$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/99F2CE74A1F011F1BB91A1DB3E11F970.roa File: 99F2CE74A1F011F1BB91A1DB3E11F970.roa (raw, json) Hash identifier: 0f/muL4dbsS2xjRlJDf6C/ZSy3ovWH7NqcxlwtnGGaU= Subject key identifier: 28:B6:33:9E:68:36:38:DB:FE:BB:C5:BC:5D:2C:89:14:EE:6D:26:5B Certificate issuer: /CN=A917B23B/serialNumber=20B65F35867D15CE0F79F1E8308F6F65E64D251A Certificate serial: 02 Authority key identifier: 20:B6:5F:35:86:7D:15:CE:0F:79:F1:E8:30:8F:6F:65:E6:4D:25:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/99F2CE74A1F011F1BB91A1DB3E11F970.roa Signing time: Thu 27 Aug 2026 08:23:37 +0000 ROA not before: Thu 27 Aug 2026 08:23:37 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 150775 IP address blocks: 163.52.54.0/24 maxlen: 24 163.52.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B23B, serialNumber=20B65F35867D15CE0F79F1E8308F6F65E64D251A Validity Not Before: Aug 27 08:23:37 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a8ff409-1c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:4b:47:97:6b:b0:7d:08:9e:7a:6f:fa:1d: 77:23:57:98:91:86:c7:cd:ae:c9:3c:65:ae:b2:55: d3:4f:b1:ad:5b:03:02:df:53:77:c4:ed:fb:25:2e: 9d:33:f8:80:68:da:92:f9:31:9e:aa:39:ef:fe:d7: cd:a0:45:d8:93:68:c7:10:53:bd:a9:33:98:e4:50: 96:72:12:d0:e8:8d:4a:9e:4d:be:ca:df:43:7a:a4: f7:d7:94:7b:16:08:5d:99:c4:65:1b:ba:aa:c7:fa: ef:55:5a:97:08:a6:6b:4d:ef:bf:40:e9:48:6e:49: 91:45:ee:c8:b6:12:ca:6a:5c:97:bc:ff:5f:bf:28: 38:35:6c:a6:f6:27:7a:b9:27:36:c6:82:af:11:4c: 9e:50:9e:f9:e9:2e:37:a7:00:b7:15:7f:70:cc:de: 60:90:a7:ba:33:9b:bb:80:95:1f:90:fb:ca:76:b5: 6d:f5:bd:17:40:85:f3:82:b0:5a:d0:ca:e2:e6:dc: bb:dc:80:21:67:07:92:4b:9c:c7:36:5e:42:5a:a4: ec:8d:19:af:01:b2:cd:d7:8e:fb:e2:b2:c8:f7:00: b3:eb:e0:a6:2f:2c:14:40:9e:bf:bb:20:b3:24:ef: fb:dc:62:e4:ac:4b:84:1a:63:f3:90:19:dc:0d:f9: c1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B6:33:9E:68:36:38:DB:FE:BB:C5:BC:5D:2C:89:14:EE:6D:26:5B X509v3 Authority Key Identifier: keyid:20:B6:5F:35:86:7D:15:CE:0F:79:F1:E8:30:8F:6F:65:E6:4D:25:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/99F2CE74A1F011F1BB91A1DB3E11F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.54.0/23 Signature Algorithm: sha256WithRSAEncryption 64:91:14:6a:01:2c:e3:d9:5b:65:3c:bf:bd:9f:40:2f:0e:b0: d8:5f:f9:b3:5f:4e:33:09:6e:67:70:63:e7:8c:7b:8b:c3:94: 