13:e9:17:eb:87:c2:29:81:31:96:2c:ad:7e:2a:0b:84: e8:18:7f:aa:cc:03:75:4d:4d:6b:27:36:d0:33:24:e4:77:f4: 0e:fb:04:af:f1:73:72:82:a9:72:c1:1b:30:b6:0c:e0:32:45: 46:af:ed:73:64:27:01:23:2c:6b:72:54:4c:a2:19:a1:ad:d7: d9:ef:10:73:97:d9:7a:dd:71:60:1c:70:4e:18:5d:fa:40:c1: bc:d4:0d:86:3c:dc:85:e8:52:6e:78:bb:aa:20:9a:d7:00:5d: 55:81:92:4a:a2:1e:10:fb:4b:e0:f0:a5:ec:a3:3c:fe:e5:9d: 03:d7:a4:2d:39:68:1e:c5:d7:89:66:85:49:fd:55:12:79:bf: 7b:45:9f:4b:a3:80:4d:81:09:e7:20:c4:5d:b5:be:39:a6:bf: c2:b7:00:fb:82:c9:0d:24:56:ed:26:51:c4:e6:40:57:ae:aa: 53:19:b6:87:65:89:18:25:ff:5d:7e:d2:3d:4b:0b:a9:10:2a: b0:bb:ad:c7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICNXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjYwODEyMTUxNjU5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdjOGU2Yi1jNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhIVrswYG76XjQxtmmiqgPmbI2BIO6PSgMQwjsLsaqDek944TYKxxDRoVUIc ABzrJVSeAIvWBguqpRyVmsmaz8c2WvagHccGmMI1Qo1N3LAyorDR9WrNiROe8Ajt qECOxAurZz78F9hERZtVlmPjqYnOTe2xaH1xbf6rNRtC5pQ9pjPV3bDREDGP8NBt NZitAmOPucA+oMJ7j88aA+MNnjbJYoUtfJNyoySW2V+AdPM7UnJXcJaHPRdF+JL5 SrbWa4R34vCbmqc/yXN2jW+eE5k/1q61gm+Cr2DVhRRQWYKivOr2QpVJuJwUh7hx MftCe31hIoQ7wQ7t3AjD0z9XpQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFGGFpUdC UfY8WaOjpSJVkYPI1BXHMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyOEMvNDQ5QkE1MDYxREEwMTFFMkI2RDg3MDkxMDhCMDJDRDIvODg1MkREREVC RUQ0MTFFQ0JBNjYwMjVCQzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAj2AwDQYJKoZIhvcNAQELBQADggEBABqQBa2kFykOXVgUnjQuAbV9 jJQtUipb/GFU+TWMOs47aPtsmbdXQ1zlbFEXlx7ux9mZzuWUv2fCE+kX64fCKYEx liytfioLhOgYf6rMA3VNTWsnNtAzJOR39A77BK/xc3KCqXLBGzC2DOAyRUav7XNk JwEjLGtyVEyiGaGt19nvEHOX2XrdcWAccE4YXfpAwbzUDYY83IXoUm54u6ogmtcA XVWBkkqiHhD7S+DwpeyjPP7lnQPXpC05aB7F14lmhUn9VRJ5v3tFn0ujgE2BCecg xF21vjmmv8K3APuCyQ0kVu0mUcTmQFeuqlMZtodliRgl/11+0j1LC6kQKrC7rcc= -----END CERTIFICATE-----Generated at Wed Aug 19 15:14:02 2026 by rpki-client