$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/989C920254F311E7AC64ED3AC4F9AE02.roa File: 989C920254F311E7AC64ED3AC4F9AE02.roa (raw, json) Hash identifier: UmJO0KSnCSvHXcJ5e26UAgnZ2y1lkvWGmHME2yVB9kg= Subject key identifier: D2:26:BC:4C:5B:48:43:EB:C6:BF:13:D7:6D:AF:1D:F8:69:31:09:F8 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 2886 Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/989C920254F311E7AC64ED3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:53:15 +0000 ROA not before: Sun 14 Dec 2025 15:32:56 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 58439 IP address blocks: 103.194.176.0/22 maxlen: 22 183.177.96.0/20 maxlen: 24 2402:8880::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10374 (0x2886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Dec 14 15:32:56 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a460eb-db68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:2d:99:32:7a:4f:50:d3:83:e0:01:f6:41: d9:30:87:a8:2f:26:b1:71:55:4a:24:f7:8e:f1:c6: d4:b3:bc:40:06:bb:0e:db:28:c8:89:7b:c2:25:77: 64:5d:f4:39:21:fe:5c:d6:05:cc:93:27:b6:cc:ef: fe:1a:d8:29:c6:eb:5c:a4:48:ab:fc:86:9f:21:0a: 31:b3:eb:26:2d:a3:0f:52:45:ff:ba:bb:8c:da:ce: ca:ad:03:80:01:18:b2:ea:10:66:9c:2b:f1:33:d2: 25:a0:7e:2c:60:85:07:da:2a:74:5f:3b:80:0f:d9: ef:ef:30:f3:8f:c0:63:73:2a:bb:33:65:40:b3:64: ce:8a:6b:1c:f2:ec:3b:04:4e:83:07:94:6b:3f:70: d5:20:6e:f1:e2:8a:13:57:59:2b:70:e9:45:5b:8f: 41:00:38:ac:f7:bb:59:a8:5e:37:75:60:c5:6a:a2: 91:09:6b:ca:a8:19:d4:25:2e:0b:ce:08:3a:e0:01: 1b:c9:11:fe:1a:42:c1:8a:21:e0:68:dc:6d:71:36: d4:74:f9:7a:93:e9:5e:82:72:9d:b6:97:84:30:f5: 80:4e:bd:b7:72:63:d0:4d:c3:4d:80:5c:c8:45:69: da:9e:18:d5:bc:e1:ca:57:89:f5:6f:79:d2:fc:9f: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:26:BC:4C:5B:48:43:EB:C6:BF:13:D7:6D:AF:1D:F8:69:31:09:F8 X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/989C920254F311E7AC64ED3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.194.176.0/22 183.177.96.0/20 IPv6: 2402:8880::/32 Signature Algorithm: sha256WithRSAEncryption 9d:8e:49:dd:3b:97:c0:29:7c:2b:5d:e5:d1:97:bd:76:a3:2b: b8:31:cb:3f:af:52:ff:f1:e6:71:de:d9:8f:c0:c7:d2:3f:cd: 34:68:be:3f:38:be:12:85:e8:e1:ce:df:a5:64:f1:6d:98:e8: 95:34:49:70:ef:38:e6:e5:e8:18:dc:dd:3b:4a:f1:d2:d4:af: 0c:dd:d8:0e:7d:5e:38:54:1d:36:c1:b3:96:fe:08:05:14:4a: ee:6a:30:24:13:52:04:06:c9:07:a0:00:80:d1:6c:6f:07:7a: a1:54:41:d2:d0:87:b7:05:8d:d5:c1:ca:89:68:54:58:ec:72: 9b:24:b4:0f:bd:b6:1a:39:19:5e:4a:4b:ea:d2:a6:d2:9d:83: c4:2a:25:d0:03:7d:52:0e:5f:45:a1:e1:ad:ec:e0:0d:2b:2a: 3c:ff:fd:80:f0:ed:08:57:a8:a3:78:bd:40:22:8d:15:0c:89: 39:62:48:13:80:ac:8c:d6:a1:0f:08:0f:9e:1a:df:3d:17:3a: 3a:50:1b:b3:cb:4a:5d:38:48:7b:91:16:4b:83:23:94:3c:69: 80:c2:4b:c3:fc:1a:ab:f9:c1:12:7b:c1:91:f5:63:7a:15:23: 4c:72:c5:ac:6f:34:2c:f5:b4:1c:13:ed:06:d1:a5:30:5e:d8: 66:6f:0d:e6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICKIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUxMjE0MTUzMjU2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjBlYi1kYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4YtmTJ6T1DTg+AB9kHZMIeoLyaxcVVKJPeO8cbUs7xABrsO2yjIiXvCJXdk XfQ5If5c1gXMkye2zO/+GtgpxutcpEir/IafIQoxs+smLaMPUkX/uruM2s7KrQOA ARiy6hBmnCvxM9IloH4sYIUH2ip0XzuAD9nv7zDzj8Bjcyq7M2VAs2TOimsc8uw7 BE6DB5RrP3DVIG7x4ooTV1krcOlFW49BADis97tZqF43dWDFaqKRCWvKqBnUJS4L zgg64AEbyRH+GkLBiiHgaNxtcTbUdPl6k+legnKdtpeEMPWATr23cmPQTcNNgFzI RWnanhjVvOHKV4n1b3nS/J905QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNImvExb SEPrxr8T122vHfhpMQn4MB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjRCMjUvQjIxQTU3Mjg5RjkyMTFFNDlERUZFMjE2QzRGOUFFMDIvOTg5QzkyMDI1 NEYzMTFFN0FDNjRFRDNBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ8KwAwQEt7FgMA0EAgACMAcDBQAkAoiAMA0GCSqGSIb3DQEBCwUA A4IBAQCdjkndO5fAKXwrXeXRl712oyu4Mcs/r1L/8eZx3tmPwMfSP800aL4/OL4S hejhzt+lZPFtmOiVNElw7zjm5egY3N07SvHS1K8M3dgOfV44VB02wbOW/ggFFEru ajAkE1IEBskHoACA0WxvB3qhVEHS0Ie3BY3VwcqJaFRY7HKbJLQPvbYaORleSkvq 0qbSnYPEKiXQA31SDl9FoeGt7OANKyo8//2A8O0IV6ijeL1AIo0VDIk5YkgTgKyM 1qEPCA+eGt89Fzo6UBuzy0pdOEh7kRZLgyOUPGmAwkvD/Bqr+cESe8GR9WN6FSNM csWsbzQs9bQcE+0G0aUwXthmbw3m -----END CERTIFICATE-----Generated at Mon Mar 2 20:14:49 2026 by rpki-client