$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/E821F266B68411F18DFEAAE13C11F970.roa File: E821F266B68411F18DFEAAE13C11F970.roa (raw, json) Hash identifier: 0TWxdFHrS6IJ8bMY2Vz0tNm8SlhrYPq7b4MeIyIy6mQ= Subject key identifier: DD:FC:A2:8E:8B:26:DF:25:29:96:01:6A:A1:E2:9D:05:B9:44:19:4A Certificate issuer: /CN=A911CCA8/serialNumber=FDC74A2A269F0FA9FC2A73256FAC9DBF81383A97 Certificate serial: 02 Authority key identifier: FD:C7:4A:2A:26:9F:0F:A9:FC:2A:73:25:6F:AC:9D:BF:81:38:3A:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/E821F266B68411F18DFEAAE13C11F970.roa Signing time: Tue 22 Sep 2026 12:55:37 +0000 ROA not before: Tue 22 Sep 2026 12:55:37 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 139304 IP address blocks: 163.52.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.crl rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CCA8, serialNumber=FDC74A2A269F0FA9FC2A73256FAC9DBF81383A97 Validity Not Before: Sep 22 12:55:37 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ab27ac9-496d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:f8:23:82:45:40:68:c5:9f:8d:ea:37:f5: db:82:7f:06:15:00:9b:43:48:b0:8c:bd:81:02:77: 4b:ce:99:d4:12:3c:19:78:49:e7:29:4f:a5:26:f2: a2:17:18:af:31:62:b8:1b:23:f6:c3:75:62:51:38: 77:eb:d2:d7:e5:3d:10:f3:d7:37:b3:88:2c:3f:38: e0:b2:c1:be:6a:8f:c8:fc:90:6c:9e:ec:b0:fe:c9: 29:bc:48:1c:1b:13:ca:fd:9b:42:3c:7e:e2:04:b6: 79:ef:da:58:fb:d2:aa:de:47:90:50:52:4d:d0:e3: c2:c8:b3:bb:a5:48:be:f7:b1:30:26:af:3c:d1:4d: 1a:b0:a1:12:f2:34:b3:4f:b3:a0:e3:fc:e5:0c:dc: 5f:86:7a:05:f7:c2:1d:c6:39:3d:0b:e1:94:0e:53: e4:29:a9:7c:6c:be:93:7b:0e:6b:65:79:d9:6e:cd: 1b:44:4e:02:b1:a2:b1:0b:84:e1:e5:ca:25:15:d4: d5:44:77:ac:1f:a9:10:bd:ff:55:d3:6e:bd:0d:b0: 1f:44:66:0e:d8:3f:fa:47:5a:d2:ed:d2:2e:d5:f3: ff:8d:f9:64:56:5e:f5:8b:d6:b6:5a:04:e8:45:9f: e9:fb:39:91:dc:c0:7d:bb:93:74:79:10:51:f6:53: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:A2:8E:8B:26:DF:25:29:96:01:6A:A1:E2:9D:05:B9:44:19:4A X509v3 Authority Key Identifier: keyid:FD:C7:4A:2A:26:9F:0F:A9:FC:2A:73:25:6F:AC:9D:BF:81:38:3A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/E821F266B68411F18DFEAAE13C11F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.240.0/23 Signature Algorithm: sha256WithRSAEncryption 09:eb:10:37:ee:72:af:18:00:5e:34:19:b0:da:ba:dd:46:cb: 02:c3:86:4b:92:72:3c:fb:28:db:89:32:ad:95:00:14:81:8a: 7f:9e:7a:c3:52:5d:e9:b0:c9:cb:93:49:16:9b:da:05:01:8d: 02:85:c7:48:10:8e:a7:7e:dc:d9:ea:eb:41:b8:7a:f5:ef:0a: a5:6a:50:cc:ce:fc:b8:63:78:04:38:e7:12:db:eb:b3:ed:9c: 88:d5:3b:48:b9:f5:bb:7b:4a:03:6e:a6:ae:e4:f2:8c:90:75: ac:cd:bf:28:9d:3f:22:5f:85:e4:0c:28:7b:a5:f7:74:7b:39: 0f:5d:33:5a:cb:81:cd:67:c8:b3:12:28:26:04:05:15:e0:36: a2:74:b0:39:16:ef:e6:28:69:b8:86:49:cb:ba:ee:7a:71:39: dd:45:5e:28:ec:da:d5:68:0b:89:cc:34:ca:2c:2f:30:90:18: 8f:b1:c1:2f:18:1b:3e:2d:cb:58:5f:8c:3a:56:a9:43:aa:22: 42:80:c9:38:11:b5:b0:77:30:e2:a0:bd:24:25:08:df:48:e7: a8:51:38:b9:8b:60:60:fc:9f:7f:26:de:41:d9:8d:e8:82:4b: b4:c8:b1:e2:7a:ed:b7:98:9c:49:70:17:13:38:4e:83:04:55: dc:98:2a:79 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0NBODExMC8GA1UEBRMoRkRDNzRBMkEyNjlGMEZBOUZDMkE3MzI1NkZBQzlEQkY4 MTM4M0E5NzAeFw0yNjA5MjIxMjU1MzdaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYjI3YWM5LTQ5NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp6vgjgkVAaMWfjeo39duCfwYVAJtDSLCMvYECd0vOmdQSPBl4SecpT6Um8qIX GK8xYrgbI/bDdWJROHfr0tflPRDz1zeziCw/OOCywb5qj8j8kGye7LD+ySm8SBwb E8r9m0I8fuIEtnnv2lj70qreR5BQUk3Q48LIs7ulSL73sTAmrzzRTRqwoRLyNLNP s6Dj/OUM3F+GegX3wh3GOT0L4ZQOU+QpqXxsvpN7DmtledluzRtETgKxorELhOHl yiUV1NVEd6wfqRC9/1XTbr0NsB9EZg7YP/pHWtLt0i7V8/+N+WRWXvWL1rZaBOhF n+n7OZHcwH27k3R5EFH2U/GXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU3fyijosm 3yUplgFqoeKdBblEGUowHwYDVR0jBBgwFoAU/cdKKiafD6n8KnMlb6ydv4E4Opcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQ0E4LzRFQTFBOTNFQjY4 MzExRjE5MEMyQkY2QTNDMTFGOTcwL19jZEtLaWFmRDZuOEtuTWxiNnlkdjRFNE9w Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2NkS0tpYWZENm44S25NbGI2eWR2NEU0T3BjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0NBOC80RUExQTkzRUI2ODMxMUYxOTBDMkJGNkEzQzExRjk3MC9FODIxRjI2NkI2 ODQxMUYxOERGRUFBRTEzQzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGjNPAwDQYJKoZIhvcNAQELBQADggEBAAnrEDfucq8YAF40GbDaut1G ywLDhkuScjz7KNuJMq2VABSBin+eesNSXemwycuTSRab2gUBjQKFx0gQjqd+3Nnq 60G4evXvCqVqUMzO/LhjeAQ45xLb67PtnIjVO0i59bt7SgNupq7k8oyQdazNvyid PyJfheQMKHul93R7OQ9dM1rLgc1nyLMSKCYEBRXgNqJ0sDkW7+YoabiGScu67npx Od1FXijs2tVoC4nMNMosLzCQGI+xwS8YGz4ty1hfjDpWqUOqIkKAyTgRtbB3MOKg vSQlCN9I56hROLmLYGD8n38m3kHZjeiCS7TIseJ67beYnElwFxM4ToMEVdyYKnk= -----END CERTIFICATE-----Generated at Fri Sep 25 18:02:17 2026 by rpki-client