$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/89C18D607B8511F1BDAE1D8F68A30FBC.roa File: 89C18D607B8511F1BDAE1D8F68A30FBC.roa (raw, json) Hash identifier: ciI7oaLxVQZfUA9OURBb8uxEpjwg8xbuHuFKtWKEtBU= Subject key identifier: 69:01:A5:8B:84:4D:0D:FF:4B:D8:2D:AF:3D:5C:4F:3C:37:99:5E:07 Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 0863 Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/89C18D607B8511F1BDAE1D8F68A30FBC.roa Signing time: Thu 09 Jul 2026 11:01:30 +0000 ROA not before: Thu 09 Jul 2026 11:01:30 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139341 IP address blocks: 14.207.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 23:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Jul 9 11:01:30 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a4f7f8a-9e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:2f:2a:0b:99:7d:3d:82:9d:de:d4:89:71: 39:53:38:ec:7b:9a:c2:17:1c:61:c7:16:03:d9:5a: 99:df:d8:47:0d:01:ca:29:c3:25:65:24:35:e1:98: a5:a9:b1:3e:1a:c5:18:13:89:c5:9c:cf:9d:27:59: be:79:ef:2b:0c:95:32:cc:a5:3e:53:71:47:21:34: 04:0b:49:f2:75:78:f4:fc:eb:21:35:de:44:c5:f8: 2a:4d:b8:f7:69:42:de:f1:b2:ca:df:0e:6b:7f:97: df:12:21:6e:5e:28:f6:82:b3:27:18:4d:57:1a:b2: 9d:30:57:fa:2b:6d:6b:c0:61:d6:c4:de:15:fd:45: e0:a8:89:b4:47:a2:0f:06:f9:2f:43:63:52:03:6a: a1:34:96:a3:fd:99:32:ec:eb:d1:10:fb:0f:c2:04: ab:cf:e3:39:fa:dd:43:33:6a:0d:cd:5f:09:b1:02: 9a:b1:2d:3d:3c:c0:68:9e:90:d2:94:b5:99:7b:c2: 5e:e8:fd:45:7f:44:2f:b5:6c:0f:06:b8:5a:5c:a9: d5:1f:2e:06:d9:18:43:88:78:15:de:bb:58:22:c4: d4:2d:34:65:84:2a:f9:96:91:2b:2d:3f:e2:39:06: 94:97:80:49:32:f2:c9:d3:5f:33:90:38:19:bb:66: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:01:A5:8B:84:4D:0D:FF:4B:D8:2D:AF:3D:5C:4F:3C:37:99:5E:07 X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/89C18D607B8511F1BDAE1D8F68A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 14.207.234.0/24 Signature Algorithm: sha256WithRSAEncryption a1:4a:18:33:90:38:1f:1a:6e:cc:1e:9f:4f:9e:2d:65:a4:3b: 3a:52:ec:97:e4:6d:95:25:81:ee:ad:b6:7d:c7:c3:37:e6:96: 00:95:1b:13:7f:04:ea:06:10:b3:10:2d:dd:7e:9d:aa:15:2b: 9b:da:dc:d9:7c:73:5d:b2:89:09:f5:57:a8:69:4a:c2:71:a4: 6f:3b:05:42:ac:55:a9:98:98:c7:f5:6e:12:04:f0:88:92:e0: 08:6d:e1:bc:74:4b:d7:a4:a6:cf:2c:44:b6:26:33:ec:0b:2a: 50:50:56:2c:3d:f7:7e:17:70:76:8b:d4:87:9d:75:f9:c8:68: d1:3a:6a:a3:36:8f:60:bf:cc:83:a6:98:d7:b5:99:0a:53:81: d0:10:6f:e7:48:21:e4:9c:de:49:92:f9:c9:13:0c:a7:8e:69: 29:ea:f6:07:3b:94:f1:aa:01:1d:40:ef:fd:33:3c:62:29:f8: b8:ed:86:f2:ba:3e:7e:d5:ea:0c:7f:c9:47:7d:d8:cb:58:e4: 00:b9:fa:e5:63:ca:04:44:63:60:bd:a8:92:70:21:61:dd:5e: 75:d6:2d:7c:69:5c:51:69:af:d6:d1:5d:38:6c:4a:7c:34:a2: 0d:b0:d6:bd:1b:99:b6:ca:d2:a2:4c:52:b6:d5:1c:8c:66:13: 7e:4b:c4:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjYwNzA5MTEwMTMwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmN2Y4YS05ZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwcvKguZfT2Cnd7UiXE5Uzjse5rCFxxhxxYD2VqZ39hHDQHKKcMlZSQ14Zil qbE+GsUYE4nFnM+dJ1m+ee8rDJUyzKU+U3FHITQEC0nydXj0/OshNd5ExfgqTbj3 aULe8bLK3w5rf5ffEiFuXij2grMnGE1XGrKdMFf6K21rwGHWxN4V/UXgqIm0R6IP BvkvQ2NSA2qhNJaj/Zky7OvREPsPwgSrz+M5+t1DM2oNzV8JsQKasS09PMBonpDS lLWZe8Je6P1Ff0QvtWwPBrhaXKnVHy4G2RhDiHgV3rtYIsTULTRlhCr5lpErLT/i OQaUl4BJMvLJ018zkDgZu2bIWQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGkBpYuE TQ3/S9gtrz1cTzw3mV4HMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvODlDMThENjA3 Qjg1MTFGMUJEQUUxRDhGNjhBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQADs/qMA0GCSqGSIb3DQEBCwUAA4IBAQChShgzkDgfGm7MHp9Pni1l pDs6UuyX5G2VJYHurbZ9x8M35pYAlRsTfwTqBhCzEC3dfp2qFSub2tzZfHNdsokJ 9VeoaUrCcaRvOwVCrFWpmJjH9W4SBPCIkuAIbeG8dEvXpKbPLES2JjPsCypQUFYs Pfd+F3B2i9SHnXX5yGjROmqjNo9gv8yDppjXtZkKU4HQEG/nSCHknN5JkvnJEwyn jmkp6vYHO5TxqgEdQO/9MzxiKfi47Ybyuj5+1eoMf8lHfdjLWOQAufrlY8oERGNg vaiScCFh3V511i18aVxRaa/W0V04bEp8NKINsNa9G5m2ytKiTFK21RyMZhN+S8RG -----END CERTIFICATE-----Generated at Tue Jul 21 21:41:50 2026 by rpki-client