$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/89AC5C4686EE11F19E006003A7EE528E.roa File: 89AC5C4686EE11F19E006003A7EE528E.roa (raw, json) Hash identifier: KlZ2d71XmaFMXz4sBq2mMQtFoXDZazbD9Q3R/UtUMaw= Subject key identifier: DB:24:5A:47:B0:BC:92:0A:AA:FD:A0:7B:99:A5:93:3C:27:A7:42:25 Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2E2C Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/89AC5C4686EE11F19E006003A7EE528E.roa Signing time: Tue 22 Sep 2026 16:22:33 +0000 ROA not before: Tue 22 Sep 2026 16:22:33 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 58717 IP address blocks: 43.245.140.0/22 maxlen: 24 59.153.202.0/23 maxlen: 24 103.15.244.0/22 maxlen: 24 103.15.246.64/26 maxlen: 26 103.75.238.0/23 maxlen: 24 103.96.68.0/23 maxlen: 24 103.96.70.0/23 maxlen: 24 103.108.144.0/22 maxlen: 24 103.158.2.0/23 maxlen: 24 103.161.66.0/23 maxlen: 24 103.199.84.0/22 maxlen: 24 103.242.216.0/22 maxlen: 24 144.48.148.0/23 maxlen: 24 175.41.44.0/22 maxlen: 24 2405:1500::/30 maxlen: 31 2405:1500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11820 (0x2e2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Validity Not Before: Sep 22 16:22:33 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab2ab49-57e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:0f:06:59:11:83:34:cd:e1:ca:f6:ee:f7: 49:01:8b:f0:ba:74:24:79:aa:0e:db:94:fc:34:f3: 64:47:c2:70:fe:7d:c1:ae:a8:c4:dc:5c:e0:41:df: cd:89:a7:ef:6e:0b:6b:0a:9a:70:61:49:a8:55:eb: cc:d6:b4:5d:b2:c3:ec:31:71:e4:6c:53:19:48:b5: bc:cd:f1:b8:51:f3:49:57:c0:2d:63:24:39:71:44: 9c:5f:17:3d:a9:64:da:d4:47:28:69:d7:1d:3a:00: 27:66:4a:f0:3f:78:42:75:8a:0d:1c:30:a2:41:f1: 21:99:24:a8:a9:48:3d:af:98:8a:f4:d8:c5:e9:2b: ee:88:94:65:a6:62:c6:f4:e4:33:ef:a5:09:d6:e0: 86:80:d7:bd:4d:5e:96:75:32:56:c3:a9:87:c9:ae: 16:5e:51:b7:9d:89:28:44:72:df:01:cf:d2:be:6f: 56:b7:c0:c1:23:21:c5:f9:2d:aa:2a:13:7e:1f:08: fa:5e:83:be:21:82:de:a6:9b:17:3d:a7:a8:7a:fb: ac:75:14:29:c3:0c:1d:8f:88:cc:5b:06:69:e2:4b: 86:ef:4a:33:8a:e0:6d:7c:59:ac:f1:84:61:b5:30: be:96:aa:e4:56:a2:55:57:56:ec:92:70:f1:4b:bd: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:24:5A:47:B0:BC:92:0A:AA:FD:A0:7B:99:A5:93:3C:27:A7:42:25 X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/89AC5C4686EE11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 43.245.140.0/22 59.153.202.0/23 103.15.244.0/22 103.75.238.0/23 103.96.68.0/22 103.108.144.0/22 