$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/89A0A916B94711F0A4F9263BC4F9AE02.roa File: 89A0A916B94711F0A4F9263BC4F9AE02.roa (raw, json) Hash identifier: IHqW6YWM58t2o76kp+vDO1upKe7ZuktUui6Sop+kn90= Subject key identifier: 89:5F:73:5A:6F:B7:79:3D:2A:63:13:55:CC:F4:A9:13:C5:34:AF:22 Certificate issuer: /CN=A91EB2B8/serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436 Certificate serial: AC Authority key identifier: A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/89A0A916B94711F0A4F9263BC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:55:38 +0000 ROA not before: Tue 04 Nov 2025 06:31:00 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139057 IP address blocks: 148.222.160.0/24 maxlen: 24 148.222.161.0/24 maxlen: 24 148.222.162.0/24 maxlen: 24 148.222.164.0/24 maxlen: 24 148.222.165.0/24 maxlen: 24 148.222.166.0/24 maxlen: 24 148.222.167.0/24 maxlen: 24 148.222.168.0/24 maxlen: 24 148.222.169.0/24 maxlen: 24 148.222.170.0/24 maxlen: 24 148.222.171.0/24 maxlen: 24 148.222.172.0/24 maxlen: 24 148.222.173.0/24 maxlen: 24 148.222.174.0/24 maxlen: 24 148.222.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 01:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436 Validity Not Before: Nov 4 06:31:00 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a588ca-389f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:b5:49:c6:de:b0:96:67:53:53:de:8c:eb: 59:39:d9:de:4c:dd:07:d5:73:70:23:d5:31:c9:5b: ab:e5:45:ee:80:f4:e7:16:93:36:bf:d9:fe:96:a1: aa:a0:35:f4:fb:cf:97:47:63:01:52:41:5e:cd:c2: 3b:0f:a7:5f:54:b9:85:06:23:8e:96:a9:db:10:0a: 8b:55:f5:b2:e1:25:f7:0d:48:79:74:00:09:24:9e: e7:e3:fd:25:4a:a8:01:af:18:55:1b:02:eb:99:18: fa:83:61:14:69:c7:ab:eb:d1:a0:66:b0:97:ff:b0: 6a:37:68:62:d4:23:ff:48:90:c4:6b:89:dc:bb:51: 64:86:16:94:c8:b6:0e:28:ec:a3:8f:28:24:7a:c8: a5:42:5d:44:27:70:0f:1c:da:48:8f:46:74:7a:ce: c8:06:26:9d:e9:c5:39:9c:48:7d:29:30:c7:75:bf: 34:55:5b:3b:65:26:fa:e5:2e:34:ad:14:6b:f9:20: 09:22:d6:13:7f:4b:1d:ae:56:9c:12:7a:29:78:90: 2d:a8:b7:91:03:35:f6:ae:28:41:bf:9a:75:b5:f6: 58:7e:01:54:60:bc:68:12:f7:72:73:e3:b0:70:39: 73:df:9f:64:14:cf:6a:02:2f:31:83:10:1e:f9:a5: b3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5F:73:5A:6F:B7:79:3D:2A:63:13:55:CC:F4:A9:13:C5:34:AF:22 X509v3 Authority Key Identifier: keyid:A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/89A0A916B94711F0A4F9263BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 148.222.160.0-148.222.162.255 