$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/89E4F264A03811F198EE418E3711F970.roa File: 89E4F264A03811F198EE418E3711F970.roa (raw, json) Hash identifier: DNgqORvt7GXyNwUF7A96VqrxVc0qo3QlhjXz+GcY8eg= Subject key identifier: 22:48:1E:D7:3E:68:6D:44:8D:D2:57:3B:94:E5:A3:8A:F1:FB:31:61 Certificate issuer: /CN=A91B5585/serialNumber=B2EB268E8408B608B3F6CBB7BC94C7DF24CF2229 Certificate serial: 02 Authority key identifier: B2:EB:26:8E:84:08:B6:08:B3:F6:CB:B7:BC:94:C7:DF:24:CF:22:29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/susmjoQItgiz9su3vJTH3yTPIik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/89E4F264A03811F198EE418E3711F970.roa Signing time: Tue 25 Aug 2026 03:53:33 +0000 ROA not before: Tue 25 Aug 2026 03:53:32 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 154493 IP address blocks: 198.15.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/susmjoQItgiz9su3vJTH3yTPIik.crl rsync://rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/susmjoQItgiz9su3vJTH3yTPIik.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/susmjoQItgiz9su3vJTH3yTPIik.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5585, serialNumber=B2EB268E8408B608B3F6CBB7BC94C7DF24CF2229 Validity Not Before: Aug 25 03:53:32 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a8d11bc-ccaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:40:8f:10:39:14:11:75:8f:2b:19:ff:1c: dc:e5:16:36:c2:4d:31:97:71:89:5e:f1:46:75:35: cf:cc:c5:91:ed:b8:22:35:a8:2e:27:0b:bd:5a:1a: d5:f5:1e:52:8e:b1:15:ee:04:89:da:af:df:4b:fa: 20:7f:22:32:e6:33:dc:27:3e:b8:7e:3b:9a:b2:42: ea:30:0c:96:b1:c9:4d:74:c8:7b:8a:68:07:ef:38: 72:8a:53:00:20:49:19:56:d5:0d:17:1e:f9:3e:6d: 21:32:3e:a9:d7:0c:49:b5:8a:be:f4:1e:c5:26:7b: 18:4a:58:f3:0d:62:29:33:7a:30:24:cc:86:78:af: 8a:a0:94:ad:51:0f:39:c2:7a:f6:2e:9d:25:64:53: 56:29:99:6b:9f:aa:fe:19:0a:25:e2:02:3f:1c:71: 34:c7:e4:bc:bf:23:04:fc:fa:85:3a:80:9c:19:5e: 49:13:bf:19:bd:84:8f:a7:32:6b:fc:c8:ff:3e:e3: 7f:f4:49:a5:d0:1f:39:ec:33:7e:06:ae:f8:85:d2: ce:be:59:e2:7d:81:40:e7:d7:86:62:c5:a3:2b:80: 01:6d:cf:48:65:3a:83:47:5d:29:ab:50:8a:b0:69: e0:9a:48:60:14:38:3f:6b:7d:a1:9e:49:11:1c:50: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:48:1E:D7:3E:68:6D:44:8D:D2:57:3B:94:E5:A3:8A:F1:FB:31:61 X509v3 Authority Key Identifier: keyid:B2:EB:26:8E:84:08:B6:08:B3:F6:CB:B7:BC:94:C7:DF:24:CF:22:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/susmjoQItgiz9su3vJTH3yTPIik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/susmjoQItgiz9su3vJTH3yTPIik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5585/FA8D2D66A03711F186C056843711F970/89E4F264A03811F198EE418E3711F970.roa sbgp-ipAddrBlock: critical IPv4: 198.15.31.