$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/52A7D49EC5BB11F1B6A5E9F16D11F970.roa File: 52A7D49EC5BB11F1B6A5E9F16D11F970.roa (raw, json) Hash identifier: jhPjJ978qU9WiecBJ/xTsvnjqQKPoi8BmwYSz9B2UGU= Subject key identifier: 0B:D4:61:3E:41:38:D8:39:0E:46:DA:8D:CC:80:28:96:05:DD:77:26 Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Certificate serial: 049E Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/52A7D49EC5BB11F1B6A5E9F16D11F970.roa Signing time: Mon 12 Oct 2026 22:55:27 +0000 ROA not before: Mon 12 Oct 2026 22:55:27 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 18200 IP address blocks: 103.152.32.0/24 maxlen: 24 2001:df3:f380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 00:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Validity Not Before: Oct 12 22:55:27 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6acd655f-1120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:fb:50:b0:d6:42:e1:35:9a:ad:c1:5e:e0: 8c:5d:fb:ec:d5:42:0c:27:0a:60:bb:4d:05:6c:fe: 8a:81:db:15:d6:04:44:2e:19:d7:e8:9a:9d:a2:a2: b6:ee:96:f0:58:64:f5:a5:be:f6:cb:09:c4:18:b7: 3c:52:bb:60:08:78:b8:79:19:50:ae:ce:71:66:df: ab:ea:70:3f:a7:89:b2:c3:9e:25:ff:69:72:70:0c: ec:d3:b5:89:0b:47:0a:80:38:08:52:c2:06:49:db: 48:10:6d:65:3b:81:25:1b:3f:2d:ad:30:62:af:a3: dd:d7:b8:b8:cb:7b:a8:2e:5b:1e:96:26:88:7c:48: 50:e1:b0:25:69:5c:72:e8:2e:47:c2:74:3c:33:46: 15:5e:f4:23:c5:ed:41:84:f6:99:18:51:60:af:f9: cc:f2:4c:ed:84:0b:be:3e:e3:23:9e:94:cf:28:74: d6:04:a0:1e:62:dc:7e:b1:76:3f:f8:2b:3d:56:d0: 44:89:1c:85:87:18:0e:59:f1:24:24:bd:c6:d2:1c: b8:60:bc:64:9f:97:3a:19:af:d3:db:75:fc:fa:db: d0:0c:c0:99:ad:f4:fa:ce:e6:fa:d1:eb:bb:ae:4f: 96:ed:b5:63:84:bf:ec:a5:7e:ec:35:8f:85:1d:d4: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D4:61:3E:41:38:D8:39:0E:46:DA:8D:CC:80:28:96:05:DD:77:26 X509v3 Authority Key Identifier: keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/52A7D49EC5BB11F1B6A5E9F16D11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.152.32.0/24 IPv6: 2001:df3:f380::/48 Signature Algorithm: sha256WithRSAEncryption 12:27:11:c5:9d:43:1b:ac:82:97:d9:ff:8f:3c:f3:6b:d9:3e: 1b:d7:72:ba:4e:8f:92:44:0e:22:cc:93:3e:2e:3f:78:eb:c1: 37:8d:e3:7c:30:e5:22:f6:93:0d:35:cd:47:39:06:00:4b:4d: f9:d3:90:74:36:56:c0:4e:5a:c6:fe:40:97:c4:fb:61:22:f4: f4:28:52:60:df:74:e7:97:d5:96:fa:e3:07:41:1f:33:da:1b: 3d:48:8e:ab:be:13:3a:e5:2b:31:9c:74:d0:27:ad:35:d4:54: 73:0e:29:00:c2:a8:90:04:f2:1e:cd:55:a5:15:58:fb:24:59: 2d:4d:39:90:ea:c4:59:56:97:6b:1f:89:88:16:89:b7:12:af: 36:58:88:47:5e:01:d5:d7:49:6b:5b:f5:94:05:c8:9f:b0:dd: 7a:44:70:50:53:99:ee:4a:06:66:fa:22:a8:22:d8:ca:34:29: 17:1b:a2:2f:e4:a5:90:57:2e:7d:45:eb:a4:2e:ee:b2:36:a3: e2:6e:35:43:e7:e4:6a:d3:a7:e6:9a:ca:65:42:ae:8d:2e:17: fb:93:18:f1:76:46:ba:c0:50:93:00:16:f8:05:0b:1b:b1:31: 2b:a4:21:0e:11:27:cd:52:bc:28:52:d9:c5:ad:74:47:f9:7d: 06:03:e2:10 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVGNDUxMTAvBgNVBAUTKEFDQUE2RTI2QTVGMkRDQUExNENERkM5RUNDOEU5Q0Y2 ODI5QTQwMjEwHhcNMjYxMDEyMjI1NTI3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkNjU1Zi0xMTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5P7ULDWQuE1mq3BXuCMXfvs1UIMJwpgu00FbP6KgdsV1gRELhnX6JqdoqK2 7pbwWGT1pb72ywnEGLc8UrtgCHi4eRlQrs5xZt+r6nA/p4myw54l/2lycAzs07WJ C0cKgDgIUsIGSdtIEG1lO4ElGz8trTBir6Pd17i4y3uoLlseliaIfEhQ4bAlaVxy 6C5HwnQ8M0YVXvQjxe1BhPaZGFFgr/nM8kzthAu+PuMjnpTPKHTWBKAeYtx+sXY/ +Cs9VtBEiRyFhxgOWfEkJL3G0hy4YLxkn5c6Ga/T23X8+tvQDMCZrfT6zub60eu7 rk+W7bVjhL/spX7sNY+FHdRf2QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAvUYT5B ONg5DkbajcyAKJYF3XcmMB8GA1UdIwQYMBaAFKyqbial8tyqFM38nsyOnPaCmkAh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUY0NS81RDhCOUI4MjlG MkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNLb1V6Znllekk2YzlvS2FR Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLcHVKcVh5M0tvVXpmeWV6STZjOW9LYVFDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUVGNDUvNUQ4QjlCODI5RjJBMTFFQ0E3Q0ZBRDBBQzRGOUFFMDIvNTJBN0Q0OUVD NUJCMTFGMUI2QTVFOUYxNkQxMUY5NzAucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ5ggMA8EAgACMAkDBwAgAQ3z84AwDQYJKoZIhvcNAQELBQADggEB ABInEcWdQxusgpfZ/48882vZPhvXcrpOj5JEDiLMkz4uP3jrwTeN43ww5SL2kw01 zUc5BgBLTfnTkHQ2VsBOWsb+QJfE+2Ei9PQoUmDfdOeX1Zb64wdBHzPaGz1Ijqu+ EzrlKzGcdNAnrTXUVHMOKQDCqJAE8h7NVaUVWPskWS1NOZDqxFlWl2sfiYgWibcS rzZYiEdeAdXXSWtb9ZQFyJ+w3XpEcFBTme5KBmb6Iqgi2Mo0KRcboi/kpZBXLn1F 66Qu7rI2o+JuNUPn5GrTp+aaymVCro0uF/uTGPF2RrrAUJMAFvgFCxuxMSukIQ4R J81SvChS2cWtdEf5fQYD4hA= -----END CERTIFICATE-----Generated at Wed Oct 14 06:49:39 2026 by rpki-client