$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa File: 589FBEDC860311EBAFE18309C4F9AE02.roa (raw, json) Hash identifier: X5seaG41aTTcYS0YJ5ID592qQAd6TABWJEt0PwhEjdE= Subject key identifier: 2D:15:C3:71:8B:08:DE:23:27:89:28:9F:56:D9:F4:7C:57:4D:0E:03 Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 0732 Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa Signing time: Mon 06 Jul 2026 23:23:34 +0000 ROA not before: Mon 06 Jul 2026 23:23:34 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 55555 IP address blocks: 43.245.28.0/22 maxlen: 24 103.246.96.0/22 maxlen: 24 180.200.244.0/22 maxlen: 24 2400:b100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1842 (0x732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Validity Not Before: Jul 6 23:23:34 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4c38f6-0ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:f8:de:ef:77:5f:6d:48:49:4e:ed:13:0c: ee:50:2b:2c:5d:1f:f1:94:c4:5f:6e:6a:35:ea:e2: 56:ee:9c:94:bf:9b:1d:b3:9e:13:e3:2f:8f:a0:67: 25:aa:6d:3c:f6:c1:6d:ad:81:57:d1:05:97:9a:a8: cb:35:41:c0:76:89:fe:d3:c8:29:9b:a9:ef:dd:31: 3f:32:61:9b:d3:a3:50:5c:c1:2a:37:b5:70:2a:29: 53:11:2e:45:b9:9f:f3:0a:46:92:94:d8:59:94:99: ef:fe:55:ae:0c:9c:b1:22:bb:6e:52:33:24:e7:a6: dd:4c:ac:ec:1a:bc:e4:76:8d:79:0c:51:6b:00:47: 4a:35:68:24:91:e9:8c:ee:04:6f:54:64:30:bd:0b: 4c:15:58:b7:ac:50:6b:33:37:87:1d:fd:22:01:58: a5:f5:8c:e5:19:2e:bb:c4:6f:4d:4c:68:09:a4:38: 94:8c:ee:b8:1d:ec:86:0f:34:44:cd:4a:2d:56:8e: c2:0d:f7:95:ed:bf:6b:c2:ee:90:2c:5f:c7:f4:4d: 0f:5e:05:e7:9e:4e:84:d4:15:03:82:ba:4a:79:1f: 94:d9:2f:89:92:57:97:0a:c1:14:1f:39:a5:fd:18: 70:e7:c7:10:15:6b:89:0f:a0:f9:ef:23:2d:23:7d: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:15:C3:71:8B:08:DE:23:27:89:28:9F:56:D9:F4:7C:57:4D:0E:03 X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.28.0/22 103.246.96.0/22 180.200.244.0/22 IPv6: 2400:b100::/32 Signature Algorithm: sha256WithRSAEncryption 00:d2:58:38:50:23:3e:df:ad:29:38:3b:1a:39:41:2a:a3:1e: f3:9f:a3:ef:3c:20:44:22:cb:33:eb:26:28:2b:18:97:98:20: b9:c5:cd:8e:ec:78:37:02:b6:04:90:d7:d5:8d:35:a6:48:44: 8d:ba:22:80:25:59:0b:b1:1d:c6:b6:f1:2f:f3:91:be:0d:d9: 2a:3d:ca:88:44:a3:c6:bf:d0:fd:63:2f:0f:31:24:90:b3:ae: ff:18:5d:8b:86:19:91:34:f3:83:34:e3:88:d7:78:dd:98:fe: a9:76:7f:f1:3e:bd:78:e3:9a:e2:7a:97:78:3c:04:8e:7d:ca: 6e:86:20:9c:4d:3d:35:e7:25:c5:9c:cb:6a:5b:76:56:27:13: b0:38:3e:66:48:2d:38:bd:a8:92:d5:2d:60:f0:57:2d:11:85: 9c:10:94:b1:ce:15:e7:b9:f3:53:62:56:a8:9d:5b:b6:a4:82: e2:d3:ef:37:e2:1e:82:2c:0c:0d:3f:c5:e5:58:f0:5b:fc:6e: 49:e8:b0:7e:9d:2d:b8:13:9c:83:d5:6e:a7:93:eb:f1:e1:0b: 7a:21:5e:77:3b:b4:f8:a0:79:53:31:14:d7:d9:72:e9:70:3e: 34:b4:44:58:ac:9c:35:5e:cb:69:5c:79:1c:1a:c3:c4:29:4b: 33:d8:24:38 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjYwNzA2MjMyMzM0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjMzhmNi0wYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOX43u93X21ISU7tEwzuUCssXR/xlMRfbmo16uJW7pyUv5sds54T4y+PoGcl qm089sFtrYFX0QWXmqjLNUHAdon+08gpm6nv3TE/MmGb06NQXMEqN7VwKilTES5F uZ/zCkaSlNhZlJnv/lWuDJyxIrtuUjMk56bdTKzsGrzkdo15DFFrAEdKNWgkkemM 7gRvVGQwvQtMFVi3rFBrMzeHHf0iAVil9YzlGS67xG9NTGgJpDiUjO64HeyGDzRE zUotVo7CDfeV7b9rwu6QLF/H9E0PXgXnnk6E1BUDgrpKeR+U2S+JkleXCsEUHzml /Rhw58cQFWuJD6D57yMtI31SgwIDAQABo4ICezCCAncwHQYDVR0OBBYEFC0Vw3GL CN4jJ4kon1bZ9HxXTQ4DMB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjMzNEQvMjdFODYxRDg4NUY3MTFFQjkyMDgxNzExQzRGOUFFMDIvNTg5RkJFREM4 NjAzMTFFQkFGRTE4MzA5QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK/UcAwQCZ/ZgAwQCtMj0MA0EAgACMAcDBQAkALEAMA0GCSqGSIb3 DQEBCwUAA4IBAQAA0lg4UCM+360pODsaOUEqox7zn6PvPCBEIssz6yYoKxiXmCC5 xc2O7Hg3ArYEkNfVjTWmSESNuiKAJVkLsR3GtvEv85G+DdkqPcqIRKPGv9D9Yy8P MSSQs67/GF2LhhmRNPODNOOI13jdmP6pdn/xPr1445riepd4PASOfcpuhiCcTT01 5yXFnMtqW3ZWJxOwOD5mSC04vaiS1S1g8FctEYWcEJSxzhXnufNTYlaonVu2pILi 0+834h6CLAwNP8XlWPBb/G5J6LB+nS24E5yD1W6nk+vx4Qt6IV53O7T4oHlTMRTX 2XLpcD40tERYrJw1XstpXHkcGsPEKUsz2CQ4 -----END CERTIFICATE-----Generated at Fri Jul 24 00:22:50 2026 by rpki-client