$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/89C2D34A1AC911F1A26878773A3D8C67.roa File: 89C2D34A1AC911F1A26878773A3D8C67.roa (raw, json) Hash identifier: 76O4IYXPBq1PdbW3XALTc2iktdnENccp1ab6ePfbt0U= Subject key identifier: 1B:8D:C2:44:67:00:95:E1:EC:99:AD:4E:71:A4:3C:1E:97:A9:D2:20 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 11E9 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/89C2D34A1AC911F1A26878773A3D8C67.roa Signing time: Sun 08 Mar 2026 08:34:45 +0000 ROA not before: Sun 08 Mar 2026 08:34:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 2404:7ac0:691::/48 maxlen: 48 2404:7ac0:692::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 17:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4585 (0x11e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Mar 8 08:34:45 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69ad34a5-7565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:72:a5:a8:5b:2a:c6:b3:2e:50:34:2a:02: 17:14:0d:14:5a:ba:c5:35:07:42:35:3c:13:6d:72: 0a:52:68:ae:8b:3d:ed:aa:d9:eb:31:53:c0:a2:da: 2f:eb:64:f7:1d:de:1b:74:0f:97:41:71:9e:e1:46: 92:10:57:a9:40:b3:84:b2:db:9a:15:b4:e2:47:bb: 91:c7:7a:f6:c6:13:bd:67:1e:43:a2:5a:3d:1d:af: 08:2c:d6:a2:70:5a:c0:66:2c:60:43:44:27:e1:6b: 40:bf:80:bd:e9:14:81:b7:ce:1a:fa:15:d3:fc:72: 4b:47:e8:ca:22:09:a3:83:de:64:09:67:6d:5d:35: 3c:a0:de:42:b7:bd:13:b0:96:e0:8a:ce:d9:23:c8: 69:85:1d:86:99:ff:eb:c4:a8:ff:a2:49:fa:9b:ed: f8:3c:e1:e3:a4:58:7c:4b:ca:6e:98:3d:02:4b:2e: 93:9d:0c:09:88:99:54:2c:f4:06:a0:df:e5:79:ed: 5e:c2:60:99:39:f5:1e:33:89:41:be:a8:c5:10:d1: 68:f0:95:33:14:f3:ce:ee:77:b7:2d:5f:ca:41:42: 9c:b5:9a:81:72:c0:ca:f5:cb:0f:3f:a9:03:e8:06: 4f:76:bd:a6:cf:dd:a5:42:1f:53:70:8d:dd:e1:fe: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8D:C2:44:67:00:95:E1:EC:99:AD:4E:71:A4:3C:1E:97:A9:D2:20 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/89C2D34A1AC911F1A26878773A3D8C67.roa sbgp-ipAddrBlock: critical IPv6: 2404:7ac0:691::-2404:7ac0:692:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5e:74:0b:67:8e:60:2e:d6:85:a3:ab:fe:76:37:0b:32:c1:a1: 81:7f:d5:f5:42:df:f2:0c:24:8b:fe:2f:a6:f5:1d:a0:cf:30: f3:95:c4:a6:cb:38:35:29:f7:e6:22:8e:4c:dc:0b:bd:f0:fa: 6b:2e:d8:a4:49:fd:70:12:9a:39:b8:42:ab:3c:6e:84:1a:ad: fc:fa:77:9f:1d:6d:3d:b1:4c:72:29:2e:49:48:2d:b2:49:28: 1c:2e:7e:57:d4:39:87:c2:c8:48:3d:56:a1:55:26:9e:a1:09: 73:52:6f:5a:76:d2:7c:e1:41:67:1c:76:d4:92:c9:89:0d:15: 00:e6:a8:2b:16:5a:bf:36:1d:c0:cd:44:22:72:3d:f7:be:e5: 7d:71:a2:3d:4d:b0:53:d3:f3:d2:b3:53:53:1d:41:bf:f8:d5: 28:1d:bd:9f:5d:1a:d4:41:03:db:b1:31:40:d0:29:99:57:12: a4:fa:b3:8f:4d:a8:25:78:54:cb:bd:a9:83:14:93:6f:03:59: f3:7a:c1:76:e3:b4:44:24:09:ff:ed:ba:95:86:fc:27:2a:7c: b4:86:46:69:45:84:7a:17:2e:95:21:20:3e:73:44:25:29:6d: 8a:ab:bf:6c:39:9a:6a:96:93:d7:a6:3d:a9:52:d3:45:63:1c: 21:80:b2:81 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICEekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjYwMzA4MDgzNDQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWFkMzRhNS03NTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiVypahbKsazLlA0KgIXFA0UWrrFNQdCNTwTbXIKUmiuiz3tqtnrMVPAotov 62T3Hd4bdA+XQXGe4UaSEFepQLOEstuaFbTiR7uRx3r2xhO9Zx5Dolo9Ha8ILNai cFrAZixgQ0Qn4WtAv4C96RSBt84a+hXT/HJLR+jKIgmjg95kCWdtXTU8oN5Ct70T sJbgis7ZI8hphR2Gmf/rxKj/okn6m+34POHjpFh8S8pumD0CSy6TnQwJiJlULPQG oN/lee1ewmCZOfUeM4lBvqjFENFo8JUzFPPO7ne3LV/KQUKctZqBcsDK9csPP6kD 6AZPdr2mz92lQh9TcI3d4f733wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFBuNwkRn AJXh7JmtTnGkPB6XqdIgMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2QTMvNzcyN0NFNUMzOEM3MTFFOUE3QjVDMjMzQzRGOUFFMDIvODlDMkQzNEEx QUM5MTFGMUEyNjg3ODc3M0EzRDhDNjcucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAAjAUMBIDBwAkBHrABpEDBwAkBHrABpIwDQYJKoZIhvcNAQELBQADggEBAF50 C2eOYC7WhaOr/nY3CzLBoYF/1fVC3/IMJIv+L6b1HaDPMPOVxKbLODUp9+Yijkzc C73w+msu2KRJ/XASmjm4Qqs8boQarfz6d58dbT2xTHIpLklILbJJKBwuflfUOYfC yEg9VqFVJp6hCXNSb1p20nzhQWccdtSSyYkNFQDmqCsWWr82HcDNRCJyPfe+5X1x oj1NsFPT89KzU1MdQb/41SgdvZ9dGtRBA9uxMUDQKZlXEqT6s49NqCV4VMu9qYMU k28DWfN6wXbjtEQkCf/tupWG/CcqfLSGRmlFhHoXLpUhID5zRCUpbYqrv2w5mmqW k9emPalS00VjHCGAsoE= -----END CERTIFICATE-----Generated at Thu Mar 19 12:31:11 2026 by rpki-client