148.222.164.0-148.222.175.255 Signature Algorithm: sha256WithRSAEncryption 00:f4:a3:72:ab:89:82:4b:64:05:80:3f:84:80:c3:61:83:bf: f3:d2:e3:d1:54:5e:0e:89:41:63:e4:47:57:6e:61:70:48:66: 83:bf:83:35:3e:69:fb:62:c3:1a:e8:94:51:7d:e8:a4:46:8e: 44:f6:08:53:96:21:39:ea:0c:fd:80:7c:6b:f9:e9:4f:a2:21: 2a:e6:92:79:b8:ae:d3:66:79:1d:d3:7b:ee:49:d0:87:fc:32: d3:55:08:7b:54:94:8b:35:3f:c3:64:ff:17:83:95:d6:9e:d2: dc:da:46:5d:59:27:91:94:4e:21:7d:60:e1:bb:9f:f1:10:cf: 31:8d:65:1f:e2:fa:a2:fd:82:86:ef:29:ed:78:27:16:af:36: 9c:48:73:11:40:7a:0d:58:e2:ca:9d:49:2b:cf:22:ae:d6:92: ea:c7:74:f7:15:b7:53:8f:9d:d6:d6:41:31:32:10:c4:70:53: b9:16:28:74:a8:51:30:2f:24:4d:9c:8d:ab:d5:cb:99:66:07: 6a:0a:f2:8d:ce:7f:ee:1a:55:7d:e2:20:f2:0a:6f:70:0d:93: 8e:f9:b6:09:9b:ff:3c:01:ae:7c:26:1a:f8:3f:98:aa:92:e8: d5:d0:81:2d:5f:77:ab:8e:03:2a:16:69:c5:96:b3:fd:33:0c: f4:0a:aa:b6 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE4OTdBRThGRjIxNDFDQjMzNEVBQTRCODgxQ0MzQzU2 NTZENDc0MzYwHhcNMjUxMTA0MDYzMTAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODhjYS0zODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslu1ScbesJZnU1PejOtZOdneTN0H1XNwI9UxyVur5UXugPTnFpM2v9n+lqGq oDX0+8+XR2MBUkFezcI7D6dfVLmFBiOOlqnbEAqLVfWy4SX3DUh5dAAJJJ7n4/0l SqgBrxhVGwLrmRj6g2EUacer69GgZrCX/7BqN2hi1CP/SJDEa4ncu1FkhhaUyLYO KOyjjygkesilQl1EJ3APHNpIj0Z0es7IBiad6cU5nEh9KTDHdb80VVs7ZSb65S40 rRRr+SAJItYTf0sdrlacEnopeJAtqLeRAzX2rihBv5p1tfZYfgFUYLxoEvdyc+Ow cDlz359kFM9qAi8xgxAe+aWzMwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFIlfc1pv t3k9KmMTVcz0qRPFNK8iMB8GA1UdIwQYMBaAFKiXro/yFByzNOqkuIHMPFZW1HQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zNTgzRTU4NjUx NjUxMUYwQkMxQ0FGNzVDNEY5QUUwMi9xSmV1al9JVUhMTTA2cVM0Z2N3OFZsYlVk RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FKZXVqX0lVSExNMDZxUzRnY3c4VmxiVWREWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIyQjgvMzU4M0U1ODY1MTY1MTFGMEJDMUNBRjc1QzRGOUFFMDIvODlBMEE5MTZC OTQ3MTFGMEE0RjkyNjNCQzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi BAIAATAcMAwDBAWU3qADBACU3qIwDAMEApTepAMEBJTeoDANBgkqhkiG9w0BAQsF AAOCAQEAAPSjcquJgktkBYA/hIDDYYO/89Lj0VReDolBY+RHV25hcEhmg7+DNT5p +2LDGuiUUX3opEaORPYIU5YhOeoM/YB8a/npT6IhKuaSebiu02Z5HdN77knQh/wy 01UIe1SUizU/w2T/F4OV1p7S3NpGXVknkZROIX1g4buf8RDPMY1lH+L6ov2Chu8p 7XgnFq82nEhzEUB6DVjiyp1JK88irtaS6sd09xW3U4+d1tZBMTIQxHBTuRYodKhR MC8kTZyNq9XLmWYHagryjc5/7hpVfeIg8gpvcA2Tjvm2CZv/PAGufCYa+D+YqpLo 1dCBLV93q44DKhZpxZaz/TMM9Aqqtg== -----END CERTIFICATE-----Generated at Wed Mar 4 10:09:11 2026 by rpki-client