$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/863699A8A68011F1AE60E6086C11F970.roa File: 863699A8A68011F1AE60E6086C11F970.roa (raw, json) Hash identifier: M1Zaa6zzbBQ2vKL/eM+XQhUfuBDeQ4BBEOnhMGUZVl0= Subject key identifier: 16:18:66:BA:22:33:E4:38:8E:F8:A9:44:B5:4F:87:87:7E:6F:9E:29 Certificate issuer: /CN=A91C666C/serialNumber=D6469D5636B2EEF0E038367C26506A878EB8D544 Certificate serial: 02 Authority key identifier: D6:46:9D:56:36:B2:EE:F0:E0:38:36:7C:26:50:6A:87:8E:B8:D5:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1kadVjay7vDgODZ8JlBqh4641UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/863699A8A68011F1AE60E6086C11F970.roa Signing time: Wed 02 Sep 2026 03:43:56 +0000 ROA not before: Wed 02 Sep 2026 03:43:56 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 154872 IP address blocks: 163.52.96.0/23 maxlen: 23 163.52.96.0/24 maxlen: 24 163.52.97.0/24 maxlen: 24 2001:df7:6fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/1kadVjay7vDgODZ8JlBqh4641UQ.crl rsync://rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/1kadVjay7vDgODZ8JlBqh4641UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1kadVjay7vDgODZ8JlBqh4641UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C666C, serialNumber=D6469D5636B2EEF0E038367C26506A878EB8D544 Validity Not Before: Sep 2 03:43:56 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a979b7c-f929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:6c:d6:ce:ce:34:47:d8:a7:05:ab:c9:c2:73: 2f:c5:13:dd:21:dd:12:4d:e6:e0:24:16:ff:54:b4: 20:73:7f:ef:50:48:90:2c:01:6a:29:38:e8:07:5e: 04:fd:bb:26:5c:ec:eb:08:b0:35:74:39:82:eb:a7: 07:58:75:72:0d:16:1b:b4:c3:44:56:0b:b5:94:d9: 1a:b9:04:45:5e:dc:d2:74:69:a3:d6:9f:11:f1:a5: 98:ad:22:a3:85:9b:17:a7:6b:c2:39:77:69:9f:66: 15:ed:bc:50:f4:ad:6e:b4:c1:8c:63:eb:e0:80:7f: f1:b7:70:5d:82:2d:85:a4:78:48:c7:e8:30:76:e1: d8:0f:6d:f7:2b:2d:c9:a9:79:2e:e9:98:a3:43:96: bf:99:78:fa:c9:e3:5a:90:f4:e0:3a:12:76:4b:f7: ea:fb:eb:56:8d:08:e6:59:35:d6:4a:51:b3:6b:76: d0:93:8c:8a:8b:a6:c0:8b:2c:39:77:5e:98:49:b5: ce:a3:08:ad:26:20:dc:e5:b0:5e:b6:31:71:a4:58: 1b:5d:5e:cb:5b:6f:4e:39:99:6f:c6:cd:65:3d:a1: a2:de:82:cb:2d:8b:88:a8:40:13:bb:01:be:0f:cf: 3f:ac:31:4d:cb:06:de:c0:fd:89:66:10:64:ac:38: 2c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:18:66:BA:22:33:E4:38:8E:F8:A9:44:B5:4F:87:87:7E:6F:9E:29 X509v3 Authority Key Identifier: keyid:D6:46:9D:56:36:B2:EE:F0:E0:38:36:7C:26:50:6A:87:8E:B8:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/1kadVjay7vDgODZ8JlBqh4641UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1kadVjay7vDgODZ8JlBqh4641UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/863699A8A68011F1AE60E6086C11F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.96.0/23 