$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/89654CDAB83B11EFAA80DD09C4F9AE02.roa File: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (raw, json) Hash identifier: Y2B9BXK6GgEUgrdOgkuvUr+OvwRamCav5yIYFYLKyOo= Subject key identifier: 14:47:CA:67:25:F6:E8:4F:C3:0B:A7:4B:80:86:A9:64:A6:1B:78:C3 Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Certificate serial: 1DDA Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/89654CDAB83B11EFAA80DD09C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:49:12 +0000 ROA not before: Wed 18 Feb 2026 16:13:52 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 396982 IP address blocks: 202.144.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7642 (0x1dda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Validity Not Before: Feb 18 16:13:52 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47c18-9528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:82:54:29:40:e0:33:00:1c:80:0d:96:3f: 34:40:c1:11:43:c1:0d:0d:9a:a1:16:97:87:47:6f: 41:4a:77:9c:e9:c0:79:e9:e9:d6:0d:87:7c:cb:cc: b7:d5:ef:0a:82:23:6f:65:2f:ed:9e:ef:fb:d8:c7: ca:52:18:b4:52:0b:ba:c7:f4:b9:5e:46:b7:09:e9: aa:e3:c2:e2:ad:dc:a8:91:ba:a1:a8:c5:2f:5a:9d: 19:a6:aa:60:6b:b0:e4:ae:44:98:b7:0d:fb:53:19: 79:e3:ea:5b:d5:4c:4a:16:a9:68:5f:12:bd:bd:6d: 85:11:4f:5a:0d:28:ac:c7:5b:e4:50:a8:04:4e:41: ca:bb:3d:9b:f0:b6:2a:a2:16:e2:53:84:e1:e8:51: b7:9b:82:46:64:2f:95:63:28:45:d7:96:a6:27:89: 69:ce:2a:72:48:65:d3:de:0a:8c:b3:5f:93:34:75: 4a:cc:15:4b:24:f0:48:c6:a4:48:17:d9:33:f5:d6: 66:c5:68:49:aa:50:c1:0d:4a:af:7d:91:a6:58:ec: 44:d4:0a:76:56:7d:71:79:d6:d2:ef:14:74:04:d5: 37:4d:9c:f0:01:d0:83:26:17:8b:2b:b1:88:a8:f6: e6:48:29:61:01:87:6c:ef:3f:19:4c:7d:8d:df:0a: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:47:CA:67:25:F6:E8:4F:C3:0B:A7:4B:80:86:A9:64:A6:1B:78:C3 X509v3 Authority Key Identifier: keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/89654CDAB83B11EFAA80DD09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.144.196.0/23 Signature Algorithm: sha256WithRSAEncryption 13:ed:cc:a5:e8:49:bd:ba:22:01:f5:a4:83:66:94:91:95:5a: c2:7b:de:bf:bd:7c:c9:e5:b1:36:79:80:e2:75:c9:db:2b:42: 88:8a:15:5a:38:fe:9c:99:47:17:5e:a3:1d:04:f3:8b:54:57: c1:bc:07:f4:de:de:e0:60:b5:80:ab:31:e0:e4:5d:44:c3:f3: 5d:49:f4:8d:6a:b6:1b:c6:e6:12:45:7e:f5:45:74:fa:78:ab: 0b:24:f1:d1:2e:ed:bb:30:0d:87:b3:ef:79:65:0b:c2:68:b3: df:a0:63:db:27:90:71:a1:f0:c0:09:ad:75:48:26:86:43:aa: 40:68:b1:a5:8e:86:53:a3:aa:59:45:5c:87:c3:fd:3d:c9:4d: 38:6f:77:0c:fb:46:9a:5f:8f:79:17:7b:2d:50:ca:55:57:2e: 18:ab:4a:96:b3:26:35:ec:13:ab:4c:59:cf:f3:34:8e:4a:b5: f5:5d:8f:fa:36:69:71:b6:c0:85:0f:48:20:66:32:0f:4a:99: 25:38:d2:71:01:0d:94:e9:e8:cd:d2:a1:d3:b8:10:bc:13:c2: 26:ec:75:d2:df:49:69:b0:a2:53:0a:c2:6f:a2:99:0d:b5:2d: 4b:49:4c:f9:9f:f8:36:ed:27:e5:08:b7:1c:4d:26:45:0d:a1: 1d:50:4e:75 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICHdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCRjIxMTAvBgNVBAUTKDFCMTdBQzNEQzk2Q0EyMzQ1MjUwMjNFRkQzNjI3RTky Q0Q4ODQ3NDgwHhcNMjYwMjE4MTYxMzUyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2MxOC05NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUyCVClA4DMAHIANlj80QMERQ8ENDZqhFpeHR29BSnec6cB56enWDYd8y8y3 1e8KgiNvZS/tnu/72MfKUhi0Ugu6x/S5Xka3Cemq48LirdyokbqhqMUvWp0Zpqpg a7DkrkSYtw37Uxl54+pb1UxKFqloXxK9vW2FEU9aDSisx1vkUKgETkHKuz2b8LYq ohbiU4Th6FG3m4JGZC+VYyhF15amJ4lpzipySGXT3gqMs1+TNHVKzBVLJPBIxqRI F9kz9dZmxWhJqlDBDUqvfZGmWOxE1Ap2Vn1xedbS7xR0BNU3TZzwAdCDJheLK7GI qPbmSClhAYds7z8ZTH2N3wp5kwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBRHymcl 9uhPwwunS4CGqWSmG3jDMB8GA1UdIwQYMBaAFBsXrD3JbKI0UlAj79NifpLNiEdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REJGMi9FMzQ0NTAxNkMy RjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29qUlNVQ1B2MDJKLWtzMklS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d4ZXNQY2xzb2pSU1VDUHYwMkota3MySVIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RCRjIvRTM0NDUwMTZDMkY4MTFFNjk5N0FFQjZCQzRGOUFFMDIvODk2NTRDREFC ODNCMTFFRkFBODBERDA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBypDEMA0GCSqGSIb3DQEBCwUAA4IBAQAT7cyl6Em9uiIB9aSDZpSR lVrCe96/vXzJ5bE2eYDidcnbK0KIihVaOP6cmUcXXqMdBPOLVFfBvAf03t7gYLWA qzHg5F1Ew/NdSfSNarYbxuYSRX71RXT6eKsLJPHRLu27MA2Hs+95ZQvCaLPfoGPb J5BxofDACa11SCaGQ6pAaLGljoZTo6pZRVyHw/09yU04b3cM+0aaX495F3stUMpV Vy4Yq0qWsyY17BOrTFnP8zSOSrX1XY/6NmlxtsCFD0ggZjIPSpklONJxAQ2U6ejN 0qHTuBC8E8Im7HXS30lpsKJTCsJvopkNtS1LSUz5n/g27SflCLccTSZFDaEdUE51 -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:34 2026 by rpki-client