$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/8352FD30DF6511F1880BFB521C66CEF9.roa File: 8352FD30DF6511F1880BFB521C66CEF9.roa (raw, json) Hash identifier: gPVbf+A3MEFnDeFm4gch2JBrxTfLLwDiWG66JInuesk= Subject key identifier: F5:55:D2:94:BF:EE:FA:A9:4E:76:5B:3F:7D:B4:A1:BE:62:6D:80:B8 Certificate issuer: /CN=A91A4402/serialNumber=4DAF0F7CA5F6372F770AB2F852FF10F9C00DC5EA Certificate serial: 14 Authority key identifier: 4D:AF:0F:7C:A5:F6:37:2F:77:0A:B2:F8:52:FF:10:F9:C0:0D:C5:EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/8352FD30DF6511F1880BFB521C66CEF9.roa Signing time: Fri 13 Nov 2026 13:24:11 +0000 ROA not before: Fri 13 Nov 2026 13:24:11 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 3257 IP address blocks: 162.35.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.crl rsync://rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=4DAF0F7CA5F6372F770AB2F852FF10F9C00DC5EA Validity Not Before: Nov 13 13:24:11 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6af70f7b-928c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:3b:26:1a:79:45:c1:24:7e:79:de:8b:56: ca:5e:0f:2d:f8:55:7c:5c:01:62:68:b5:91:20:be: 9b:88:50:cf:67:c2:c8:e5:c1:88:bc:84:ea:4b:19: 5d:ea:15:d3:82:19:24:73:0f:00:bb:ba:c1:27:83: 1a:0d:5a:67:9d:bd:25:24:0d:a5:05:c9:bf:23:e9: 59:58:57:37:99:43:cd:db:51:c9:ab:e1:a3:1a:b5: 30:f9:4c:77:91:87:18:9a:f2:13:50:e5:4f:2b:0c: fb:cd:2e:59:60:0f:47:d4:fb:3a:b3:b9:7e:1b:b7: a0:a0:5b:2c:37:db:ac:c9:c0:b5:94:b3:3e:55:0b: 54:d2:75:8e:ff:c4:a1:00:87:c2:f3:c8:60:65:e5: 9c:6a:5f:2a:fe:a4:3f:4e:b8:7f:0b:ce:27:b8:33: 8f:59:c9:11:f6:5d:a7:dd:53:bf:e8:04:9b:ec:40: 2d:5f:a2:c8:c5:3b:17:b2:ae:b7:d1:8a:92:40:57: a6:f8:d0:c0:45:c3:a1:c3:f1:c1:a5:93:16:fb:c7: 69:23:35:65:03:26:0b:0a:43:6a:12:40:de:06:f6: 96:19:a9:ae:9e:87:e8:da:c3:c4:96:c4:10:0d:14: f3:35:a2:fd:26:3e:4d:cc:92:4b:68:9c:07:be:32: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:55:D2:94:BF:EE:FA:A9:4E:76:5B:3F:7D:B4:A1:BE:62:6D:80:B8 X509v3 Authority Key Identifier: keyid:4D:AF:0F:7C:A5:F6:37:2F:77:0A:B2:F8:52:FF:10:F9:C0:0D:C5:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ta8PfKX2Ny93CrL4Uv8Q-cANxeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/1BC51A56CDA711F1AEC3F31DB6EE528E/8352FD30DF6511F1880BFB521C66CEF9.roa sbgp-ipAddrBlock: critical IPv4: 162.35.64.