IPv6: 2001:df7:6fc0::/48 Signature Algorithm: sha256WithRSAEncryption 82:36:ee:42:3f:5e:a6:c2:31:e9:b5:74:2b:69:17:e8:e9:b1: 08:9e:ae:7e:0f:1a:32:2b:0b:c9:11:a7:ea:c7:ac:21:3b:9a: 1b:08:91:58:f8:61:99:60:90:ba:c2:70:7a:87:5a:dd:d0:36: ad:02:2d:71:fb:0f:ac:80:70:8f:03:97:a2:23:c1:b3:35:ea: 8f:d1:fc:08:b2:fe:14:cb:6f:c8:87:1e:41:18:a0:d9:88:49: f5:9e:00:8b:bc:8c:49:d7:fb:8d:e2:08:02:70:4a:c6:c6:b3: 0d:2d:b0:5b:7e:c9:6d:f8:b3:ea:c7:f5:80:6f:fc:ee:ed:b3: c0:a0:a1:fc:51:3f:f3:37:62:a6:98:4e:1a:36:d2:50:f9:f8: 7c:a6:75:4f:a8:ef:11:8e:0e:fd:b1:7d:12:ff:8c:0b:1f:a1: 58:97:7e:a9:ff:7f:b4:79:88:7f:35:ee:4c:97:61:89:d7:51: 87:09:de:7b:4c:18:8d:33:df:72:88:f1:f1:c4:f0:ca:bd:4b: 32:67:71:38:6e:99:ef:b2:77:c4:2d:d4:72:56:b2:82:3c:fa: e7:0f:ba:99:dc:8f:32:e1:eb:2f:fd:fa:d4:f2:b1:6a:b2:d3: 5b:2a:cb:97:e8:e3:2d:69:a7:64:8d:39:ec:4f:26:41:eb:8c: 49:e6:a4:6d -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjY2QzExMC8GA1UEBRMoRDY0NjlENTYzNkIyRUVGMEUwMzgzNjdDMjY1MDZBODc4 RUI4RDU0NDAeFw0yNjA5MDIwMzQzNTZaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOTc5YjdjLWY5MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6bNbOzjRH2KcFq8nCcy/FE90h3RJN5uAkFv9UtCBzf+9QSJAsAWopOOgHXgT9 uyZc7OsIsDV0OYLrpwdYdXINFhu0w0RWC7WU2Rq5BEVe3NJ0aaPWnxHxpZitIqOF mxena8I5d2mfZhXtvFD0rW60wYxj6+CAf/G3cF2CLYWkeEjH6DB24dgPbfcrLcmp eS7pmKNDlr+ZePrJ41qQ9OA6EnZL9+r761aNCOZZNdZKUbNrdtCTjIqLpsCLLDl3 XphJtc6jCK0mINzlsF62MXGkWBtdXstbb045mW/GzWU9oaLegssti4ioQBO7Ab4P zz+sMU3LBt7A/YlmEGSsOCwnAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUFhhmuiIz 5DiO+KlEtU+Hh35vnikwHwYDVR0jBBgwFoAU1kadVjay7vDgODZ8JlBqh4641UQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NjZDLzBGQTE4NDQyQTY4 MDExRjFBRDhBNjZGNjZCMTFGOTcwLzFrYWRWamF5N3ZEZ09EWjhKbEJxaDQ2NDFV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWthZFZqYXk3dkRnT0RaOEpsQnFoNDY0MVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjY2Qy8wRkExODQ0MkE2ODAxMUYxQUQ4QTY2RjY2QjExRjk3MC84NjM2OTlBOEE2 ODAxMUYxQUU2MEU2MDg2QzExRjk3MC5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBAGjNGAwDwQCAAIwCQMHACABDfdvwDANBgkqhkiG9w0BAQsFAAOCAQEA gjbuQj9epsIx6bV0K2kX6OmxCJ6ufg8aMisLyRGn6sesITuaGwiRWPhhmWCQusJw eoda3dA2rQItcfsPrIBwjwOXoiPBszXqj9H8CLL+FMtvyIceQRig2YhJ9Z4Ai7yM Sdf7jeIIAnBKxsazDS2wW37Jbfiz6sf1gG/87u2zwKCh/FE/8zdipphOGjbSUPn4 fKZ1T6jvEY4O/bF9Ev+MCx+hWJd+qf9/tHmIfzXuTJdhiddRhwnee0wYjTPfcojx 8cTwyr1LMmdxOG6Z77J3xC3Uclaygjz65w+6mdyPMuHrL/361PKxarLTWyrLl+jj LWmnZI057E8mQeuMSeakbQ== -----END CERTIFICATE-----Generated at Sat Sep 26 11:47:57 2026 by rpki-client