103.158.2.0/23 103.161.66.0/23 103.199.84.0/22 103.242.216.0/22 144.48.148.0/23 175.41.44.0/22 IPv6: 2405:1500::/30 Signature Algorithm: sha256WithRSAEncryption 9d:b1:83:b3:9e:67:e5:9e:dd:6a:ec:53:e7:8d:bb:4e:e1:41: dc:bf:f7:0d:86:28:65:f4:9e:4d:8d:3d:8e:12:00:56:08:51: f7:5a:9e:9e:e1:15:bd:a9:42:19:0d:90:83:da:03:05:0d:7e: 28:45:86:c0:84:ce:4f:de:2a:b4:ca:03:bb:da:45:be:3a:1d: fe:49:c4:b8:fc:10:3a:f3:34:54:01:dd:87:72:64:10:fe:1c: d4:11:43:ec:4a:20:62:eb:55:01:fa:fa:3f:98:88:6b:69:34: 3e:2d:cf:9d:ba:2d:48:70:82:84:fb:d7:2a:b1:ba:90:fb:7b: fb:bd:c5:0d:37:70:e2:6c:84:63:c1:ad:54:fa:73:27:dc:5c: 14:6c:84:a1:da:a1:58:40:bb:bd:72:73:5e:4d:6b:8f:dd:19: 06:ff:1d:69:a1:a1:64:f5:86:77:66:7b:18:f8:01:8f:74:9a: c5:58:4d:11:d6:1f:c8:1d:42:eb:f6:55:44:86:3a:d1:0f:ab: bd:ef:e7:fc:03:fa:60:b0:df:4e:9c:2d:1f:e4:b6:7c:f6:ae: 98:b3:f1:63:20:2c:45:13:9e:8e:8f:f7:0f:3f:a7:31:7b:b0: 4f:4a:19:2f:c6:9e:31:15:07:55:a8:ac:a7:d5:89:8c:47:b2: e9:9a:26:f5 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICLiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjYwOTIyMTYyMjMzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIyYWI0OS01N2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvysPBlkRgzTN4cr27vdJAYvwunQkeaoO25T8NPNkR8Jw/n3BrqjE3FzgQd/N iafvbgtrCppwYUmoVevM1rRdssPsMXHkbFMZSLW8zfG4UfNJV8AtYyQ5cUScXxc9 qWTa1EcoadcdOgAnZkrwP3hCdYoNHDCiQfEhmSSoqUg9r5iK9NjF6SvuiJRlpmLG 9OQz76UJ1uCGgNe9TV6WdTJWw6mHya4WXlG3nYkoRHLfAc/Svm9Wt8DBIyHF+S2q KhN+Hwj6XoO+IYLeppsXPaeoevusdRQpwwwdj4jMWwZp4kuG70oziuBtfFms8YRh tTC+lqrkVqJVV1bsknDxS70ttwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFNskWkew vJIKqv2ge5mlkzwnp0IlMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEyRDUvNUY4NjFFRTZCODlBMTFFM0I0QUM3RTc4NTkxMUVBMzIvODlBQzVDNDY4 NkVFMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMHAGCCsGAQUFBwEHAQH/BGEwXzBO BAIAATBIAwQCK/WMAwQBO5nKAwQCZw/0AwQBZ0vuAwQCZ2BEAwQCZ2yQAwQBZ54C AwQBZ6FCAwQCZ8dUAwQCZ/LYAwQBkDCUAwQCryksMA0EAgACMAcDBQIkBRUAMA0G CSqGSIb3DQEBCwUAA4IBAQCdsYOznmflnt1q7FPnjbtO4UHcv/cNhihl9J5NjT2O EgBWCFH3Wp6e4RW9qUIZDZCD2gMFDX4oRYbAhM5P3iq0ygO72kW+Oh3+ScS4/BA6 8zRUAd2HcmQQ/hzUEUPsSiBi61UB+vo/mIhraTQ+Lc+dui1IcIKE+9cqsbqQ+3v7 vcUNN3DibIRjwa1U+nMn3FwUbISh2qFYQLu9cnNeTWuP3RkG/x1poaFk9YZ3ZnsY +AGPdJrFWE0R1h/IHULr9lVEhjrRD6u97+f8A/pgsN9OnC0f5LZ89q6Ys/FjICxF E56Oj/cPP6cxe7BPShkvxp4xFQdVqKyn1YmMR7Lpmib1 -----END CERTIFICATE-----Generated at Wed Sep 23 20:34:02 2026 by rpki-client