$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/C89FD6DA557611EBA04C290BC4F9AE02.roa File: C89FD6DA557611EBA04C290BC4F9AE02.roa (raw, json) Hash identifier: IDu51NoCXLX0fGSXN0JfKGuNOGTw6RNrNximD3D412U= Subject key identifier: D9:47:40:31:C0:09:00:68:5B:0A:33:D0:71:2D:26:74:B3:06:0F:6F Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1B93 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/C89FD6DA557611EBA04C290BC4F9AE02.roa Signing time: Thu 26 Mar 2026 15:11:22 +0000 ROA not before: Thu 26 Mar 2026 15:11:22 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 45794 IP address blocks: 58.65.11.0/24 maxlen: 24 58.65.13.0/24 maxlen: 24 116.51.15.0/24 maxlen: 24 116.51.32.0/24 maxlen: 24 202.136.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7059 (0x1b93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Mar 26 15:11:22 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c54c9a-45ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:6a:e3:ac:3f:8f:4e:34:dc:6e:31:f1:82: ca:12:d4:a3:43:ea:3e:4c:3a:84:48:5d:71:d5:eb: b7:67:17:df:28:cc:51:ba:80:4c:5f:11:9b:b5:7e: ea:d7:43:e0:b2:f0:49:7a:e7:a8:55:61:21:87:ff: db:c9:af:08:ea:f5:df:d7:29:46:79:d8:fe:80:5b: 3e:01:87:fc:8a:ed:d8:eb:28:dc:9c:30:da:eb:85: 6a:4e:3b:95:c0:09:d0:40:1d:f6:04:36:3f:60:6a: f7:8b:59:33:4f:77:7f:3f:a4:4f:dc:be:88:6a:2d: 8c:d8:43:b2:bc:c9:33:ed:7a:8a:9f:0d:a0:75:25: 68:5a:27:b5:d5:10:54:83:a6:b9:cf:a1:e4:aa:f9: d1:d7:86:aa:a3:e0:5d:33:10:73:9f:7f:db:8b:4c: 2d:25:86:d5:52:56:38:83:db:4c:ca:83:9e:ee:3e: cc:0d:27:fb:ac:67:a1:79:8f:b4:59:cc:c4:11:15: ee:71:2d:c5:16:e9:3f:ea:d3:a6:81:4b:e7:a7:48: eb:bc:c9:80:59:65:19:1d:dc:b3:d4:96:27:51:80: 3c:f5:57:46:81:04:1c:ba:a1:9f:35:9a:8e:74:92: 14:53:cb:92:d3:cf:a2:65:61:ca:85:08:77:d7:90: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:47:40:31:C0:09:00:68:5B:0A:33:D0:71:2D:26:74:B3:06:0F:6F X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/C89FD6DA557611EBA04C290BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.65.11.0/24 58.65.13.0/24 116.51.15.0/24 116.51.32.0/24 202.136.161.0/24 Signature Algorithm: sha256WithRSAEncryption c5:52:38:cc:64:52:e2:f9:a0:6c:e6:ed:e8:20:42:47:bb:ea: 49:ad:5d:12:d0:29:01:34:ef:a8:a9:e4:86:b6:84:4c:03:36: 3e:8e:60:1e:d8:40:6d:a5:33:de:b2:1f:ff:c6:36:75:31:01: 27:18:65:4c:68:86:c0:1e:79:aa:31:97:8e:b2:3d:04:2b:f1: 41:62:3f:89:42:d0:c0:81:3b:25:c7:e7:6f:fa:ea:27:83:f0: ec:69:6f:49:16:32:36:76:97:29:82:a3:7d:87:31:0b:5f:bf: 9e:0b:9c:0a:e9:2c:6c:42:32:98:c1:8c:44:e1:37:d2:d3:1c: 55:c4:ec:54:ad:48:ac:18:13:2e:3e:cd:96:4b:61:02:3d:6f: b6:03:24:b0:e3:aa:00:9a:cf:62:ea:f7:85:0c:b1:d4:09:37: 8d:71:4d:3f:84:6d:e8:e1:5d:76:e0:df:1f:c4:9a:15:91:5e: 8b:76:05:eb:4b:2a:fe:40:a3:60:b1:5c:7d:36:25:67:22:96: 6b:bd:d1:48:41:f6:b0:f1:31:00:a4:5c:eb:04:9c:e2:99:e8: 9f:ab:14:1e:5d:79:db:4c:20:9e:2a:d2:0e:9a:5e:49:16:1b: ab:e5:5f:0e:0f:8b:0b:f4:48:7e:2d:26:b1:b1:0d:2c:b7:9f: 5b:14:25:7d -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICG5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjYwMzI2MTUxMTIyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM1NGM5YS00NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVJq46w/j0403G4x8YLKEtSjQ+o+TDqESF1x1eu3ZxffKMxRuoBMXxGbtX7q 10PgsvBJeueoVWEhh//bya8I6vXf1ylGedj+gFs+AYf8iu3Y6yjcnDDa64VqTjuV wAnQQB32BDY/YGr3i1kzT3d/P6RP3L6Iai2M2EOyvMkz7XqKnw2gdSVoWie11RBU g6a5z6HkqvnR14aqo+BdMxBzn3/bi0wtJYbVUlY4g9tMyoOe7j7MDSf7rGeheY+0 WczEERXucS3FFuk/6tOmgUvnp0jrvMmAWWUZHdyz1JYnUYA89VdGgQQcuqGfNZqO dJIUU8uS08+iZWHKhQh315BeowIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFNlHQDHA CQBoWwoz0HEtJnSzBg9vMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZENUQvOURDQjY4RTAxRDg4MTFFMjk0Qjk1NUUxMDhCMDJDRDIvQzg5RkQ2REE1 NTc2MTFFQkEwNEMyOTBCQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAOkELAwQAOkENAwQAdDMPAwQAdDMgAwQAyoihMA0GCSqGSIb3DQEB CwUAA4IBAQDFUjjMZFLi+aBs5u3oIEJHu+pJrV0S0CkBNO+oqeSGtoRMAzY+jmAe 2EBtpTPesh//xjZ1MQEnGGVMaIbAHnmqMZeOsj0EK/FBYj+JQtDAgTslx+dv+uon g/DsaW9JFjI2dpcpgqN9hzELX7+eC5wK6SxsQjKYwYxE4TfS0xxVxOxUrUisGBMu Ps2WS2ECPW+2AySw46oAms9i6veFDLHUCTeNcU0/hG3o4V124N8fxJoVkV6LdgXr Syr+QKNgsVx9NiVnIpZrvdFIQfaw8TEApFzrBJzimeifqxQeXXnbTCCeKtIOml5J Fhur5V8OD4sL9Eh+LSaxsQ0st59bFCV9 -----END CERTIFICATE-----Generated at Fri Apr 17 23:59:44 2026 by rpki-client