$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa File: 89A5C6C67C5511EDA0D2C06CC4F9AE02.roa (raw, json) Hash identifier: 3tNJsdst27R2kPwHnH8gso0sd4WL6CdZdHluwq1mrko= Subject key identifier: A5:5D:EE:4E:78:94:C1:ED:50:86:C9:40:78:E2:95:15:FC:C2:06:19 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5DE0 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:15:48 +0000 ROA not before: Thu 28 Aug 2025 14:53:13 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135920 IP address blocks: 45.123.96.0/22 maxlen: 24 103.63.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24032 (0x5de0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:53:13 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60c14-21d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:82:b0:47:1e:5a:2d:dd:75:6b:e8:ae:b9: 13:a2:ea:9b:08:a8:02:bb:54:ee:7d:74:15:39:b0: 1a:ff:88:ba:53:79:59:70:88:d2:ea:be:50:83:c9: 05:7c:a9:bd:8a:54:4f:d6:29:39:26:c0:d5:38:89: 8f:0d:ed:22:97:10:0b:c5:2f:8c:e3:ba:3a:64:20: 71:7f:cd:22:ee:0a:9e:57:11:41:f7:82:cc:24:fd: e6:bb:8c:13:7e:a8:f6:2f:7b:0e:b8:54:e2:e3:f7: 06:3e:58:56:4c:6e:36:31:5b:fc:a3:f2:15:a3:33: 42:55:bc:71:ec:7b:ea:22:30:ec:6e:bb:2d:32:ae: 1a:8e:11:24:18:b5:61:67:27:7c:d5:b6:6d:dd:c2: 82:6c:f1:ab:ab:59:ee:dc:45:64:35:9d:77:5c:f0: 3c:53:92:a3:0a:0c:d1:56:12:ee:73:13:81:30:5b: fb:64:5c:7a:c6:fe:4d:34:33:f7:e7:49:cc:c3:90: fa:90:c8:0f:56:5a:be:fc:12:f3:86:04:8a:5a:67: b1:f1:d7:41:c1:56:41:3f:21:fa:5d:5f:ba:05:8e: f8:2b:bd:31:a2:e8:c5:cf:98:02:61:2a:30:e3:14: 34:89:12:4e:f1:3f:9f:1b:38:52:49:87:f4:b0:a7: e7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5D:EE:4E:78:94:C1:ED:50:86:C9:40:78:E2:95:15:FC:C2:06:19 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.123.96.0/22 103.63.212.0/22 Signature Algorithm: sha256WithRSAEncryption 41:3f:e6:f4:af:d4:6c:28:bd:90:bf:97:a3:e0:c0:86:40:71: a3:5d:8e:2b:e7:38:71:77:46:cd:13:cd:9f:22:87:f2:bd:19: fb:13:f3:2c:2a:30:79:51:85:15:4b:01:22:44:28:de:b9:37: a9:70:04:f2:d2:65:ee:7b:9e:f6:7c:e4:ce:82:8a:5c:5b:5d: 7e:a8:dc:03:6b:c4:1b:f3:a1:dd:0d:a2:4a:e6:89:76:cc:1f: 26:25:35:2b:22:d5:5d:97:dd:17:06:08:c0:52:29:23:8e:4e: 4b:da:41:f8:8c:9b:48:99:1e:96:01:bc:c1:b3:c4:d8:e5:78: 0f:ba:e3:dd:dd:8f:24:58:7e:60:a3:03:1b:b3:98:43:af:f9: 9c:a1:f5:26:66:a0:74:ce:0d:b2:87:ab:63:c6:36:90:17:ee: 23:e4:9d:9c:f0:cd:f0:f0:22:a3:49:0f:5a:5d:55:2b:dc:fa: 6b:22:2a:42:ef:1e:d5:2f:ce:6c:85:57:41:c4:23:94:9f:e6: 29:fc:51:7f:78:97:83:34:3b:f5:c5:1f:e1:4e:c5:24:cd:8f: ac:71:63:fb:cc:3b:62:17:c6:77:cc:05:0a:4a:aa:ac:09:62: 5c:35:f4:9a:97:64:ac:8c:f3:67:9a:76:91:3c:96:fd:6d:c9: fd:ad:5e:ee -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICXeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzEzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGMxNC0yMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DCCsEceWi3ddWvorrkTouqbCKgCu1TufXQVObAa/4i6U3lZcIjS6r5Qg8kF fKm9ilRP1ik5JsDVOImPDe0ilxALxS+M47o6ZCBxf80i7gqeVxFB94LMJP3mu4wT fqj2L3sOuFTi4/cGPlhWTG42MVv8o/IVozNCVbxx7HvqIjDsbrstMq4ajhEkGLVh Zyd81bZt3cKCbPGrq1nu3EVkNZ13XPA8U5KjCgzRVhLucxOBMFv7ZFx6xv5NNDP3 50nMw5D6kMgPVlq+/BLzhgSKWmex8ddBwVZBPyH6XV+6BY74K70xoujFz5gCYSow 4xQ0iRJO8T+fGzhSSYf0sKfnsQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKVd7k54 lMHtUIbJQHjilRX8wgYZMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODlBNUM2QzY3 QzU1MTFFREEwRDJDMDZDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLXtgAwQCZz/UMA0GCSqGSIb3DQEBCwUAA4IBAQBBP+b0r9RsKL2Q v5ej4MCGQHGjXY4r5zhxd0bNE82fIofyvRn7E/MsKjB5UYUVSwEiRCjeuTepcATy 0mXue572fOTOgopcW11+qNwDa8Qb86HdDaJK5ol2zB8mJTUrItVdl90XBgjAUikj jk5L2kH4jJtImR6WAbzBs8TY5XgPuuPd3Y8kWH5gowMbs5hDr/mcofUmZqB0zg2y h6tjxjaQF+4j5J2c8M3w8CKjSQ9aXVUr3PprIipC7x7VL85shVdBxCOUn+Yp/FF/ eJeDNDv1xR/hTsUkzY+scWP7zDtiF8Z3zAUKSqqsCWJcNfSal2SsjPNnmnaRPJb9 bcn9rV7u -----END CERTIFICATE-----Generated at Sat Mar 7 22:49:21 2026 by rpki-client