$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/89E51722DF9011EFB2CE892EC4F9AE02.roa File: 89E51722DF9011EFB2CE892EC4F9AE02.roa (raw, json) Hash identifier: Nuy8wkTfNQsDA+tWgvTQcyjhbo91R+mIegI98+xjZxA= Subject key identifier: 37:8F:EA:74:AE:58:53:EF:79:02:B5:B2:1E:A2:35:63:BF:84:D2:BE Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Certificate serial: DE Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/89E51722DF9011EFB2CE892EC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:19:41 +0000 ROA not before: Wed 03 Dec 2025 05:04:38 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 140637 IP address blocks: 143.174.192.0/21 maxlen: 21 143.174.200.0/21 maxlen: 21 192.199.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Validity Not Before: Dec 3 05:04:38 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a58e6d-a890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:af:48:22:39:a0:72:bc:50:36:23:7f:9d:1f: 86:d3:7e:a3:62:4a:61:43:db:3c:7a:fc:85:65:32: 3b:0c:8c:cd:18:09:d4:1c:ee:79:e3:99:45:4e:c5: cd:d0:c7:a2:f3:5e:8b:60:6f:01:a6:3b:34:83:8a: 0d:57:32:84:87:82:2b:97:de:04:81:a2:85:b3:f0: dd:86:c0:d8:4e:15:03:65:92:59:cc:0f:89:d0:9e: 40:23:98:e6:5c:dd:5c:3d:b2:f6:21:eb:70:b2:8c: f7:57:71:84:25:d4:76:7b:9c:03:a3:89:43:df:ea: 6d:a1:08:d3:ea:4c:37:68:2b:36:be:c1:13:21:df: 32:13:79:7c:0f:6c:fc:b6:55:dd:cc:71:95:06:3b: dc:ba:47:b0:ad:1b:fd:94:d8:7a:ec:5c:d3:6f:ab: b1:bc:84:64:de:b5:40:a9:20:3b:6d:31:c1:c1:47: 71:e6:75:ca:6c:de:28:56:29:56:0c:59:bc:a3:5b: 1a:d9:43:c1:45:44:be:f0:a3:c6:ff:17:c7:dc:22: 98:ec:98:f3:70:7f:a4:c9:b1:bc:a3:da:48:98:28: af:16:2e:a0:27:e9:ba:ff:b9:51:79:86:dd:aa:fb: 0d:45:82:e6:08:78:eb:56:2c:e7:1e:90:ec:c3:6c: 5e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8F:EA:74:AE:58:53:EF:79:02:B5:B2:1E:A2:35:63:BF:84:D2:BE X509v3 Authority Key Identifier: keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/89E51722DF9011EFB2CE892EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 143.174.192.0/20 192.199.32.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:a2:e6:5d:3e:24:6d:8e:41:b3:9b:7e:64:ba:36:db:74:87: b1:91:c1:de:93:3e:ec:4e:a3:3e:ce:4c:2e:79:ad:ed:d7:f1: 8d:88:ff:32:6f:70:08:91:cd:73:91:32:a3:e2:4f:8d:aa:4f: 47:32:34:07:e2:ce:56:83:60:dd:4f:7a:e0:81:e2:92:92:23: 4f:6c:b0:eb:08:85:62:cf:eb:8b:b4:89:02:ff:39:c7:cf:a6: 9c:7d:35:fa:86:71:00:0f:02:55:1e:85:1b:af:5c:ce:e6:eb: 6e:a7:02:0b:ab:d2:0a:85:d5:44:02:0e:a4:54:3e:7c:06:6e: 5b:bb:46:1e:f9:ad:01:83:27:cf:0c:3c:d5:3b:69:62:5d:8a: be:33:2a:f5:13:6c:b0:12:d5:3f:58:29:d8:95:2a:40:4f:77: aa:63:7e:46:e7:3d:cd:1d:12:89:da:26:8f:9c:27:9a:8f:18: 21:48:c5:31:cb:52:0b:b7:cc:0f:2b:76:b4:6a:54:74:e1:4b: bd:b0:f9:61:9e:a6:3f:6a:3e:76:01:c2:34:db:49:32:79:26: 95:90:3a:a8:b1:84:47:30:c3:f3:58:a8:a1:bf:4a:fa:ab:69: 13:fe:82:02:c0:b4:be:28:17:b3:16:4b:5b:46:53:cd:d8:e1: 51:2a:b9:59 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzNTcxMTAvBgNVBAUTKDM2MUZBREEyRTBBODhDRjI4N0Y0Q0U2Q0MzQjQ0NjJD OTEzMzBCRkMwHhcNMjUxMjAzMDUwNDM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGU2ZC1hODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA369IIjmgcrxQNiN/nR+G036jYkphQ9s8evyFZTI7DIzNGAnUHO5545lFTsXN 0Mei816LYG8Bpjs0g4oNVzKEh4Irl94EgaKFs/DdhsDYThUDZZJZzA+J0J5AI5jm XN1cPbL2Ietwsoz3V3GEJdR2e5wDo4lD3+ptoQjT6kw3aCs2vsETId8yE3l8D2z8 tlXdzHGVBjvcukewrRv9lNh67FzTb6uxvIRk3rVAqSA7bTHBwUdx5nXKbN4oVilW DFm8o1sa2UPBRUS+8KPG/xfH3CKY7JjzcH+kybG8o9pImCivFi6gJ+m6/7lReYbd qvsNRYLmCHjrViznHpDsw2xePwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDeP6nSu WFPveQK1sh6iNWO/hNK+MB8GA1UdIwQYMBaAFDYfraLgqIzyh/TObMO0RiyRMwv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xNEE3OEYyQ0RG OEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQS0g5TTVzdzdSR0xKRXpD X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgzNTcvMTRBNzhGMkNERjhBMTFFRjg3NDcyQjc0QzRGOUFFMDIvODlFNTE3MjJE RjkwMTFFRkIyQ0U4OTJFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQEj67AAwQDwMcgMA0GCSqGSIb3DQEBCwUAA4IBAQBcouZdPiRtjkGz m35kujbbdIexkcHekz7sTqM+zkwuea3t1/GNiP8yb3AIkc1zkTKj4k+Nqk9HMjQH 4s5Wg2DdT3rggeKSkiNPbLDrCIViz+uLtIkC/znHz6acfTX6hnEADwJVHoUbr1zO 5utupwILq9IKhdVEAg6kVD58Bm5bu0Ye+a0BgyfPDDzVO2liXYq+Myr1E2ywEtU/ WCnYlSpAT3eqY35G5z3NHRKJ2iaPnCeajxghSMUxy1ILt8wPK3a0alR04Uu9sPlh nqY/aj52AcI020kyeSaVkDqosYRHMMPzWKihv0r6q2kT/oICwLS+KBezFktbRlPN 2OFRKrlZ -----END CERTIFICATE-----Generated at Thu Mar 26 16:51:53 2026 by rpki-client