$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa File: 589FBEDC860311EBAFE18309C4F9AE02.roa (raw, json) Hash identifier: XTJS1aW312Mduhqrp+6ghsWY6F5pBq5rSSrfsstwNB8= Subject key identifier: 33:8D:A2:88:25:0C:9F:CE:FA:49:BD:DA:35:10:2B:55:91:76:B3:82 Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 06ED Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:44:58 +0000 ROA not before: Fri 04 Jul 2025 23:04:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55555 IP address blocks: 43.245.28.0/22 maxlen: 24 103.246.96.0/22 maxlen: 24 180.200.244.0/22 maxlen: 24 2400:b100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1773 (0x6ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Validity Not Before: Jul 4 23:04:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a40a99-1279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:49:5d:60:dd:e6:77:fb:eb:df:93:05:17: b9:52:ee:70:e5:fe:83:d8:97:44:51:1a:64:c5:6c: ce:4f:c8:bd:e5:af:e4:33:6a:95:c8:1e:ae:30:98: 12:5a:9d:ef:e9:5c:37:5d:47:e6:c5:0b:ac:96:be: ce:d2:91:dc:19:5b:f4:8e:ea:64:06:da:65:63:77: c8:4d:21:51:3a:69:b1:5b:09:ad:6e:c8:6c:6e:ce: a8:4f:0f:70:52:18:8b:c6:fd:7d:4b:41:93:24:e9: 84:18:05:0d:6c:ee:fb:ec:4e:a7:a2:9a:98:ef:33: ef:d6:27:10:89:0c:bf:3f:4f:98:76:54:33:c0:67: 6d:be:a2:8a:71:62:69:9e:c6:48:d6:e5:a3:c2:92: a7:7a:fc:0f:ed:4b:f4:5a:ec:12:aa:34:dd:c5:1a: 41:b7:56:19:33:6c:71:48:de:11:9e:76:72:28:c7: fb:14:a7:e0:67:c0:99:b7:13:ad:57:45:78:cb:66: ca:eb:27:71:7c:5d:26:0b:9f:02:62:55:f6:5e:02: 08:ef:c2:06:95:d4:d8:f1:4d:d3:50:bc:c6:a3:05: 20:49:a2:0c:58:98:21:6a:d9:ed:ad:27:96:2d:dd: 6f:f1:f0:a4:15:a5:89:26:b4:9c:65:37:de:14:47: be:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:A2:88:25:0C:9F:CE:FA:49:BD:DA:35:10:2B:55:91:76:B3:82 X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.28.0/22 103.246.96.0/22 180.200.244.0/22 IPv6: 2400:b100::/32 Signature Algorithm: sha256WithRSAEncryption 1f:f8:b4:2c:5f:77:9e:aa:f4:62:76:77:95:41:a8:25:33:35: 59:10:d2:b2:4d:0e:77:10:a2:31:05:32:67:b1:3e:c0:22:9c: 69:fe:b2:80:5d:b6:b0:37:4b:ef:a7:5c:34:14:f3:d2:f2:fb: eb:0e:97:34:b3:79:a1:89:b5:3b:5b:4b:0d:0d:8b:97:e5:c1: 1d:ca:b3:c7:98:46:7f:a4:bb:ee:b9:9b:cf:e5:77:24:08:05: 8e:de:70:ab:2f:ee:41:74:0c:00:dd:78:4d:c7:7b:94:94:f5: c7:46:fc:69:b0:cb:4b:74:f2:3f:61:e1:d4:59:62:e9:c6:43: 37:d9:63:43:ce:42:b8:55:64:90:13:6b:8c:11:7a:88:01:28: b0:80:8c:5c:75:98:f9:28:66:14:05:b8:d9:9a:7b:b1:c6:c9: 49:5a:22:85:02:a3:7a:fd:d9:f4:83:08:32:4a:c2:67:7f:ad: a9:81:21:b2:f4:20:12:08:06:2e:ac:51:74:17:b0:ba:97:58: c3:cc:5c:60:5c:fb:4c:3f:3d:23:c9:df:1f:a5:b8:53:23:72: e0:1d:4f:5c:51:03:45:90:dd:cb:8a:08:aa:0c:66:64:de:d8: 97:f6:fb:26:23:62:27:8c:ee:4f:d9:9c:27:df:22:7f:68:c7: 8a:4d:22:a6 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICBu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjUwNzA0MjMwNDExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGE5OS0xMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCNJXWDd5nf769+TBRe5Uu5w5f6D2JdEURpkxWzOT8i95a/kM2qVyB6uMJgS Wp3v6Vw3XUfmxQuslr7O0pHcGVv0jupkBtplY3fITSFROmmxWwmtbshsbs6oTw9w UhiLxv19S0GTJOmEGAUNbO777E6nopqY7zPv1icQiQy/P0+YdlQzwGdtvqKKcWJp nsZI1uWjwpKnevwP7Uv0WuwSqjTdxRpBt1YZM2xxSN4RnnZyKMf7FKfgZ8CZtxOt V0V4y2bK6ydxfF0mC58CYlX2XgII78IGldTY8U3TULzGowUgSaIMWJghatntrSeW Ld1v8fCkFaWJJrScZTfeFEe+9wIDAQABo4ICezCCAncwHQYDVR0OBBYEFDONoogl DJ/O+km92jUQK1WRdrOCMB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjMzNEQvMjdFODYxRDg4NUY3MTFFQjkyMDgxNzExQzRGOUFFMDIvNTg5RkJFREM4 NjAzMTFFQkFGRTE4MzA5QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK/UcAwQCZ/ZgAwQCtMj0MA0EAgACMAcDBQAkALEAMA0GCSqGSIb3 DQEBCwUAA4IBAQAf+LQsX3eeqvRidneVQaglMzVZENKyTQ53EKIxBTJnsT7AIpxp /rKAXbawN0vvp1w0FPPS8vvrDpc0s3mhibU7W0sNDYuX5cEdyrPHmEZ/pLvuuZvP 5XckCAWO3nCrL+5BdAwA3XhNx3uUlPXHRvxpsMtLdPI/YeHUWWLpxkM32WNDzkK4 VWSQE2uMEXqIASiwgIxcdZj5KGYUBbjZmnuxxslJWiKFAqN6/dn0gwgySsJnf62p gSGy9CASCAYurFF0F7C6l1jDzFxgXPtMPz0jyd8fpbhTI3LgHU9cUQNFkN3Ligiq DGZk3tiX9vsmI2InjO5P2Zwn3yJ/aMeKTSKm -----END CERTIFICATE-----Generated at Mon Mar 2 07:28:47 2026 by rpki-client