$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/89B3D06E0F9111EBA9B90727C4F9AE02.roa File: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (raw, json) Hash identifier: OMJTHEhRKbysqVwaCH/CrR6Pj2ikKlgHxMDDmRLDUbY= Subject key identifier: 45:9D:D6:BA:7B:1C:46:6B:F8:20:A8:70:4C:2A:7F:59:15:20:5D:EC Certificate issuer: /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F Certificate serial: 0833 Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/89B3D06E0F9111EBA9B90727C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:07:51 +0000 ROA not before: Wed 28 Jan 2026 21:17:43 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 55720 IP address blocks: 103.204.4.0/24 maxlen: 24 103.204.5.0/24 maxlen: 24 103.204.6.0/24 maxlen: 24 103.204.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F Validity Not Before: Jan 28 21:17:43 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44837-1428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:c0:90:8d:5e:91:48:60:8a:f1:e1:3f:08: ae:c7:6a:c1:8b:b5:6d:ca:04:65:b2:75:91:8d:9a: b4:57:6d:69:f4:78:b0:98:74:36:15:e9:1c:8c:75: 18:87:8b:c5:e4:af:04:97:72:18:0a:c9:f2:fc:d1: e4:6a:27:15:e4:6e:f1:6e:9c:30:b4:c1:1d:47:53: 03:a3:5c:18:92:b5:0d:d1:c4:71:dc:a9:4c:de:02: 8e:76:39:66:a4:1a:42:06:68:4a:f3:b6:35:66:9b: dc:7a:2b:4a:cf:87:22:e5:e0:71:ac:e0:98:9e:10: 6e:28:13:7d:d2:9a:25:da:d1:ba:75:44:fb:27:e4: cc:c4:4d:cf:23:0d:7f:a9:31:8d:47:b4:24:bf:32: 7d:71:f7:23:84:58:53:f8:34:bf:5e:7d:37:6a:84: a1:6e:6c:0e:1e:57:3b:a2:0f:38:8f:9d:99:87:ed: 17:be:57:47:51:17:2f:a9:86:48:95:fc:a2:e2:22: af:26:e2:7e:03:aa:07:e8:ae:df:06:63:ee:39:7e: 14:65:62:43:cf:1d:10:74:ab:c2:24:d0:a2:4a:0e: bd:e8:40:0a:68:f8:65:43:8b:8a:60:eb:68:1b:e3: 78:11:56:7c:9d:ec:32:86:43:c9:b7:94:86:67:4a: 1c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9D:D6:BA:7B:1C:46:6B:F8:20:A8:70:4C:2A:7F:59:15:20:5D:EC X509v3 Authority Key Identifier: keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/89B3D06E0F9111EBA9B90727C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.204.4.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:cf:7c:6b:46:7c:c0:18:79:3d:30:e0:0d:90:71:63:f9:f6: 53:ea:88:d5:22:2a:78:ab:42:2e:1b:3b:e4:fc:44:93:e5:e9: fe:3c:ba:f1:fa:c4:a1:1c:d4:87:5d:29:e2:c0:ad:a7:71:cf: ee:17:8c:66:f0:da:82:f2:b8:1b:22:7f:ac:e4:e4:4f:6e:c5: 3e:94:7d:e4:f1:9f:2e:df:d9:3c:81:49:52:42:ca:b2:76:5c: 0d:cf:9c:97:2e:8a:2b:d7:5f:39:e7:93:6f:3f:ed:32:c1:16: 53:18:ec:64:f2:30:76:5b:ed:73:42:d3:73:8e:53:f9:16:e3: 1b:70:1e:0d:86:53:5b:bb:71:0b:1e:d3:f4:39:9f:3f:65:2a: 56:0a:8b:6b:e8:b3:45:8b:93:68:40:8a:ad:f9:7d:e0:8f:1e: 88:0d:99:ee:74:ab:54:76:0c:01:d7:01:d3:5b:12:72:fb:45: 99:f4:af:62:65:8d:4d:a2:47:6c:8b:a3:b6:07:af:3d:df:af: f3:e0:49:07:ac:42:de:68:ef:bc:86:81:a0:91:b2:ac:4d:09: a4:e8:61:b9:a1:df:08:a8:b9:4b:84:4d:a2:0b:89:70:6c:7a: 6b:db:0b:9e:c9:86:2b:6e:39:28:30:be:23:5b:b0:5a:fa:c2: 73:bd:3d:11 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5RUQxMTAvBgNVBAUTKDY4OEJCMDU5NUY1OTVCNzExRTAyNDUwQUNFRTNCMjZD MTEzQjc5MkYwHhcNMjYwMTI4MjExNzQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDgzNy0xNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslnAkI1ekUhgivHhPwiux2rBi7VtygRlsnWRjZq0V21p9HiwmHQ2FekcjHUY h4vF5K8El3IYCsny/NHkaicV5G7xbpwwtMEdR1MDo1wYkrUN0cRx3KlM3gKOdjlm pBpCBmhK87Y1ZpvceitKz4ci5eBxrOCYnhBuKBN90pol2tG6dUT7J+TMxE3PIw1/ qTGNR7QkvzJ9cfcjhFhT+DS/Xn03aoShbmwOHlc7og84j52Zh+0XvldHURcvqYZI lfyi4iKvJuJ+A6oH6K7fBmPuOX4UZWJDzx0QdKvCJNCiSg696EAKaPhlQ4uKYOto G+N4EVZ8newyhkPJt5SGZ0ocPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEWd1rp7 HEZr+CCocEwqf1kVIF3sMB8GA1UdIwQYMBaAFGiLsFlfWVtxHgJFCs7jsmwRO3kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFRC9CNzcxNEI5NjA5 MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5WlczRWVBa1VLenVPeWJCRTdl UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJdXdXVjlaVzNFZUFrVUt6dU95YkJFN2VTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ5RUQvQjc3MTRCOTYwOTE4MTFFQjk1RkEyNzM3QzRGOUFFMDIvODlCM0QwNkUw RjkxMTFFQkE5QjkwNzI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ8wEMA0GCSqGSIb3DQEBCwUAA4IBAQCbz3xrRnzAGHk9MOANkHFj +fZT6ojVIip4q0IuGzvk/EST5en+PLrx+sShHNSHXSniwK2ncc/uF4xm8NqC8rgb In+s5ORPbsU+lH3k8Z8u39k8gUlSQsqydlwNz5yXLoor118555NvP+0ywRZTGOxk 8jB2W+1zQtNzjlP5FuMbcB4NhlNbu3ELHtP0OZ8/ZSpWCotr6LNFi5NoQIqt+X3g jx6IDZnudKtUdgwB1wHTWxJy+0WZ9K9iZY1Nokdsi6O2B68936/z4EkHrELeaO+8 hoGgkbKsTQmk6GG5od8IqLlLhE2iC4lwbHpr2wueyYYrbjkoML4jW7Ba+sJzvT0R -----END CERTIFICATE-----Generated at Mon Mar 2 07:45:22 2026 by rpki-client