$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/BF0C3468A27A11F1846886F86811F970.roa File: BF0C3468A27A11F1846886F86811F970.roa (raw, json) Hash identifier: HiBw6l9Sxo7Rrs0kPz6lX0/bPt6FCdr2birEHDIBD+E= Subject key identifier: 8F:33:45:A4:8D:EA:6F:29:C0:58:F8:E3:34:B8:DA:78:7E:CD:A1:75 Certificate issuer: /CN=A91FCA43/serialNumber=BD85A27EA037CE1BDA4B0B21F4F040D9B1D3E778 Certificate serial: 09 Authority key identifier: BD:85:A2:7E:A0:37:CE:1B:DA:4B:0B:21:F4:F0:40:D9:B1:D3:E7:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/BF0C3468A27A11F1846886F86811F970.roa Signing time: Fri 28 Aug 2026 00:53:02 +0000 ROA not before: Fri 28 Aug 2026 00:53:02 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 151078 IP address blocks: 163.52.65.0/24 maxlen: 24 2001:df7:68c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.crl rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA43, serialNumber=BD85A27EA037CE1BDA4B0B21F4F040D9B1D3E778 Validity Not Before: Aug 28 00:53:02 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a90dbee-99ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:13:52:b6:53:8a:f4:bd:4c:bd:22:fc:91: 03:f3:01:06:f6:98:63:51:85:ad:9c:6f:60:77:0f: 3f:71:63:cb:e8:50:c1:74:97:93:11:8d:ed:5d:e9: cf:26:e2:6f:e0:49:7e:fb:6d:d9:f7:e1:50:3d:b1: fa:7a:74:a8:fa:2a:0f:9e:92:c0:b0:3b:21:aa:38: df:dd:25:92:bd:39:13:09:2b:e5:fa:d9:52:31:f0: 5c:28:f2:4e:36:ef:74:61:3a:dc:77:58:9c:00:db: 8f:07:6d:e4:03:8f:9f:0c:22:b0:a6:b9:f0:77:67: ba:9f:3a:a1:2a:be:c2:13:03:11:49:2e:dc:08:6b: 4c:fd:27:19:bc:82:c4:be:e6:62:4b:7b:bd:55:63: 66:8d:18:44:e8:ed:d2:c9:ed:46:24:8b:9f:29:c6: d2:8e:91:76:a1:46:4b:a1:99:e5:5f:f2:af:3a:bf: 17:4b:80:f6:e4:71:09:3b:3f:0a:92:ee:e1:1b:df: fe:6e:83:33:88:3d:34:dc:8c:bc:7e:ce:aa:a9:0c: 42:ed:2c:a2:f7:91:23:7b:ec:7d:37:28:6d:d2:d4: b8:4b:5a:ad:f0:cd:d2:aa:05:da:5e:3e:ef:ff:69: 54:4c:28:8f:ca:09:4c:ca:d7:77:16:d2:07:85:37: 87:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:33:45:A4:8D:EA:6F:29:C0:58:F8:E3:34:B8:DA:78:7E:CD:A1:75 X509v3 Authority Key Identifier: keyid:BD:85:A2:7E:A0:37:CE:1B:DA:4B:0B:21:F4:F0:40:D9:B1:D3:E7:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/BF0C3468A27A11F1846886F86811F970.roa sbgp-ipAddrBlock: critical IPv4: 163.52.65.0/24 IPv6: 2001:df7:68c0::/48 Signature Algorithm: sha256WithRSAEncryption 25:0b:45:e9:52:00:e8:af:3f:81:4c:9b:35:00:b7:a2:57:eb: ab:4a:51:c9:14:c0:95:76:1c:af:f4:9a:37:12:ee:55:bb:7f: 85:15:d2:ed:71:f1:7d:e4:9e:da:58:b8:6a:86:af:bd:84:1c: 60:5a:95:45:f2:4b:fd:e1:3a:9e:97:16:5e:b6:95:98:aa:9c: 30:26:71:c4:bb:55:89:9c:73:87:06:77:18:c8:cb:7e:26:f2: 5c:5e:5a:70:bb:97:1d:04:0f:c6:37:f6:d9:77:b3:1f:a0:4b: 58:21:c0:f0:4f:2f:8c:8a:ac:71:f1:cd:e4:26:83:91:e2:02: 8a:7a:43:20:89:76:aa:0c:21:25:23:04:a7:30:b4:fa:8d:d9: eb:56:0b:51:7d:95:55:35:c4:ba:a8:74:c5:94:e0:6c:0c:8f: 60:24:6e:8c:62:3b:cb:95:41:b7:e6:d5:0d:f7:bb:0c:f6:a9: d7:1a:fe:3d:63:2a:a2:fb:83:9b:62:f7:bf:63:c8:6c:db:5c: c4:70:38:9b:d9:0d:10:d0:76:ee:ff:6e:80:59:01:95:78:f8: e4:bf:a0:5a:c9:0c:77:7e:53:0e:85:d4:6d:9b:9c:e4:d2:26: c5:43:75:29:a7:84:f0:be:47:d2:d3:01:9c:34:d9:88:30:85: c0:ee:39:63 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0E0MzExMC8GA1UEBRMoQkQ4NUEyN0VBMDM3Q0UxQkRBNEIwQjIxRjRGMDQwRDlC MUQzRTc3ODAeFw0yNjA4MjgwMDUzMDJaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOTBkYmVlLTk5YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL5BNStlOK9L1MvSL8kQPzAQb2mGNRha2cb2B3Dz9xY8voUMF0l5MRje1d6c8m 4m/gSX77bdn34VA9sfp6dKj6Kg+eksCwOyGqON/dJZK9ORMJK+X62VIx8Fwo8k42 73RhOtx3WJwA248HbeQDj58MIrCmufB3Z7qfOqEqvsITAxFJLtwIa0z9Jxm8gsS+ 5mJLe71VY2aNGETo7dLJ7UYki58pxtKOkXahRkuhmeVf8q86vxdLgPbkcQk7PwqS 7uEb3/5ugzOIPTTcjLx+zqqpDELtLKL3kSN77H03KG3S1LhLWq3wzdKqBdpePu// aVRMKI/KCUzK13cW0geFN4dhAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUjzNFpI3q bynAWPjjNLjaeH7NoXUwHwYDVR0jBBgwFoAUvYWifqA3zhvaSwsh9PBA2bHT53gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTQzLzI5NEI5NkRBQTIw NzExRjFBMjI2Qjc2NTQ2MTFGOTcwL3ZZV2lmcUEzemh2YVN3c2g5UEJBMmJIVDUz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdllXaWZxQTN6aHZhU3dzaDlQQkEyYkhUNTNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0E0My8yOTRCOTZEQUEyMDcxMUYxQTIyNkI3NjU0NjExRjk3MC9CRjBDMzQ2OEEy N0ExMUYxODQ2ODg2Rjg2ODExRjk3MC5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBACjNEEwDwQCAAIwCQMHACABDfdowDANBgkqhkiG9w0BAQsFAAOCAQEA JQtF6VIA6K8/gUybNQC3olfrq0pRyRTAlXYcr/SaNxLuVbt/hRXS7XHxfeSe2li4 aoavvYQcYFqVRfJL/eE6npcWXraVmKqcMCZxxLtViZxzhwZ3GMjLfibyXF5acLuX HQQPxjf22XezH6BLWCHA8E8vjIqscfHN5CaDkeICinpDIIl2qgwhJSMEpzC0+o3Z 61YLUX2VVTXEuqh0xZTgbAyPYCRujGI7y5VBt+bVDfe7DPap1xr+PWMqovuDm2L3 v2PIbNtcxHA4m9kNENB27v9ugFkBlXj45L+gWskMd35TDoXUbZuc5NImxUN1KaeE 8L5H0tMBnDTZiDCFwO45Yw== -----END CERTIFICATE-----Generated at Mon Sep 28 23:31:53 2026 by rpki-client