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:be:b5:54:6e:e6:be:b9:ca:d8:bb:9b:2d:75:ff:4d:7a:13: 3a:98:36:49:e6:b2:13:da:28:3b:39:db:0c:48:7b:8b:46:11: d0:89:2c:2a:a1:f7:81:5d:2a:34:52:b2:75:d8:b9:c0:6d:b9: e0:60:4e:ce:b6:35:4d:3e:65:61:0e:67:60:8a:c4:9d:ca:76: 81:d1:70:76:ef:25:08:ff:6f:4c:74:59:cc:fb:09:cb:51:03: a5:fa:4b:b8:17:9c:0c:1c:e6:c1:7e:82:4a:59:46:63:5b:01: a2:51:e0:93:44:7d:7c:04:8c:84:91:00:e7:24:be:aa:38:b1: ae:50:61:29:ef:04:c0:12:72:cb:03:bd:7d:3a:ad:dd:42:66: 37:35:0e:b4:51:df:b4:59:6a:71:64:65:c8:0c:65:6f:37:d2: 38:d8:bc:a6:74:26:13:a2:50:2f:ba:59:db:6e:64:f7:26:89: 0c:40:b8:36:be:fb:8d:67:eb:2a:f9:7f:d7:56:94:61:39:5f: 11:5a:4f:77:fe:8b:93:04:c7:a1:94:9e:13:05:56:16:25:b8: d1:4b:a8:04:e0:0a:af:5c:75:73:2a:2f:17:cb:c1:1c:61:81: 12:3a:b6:7d:ed:91:0a:36:09:ff:a4:e4:16:5b:6a:b4:35:c5: 09:d9:e0:29 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTU4NTExMC8GA1UEBRMoQjJFQjI2OEU4NDA4QjYwOEIzRjZDQkI3QkM5NEM3REYy NENGMjIyOTAeFw0yNjA4MjUwMzUzMzJaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOGQxMWJjLWNjYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBaUCPEDkUEXWPKxn/HNzlFjbCTTGXcYle8UZ1Nc/MxZHtuCI1qC4nC71aGtX1 HlKOsRXuBInar99L+iB/IjLmM9wnPrh+O5qyQuowDJaxyU10yHuKaAfvOHKKUwAg SRlW1Q0XHvk+bSEyPqnXDEm1ir70HsUmexhKWPMNYikzejAkzIZ4r4qglK1RDznC evYunSVkU1YpmWufqv4ZCiXiAj8ccTTH5Ly/IwT8+oU6gJwZXkkTvxm9hI+nMmv8 yP8+43/0SaXQHznsM34GrviF0s6+WeJ9gUDn14ZixaMrgAFtz0hlOoNHXSmrUIqw aeCaSGAUOD9rfaGeSREcUDbtAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUIkge1z5o bUSN0lc7lOWjivH7MWEwHwYDVR0jBBgwFoAUsusmjoQItgiz9su3vJTH3yTPIikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1NTg1L0ZBOEQyRDY2QTAz NzExRjE4NkMwNTY4NDM3MTFGOTcwL3N1c21qb1FJdGdpejlzdTN2SlRIM3lUUElp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc3VzbWpvUUl0Z2l6OXN1M3ZKVEgzeVRQSWlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU4NS9GQThEMkQ2NkEwMzcxMUYxODZDMDU2ODQzNzExRjk3MC84OUU0RjI2NEEw MzgxMUYxOThFRTQxOEUzNzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADGDx8wDQYJKoZIhvcNAQELBQADggEBAIy+tVRu5r65yti7my11/016 EzqYNknmshPaKDs52wxIe4tGEdCJLCqh94FdKjRSsnXYucBtueBgTs62NU0+ZWEO Z2CKxJ3KdoHRcHbvJQj/b0x0Wcz7CctRA6X6S7gXnAwc5sF+gkpZRmNbAaJR4JNE fXwEjISRAOckvqo4sa5QYSnvBMAScssDvX06rd1CZjc1DrRR37RZanFkZcgMZW83 0jjYvKZ0JhOiUC+6WdtuZPcmiQxAuDa++41n6yr5f9dWlGE5XxFaT3f+i5MEx6GU nhMFVhYluNFLqATgCq9cdXMqLxfLwRxhgRI6tn3tkQo2Cf+k5BZbarQ1xQnZ4Ck= -----END CERTIFICATE-----Generated at Tue Sep 1 02:41:35 2026 by rpki-client