$ rpki-client -vvvf rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/010F5BB8638A11F1A70F2DF16B47A888.roa File: 010F5BB8638A11F1A70F2DF16B47A888.roa (raw, json) Hash identifier: lOrY+Q0J29akVoE+hKyvdu8HqjM2bjbK3XJtL+cGNeg= Subject key identifier: F7:E0:9F:D6:E0:7D:31:67:06:94:B1:2E:61:CE:14:0F:6E:79:1E:5C Certificate issuer: /CN=A91799DA/serialNumber=05D5AB531AA116ED52984FF4BD45D0D2D8438B68 Certificate serial: 1D Authority key identifier: 05:D5:AB:53:1A:A1:16:ED:52:98:4F:F4:BD:45:D0:D2:D8:43:8B:68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/010F5BB8638A11F1A70F2DF16B47A888.roa Signing time: Wed 29 Jul 2026 10:59:22 +0000 ROA not before: Wed 29 Jul 2026 10:59:22 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 58681 IP address blocks: 166.64.0.0/23 maxlen: 23 166.64.2.0/23 maxlen: 23 166.64.4.0/24 maxlen: 24 166.64.5.0/24 maxlen: 24 166.64.8.0/24 maxlen: 24 166.64.10.0/24 maxlen: 24 166.64.13.0/24 maxlen: 24 166.64.14.0/24 maxlen: 24 166.64.20.0/23 maxlen: 23 166.64.22.0/23 maxlen: 23 166.64.30.0/24 maxlen: 24 166.64.40.0/24 maxlen: 24 166.64.100.0/24 maxlen: 24 166.64.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.crl rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 09:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91799DA, serialNumber=05D5AB531AA116ED52984FF4BD45D0D2D8438B68 Validity Not Before: Jul 29 10:59:22 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a69dd0a-a01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:94:bd:76:d8:02:98:28:43:c8:f3:2c:25:a3: df:f6:e9:08:2a:71:82:67:04:d4:80:42:a6:2b:31: dc:c4:0d:1f:e6:19:68:82:ee:55:93:0e:69:72:88: f1:33:25:59:87:39:7c:40:13:2a:28:71:f5:37:fb: 3e:40:7e:84:30:5a:05:c1:c4:30:f2:6a:97:a2:5c: f5:71:0d:d7:05:53:cb:ee:d7:0f:4e:c5:83:19:d5: 57:c3:27:c5:72:f6:1b:a7:23:aa:a4:6b:d1:52:94: 6d:50:fc:08:ec:d8:0d:83:bd:53:45:a2:af:47:95: 49:92:df:4b:72:11:1a:fc:4d:c9:98:40:b9:32:a7: ad:a6:23:25:70:e8:a6:09:5f:3c:f9:4e:22:b9:1d: d2:99:77:0c:78:ca:a2:6f:c6:e9:c0:fc:6a:da:48: 9a:17:ed:b1:16:64:68:8f:07:b4:85:59:fd:4b:67: a2:f3:69:09:60:8d:78:0b:e2:8d:15:ba:52:23:13: 9a:c5:c2:55:79:6f:01:7e:83:d8:32:d2:54:20:e0: 1f:da:80:a9:b5:2d:30:a1:3a:d1:08:7d:e2:99:8d: 4a:9b:b6:fa:3c:87:4d:60:90:45:47:ae:67:42:77: bd:33:d9:98:c5:e8:2b:e1:7f:39:52:85:3d:2b:5e: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E0:9F:D6:E0:7D:31:67:06:94:B1:2E:61:CE:14:0F:6E:79:1E:5C X509v3 Authority Key Identifier: keyid:05:D5:AB:53:1A:A1:16:ED:52:98:4F:F4:BD:45:D0:D2:D8:43:8B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/010F5BB8638A11F1A70F2DF16B47A888.roa sbgp-ipAddrBlock: critical IPv4: 166.64.0.0-166.64.5.255 166.64.8.0/24 