$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5E89A9888CBD11EFBA479615C4F9AE02.roa File: 5E89A9888CBD11EFBA479615C4F9AE02.roa (raw, json) Hash identifier: feWCSr9eRlRlJ3Q0tbYJyvoDzByu6lr0VTjjRj/M/Xo= Subject key identifier: 4A:B9:B6:3A:81:D5:1F:D5:55:E0:CB:A0:0D:73:B1:F3:2C:2E:7B:C7 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: 014E Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5E89A9888CBD11EFBA479615C4F9AE02.roa Signing time: Tue 09 Jun 2026 06:36:47 +0000 ROA not before: Tue 09 Jun 2026 06:36:47 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 132805 IP address blocks: 103.2.104.0/24 maxlen: 24 103.2.107.0/24 maxlen: 24 223.130.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 05:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Jun 9 06:36:47 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a27b47f-270b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:9a:5e:b1:39:93:7d:d6:a6:d2:3c:71:68: c0:2c:04:41:1a:ee:b0:6c:f8:0b:d9:b7:9e:5d:43: ea:4d:3f:a9:c4:61:6c:f7:26:da:f3:50:c1:27:cb: 8d:e6:2f:27:2b:a8:48:03:89:ba:c2:0d:0e:2b:ed: fd:64:a1:15:60:5c:3c:a0:43:66:24:17:d9:3e:50: 81:7d:68:73:b5:2b:06:a3:5a:f0:1f:bb:b7:6c:22: 98:77:84:82:27:3b:24:30:e5:ea:65:bc:01:f3:a3: 40:b7:d5:76:45:fe:2f:94:55:07:58:d7:a0:d1:91: 48:9b:7f:4e:a2:60:0f:a5:f1:96:66:31:0b:4a:b4: 17:2e:83:8d:dc:60:fe:1b:a1:94:d8:91:46:64:b2: e6:24:e9:90:a6:d7:34:f3:d5:54:cb:38:13:ca:81: 86:0e:e9:97:6a:e6:56:8b:8c:05:dc:45:7e:ba:55: 3d:42:ba:f1:47:ba:9e:90:77:ad:b8:fc:5b:02:aa: 19:f7:53:36:ae:64:45:bb:e2:4e:85:db:22:4b:d3: eb:a8:d0:b1:35:04:47:1f:f7:e5:23:67:1f:d7:61: d5:c5:57:9c:36:07:ea:6a:b2:7c:c8:ab:60:e3:86: ec:d9:e2:6f:37:19:e1:a9:dd:67:d4:a5:8c:f9:b0: 82:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B9:B6:3A:81:D5:1F:D5:55:E0:CB:A0:0D:73:B1:F3:2C:2E:7B:C7 X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5E89A9888CBD11EFBA479615C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.2.104.0/24 103.2.107.0/24 223.130.0.0/22 Signature Algorithm: sha256WithRSAEncryption 51:36:ee:35:eb:a6:ab:5b:1a:85:33:94:68:6a:5f:10:5c:b1: cf:b2:a2:c4:95:07:1c:d5:7f:a3:49:0e:6e:56:ea:08:25:e2: a5:18:14:73:7e:67:98:2b:42:40:74:e2:00:d9:fe:09:1b:a9: 8c:af:da:08:42:17:dc:b5:08:14:ff:99:94:af:ab:9d:05:b3: f4:f6:c3:f4:80:37:29:09:64:3d:33:d0:aa:7e:c8:41:52:e5: e1:06:1f:1f:56:a7:06:2c:a2:44:51:5f:ac:28:bc:eb:3b:3f: 7b:0a:08:86:e4:a9:ed:2c:d0:83:c6:27:02:81:51:c5:e0:d8: e4:88:9e:2f:6f:83:14:4c:da:6f:96:39:1d:be:b4:3f:74:22: 8e:42:fb:32:74:5e:0c:6d:8b:a2:d8:90:62:10:44:7a:4c:9a: 24:f2:6a:33:bc:c4:f1:58:7c:e8:96:82:28:63:fd:fa:6a:c2: f4:ab:6f:6b:90:ed:bc:3b:bc:a1:d1:40:1c:ef:ae:95:5a:d0: 73:cf:32:ef:e4:c9:a7:e0:b1:aa:ae:26:60:c3:f7:0f:29:d1: 01:af:80:45:a8:ab:cf:e8:ab:6a:b7:61:cd:f4:a7:e1:ef:b8: e7:69:79:13:dd:f3:91:30:5b:fe:ec:27:e4:be:ae:cc:c4:d0: d2:04:1f:d5 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjYwNjA5MDYzNjQ3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTI3YjQ3Zi0yNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28yaXrE5k33WptI8cWjALARBGu6wbPgL2beeXUPqTT+pxGFs9yba81DBJ8uN 5i8nK6hIA4m6wg0OK+39ZKEVYFw8oENmJBfZPlCBfWhztSsGo1rwH7u3bCKYd4SC JzskMOXqZbwB86NAt9V2Rf4vlFUHWNeg0ZFIm39OomAPpfGWZjELSrQXLoON3GD+ G6GU2JFGZLLmJOmQptc089VUyzgTyoGGDumXauZWi4wF3EV+ulU9QrrxR7qekHet uPxbAqoZ91M2rmRFu+JOhdsiS9PrqNCxNQRHH/flI2cf12HVxVecNgfqarJ8yKtg 44bs2eJvNxnhqd1n1KWM+bCCyQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEq5tjqB 1R/VVeDLoA1zsfMsLnvHMB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURGQUYvOTdCRTkzMEU4Q0JDMTFFRkJGMjIwMDEyQzRGOUFFMDIvNUU4OUE5ODg4 Q0JEMTFFRkJBNDc5NjE1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZwJoAwQAZwJrAwQC34IAMA0GCSqGSIb3DQEBCwUAA4IBAQBRNu41 66arWxqFM5Roal8QXLHPsqLElQcc1X+jSQ5uVuoIJeKlGBRzfmeYK0JAdOIA2f4J G6mMr9oIQhfctQgU/5mUr6udBbP09sP0gDcpCWQ9M9CqfshBUuXhBh8fVqcGLKJE UV+sKLzrOz97CgiG5KntLNCDxicCgVHF4NjkiJ4vb4MUTNpvljkdvrQ/dCKOQvsy dF4MbYui2JBiEER6TJok8mozvMTxWHzoloIoY/36asL0q29rkO28O7yh0UAc766V WtBzzzLv5Mmn4LGqriZgw/cPKdEBr4BFqKvP6Ktqt2HN9Kfh77jnaXkT3fORMFv+ 7Cfkvq7MxNDSBB/V -----END CERTIFICATE-----Generated at Sat Jun 13 22:47:59 2026 by rpki-client