$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/89AC5C4686EE11F19E006003A7EE528E.roa File: 89AC5C4686EE11F19E006003A7EE528E.roa (raw, json) Hash identifier: PkydwwTolsEm1C1IlaW9dK4GplSAGjMdSU6I9gbAdos= Subject key identifier: 95:C1:76:7D:A2:88:D7:40:0C:8B:6F:C4:D5:76:36:4A:51:D9:7C:9F Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2DFB Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/89AC5C4686EE11F19E006003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:30:50 +0000 ROA not before: Thu 23 Jul 2026 23:30:50 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58717 IP address blocks: 43.245.140.0/22 maxlen: 24 59.153.202.0/23 maxlen: 24 103.15.244.0/22 maxlen: 24 103.15.246.64/26 maxlen: 26 103.75.238.0/23 maxlen: 24 103.96.68.0/23 maxlen: 24 103.96.70.0/23 maxlen: 24 103.108.144.0/22 maxlen: 24 103.158.2.0/23 maxlen: 24 103.161.66.0/23 maxlen: 24 103.199.84.0/22 maxlen: 24 103.242.216.0/22 maxlen: 24 144.48.148.0/23 maxlen: 24 175.41.44.0/22 maxlen: 24 2405:1500::/30 maxlen: 31 2405:1500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 23:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11771 (0x2dfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Validity Not Before: Jul 23 23:30:50 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a62a42a-1d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:ff:9e:8a:2a:fa:2d:84:20:37:78:4e:f6: ca:ff:b9:bb:c1:4b:1d:b7:d3:ed:f9:07:cb:e0:f5: 42:6b:97:c4:8d:ff:8a:c8:90:93:e7:1c:ff:f3:93: 12:9e:75:06:7e:c9:3e:81:b0:86:23:8e:9b:e9:16: 94:66:ab:8d:2f:ac:2b:37:a0:b8:9d:dd:65:5c:17: d6:41:34:f7:b9:85:a4:60:ff:3a:5e:30:7f:2e:01: e4:3e:41:f9:f8:ca:cc:37:54:3a:f5:1f:d4:ef:e9: be:67:1f:f7:2c:65:fb:9e:cc:9f:bd:2c:7e:db:7f: a1:27:45:e8:f3:e9:0a:20:4b:ad:36:b0:9d:a8:89: 74:ac:a5:9d:15:64:6c:3c:40:d0:24:89:04:ed:5f: 7c:44:b1:06:97:2e:82:55:90:20:34:40:91:87:57: 12:f1:f2:83:19:e5:76:e5:03:b4:b1:80:21:d0:2e: c4:5b:5e:1d:84:56:64:3b:4f:74:20:09:ea:83:e5: 37:fe:0e:b9:91:d3:92:ad:6d:05:92:e2:34:9f:59: 58:7a:f3:d2:a7:a6:b0:ab:ee:9d:e5:6c:40:6c:a7: 83:05:ad:8f:7e:59:92:b2:77:cd:d6:cd:d4:d8:98: 4e:d6:f4:06:9b:9a:f7:7d:45:d6:23:2f:25:92:c2: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C1:76:7D:A2:88:D7:40:0C:8B:6F:C4:D5:76:36:4A:51:D9:7C:9F X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/89AC5C4686EE11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 43.245.140.0/22 59.153.202.0/23 103.15.244.0/22 103.75.238.0/23 