$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/5488F6EA0F1A11E9B3F2A713C4F9AE02.roa File: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (raw, json) Hash identifier: Q7TAZCpq4GaWZsd4434Sc8mQwgs5ahUecmF+GwWwTqQ= Subject key identifier: 72:12:BD:26:EF:2F:00:8F:BE:6E:9B:B8:B2:9F:36:AF:BA:73:96:35 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 1278 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/5488F6EA0F1A11E9B3F2A713C4F9AE02.roa Signing time: Thu 24 Sep 2026 07:33:51 +0000 ROA not before: Thu 24 Sep 2026 07:33:50 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133136 IP address blocks: 66.96.219.0/24 maxlen: 24 66.96.220.0/24 maxlen: 24 66.96.221.0/24 maxlen: 24 66.96.223.0/24 maxlen: 24 158.140.151.0/24 maxlen: 24 165.173.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4728 (0x1278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Sep 24 07:33:50 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6ab4d25e-e9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:85:3d:9b:3f:22:9d:7c:5d:be:7c:07:16: 42:ef:e1:a8:91:98:d9:3a:b4:ee:16:b4:f9:50:cc: 4c:72:20:8e:cd:6f:f4:32:f0:55:a2:f7:a0:b0:1b: fa:e8:1b:42:6f:d5:bc:c1:c2:98:b3:fa:90:65:bb: 25:8e:de:5d:fc:a1:11:5d:35:aa:46:51:8e:42:4e: 41:06:40:1a:cb:03:98:0b:a4:03:97:14:21:1f:72: 30:fd:49:78:a4:ab:21:e8:f5:03:5b:0b:30:23:86: 00:ce:28:1c:15:02:fe:80:68:47:16:40:ab:c9:a6: 4d:9b:67:6e:02:25:c8:0c:23:f3:ef:f3:c7:7d:bb: 7c:b6:15:d0:44:50:eb:c0:53:41:21:b8:ad:01:94: f1:a2:c4:75:cd:0f:3a:ad:12:d9:b7:71:a5:25:49: ad:22:a2:eb:df:65:e6:01:7a:72:b2:e7:be:e0:0f: 87:38:24:59:4f:08:bc:2f:8e:29:8c:02:14:a5:cc: 29:14:fe:b9:c8:be:b6:df:50:74:3b:1e:2c:18:73: f8:0d:63:66:4b:d8:90:2d:4f:7f:d4:74:12:71:ed: 5c:36:14:1a:80:96:cc:9a:8d:9b:66:90:cb:e6:d9: 1a:9c:3d:e6:d4:2b:0e:85:9a:c5:e2:2c:f5:c2:5c: 7d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:12:BD:26:EF:2F:00:8F:BE:6E:9B:B8:B2:9F:36:AF:BA:73:96:35 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/5488F6EA0F1A11E9B3F2A713C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 66.96.219.0-66.96.221.255 66.96.223.0/24 158.140.151.0/24 165.173.28.0/24 Signature Algorithm: sha256WithRSAEncryption 87:d1:32:24:1c:cc:85:97:65:71:fe:bb:52:5b:1f:4c:d0:4e: 06:4e:64:90:43:87:d7:75:a0:03:f7:c7:de:f2:54:c7:f9:ee: f6:c8:b8:02:90:d5:ab:96:5e:b8:88:48:4d:79:d7:f1:4c:a2: c6:f9:36:83:59:24:c6:29:0f:04:33:da:d0:f1:ae:5b:4c:1a: ec:5b:72:4c:5e:0e:56:be:39:82:d9:a5:1f:19:ef:6a:f4:47: 44:56:6b:9b:e6:86:a8:71:65:f8:b5:fe:5f:8f:03:db:01:ce: 78:78:eb:1f:2e:24:39:3e:d8:55:c7:39:57:82:ef:cd:f0:e3: 59:81:b2:7e:52:43:df:dd:75:88:fe:b9:cc:1e:23:d0:a6:bf: e9:2d:01:14:bc:c2:0a:c5:74:ff:bc:85:9f:99:68:92:b6:de: 59:39:6f:24:ee:1a:86:65:b7:c5:e6:0f:4e:c2:b3:44:9f:82: 05:09:ce:08:ce:d3:3c:2e:34:c8:83:0c:20:04:04:a1:41:78: ef:5d:00:b2:d6:5c:df:35:a4:ef:7c:2e:14:15:aa:91:c5:10: 1f:56:12:10:b2:ba:86:36:dd:73:9e:ea:9e:dd:08:fe:95:e0: 82:5f:07:da:04:0e:64:18:b7:10:fd:5b:74:fb:70:c6:f3:00: ed:9e:f9:a8 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICEngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjYwOTI0MDczMzUwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI0ZDI1ZS1lOWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3GFPZs/Ip18Xb58BxZC7+GokZjZOrTuFrT5UMxMciCOzW/0MvBVovegsBv6 6BtCb9W8wcKYs/qQZbsljt5d/KERXTWqRlGOQk5BBkAaywOYC6QDlxQhH3Iw/Ul4 pKsh6PUDWwswI4YAzigcFQL+gGhHFkCryaZNm2duAiXIDCPz7/PHfbt8thXQRFDr wFNBIbitAZTxosR1zQ86rRLZt3GlJUmtIqLr32XmAXpysue+4A+HOCRZTwi8L44p jAIUpcwpFP65yL6231B0Ox4sGHP4DWNmS9iQLU9/1HQSce1cNhQagJbMmo2bZpDL 5tkanD3m1CsOhZrF4iz1wlx9NQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFHISvSbv LwCPvm6buLKfNq+6c5Y1MB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY3QkIvQkRGQkYxODYwRTNFMTFFOTgzNkY0MDE0QzRGOUFFMDIvNTQ4OEY2RUEw RjFBMTFFOUIzRjJBNzEzQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgMAwDBABCYNsDBAFCYNwDBABCYN8DBACejJcDBAClrRwwDQYJKoZIhvcN AQELBQADggEBAIfRMiQczIWXZXH+u1JbH0zQTgZOZJBDh9d1oAP3x97yVMf57vbI uAKQ1auWXriISE151/FMosb5NoNZJMYpDwQz2tDxrltMGuxbckxeDla+OYLZpR8Z 72r0R0RWa5vmhqhxZfi1/l+PA9sBznh46x8uJDk+2FXHOVeC783w41mBsn5SQ9/d dYj+ucweI9Cmv+ktARS8wgrFdP+8hZ+ZaJK23lk5byTuGoZlt8XmD07Cs0SfggUJ zgjO0zwuNMiDDCAEBKFBeO9dALLWXN81pO98LhQVqpHFEB9WEhCyuoY23XOe6p7d CP6V4IJfB9oEDmQYtxD9W3T7cMbzAO2e+ag= -----END CERTIFICATE-----Generated at Mon Sep 28 22:48:41 2026 by rpki-client