$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/C89FD6DA557611EBA04C290BC4F9AE02.roa File: C89FD6DA557611EBA04C290BC4F9AE02.roa (raw, json) Hash identifier: mWydfb3LjFkHvOgQ8AUkwmK5kNuLziloyL91HhtrlOQ= Subject key identifier: 48:0F:A6:88:13:B7:53:8A:73:80:A5:98:DE:FD:15:6F:51:6B:60:7E Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1B78 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/C89FD6DA557611EBA04C290BC4F9AE02.roa Signing time: Sun 01 Mar 2026 21:12:57 +0000 ROA not before: Mon 24 Mar 2025 14:50:40 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 45794 IP address blocks: 58.65.11.0/24 maxlen: 24 58.65.13.0/24 maxlen: 24 116.51.15.0/24 maxlen: 24 116.51.32.0/24 maxlen: 24 202.136.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7032 (0x1b78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Mar 24 14:50:40 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4abd9-38ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:88:5f:b5:b5:32:35:d9:cc:29:38:70:3f: c2:b0:e1:65:f9:4e:0c:8d:df:9e:00:8b:cf:29:6e: e9:e4:e0:58:7d:6b:36:28:6f:8f:a1:5b:ef:35:8c: 89:b3:e6:b0:b1:4d:fe:a4:93:d0:5e:b0:7f:a1:bb: b8:18:7c:88:b9:28:01:62:58:36:28:e0:d1:b1:b1: f3:38:ec:82:a6:15:e9:0f:22:31:4f:64:f8:65:08: c0:a2:83:41:f8:c7:b8:7e:c9:17:2e:1b:41:64:ba: 1e:c6:e8:1f:b8:61:bf:32:92:3c:e0:59:4a:68:d6: 45:d5:e1:a1:29:71:b8:6d:7b:64:84:49:3d:f4:9d: 91:19:41:58:5a:76:37:b6:26:ca:e8:ea:87:b7:21: b7:24:71:30:6b:85:ce:91:c5:a5:27:76:5f:ee:ef: 96:e9:6e:84:00:11:e3:76:21:bd:00:58:7d:75:85: 67:01:b0:d6:6d:2b:19:cc:e8:98:0d:de:d0:7f:65: b9:9f:dd:c4:c4:20:8f:b4:45:64:b8:91:03:be:6a: f2:99:73:a7:ab:7f:f3:ae:18:f4:e2:85:ce:6e:f0: 14:0e:93:39:28:3c:15:72:8e:fb:3f:db:b8:af:cf: 89:ae:47:f4:bf:9f:d2:e2:fb:be:b8:91:28:7c:4a: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0F:A6:88:13:B7:53:8A:73:80:A5:98:DE:FD:15:6F:51:6B:60:7E X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/C89FD6DA557611EBA04C290BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.65.11.0/24 58.65.13.0/24 116.51.15.0/24 116.51.32.0/24 202.136.161.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:8e:c3:29:e1:2b:84:d9:1d:48:41:70:25:35:b9:e1:ba:a4: 8c:59:3d:a8:1c:d5:9c:18:51:32:2d:94:aa:d8:a4:a4:53:bc: 96:59:49:c7:8f:df:a9:0f:59:b7:d7:77:b9:6f:a1:89:f0:dd: d7:75:73:28:d1:e1:05:65:61:2d:1a:77:ff:6d:57:49:c0:bb: 7e:8f:eb:52:e6:77:e9:ee:13:ba:0b:bb:2a:95:1c:bd:4f:35: 72:c2:8d:6d:23:64:b8:c8:63:33:af:cf:26:4d:df:17:ee:43: 31:f5:9b:09:2b:d2:7b:73:42:40:0c:a0:03:a0:87:77:61:aa: 31:bb:6d:f0:bd:9b:9b:d9:1f:32:b0:84:08:98:e1:84:67:17: 45:b5:11:af:f6:e7:6a:7c:5a:24:43:c7:8e:dd:92:b0:06:53: 70:23:f9:63:76:e5:a8:1b:c4:f4:94:34:4f:fb:9f:51:18:6f: b3:b4:21:51:2c:0c:dd:fc:19:73:19:6e:00:0f:17:bd:55:6c: 81:bb:72:1a:3f:29:d5:e8:db:43:19:ad:0e:30:e1:aa:22:b3: 5c:23:6e:b4:c3:32:46:af:37:5d:36:c5:9b:65:8b:68:68:60: a1:ad:c4:05:94:f3:a3:ce:21:c0:42:6f:69:35:01:ca:cd:a7: bf:21:4c:ad -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICG3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjUwMzI0MTQ1MDQwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWJkOS0zOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIqIX7W1MjXZzCk4cD/CsOFl+U4Mjd+eAIvPKW7p5OBYfWs2KG+PoVvvNYyJ s+awsU3+pJPQXrB/obu4GHyIuSgBYlg2KODRsbHzOOyCphXpDyIxT2T4ZQjAooNB +Me4fskXLhtBZLoexugfuGG/MpI84FlKaNZF1eGhKXG4bXtkhEk99J2RGUFYWnY3 tibK6OqHtyG3JHEwa4XOkcWlJ3Zf7u+W6W6EABHjdiG9AFh9dYVnAbDWbSsZzOiY Dd7Qf2W5n93ExCCPtEVkuJEDvmrymXOnq3/zrhj04oXObvAUDpM5KDwVco77P9u4 r8+Jrkf0v5/S4vu+uJEofEqo8wIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFEgPpogT t1OKc4ClmN79FW9Ra2B+MB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvQzg5RkQ2REE1 NTc2MTFFQkEwNEMyOTBCQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAOkELAwQAOkENAwQAdDMPAwQAdDMgAwQAyoihMA0GCSqGSIb3DQEB CwUAA4IBAQBejsMp4SuE2R1IQXAlNbnhuqSMWT2oHNWcGFEyLZSq2KSkU7yWWUnH j9+pD1m313e5b6GJ8N3XdXMo0eEFZWEtGnf/bVdJwLt+j+tS5nfp7hO6C7sqlRy9 TzVywo1tI2S4yGMzr88mTd8X7kMx9ZsJK9J7c0JADKADoId3Yaoxu23wvZub2R8y sIQImOGEZxdFtRGv9udqfFokQ8eO3ZKwBlNwI/ljduWoG8T0lDRP+59RGG+ztCFR LAzd/BlzGW4ADxe9VWyBu3IaPynV6NtDGa0OMOGqIrNcI260wzJGrzddNsWbZYto aGChrcQFlPOjziHAQm9pNQHKzae/IUyt -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:16 2026 by rpki-client