56:25:7f:a1:4f:92:27:ed:ab:12:91:f6:9c:25:ba:c0:1b:7e: 0a:1b:ab:46:81:27:dd:f5:15:8e:bf:23:71:a7:33:84:5c:dd: c8:b2:ab:0e:28:4a:14:51:7b:93:2d:22:8a:2b:1c:96:b0:d5: d5:df:b7:41:ce:5a:09:f5:b5:81:1a:8b:f4:f2:68:6c:a0:de: b0:44:f4:36:37:ef:f1:64:11:cd:57:29:4d:bf:fc:06:7f:61: 24:4a:dc:c3:96:8e:22:91:cb:62:50:25:fa:b6:a0:0b:53:cd: 8b:5c:fc:2c:76:8b:42:91:35:47:3f:0b:6f:e7:04:2c:f5:a4: 52:9a:de:76:e0:24:7a:cd:74:1e:d6:b4:94:54:09:68:f6:6e: 5a:f5:23:25:63:dc:aa:21:80:e4:9e:d8:e0:27:52:29:29:b5: 9f:1f:f5:a8:a7:a5:e6:3f:3a:cd:e0:21:81:96:00:96:1e:25: 9b:1f:4f:11:2a:89:26:db:eb:4e:90:69:d0:ac:d7:e7:62:19: 8d:b1:f8:30:74:95:25:ef:71:03:7a:c2:08:8e:40:c7:dc:a2: 35:b9:76:b6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjIzQjExMC8GA1UEBRMoMjBCNjVGMzU4NjdEMTVDRTBGNzlGMUU4MzA4RjZGNjVF NjREMjUxQTAeFw0yNjA4MjcwODIzMzdaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOGZmNDA5LTFjMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvl0tHl2uwfQieem/6HXcjV5iRhsfNrsk8Za6yVdNPsa1bAwLfU3fE7fslLp0z +IBo2pL5MZ6qOe/+182gRdiTaMcQU72pM5jkUJZyEtDojUqeTb7K30N6pPfXlHsW CF2ZxGUbuqrH+u9VWpcIpmtN779A6UhuSZFF7si2EspqXJe8/1+/KDg1bKb2J3q5 JzbGgq8RTJ5QnvnpLjenALcVf3DM3mCQp7ozm7uAlR+Q+8p2tW31vRdAhfOCsFrQ yuLm3LvcgCFnB5JLnMc2XkJapOyNGa8Bss3Xjvvissj3ALPr4KYvLBRAnr+7ILMk 7/vcYuSsS4QaY/OQGdwN+cH9AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUKLYznmg2 ONv+u8W8XSyJFO5tJlswHwYDVR0jBBgwFoAUILZfNYZ9Fc4PefHoMI9vZeZNJRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMjNCLzIzREE2QUU0QTFG MDExRjFBNjUyQ0JGNjNEMTFGOTcwL0lMWmZOWVo5RmM0UGVmSG9NSTl2WmVaTkpS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSUxaZk5ZWjlGYzRQZWZIb01JOXZaZVpOSlJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjIzQi8yM0RBNkFFNEExRjAxMUYxQTY1MkNCRjYzRDExRjk3MC85OUYyQ0U3NEEx RjAxMUYxQkI5MUExREIzRTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGjNDYwDQYJKoZIhvcNAQELBQADggEBAGSRFGoBLOPZW2U8v72fQC8O sNhf+bNfTjMJbmdwY+eMe4vDlFYlf6FPkiftqxKR9pwlusAbfgobq0aBJ931FY6/ I3GnM4Rc3ciyqw4oShRRe5MtIoorHJaw1dXft0HOWgn1tYEai/TyaGyg3rBE9DY3 7/FkEc1XKU2//AZ/YSRK3MOWjiKRy2JQJfq2oAtTzYtc/Cx2i0KRNUc/C2/nBCz1 pFKa3nbgJHrNdB7WtJRUCWj2blr1IyVj3KohgOSe2OAnUikptZ8f9ainpeY/Os3g IYGWAJYeJZsfTxEqiSbb606QadCs1+diGY2x+DB0lSXvcQN6wgiOQMfcojW5drY= -----END CERTIFICATE-----Generated at Tue Sep 22 22:02:01 2026 by rpki-client