$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa File: FACAB78805DA11EB9E484F71C4F9AE02.roa (raw, json) Hash identifier: 2EY7R7tVDdd7hDu3kyFJDxK/DA0IkkvmNGWO1GOsC/I= Subject key identifier: 68:91:B0:30:8B:02:99:B6:43:11:5F:05:A2:FF:96:20:87:AD:5A:B3 Certificate issuer: /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2 Certificate serial: 089C Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa Signing time: Mon 14 Sep 2026 20:41:11 +0000 ROA not before: Mon 14 Sep 2026 20:41:11 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 55720 IP address blocks: 43.239.176.0/24 maxlen: 24 43.239.177.0/24 maxlen: 24 43.239.178.0/24 maxlen: 24 43.239.179.0/24 maxlen: 24 103.35.116.0/24 maxlen: 24 103.35.117.0/24 maxlen: 24 103.35.118.0/24 maxlen: 24 103.35.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2 Validity Not Before: Sep 14 20:41:11 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa85be6-ba3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b2:e9:64:4e:c6:e1:f1:03:6d:69:90:77:86: e0:46:13:6e:26:ff:9c:8c:be:1e:ef:b2:11:fc:6b: bf:82:2b:b1:b1:87:11:36:74:22:ea:55:0f:55:81: 7b:20:cd:52:9d:3a:2f:76:33:6d:ea:a1:7a:70:be: d6:cd:a0:ae:c3:08:54:96:ad:11:fe:42:aa:c4:33: 06:e7:ae:f1:78:7c:63:20:fc:5d:5b:9e:34:28:f6: 19:45:3e:a4:2f:5f:4c:f2:2d:37:0a:c1:9f:4b:2c: 4b:87:8e:19:da:57:b0:77:0e:e5:5f:2b:82:1a:a8: d9:56:aa:a8:cb:b3:80:7f:c8:b6:9c:4a:6e:87:c1: f9:c3:4f:08:c7:03:2b:76:2f:9b:a8:59:1b:74:35: 0e:bf:ea:1e:c2:aa:04:79:fc:ac:bf:9d:a3:1f:a3: 98:e8:55:04:31:e2:3f:3d:58:ad:0d:16:1a:75:14: 88:43:9b:b8:c2:e8:87:4c:45:f5:8b:1f:7a:f1:61: f7:67:50:29:fe:36:6a:10:b9:b1:7b:3d:88:90:27: a1:82:95:91:2d:6d:4a:73:b5:8f:00:8c:c6:25:66: a7:01:b4:de:6a:01:ec:c2:7b:ed:4f:ce:f1:65:73: 24:63:8e:a8:b7:b4:ec:dd:10:db:1d:2f:67:d5:43: 4b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:91:B0:30:8B:02:99:B6:43:11:5F:05:A2:FF:96:20:87:AD:5A:B3 X509v3 Authority Key Identifier: keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.176.0/22 103.35.116.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:b3:d3:96:3a:1d:41:2d:17:ef:94:3b:31:76:d6:42:20:37: 71:60:ce:47:7b:13:50:df:40:86:1c:e7:40:ea:21:81:7a:4f: 36:1e:71:56:0c:f9:c8:e4:f1:31:2d:5e:7d:3b:62:06:0f:dc: 56:5d:99:96:ed:2d:47:77:95:55:f6:2a:58:6f:f8:cb:26:1b: 3f:92:d6:2f:fc:f6:a7:75:6f:82:4d:b3:6d:ce:91:65:20:28: cd:5e:72:89:1e:72:0a:03:ea:23:be:51:03:91:ae:4f:df:ad: 5c:de:77:06:5a:37:9f:e9:7e:e5:a6:26:50:15:53:be:12:5b: 6d:82:a3:5b:40:94:0b:e8:bd:28:c5:9d:34:09:33:f4:58:0c: 8a:35:c1:c3:50:37:b6:62:9f:7c:51:0c:89:cd:05:24:8a:27: bf:0a:1e:45:44:62:7c:2e:2e:8f:f8:75:24:c0:2a:06:5b:b1: 7a:c8:0f:95:7c:4b:32:95:cd:8e:58:6f:fc:f4:a2:99:51:20: 72:58:f7:3e:53:7b:cd:04:8d:14:84:4f:9a:25:59:ff:b9:2f: cf:69:c8:4b:7e:97:8f:99:c0:35:0e:86:31:4a:90:80:4f:ad: e4:81:c4:e6:6a:03:fb:36:4a:32:91:07:ed:05:df:91:db:67: ec:0e:57:8f -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDRDMxMTAvBgNVBAUTKEVERjcyQzVDQjg1MkIyMkMyRjBGNTI1MjExMjI4RDQ1 MDdBM0Y5QzIwHhcNMjYwOTE0MjA0MTExWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4NWJlNi1iYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17LpZE7G4fEDbWmQd4bgRhNuJv+cjL4e77IR/Gu/giuxsYcRNnQi6lUPVYF7 IM1SnTovdjNt6qF6cL7WzaCuwwhUlq0R/kKqxDMG567xeHxjIPxdW540KPYZRT6k L19M8i03CsGfSyxLh44Z2lewdw7lXyuCGqjZVqqoy7OAf8i2nEpuh8H5w08IxwMr di+bqFkbdDUOv+oewqoEefysv52jH6OY6FUEMeI/PVitDRYadRSIQ5u4wuiHTEX1 ix968WH3Z1Ap/jZqELmxez2IkCehgpWRLW1Kc7WPAIzGJWanAbTeagHswnvtT87x ZXMkY46ot7Ts3RDbHS9n1UNLdQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGiRsDCL Apm2QxFfBaL/liCHrVqzMB8GA1UdIwQYMBaAFO33LFy4UrIsLw9SUhEijUUHo/nC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMENEMy85RjkzMERCMjA1 RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Npd3ZEMUpTRVNLTlJRZWot Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmY3NYTGhTc2l3dkQxSlNFU0tOUlFlai1jSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBDRDMvOUY5MzBEQjIwNUQ5MTFFQkFGRjk0OTcwQzRGOUFFMDIvRkFDQUI3ODgw NURBMTFFQjlFNDg0RjcxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK++wAwQCZyN0MA0GCSqGSIb3DQEBCwUAA4IBAQA7s9OWOh1BLRfv lDsxdtZCIDdxYM5HexNQ30CGHOdA6iGBek82HnFWDPnI5PExLV59O2IGD9xWXZmW 7S1Hd5VV9ipYb/jLJhs/ktYv/PandW+CTbNtzpFlICjNXnKJHnIKA+ojvlEDka5P 361c3ncGWjef6X7lpiZQFVO+ElttgqNbQJQL6L0oxZ00CTP0WAyKNcHDUDe2Yp98 UQyJzQUkiie/Ch5FRGJ8Li6P+HUkwCoGW7F6yA+VfEsylc2OWG/89KKZUSByWPc+ U3vNBI0UhE+aJVn/uS/PachLfpePmcA1DoYxSpCAT63kgcTmagP7NkoykQftBd+R 22fsDleP -----END CERTIFICATE-----Generated at Sun Sep 20 14:43:52 2026 by rpki-client