$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/66CD6F9ABDFC11F1B207CBD64F11F970.roa File: 66CD6F9ABDFC11F1B207CBD64F11F970.roa (raw, json) Hash identifier: 9WnX4HFiq5y+9douQl6UFDjbnWFYfP9zLlEJUmTTy00= Subject key identifier: 28:86:6F:0F:2F:55:31:90:92:17:EE:40:C7:5E:27:9D:59:DF:8E:A4 Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Certificate serial: 0715 Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/66CD6F9ABDFC11F1B207CBD64F11F970.roa Signing time: Fri 02 Oct 2026 00:58:38 +0000 ROA not before: Fri 02 Oct 2026 00:58:38 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 134143 IP address blocks: 14.102.164.0/24 maxlen: 24 14.102.165.0/24 maxlen: 24 14.102.166.0/24 maxlen: 24 45.248.196.0/22 maxlen: 24 103.4.55.0/24 maxlen: 24 103.55.92.0/24 maxlen: 24 103.55.93.0/24 maxlen: 24 103.55.94.0/24 maxlen: 24 103.55.95.0/24 maxlen: 24 103.133.52.0/22 maxlen: 24 103.217.164.0/22 maxlen: 24 103.228.104.0/22 maxlen: 24 2405:e180::/28 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 22:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Validity Not Before: Oct 2 00:58:38 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6abf01be-7801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:a1:a2:8c:78:9c:14:f1:f1:6d:76:de:ca: 21:2b:95:38:25:d6:31:de:bd:ef:80:63:3f:8b:70: 59:b3:28:12:f2:55:18:56:ff:f9:3e:30:17:d3:fe: f2:fa:50:41:a3:2b:4b:48:9d:d8:b7:02:6b:e7:2e: 0b:57:de:9a:4e:65:45:5f:bd:81:4c:91:4b:09:ec: f1:11:5b:1d:88:51:56:08:c1:20:c3:0c:48:8f:ca: ad:95:2c:77:09:90:1b:ca:1e:10:3b:ef:f4:93:37: db:9e:cc:09:31:19:db:19:30:df:36:ef:bd:f8:00: 04:69:b8:aa:67:45:72:e5:28:d4:b7:a3:1b:c6:44: 14:4d:f7:e6:46:b5:75:05:3d:48:41:90:c1:e9:69: 37:a5:ff:a9:26:1a:84:d5:6c:e2:24:84:d4:f8:13: 15:53:64:b4:79:aa:48:1c:6b:d2:58:99:9a:6f:43: c9:f3:e9:9c:b8:b7:54:e5:33:bd:fc:78:0e:06:04: db:2b:1c:b3:6a:ac:4d:3b:79:20:10:ae:8a:d7:f9: 02:b4:67:c7:2c:7b:8e:90:c7:c9:4c:6c:49:ff:15: f6:f2:fc:c6:9f:3f:8f:7a:7a:81:ef:9d:ed:cf:25: 1a:ca:c4:0c:c1:76:e7:23:f6:74:99:64:9b:d6:4d: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:86:6F:0F:2F:55:31:90:92:17:EE:40:C7:5E:27:9D:59:DF:8E:A4 X509v3 Authority Key Identifier: keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/66CD6F9ABDFC11F1B207CBD64F11F970.roa sbgp-ipAddrBlock: critical IPv4: 14.102.164.0-14.102.166.255 45.248.196.0/22 103.4.55.0/24 103.55.92.0/22 103.133.52.0/22 103.217.164.0/22 103.228.104.0/22 IPv6: 2405:e180::/28 Signature Algorithm: sha256WithRSAEncryption 35:d2:bc:02:83:db:5e:28:bf:95:d8:0f:ab:14:8a:25:8c:11: 8e:f4:5c:81:2b:9a:e4:ce:03:c9:0e:7b:97:cf:ea:aa:0a:87: 41:bd:0c:bb:72:5e:f4:16:77:98:58:3b:72:37:9c:0a:60:7d: e5:36:21:c8:46:66:4c:8d:ef:cb:77:6c:16:a6:83:37:4b:0a: 88:95:f0:9f:7d:00:5c:6e:e3:1e:09:ae:dd:6c:9a:a9:0e:0c: 0b:d2:d8:7b:c5:61:0d:81:f8:c9:5f:4a:57:bd:46:34:de:90: 72:df:bb:12:24:e1:10:d3:d1:d2:e5:33:ce:a9:ad:bb:15:03: 86:fc:49:c4:3e:0b:f6:de:be:46:0c:d6:ad:18:3c:61:c6:bb: cd:33:e8:5f:53:87:75:e3:32:01:03:4b:df:14:06:13:e0:d9: 77:c7:52:ae:77:e8:b2:0d:08:f2:df:09:b9:fd:0d:bd:0d:b4: b9:63:5c:df:08:1c:95:31:5f:e1:df:71:4a:fd:50:0f:7d:5b: 53:f1:6e:af:d2:a3:73:7f:64:d4:e4:50:79:b1:0a:65:13:f7: 68:61:15:91:e5:20:44:cc:6a:d7:85:23:27:f3:83:59:86:d3: 38:04:ca:8b:43:65:e1:6c:0d:71:b2:02:72:ba:6f:67:3b:eb: ee:aa:28:cd -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVBM0JBMjI1Nzc5 MzU3NTcwRDcwHhcNMjYxMDAyMDA1ODM4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmMDFiZS03ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI6hoox4nBTx8W123sohK5U4JdYx3r3vgGM/i3BZsygS8lUYVv/5PjAX0/7y +lBBoytLSJ3YtwJr5y4LV96aTmVFX72BTJFLCezxEVsdiFFWCMEgwwxIj8qtlSx3 CZAbyh4QO+/0kzfbnswJMRnbGTDfNu+9+AAEabiqZ0Vy5SjUt6MbxkQUTffmRrV1 BT1IQZDB6Wk3pf+pJhqE1WziJITU+BMVU2S0eapIHGvSWJmab0PJ8+mcuLdU5TO9 /HgOBgTbKxyzaqxNO3kgEK6K1/kCtGfHLHuOkMfJTGxJ/xX28vzGnz+PenqB753t zyUaysQMwXbnI/Z0mWSb1k3DlQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCiGbw8v VTGQkhfuQMdeJ51Z346kMB8GA1UdIwQYMBaAFOw2r1l5CRxr+lgOo7oiV3k1dXDX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC9EM0MwMTkwQ0JC OUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhHdjZXQTZqdWlKWGVUVjFj TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEYXZXWGtKSEd2NldBNmp1aUpYZVRWMWNOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc1NzgvRDNDMDE5MENCQjlEMTFFQjg0RjczQjNBQzRGOUFFMDIvNjZDRDZGOUFC REZDMTFGMUIyMDdDQkQ2NEYxMUY5NzAucm9hMFoGCCsGAQUFBwEHAQH/BEswSTA4 BAIAATAyMAwDBAIOZqQDBAAOZqYDBAIt+MQDBABnBDcDBAJnN1wDBAJnhTQDBAJn 2aQDBAJn5GgwDQQCAAIwBwMFBCQF4YAwDQYJKoZIhvcNAQELBQADggEBADXSvAKD 214ov5XYD6sUiiWMEY70XIErmuTOA8kOe5fP6qoKh0G9DLtyXvQWd5hYO3I3nApg feU2IchGZkyN78t3bBamgzdLCoiV8J99AFxu4x4Jrt1smqkODAvS2HvFYQ2B+Mlf Sle9RjTekHLfuxIk4RDT0dLlM86prbsVA4b8ScQ+C/bevkYM1q0YPGHGu80z6F9T h3XjMgEDS98UBhPg2XfHUq536LINCPLfCbn9Db0NtLljXN8IHJUxX+HfcUr9UA99 W1Pxbq/So3N/ZNTkUHmxCmUT92hhFZHlIETMateFIyfzg1mG0zgEyotDZeFsDXGy AnK6b2c76+6qKM0= -----END CERTIFICATE-----Generated at Wed Oct 7 11:54:14 2026 by rpki-client