166.64.10.0/24 166.64.13.0-166.64.14.255 166.64.20.0/22 166.64.30.0/24 166.64.40.0/24 166.64.100.0/24 166.64.112.0/24 Signature Algorithm: sha256WithRSAEncryption b9:71:2a:1c:11:59:bb:be:e0:e4:dd:c4:5e:db:6d:8d:6c:d6: 2d:f2:25:55:ee:ed:11:33:f9:75:7a:c5:2a:48:08:58:79:67: a4:1d:21:10:52:93:d5:66:de:9b:b1:80:6e:59:dc:5d:0d:56: db:2b:64:4b:db:ff:6a:de:23:36:9f:31:d9:42:b1:66:59:21: 90:d5:81:e5:c4:bf:4a:0b:57:1f:2c:55:24:8c:56:e0:62:6e: df:fd:97:58:7b:38:57:41:fc:c3:0a:ee:5b:c2:ae:00:58:92: 3b:26:aa:50:27:05:d2:c6:32:79:cb:07:94:90:f4:7a:cc:d8: 9f:00:76:b8:bd:e4:7b:5c:24:c0:2b:21:fd:d8:00:ba:d6:39: 68:3b:5f:96:9b:08:55:32:53:80:07:6f:68:67:25:68:b3:b1: 17:32:7c:80:44:2c:89:25:72:04:7a:5e:52:3d:5c:bb:99:00: 4b:13:35:4d:ca:90:82:f8:d6:44:54:be:44:1b:25:38:78:15: 7a:d7:37:b5:e5:3f:9d:34:f3:a7:1e:8c:c4:30:59:4e:8c:24: 8d:7c:25:0e:1e:4e:7b:ff:66:3c:ec:92:42:52:ed:91:a2:a0: e3:c7:bd:af:e0:5f:53:9f:f4:76:94:92:4f:c0:4f:c4:16:63: 68:dd:c8:a8 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTlEQTExMC8GA1UEBRMoMDVENUFCNTMxQUExMTZFRDUyOTg0RkY0QkQ0NUQwRDJE ODQzOEI2ODAeFw0yNjA3MjkxMDU5MjJaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNjlkZDBhLWEwMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRlL122AKYKEPI8ywlo9/26QgqcYJnBNSAQqYrMdzEDR/mGWiC7lWTDmlyiPEz JVmHOXxAEyoocfU3+z5AfoQwWgXBxDDyapeiXPVxDdcFU8vu1w9OxYMZ1VfDJ8Vy 9hunI6qka9FSlG1Q/Ajs2A2DvVNFoq9HlUmS30tyERr8TcmYQLkyp62mIyVw6KYJ Xzz5TiK5HdKZdwx4yqJvxunA/GraSJoX7bEWZGiPB7SFWf1LZ6LzaQlgjXgL4o0V ulIjE5rFwlV5bwF+g9gy0lQg4B/agKm1LTChOtEIfeKZjUqbtvo8h01gkEVHrmdC d70z2ZjF6CvhfzlShT0rXiN7AgMBAAGjggKfMIICmzAdBgNVHQ4EFgQU9+Cf1uB9 MWcGlLEuYc4UD255HlwwHwYDVR0jBBgwFoAUBdWrUxqhFu1SmE/0vUXQ0thDi2gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5OURBLzY0NUUxMjc4NjM4 OTExRjE5M0JDMjY2MjZBNDdBODg4L0JkV3JVeHFoRnUxU21FXzB2VVhRMHRoRGky Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQmRXclV4cWhGdTFTbUVfMHZVWFEwdGhEaTJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTlEQS82NDVFMTI3ODYzODkxMUYxOTNCQzI2NjI2QTQ3QTg4OC8wMTBGNUJCODYz OEExMUYxQTcwRjJERjE2QjQ3QTg4OC5yb2EwXgYIKwYBBQUHAQcBAf8ETzBNMEsE AgABMEUwCwMDBqZAAwQBpkAEAwQApkAIAwQApkAKMAwDBACmQA0DBACmQA4DBAKm QBQDBACmQB4DBACmQCgDBACmQGQDBACmQHAwDQYJKoZIhvcNAQELBQADggEBALlx KhwRWbu+4OTdxF7bbY1s1i3yJVXu7REz+XV6xSpICFh5Z6QdIRBSk9Vm3puxgG5Z 3F0NVtsrZEvb/2reIzafMdlCsWZZIZDVgeXEv0oLVx8sVSSMVuBibt/9l1h7OFdB /MMK7lvCrgBYkjsmqlAnBdLGMnnLB5SQ9HrM2J8Adri95HtcJMArIf3YALrWOWg7 X5abCFUyU4AHb2hnJWizsRcyfIBELIklcgR6XlI9XLuZAEsTNU3KkIL41kRUvkQb JTh4FXrXN7XlP50086cejMQwWU6MJI18JQ4eTnv/ZjzskkJS7ZGioOPHva/gX1Of 9HaUkk/AT8QWY2jdyKg= -----END CERTIFICATE-----Generated at Sat Oct 3 08:28:19 2026 by rpki-client