$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/897E89B4D56B11EFBE0EB053C4F9AE02.roa File: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (raw, json) Hash identifier: 59clnCTTqffhtdg3nSmGiWZQyGuiBR09wGUf8GvsiJc= Subject key identifier: 15:5A:64:F9:E6:E9:D1:D2:AE:76:C5:D5:14:98:D6:48:0A:32:05:CC Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 03C6 Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/897E89B4D56B11EFBE0EB053C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:01:57 +0000 ROA not before: Wed 03 Sep 2025 01:46:45 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 153494 IP address blocks: 43.239.164.0/22 maxlen: 24 103.35.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Sep 3 01:46:45 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42ab5-a0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:d5:ae:59:ca:cd:b2:67:04:8e:41:58:5f: 9b:95:31:52:64:3b:4e:86:25:58:ef:ca:85:80:66: 94:98:85:70:f1:44:a0:dd:9c:22:b9:42:b4:68:70: 25:f6:61:12:66:81:71:f9:3d:57:ce:fc:a9:8b:69: 57:9f:b4:76:c3:5b:8f:c4:29:f7:1e:ea:41:27:66: dc:8e:c0:d7:5b:34:35:0e:18:b4:fe:2b:3c:f7:ab: 00:20:77:57:84:19:b4:cf:94:0b:62:3d:68:4a:8d: 2a:46:84:5d:76:60:1b:d8:13:cd:57:a9:a0:25:46: 05:d9:77:1e:a5:f3:a1:e2:d3:f9:af:49:a1:c0:97: e3:9c:e6:4f:a0:c0:73:9b:98:9c:8c:2c:17:3a:62: a1:65:43:0c:bb:a1:aa:75:5a:dc:d7:cf:85:7c:1a: 4a:6b:60:c7:49:b9:6e:63:33:9f:8a:58:22:af:9c: b7:d1:d6:ac:34:a7:59:2b:29:81:17:25:06:03:58: 7a:2d:a8:fd:4c:d4:83:aa:d6:9e:5c:36:11:df:88: 10:9e:9e:f3:c2:0e:40:07:8b:76:bc:f0:18:5b:59: dd:53:42:e1:73:96:bd:9f:bb:6f:c4:78:c2:f1:be: 96:ce:25:c9:2a:03:3f:38:f2:5c:23:57:44:b8:ce: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:64:F9:E6:E9:D1:D2:AE:76:C5:D5:14:98:D6:48:0A:32:05:CC X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/897E89B4D56B11EFBE0EB053C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.164.0/22 103.35.84.0/22 Signature Algorithm: sha256WithRSAEncryption cb:75:67:c5:e5:4e:f3:7e:38:55:f8:2c:27:8c:ef:3a:c7:f3: a1:e8:bf:6a:f8:81:c5:d1:2f:be:f5:d6:21:f4:de:24:ff:37: 6b:16:eb:e6:0f:ba:04:95:e4:f1:28:a5:ae:33:65:c4:d1:3b: b3:4c:45:fd:1f:e5:bf:1e:db:6a:61:7a:9c:aa:0a:f4:26:90: a8:d1:95:a2:10:41:c5:b9:0d:e2:ba:4b:ac:ba:21:c9:0a:79: 44:83:01:60:78:b2:e6:73:57:82:41:b9:81:91:73:a2:e8:0c: 0f:b7:17:5f:26:22:6a:ec:00:4f:02:29:96:cd:9d:ed:63:78: e2:28:b3:b1:8b:59:71:9c:91:09:09:05:0b:35:e8:11:1a:7b: f1:05:31:9d:7d:85:79:be:77:23:c4:7c:ff:a6:31:f1:b1:cc: 83:98:a5:92:d7:73:31:52:d8:2a:9f:c0:e0:92:ec:4d:2c:be: 6c:2c:39:85:6f:66:51:86:e3:e2:e0:7c:cd:a0:c6:6e:5f:cc: 23:ae:a4:55:fe:25:b5:39:1f:81:dd:93:aa:e4:2f:f1:9f:12: 1d:89:28:9c:ff:38:cb:d5:dc:06:89:90:55:bd:a7:20:ea:ef: 6c:52:90:3e:bb:e9:ca:29:e7:c8:47:98:b5:56:3d:25:b5:60: 19:24:b3:1a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUwOTAzMDE0NjQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmFiNS1hMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4vVrlnKzbJnBI5BWF+blTFSZDtOhiVY78qFgGaUmIVw8USg3ZwiuUK0aHAl 9mESZoFx+T1Xzvypi2lXn7R2w1uPxCn3HupBJ2bcjsDXWzQ1Dhi0/is896sAIHdX hBm0z5QLYj1oSo0qRoRddmAb2BPNV6mgJUYF2XcepfOh4tP5r0mhwJfjnOZPoMBz m5icjCwXOmKhZUMMu6GqdVrc18+FfBpKa2DHSbluYzOfilgir5y30dasNKdZKymB FyUGA1h6Laj9TNSDqtaeXDYR34gQnp7zwg5AB4t2vPAYW1ndU0Lhc5a9n7tvxHjC 8b6WziXJKgM/OPJcI1dEuM423wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBVaZPnm 6dHSrnbF1RSY1kgKMgXMMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQxQTQvMUVCOUUzQTZDNkMwMTFFQzk2QzBERDIzQzRGOUFFMDIvODk3RTg5QjRE NTZCMTFFRkJFMEVCMDUzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK++kAwQCZyNUMA0GCSqGSIb3DQEBCwUAA4IBAQDLdWfF5U7zfjhV +CwnjO86x/Oh6L9q+IHF0S++9dYh9N4k/zdrFuvmD7oEleTxKKWuM2XE0TuzTEX9 H+W/HttqYXqcqgr0JpCo0ZWiEEHFuQ3iukusuiHJCnlEgwFgeLLmc1eCQbmBkXOi 6AwPtxdfJiJq7ABPAimWzZ3tY3jiKLOxi1lxnJEJCQULNegRGnvxBTGdfYV5vncj xHz/pjHxscyDmKWS13MxUtgqn8DgkuxNLL5sLDmFb2ZRhuPi4HzNoMZuX8wjrqRV /iW1OR+B3ZOq5C/xnxIdiSic/zjL1dwGiZBVvacg6u9sUpA+u+nKKefIR5i1Vj0l tWAZJLMa -----END CERTIFICATE-----Generated at Mon Mar 2 04:33:26 2026 by rpki-client