$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/33C6FEEAC70211F186E087D25611F970.roa File: 33C6FEEAC70211F186E087D25611F970.roa (raw, json) Hash identifier: zAnjqWiBbAkIRoKtvXg3c1MkKetO8NiHr5vsv+d/4qw= Subject key identifier: 8E:33:43:74:F9:ED:91:E1:8F:B1:6B:7E:F5:00:B6:FE:8E:48:15:89 Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Certificate serial: F2 Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/33C6FEEAC70211F186E087D25611F970.roa Signing time: Tue 13 Oct 2026 12:32:50 +0000 ROA not before: Tue 13 Oct 2026 12:32:50 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 137453 IP address blocks: 202.136.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Validity Not Before: Oct 13 12:32:50 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ace24f2-558c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:20:5f:d5:46:b3:3f:ed:68:3a:74:2b:3c: 72:8f:10:1f:1e:b5:fd:85:c2:11:cd:db:f4:1d:64: 67:72:65:36:2d:ec:1a:94:a8:b3:43:68:df:12:d5: 74:b4:e3:d5:7f:ec:ed:d7:c5:a4:0d:65:aa:ab:99: 2a:3f:c6:8e:48:dd:87:90:b4:05:19:1c:1d:f4:b4: c8:94:29:e2:71:d5:c0:2b:a5:f0:d4:82:21:c4:df: f2:8c:c5:ef:45:c2:f6:da:92:29:1a:81:0b:75:d9: be:17:e3:90:58:77:61:c0:c1:9e:2b:7e:db:11:91: 18:da:b4:6e:18:ff:33:fc:4b:46:7e:20:77:e4:28: a8:17:83:93:4a:f4:63:ef:b3:bc:07:76:e8:e1:bf: 5d:77:ad:8a:77:b2:f8:2a:75:07:2d:36:a9:71:65: 61:6d:f0:e2:f0:0b:c1:62:5f:6d:2d:88:7a:ee:27: 03:a8:2c:90:2b:75:84:73:4d:23:ab:43:77:43:cf: d1:d5:4e:c5:34:f2:88:3d:2a:a8:15:9a:bc:d7:b4: 84:12:7b:f6:6d:08:c7:a7:0a:36:44:cb:07:71:aa: b4:74:ab:c6:6b:cb:d3:52:29:27:68:55:48:67:89: 88:2a:9f:01:6b:87:13:61:9d:ca:b6:4d:3a:1b:6a: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:33:43:74:F9:ED:91:E1:8F:B1:6B:7E:F5:00:B6:FE:8E:48:15:89 X509v3 Authority Key Identifier: keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/33C6FEEAC70211F186E087D25611F970.roa sbgp-ipAddrBlock: critical IPv4: 202.136.75.0/24 Signature Algorithm: sha256WithRSAEncryption 44:d6:19:16:1a:54:d3:c9:53:e4:38:93:6f:18:b5:45:6e:f6: da:2f:33:27:ea:82:69:3b:df:ea:c4:85:d7:0c:4c:71:1f:50: 1c:17:c0:e9:fe:25:89:60:e0:48:da:fa:b2:9f:1a:fe:d4:4d: 75:04:52:e6:db:4b:e7:88:a0:ca:b3:5c:91:71:5b:7c:42:33: aa:ff:07:5f:f9:e2:73:18:fa:9c:03:0a:c5:01:f7:07:01:ed: 78:b1:a3:94:d5:83:c4:71:47:cf:4e:de:17:54:c4:a4:5f:47: 1b:4f:db:31:ad:bd:7c:69:5f:d3:cb:f7:5f:19:48:cb:b4:62: 09:72:44:f6:71:0a:a6:5a:51:22:75:e3:ad:f3:f7:f3:b5:5e: bb:75:04:ee:e4:39:08:1f:45:da:8f:68:f5:76:b9:0e:f4:78: 4e:4a:59:36:96:e4:6a:5a:ff:9c:ab:d5:d8:ec:bb:ed:21:bb: e2:a3:cc:3c:14:f2:0e:6e:4b:cd:42:b1:bb:da:61:70:70:ae: bc:bb:35:02:de:f0:44:56:96:4c:a1:e8:b6:76:ea:9d:ec:8b: 23:db:a5:9d:04:e0:55:82:7f:d2:58:77:8e:7e:05:5c:c4:ac: 5b:57:b0:47:e3:14:32:65:8c:d3:b6:60:37:66:b3:60:d6:80: 9d:2a:9a:d6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwODcxMTAvBgNVBAUTKDg1MTAwRTVBMUZCQUU1RkUxQTY1Q0JGMTU3MzQxMzBB OEU1NDFCQjIwHhcNMjYxMDEzMTIzMjUwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNlMjRmMi01NThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdcgX9VGsz/taDp0KzxyjxAfHrX9hcIRzdv0HWRncmU2LewalKizQ2jfEtV0 tOPVf+zt18WkDWWqq5kqP8aOSN2HkLQFGRwd9LTIlCnicdXAK6Xw1IIhxN/yjMXv RcL22pIpGoELddm+F+OQWHdhwMGeK37bEZEY2rRuGP8z/EtGfiB35CioF4OTSvRj 77O8B3bo4b9dd62Kd7L4KnUHLTapcWVhbfDi8AvBYl9tLYh67icDqCyQK3WEc00j q0N3Q8/R1U7FNPKIPSqoFZq817SEEnv2bQjHpwo2RMsHcaq0dKvGa8vTUiknaFVI Z4mIKp8Ba4cTYZ3Ktk06G2o1GQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI4zQ3T5 7ZHhj7FrfvUAtv6OSBWJMB8GA1UdIwQYMBaAFIUQDlofuuX+GmXL8Vc0EwqOVBuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA4Ny80ODg4MzEzMjhF QUExMUYwQjgzNTI5NDlDNEY5QUUwMi9oUkFPV2gtNjVmNGFaY3Z4VnpRVENvNVVH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hSQU9XaC02NWY0YVpjdnhWelFUQ281VUc3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjMwODcvNDg4ODMxMzI4RUFBMTFGMEI4MzUyOTQ5QzRGOUFFMDIvMzNDNkZFRUFD NzAyMTFGMTg2RTA4N0QyNTYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyohLMA0GCSqGSIb3DQEBCwUAA4IBAQBE1hkWGlTTyVPkOJNvGLVF bvbaLzMn6oJpO9/qxIXXDExxH1AcF8Dp/iWJYOBI2vqynxr+1E11BFLm20vniKDK s1yRcVt8QjOq/wdf+eJzGPqcAwrFAfcHAe14saOU1YPEcUfPTt4XVMSkX0cbT9sx rb18aV/Ty/dfGUjLtGIJckT2cQqmWlEideOt8/fztV67dQTu5DkIH0Xaj2j1drkO 9HhOSlk2luRqWv+cq9XY7LvtIbvio8w8FPIObkvNQrG72mFwcK68uzUC3vBEVpZM oei2duqd7Isj26WdBOBVgn/SWHeOfgVcxKxbV7BH4xQyZYzTtmA3ZrNg1oCdKprW -----END CERTIFICATE-----Generated at Tue Oct 27 15:34:09 2026 by rpki-client