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:6b:91:91:16:c3:db:ca:06:ef:79:1e:ea:ba:f5:b9:11:60: eb:87:57:87:77:f8:b8:31:a6:bb:a2:28:71:13:c8:5f:55:e3: 76:35:ea:81:12:77:d0:be:27:1f:f2:b4:21:79:99:55:d8:aa: 51:58:c6:fb:57:6a:29:64:fa:4e:37:bc:1d:28:6c:e8:58:ac: eb:37:77:b7:46:f5:1e:16:e4:73:c2:40:65:8d:30:7b:8c:58: eb:1d:c3:60:2b:c1:28:af:fd:14:a6:26:84:91:2c:58:e1:91: c1:ca:74:7c:58:91:b1:9f:1e:82:91:e9:98:79:d8:3e:ac:2a: 86:64:6a:81:31:2e:56:aa:da:ac:87:0c:ee:ae:82:3c:37:bf: 37:50:40:98:ed:1b:bd:e6:75:b1:c0:38:d2:bc:91:71:15:4a: 0e:e3:a8:92:8d:37:e6:5c:c2:d4:95:2b:48:6f:23:6e:d8:ae: b7:2e:1b:cb:8c:56:5b:a0:4c:2c:c8:34:d2:89:ee:98:6c:01: f8:67:a2:12:ce:e3:bf:d5:44:c0:2f:a8:d5:9f:5d:58:09:2b: a3:bd:75:9f:96:80:53:83:e6:c9:4f:f3:4b:15:89:d3:69:22: a5:68:17:6b:29:62:d6:56:35:51:6d:bb:63:ef:1f:d8:1b:5d: 53:cb:de:04 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDQwMjExMC8GA1UEBRMoNERBRjBGN0NBNUY2MzcyRjc3MEFCMkY4NTJGRjEwRjlD MDBEQzVFQTAeFw0yNjExMTMxMzI0MTFaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZjcwZjdiLTkyOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnrTsmGnlFwSR+ed6LVspeDy34VXxcAWJotZEgvpuIUM9nwsjlwYi8hOpLGV3q FdOCGSRzDwC7usEngxoNWmedvSUkDaUFyb8j6VlYVzeZQ83bUcmr4aMatTD5THeR hxia8hNQ5U8rDPvNLllgD0fU+zqzuX4bt6CgWyw326zJwLWUsz5VC1TSdY7/xKEA h8LzyGBl5ZxqXyr+pD9OuH8Lzie4M49ZyRH2XafdU7/oBJvsQC1fosjFOxeyrrfR ipJAV6b40MBFw6HD8cGlkxb7x2kjNWUDJgsKQ2oSQN4G9pYZqa6eh+jaw8SWxBAN FPM1ov0mPk3MkktonAe+Mt6pAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU9VXSlL/u +qlOdls/fbShvmJtgLgwHwYDVR0jBBgwFoAUTa8PfKX2Ny93CrL4Uv8Q+cANxeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NDAyLzFCQzUxQTU2Q0RB NzExRjFBRUMzRjMxREI2RUU1MjhFL1RhOFBmS1gyTnk5M0NyTDRVdjhRLWNBTnhl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVGE4UGZLWDJOeTkzQ3JMNFV2OFEtY0FOeGVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi8xQkM1MUE1NkNEQTcxMUYxQUVDM0YzMURCNkVFNTI4RS84MzUyRkQzMERG NjUxMUYxODgwQkZCNTIxQzY2Q0VGOS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAOiI0AwDQYJKoZIhvcNAQELBQADggEBADtrkZEWw9vKBu95Huq69bkR YOuHV4d3+LgxpruiKHETyF9V43Y16oESd9C+Jx/ytCF5mVXYqlFYxvtXailk+k43 vB0obOhYrOs3d7dG9R4W5HPCQGWNMHuMWOsdw2ArwSiv/RSmJoSRLFjhkcHKdHxY kbGfHoKR6Zh52D6sKoZkaoExLlaq2qyHDO6ugjw3vzdQQJjtG73mdbHAONK8kXEV Sg7jqJKNN+ZcwtSVK0hvI27YrrcuG8uMVlugTCzINNKJ7phsAfhnohLO47/VRMAv qNWfXVgJK6O9dZ+WgFOD5slP80sVidNpIqVoF2spYtZWNVFtu2PvH9gbXVPL3gQ= -----END CERTIFICATE-----Generated at Sat Nov 14 22:33:13 2026 by rpki-client