$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/89283C80809211EB938F4016C4F9AE02.roa File: 89283C80809211EB938F4016C4F9AE02.roa (raw, json) Hash identifier: NPHu7DZaO/ADjuNOSCgTPs6STOuXbfQT0vJJQJiYBPM= Subject key identifier: 34:43:3A:71:B4:E4:7D:F0:A4:A5:CA:CB:82:D2:CE:2E:74:C8:4F:09 Certificate issuer: /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Certificate serial: 0748 Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/89283C80809211EB938F4016C4F9AE02.roa Signing time: Tue 14 Jul 2026 22:23:46 +0000 ROA not before: Tue 14 Jul 2026 22:23:46 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 132321 IP address blocks: 150.191.0.0/16 maxlen: 16 150.191.0.0/17 maxlen: 17 150.191.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A Validity Not Before: Jul 14 22:23:46 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a56b6f1-4899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:49:cb:ac:5f:30:93:10:af:87:55:45:98: 2a:03:4e:9e:49:03:a9:cd:44:33:d3:89:8c:f3:ac: 27:18:98:59:9f:d2:82:ec:92:d4:06:da:11:15:fb: 42:9a:18:f9:a5:7c:12:ad:10:b9:b3:68:59:4d:c5: 2b:25:09:fc:b6:76:de:23:c2:be:fb:ab:10:b3:e5: d8:b9:0c:55:03:cb:dc:8d:49:6e:85:c0:96:ce:bc: 72:79:58:80:74:ac:9a:20:5a:b9:be:d4:44:aa:5a: d5:d0:8c:7f:76:9f:b8:2d:58:1f:04:b9:9f:ca:ab: a2:d0:ac:b1:3d:d3:bd:b3:30:c7:a0:d4:6d:a8:1c: 3e:d6:9e:40:21:dd:a1:7a:75:03:44:0b:57:b3:71: 84:f8:c6:f6:2b:59:20:76:50:51:60:96:1f:d6:cf: 4d:24:64:fe:6c:1f:83:85:99:d7:48:85:bd:83:00: 71:b1:64:4c:8e:6e:26:5d:7c:65:9b:de:78:44:e3: 3a:1f:98:12:b4:7b:87:ad:2a:22:e8:09:e5:16:52: 62:4b:60:08:39:3c:89:19:49:bb:2a:f4:43:82:db: 42:23:cf:78:62:b0:72:e9:69:cd:1d:6d:24:bd:44: c5:d8:d1:98:e0:c9:9c:73:ed:9f:a7:9d:0f:bf:19: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:43:3A:71:B4:E4:7D:F0:A4:A5:CA:CB:82:D2:CE:2E:74:C8:4F:09 X509v3 Authority Key Identifier: keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/89283C80809211EB938F4016C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 150.191.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:46:c0:e9:6d:80:b3:03:58:d0:6f:d5:fd:f9:cc:e3:9b:43: 4a:6d:c3:52:45:d3:b8:e7:98:f8:9f:a3:2e:9f:e3:ac:5b:ac: 11:0e:c4:f7:74:4d:78:f9:ed:05:2d:0c:c6:d5:31:58:89:58: c8:ce:a6:14:cc:ea:29:a3:6e:1f:ff:20:38:f7:69:85:f4:07: 0e:39:79:f6:4f:63:5d:19:53:43:35:fd:d5:aa:b8:4f:44:6f: 5a:61:35:e9:c2:82:af:5f:91:9f:4e:84:f0:e4:ec:df:a1:65: 52:eb:09:11:e4:36:8b:ec:70:f8:60:ad:7c:12:ac:13:43:27: f5:aa:a5:70:28:26:f9:15:c8:de:1b:a8:72:29:7f:5e:d4:c7: a8:2c:e7:26:86:cb:3b:4e:4b:c3:b9:c5:f2:a3:fa:08:7e:68: df:9a:99:dc:d0:8a:1f:9e:8e:67:03:fc:d6:96:fc:4c:25:5a: 23:32:2b:33:2f:8d:86:16:3c:f8:76:38:8a:43:7c:e4:7d:7e: cb:77:46:61:52:db:d5:38:e1:2e:b6:43:ab:cb:00:54:66:b8: eb:04:5d:5e:19:5d:e6:8f:01:83:79:da:34:6e:27:1c:cf:f5: c6:69:00:8a:ca:f4:0f:9e:34:9f:a7:5d:76:3e:8c:86:ad:3f: 0e:99:eb:48 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKENBMzJENTExNDYyQUI0MjYxOEE4OERCQTA1ODY5QUZF QkVBMEU1MUEwHhcNMjYwNzE0MjIyMzQ2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2YjZmMS00ODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoltJy6xfMJMQr4dVRZgqA06eSQOpzUQz04mM86wnGJhZn9KC7JLUBtoRFftC mhj5pXwSrRC5s2hZTcUrJQn8tnbeI8K++6sQs+XYuQxVA8vcjUluhcCWzrxyeViA dKyaIFq5vtREqlrV0Ix/dp+4LVgfBLmfyqui0KyxPdO9szDHoNRtqBw+1p5AId2h enUDRAtXs3GE+Mb2K1kgdlBRYJYf1s9NJGT+bB+DhZnXSIW9gwBxsWRMjm4mXXxl m954ROM6H5gStHuHrSoi6AnlFlJiS2AIOTyJGUm7KvRDgttCI894YrBy6WnNHW0k vUTF2NGY4Mmcc+2fp50PvxlakwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFDRDOnG0 5H3wpKXKy4LSzi50yE8JMB8GA1UdIwQYMBaAFMoy1RFGKrQmGKiNugWGmv6+oOUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8xM0VENjgwMjgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRDWVlxSTI2QllhYV9yNmc1 Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqTFZFVVlxdENZWXFJMjZCWWFhX3I2ZzVSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5QzEvMTNFRDY4MDI4MDg2MTFFQkI0QzZEMTE2QzRGOUFFMDIvODkyODNDODA4 MDkyMTFFQjkzOEY0MDE2QzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAlr8wDQYJKoZIhvcNAQELBQADggEBAAtGwOltgLMDWNBv1f35zOOb Q0ptw1JF07jnmPifoy6f46xbrBEOxPd0TXj57QUtDMbVMViJWMjOphTM6imjbh// IDj3aYX0Bw45efZPY10ZU0M1/dWquE9Eb1phNenCgq9fkZ9OhPDk7N+hZVLrCRHk NovscPhgrXwSrBNDJ/WqpXAoJvkVyN4bqHIpf17Ux6gs5yaGyztOS8O5xfKj+gh+ aN+amdzQih+ejmcD/NaW/EwlWiMyKzMvjYYWPPh2OIpDfOR9fst3RmFS29U44S62 Q6vLAFRmuOsEXV4ZXeaPAYN52jRuJxzP9cZpAIrK9A+eNJ+nXXY+jIatPw6Z60g= -----END CERTIFICATE-----Generated at Fri Jul 24 17:27:53 2026 by rpki-client