$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/89A0A916B94711F0A4F9263BC4F9AE02.roa File: 89A0A916B94711F0A4F9263BC4F9AE02.roa (raw, json) Hash identifier: hsK5cfgs029RrkPLlw/x461AFsWBe3gyZMNFjRoTELc= Subject key identifier: 95:0F:DB:5F:DD:FF:5D:69:46:EF:72:96:C4:B8:07:01:4E:BB:97:29 Certificate issuer: /CN=A91EB2B8/serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436 Certificate serial: E3 Authority key identifier: A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/89A0A916B94711F0A4F9263BC4F9AE02.roa Signing time: Thu 11 Jun 2026 03:30:59 +0000 ROA not before: Thu 11 Jun 2026 03:30:59 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 139057 IP address blocks: 148.222.160.0/24 maxlen: 24 148.222.161.0/24 maxlen: 24 148.222.162.0/24 maxlen: 24 148.222.164.0/24 maxlen: 24 148.222.165.0/24 maxlen: 24 148.222.166.0/24 maxlen: 24 148.222.167.0/24 maxlen: 24 148.222.168.0/24 maxlen: 24 148.222.169.0/24 maxlen: 24 148.222.170.0/24 maxlen: 24 148.222.171.0/24 maxlen: 24 148.222.172.0/24 maxlen: 24 148.222.173.0/24 maxlen: 24 148.222.174.0/24 maxlen: 24 148.222.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436 Validity Not Before: Jun 11 03:30:59 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a2a2bf3-540b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:13:e6:ae:bf:f2:0e:e4:71:44:3a:33:b3: 75:dd:b4:bc:22:21:26:ba:a4:71:d2:9b:ca:fb:16: 70:76:be:86:c2:02:2e:68:51:a9:bf:b8:66:a8:c6: 71:4c:44:e5:15:39:aa:cb:d9:73:6d:08:2c:8d:b9: f7:24:5d:11:4f:67:d1:40:4d:a3:1f:33:1f:f6:09: 58:54:b4:bc:d0:bf:22:ad:ec:9d:97:99:3e:0c:7a: 98:d0:6d:5f:8a:d2:ea:4f:1f:94:64:35:e2:19:a4: fa:2e:6c:1d:eb:90:78:89:bc:a6:1b:9b:b9:fd:ac: 5b:1c:91:56:9e:96:15:05:65:80:29:b1:60:02:c0: 2a:4f:49:12:01:9d:bf:1d:50:3f:1c:38:a2:10:75: d6:54:db:4e:fb:29:14:93:18:0b:76:23:b4:ac:26: 62:57:93:af:6a:b4:9b:e3:c7:d5:07:29:e8:f1:eb: 88:35:b9:01:22:78:a9:28:e2:68:45:0f:57:ef:9e: 6b:dc:d2:e7:29:b7:5e:80:cf:a5:17:82:f6:64:98: c3:39:5a:d0:6f:f2:77:11:20:dd:78:8c:17:df:cd: 9a:1e:d5:52:d7:92:ec:65:88:45:18:fd:ad:ef:91: ac:ec:4f:18:a6:3f:a6:6b:54:8d:c9:2b:d4:a7:7f: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0F:DB:5F:DD:FF:5D:69:46:EF:72:96:C4:B8:07:01:4E:BB:97:29 X509v3 Authority Key Identifier: keyid:A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/89A0A916B94711F0A4F9263BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 148.222.160.0-148.222.162.255 148.222.164.0-148.222.175.255 Signature Algorithm: sha256WithRSAEncryption d3:52:b5:01:f3:1f:b3:56:ab:48:c8:36:eb:c6:00:b0:b6:a2: 89:9d:bc:07:34:f0:60:58:50:2b:92:5b:36:0d:12:c4:88:13: c4:0d:3c:c3:76:81:24:2b:24:f6:7d:a3:51:00:5e:16:dd:9d: 30:5f:99:71:a8:a9:04:f3:4e:ec:79:3b:aa:6c:2e:a5:c0:91: de:dd:41:ad:6f:df:b2:98:66:25:31:7c:12:55:17:a2:ae:1b: 54:67:ae:56:54:2e:d6:ab:88:6a:82:c1:d0:e1:99:ba:59:e7: 35:a1:a3:c9:c1:36:4c:2b:10:a7:37:f3:9f:d8:4a:5a:4c:52: a7:d8:22:09:19:3d:19:28:60:c8:fd:3f:19:21:8d:95:d8:a9: cd:e8:ff:c5:9d:07:a1:25:9d:af:4d:75:10:38:63:84:0c:a7: f7:be:3c:c2:47:17:0c:b0:5e:bd:9a:56:9c:75:52:16:e3:5f: 19:db:e1:ba:8b:da:63:2e:08:5e:27:15:b2:e1:be:5a:4b:c6: 86:3b:76:27:30:34:15:f3:bd:fb:cc:0e:f8:c9:e8:bb:92:ac: b4:4d:f9:26:42:63:7c:6d:ac:ae:91:22:4f:2d:ec:43:eb:2f: 1a:74:ba:aa:68:42:9f:a6:0b:f6:10:e9:5c:79:19:a7:11:8f: 3e:b0:a2:9a -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE4OTdBRThGRjIxNDFDQjMzNEVBQTRCODgxQ0MzQzU2 NTZENDc0MzYwHhcNMjYwNjExMDMzMDU5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJhMmJmMy01NDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr94T5q6/8g7kcUQ6M7N13bS8IiEmuqRx0pvK+xZwdr6GwgIuaFGpv7hmqMZx TETlFTmqy9lzbQgsjbn3JF0RT2fRQE2jHzMf9glYVLS80L8ireydl5k+DHqY0G1f itLqTx+UZDXiGaT6Lmwd65B4ibymG5u5/axbHJFWnpYVBWWAKbFgAsAqT0kSAZ2/ HVA/HDiiEHXWVNtO+ykUkxgLdiO0rCZiV5OvarSb48fVByno8euINbkBInipKOJo RQ9X755r3NLnKbdegM+lF4L2ZJjDOVrQb/J3ESDdeIwX382aHtVS15LsZYhFGP2t 75Gs7E8Ypj+ma1SNySvUp3+aZwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFJUP21/d /11pRu9ylsS4BwFOu5cpMB8GA1UdIwQYMBaAFKiXro/yFByzNOqkuIHMPFZW1HQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zNTgzRTU4NjUx NjUxMUYwQkMxQ0FGNzVDNEY5QUUwMi9xSmV1al9JVUhMTTA2cVM0Z2N3OFZsYlVk RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FKZXVqX0lVSExNMDZxUzRnY3c4VmxiVWREWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIyQjgvMzU4M0U1ODY1MTY1MTFGMEJDMUNBRjc1QzRGOUFFMDIvODlBMEE5MTZC OTQ3MTFGMEE0RjkyNjNCQzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi BAIAATAcMAwDBAWU3qADBACU3qIwDAMEApTepAMEBJTeoDANBgkqhkiG9w0BAQsF AAOCAQEA01K1AfMfs1arSMg268YAsLaiiZ28BzTwYFhQK5JbNg0SxIgTxA08w3aB JCsk9n2jUQBeFt2dMF+ZcaipBPNO7Hk7qmwupcCR3t1BrW/fsphmJTF8ElUXoq4b VGeuVlQu1quIaoLB0OGZulnnNaGjycE2TCsQpzfzn9hKWkxSp9giCRk9GShgyP0/ GSGNldipzej/xZ0HoSWdr011EDhjhAyn9748wkcXDLBevZpWnHVSFuNfGdvhuova Yy4IXicVsuG+WkvGhjt2JzA0FfO9+8wO+Mnou5KstE35JkJjfG2srpEiTy3sQ+sv GnS6qmhCn6YL9hDpXHkZpxGPPrCimg== -----END CERTIFICATE-----Generated at Sat Jun 13 13:18:11 2026 by rpki-client