103.96.68.0/22 103.108.144.0/22 103.158.2.0/23 103.161.66.0/23 103.199.84.0/22 103.242.216.0/22 144.48.148.0/23 175.41.44.0/22 IPv6: 2405:1500::/30 Signature Algorithm: sha256WithRSAEncryption 83:c9:71:1e:f2:29:66:5c:47:bc:3c:af:68:74:59:b2:06:27: be:f1:28:d1:36:d2:9b:fe:5b:6f:7c:ac:e2:bf:65:72:25:df: 52:51:3f:db:8f:ac:1e:00:30:9e:2f:a8:8f:62:76:9a:d0:e9: c4:b0:d5:11:7d:8b:46:38:94:6d:c8:eb:f3:9f:2a:56:df:4b: 15:d7:95:f2:2a:3c:26:2b:20:03:45:18:3a:df:21:26:5f:d2: 09:5b:31:c1:42:2a:4f:e2:73:8e:0d:12:3b:a8:ff:c6:c5:6e: 9c:41:ad:9c:d6:61:d9:36:5c:23:f0:22:6d:3e:a8:c7:e0:77: c5:05:d1:aa:fa:e6:35:90:b6:f7:f2:28:02:6b:16:f0:06:67: f8:6d:2e:34:52:39:14:55:6f:97:43:25:92:42:ea:03:a5:28: bc:2a:1b:7d:8b:72:40:70:2d:ad:98:bf:c7:4e:da:32:14:6a: 25:77:05:72:c0:d7:fc:33:42:43:84:61:70:60:0f:4d:f1:80: 35:da:9d:8e:2e:09:f0:6c:8d:9e:0d:b7:57:a9:43:86:f0:76: e7:a8:4c:2e:ff:79:be:9f:ce:1e:0d:38:2e:c1:9e:5c:d2:fe: 14:6f:4e:4b:24:8d:6a:a9:8e:7d:cf:58:f4:0e:06:fc:2a:11: fe:8f:5f:42 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICLfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjYwNzIzMjMzMDUwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTQyYS0xZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhL/nooq+i2EIDd4TvbK/7m7wUsdt9Pt+QfL4PVCa5fEjf+KyJCT5xz/85MS nnUGfsk+gbCGI46b6RaUZquNL6wrN6C4nd1lXBfWQTT3uYWkYP86XjB/LgHkPkH5 +MrMN1Q69R/U7+m+Zx/3LGX7nsyfvSx+23+hJ0Xo8+kKIEutNrCdqIl0rKWdFWRs PEDQJIkE7V98RLEGly6CVZAgNECRh1cS8fKDGeV25QO0sYAh0C7EW14dhFZkO090 IAnqg+U3/g65kdOSrW0FkuI0n1lYevPSp6awq+6d5WxAbKeDBa2PflmSsnfN1s3U 2JhO1vQGm5r3fUXWIy8lksID4wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFJXBdn2i iNdADItvxNV2NkpR2XyfMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEyRDUvNUY4NjFFRTZCODlBMTFFM0I0QUM3RTc4NTkxMUVBMzIvODlBQzVDNDY4 NkVFMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMHAGCCsGAQUFBwEHAQH/BGEwXzBO BAIAATBIAwQCK/WMAwQBO5nKAwQCZw/0AwQBZ0vuAwQCZ2BEAwQCZ2yQAwQBZ54C AwQBZ6FCAwQCZ8dUAwQCZ/LYAwQBkDCUAwQCryksMA0EAgACMAcDBQIkBRUAMA0G CSqGSIb3DQEBCwUAA4IBAQCDyXEe8ilmXEe8PK9odFmyBie+8SjRNtKb/ltvfKzi v2VyJd9SUT/bj6weADCeL6iPYnaa0OnEsNURfYtGOJRtyOvznypW30sV15XyKjwm KyADRRg63yEmX9IJWzHBQipP4nOODRI7qP/GxW6cQa2c1mHZNlwj8CJtPqjH4HfF BdGq+uY1kLb38igCaxbwBmf4bS40UjkUVW+XQyWSQuoDpSi8Kht9i3JAcC2tmL/H TtoyFGoldwVywNf8M0JDhGFwYA9N8YA12p2OLgnwbI2eDbdXqUOG8HbnqEwu/3m+ n84eDTguwZ5c0v4Ub05LJI1qqY59z1j0Dgb8KhH+j19C -----END CERTIFICATE-----Generated at Fri Jul 24 13:45:42 2026 by rpki-client