$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/966FD4648D2411EF9914EF63C4F9AE02.roa File: 966FD4648D2411EF9914EF63C4F9AE02.roa (raw, json) Hash identifier: jHzcYJ90DjGoipsCrkdoqarlimj3fDzkOjXCClEv3uY= Subject key identifier: 5F:06:82:A9:22:6F:18:87:5B:60:0B:29:6E:D1:11:F3:57:E0:A2:79 Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0C4E Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/966FD4648D2411EF9914EF63C4F9AE02.roa Signing time: Fri 10 Jul 2026 20:20:29 +0000 ROA not before: Fri 10 Jul 2026 20:20:29 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 17819 IP address blocks: 101.97.33.0/24 maxlen: 24 101.97.38.0/24 maxlen: 24 202.177.216.0/24 maxlen: 24 2404:4f00::/32 maxlen: 32 2404:4f00::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Jul 10 20:20:29 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a51540d-6306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:40:12:d5:b4:4d:56:a7:4a:9a:0a:a9:0a:2e: 49:13:d0:7f:e5:fb:2d:00:1d:46:dc:fd:40:37:67: 92:35:ab:a0:4d:56:52:1e:f3:d4:3d:bb:d4:87:f6: f3:c4:87:7e:a2:36:a1:56:0f:61:75:07:e4:f2:93: ba:d9:5b:32:01:fd:c7:8b:cb:ec:eb:0f:bf:5a:4d: d6:70:68:3f:81:7b:a4:9c:87:0d:01:af:6b:d5:85: 06:77:39:75:82:06:1b:b2:87:f8:93:30:9c:93:1f: ac:1f:0d:88:e5:94:dc:c6:51:eb:2e:12:31:ca:34: d4:8c:8d:0b:81:86:23:e4:a3:0d:2e:ec:4d:cf:5c: ec:eb:f0:32:fd:f2:42:ec:9c:96:3b:61:57:cd:c2: ab:09:5c:6e:e5:9a:7e:bd:c1:e8:d6:33:cb:4c:34: cd:6e:c3:19:d5:5f:90:a2:18:6a:94:54:d7:6b:f1: 27:aa:48:ff:62:1e:b8:95:2a:49:9a:36:5d:dd:15: ad:1e:c8:e5:75:9c:e2:8c:9c:5a:d7:02:95:9b:ab: bf:d8:88:8a:cf:e0:7b:53:79:44:5e:c4:09:8a:9a: 14:85:2f:fe:82:37:5c:05:ac:58:f3:37:7d:c6:7a: af:fb:5b:34:52:01:79:83:b1:a2:38:e9:b2:0d:22: c5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:06:82:A9:22:6F:18:87:5B:60:0B:29:6E:D1:11:F3:57:E0:A2:79 X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/966FD4648D2411EF9914EF63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.97.33.0/24 101.97.38.0/24 202.177.216.0/24 IPv6: 2404:4f00::/32 Signature Algorithm: sha256WithRSAEncryption 41:77:8d:ff:2f:8f:f1:fe:1a:e7:02:61:dd:02:2a:b6:ee:a3: 0e:b2:00:7b:1d:4a:03:b5:72:60:75:9e:82:f9:7c:59:1d:a3: 86:1f:ce:09:2c:f3:49:43:79:90:d2:00:ba:06:50:dc:b8:89: 02:42:ae:66:11:da:16:b3:16:d0:fd:d0:03:78:87:79:0b:5d: 29:ef:cc:83:30:10:84:ef:06:d1:b3:c9:00:51:05:9d:b3:8e: aa:8b:e0:4d:99:54:fe:8a:9c:62:b5:31:4c:db:7e:67:c9:bf: fa:ae:7b:9c:f1:64:f8:39:4c:48:82:8b:88:c5:59:7c:ce:f1: ff:9a:60:e6:da:4d:f3:78:cc:52:c9:af:c7:b1:68:ba:46:e1: 78:89:79:3a:a6:c7:dd:e4:8d:cf:02:56:9e:4a:19:1c:f3:02: 47:43:c8:ab:5e:9a:79:5f:64:78:60:37:57:9c:70:23:81:9d: fa:4a:69:85:06:a2:9e:04:e0:d3:e8:3e:f0:96:1d:6f:7d:1d: ea:f3:3a:0a:3d:1a:78:01:5c:9e:4b:39:4a:d5:a7:4e:1d:25: 7d:ca:65:e0:39:23:29:a3:9f:c6:fe:44:89:16:a8:62:97:1d: f8:e9:c5:9b:b6:67:90:2e:87:74:8f:76:75:b6:99:5f:1b:6f: 3f:2e:6e:3d -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjYwNzEwMjAyMDI5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTUxNTQwZC02MzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kAS1bRNVqdKmgqpCi5JE9B/5fstAB1G3P1AN2eSNaugTVZSHvPUPbvUh/bz xId+ojahVg9hdQfk8pO62VsyAf3Hi8vs6w+/Wk3WcGg/gXuknIcNAa9r1YUGdzl1 ggYbsof4kzCckx+sHw2I5ZTcxlHrLhIxyjTUjI0LgYYj5KMNLuxNz1zs6/Ay/fJC 7JyWO2FXzcKrCVxu5Zp+vcHo1jPLTDTNbsMZ1V+QohhqlFTXa/Enqkj/Yh64lSpJ mjZd3RWtHsjldZzijJxa1wKVm6u/2IiKz+B7U3lEXsQJipoUhS/+gjdcBaxY8zd9 xnqv+1s0UgF5g7GiOOmyDSLFZQIDAQABo4ICezCCAncwHQYDVR0OBBYEFF8Ggqki bxiHW2ALKW7REfNX4KJ5MB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U1NTgvM0RGMTRGMDg1Mzk0MTFFQUJGNkI0RjVGQzRGOUFFMDIvOTY2RkQ0NjQ4 RDI0MTFFRjk5MTRFRjYzQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZWEhAwQAZWEmAwQAyrHYMA0EAgACMAcDBQAkBE8AMA0GCSqGSIb3 DQEBCwUAA4IBAQBBd43/L4/x/hrnAmHdAiq27qMOsgB7HUoDtXJgdZ6C+XxZHaOG H84JLPNJQ3mQ0gC6BlDcuIkCQq5mEdoWsxbQ/dADeId5C10p78yDMBCE7wbRs8kA UQWds46qi+BNmVT+ipxitTFM235nyb/6rnuc8WT4OUxIgouIxVl8zvH/mmDm2k3z eMxSya/HsWi6RuF4iXk6psfd5I3PAlaeShkc8wJHQ8irXpp5X2R4YDdXnHAjgZ36 SmmFBqKeBODT6D7wlh1vfR3q8zoKPRp4AVyeSzlK1adOHSV9ymXgOSMpo5/G/kSJ Fqhilx346cWbtmeQLod0j3Z1tplfG28/Lm49 -----END CERTIFICATE-----Generated at Fri Jul 24 06:56:55 2026 by rpki-client