$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/FC35CE340A4711F0809C3032C4F9AE02.roa File: FC35CE340A4711F0809C3032C4F9AE02.roa (raw, json) Hash identifier: GCF/9VMFmjdFmy3bYTGGRnKSNfUmeGJXgemnhDHWC2s= Subject key identifier: BC:62:CA:E7:06:F1:73:2E:21:7F:45:A7:22:40:FF:68:EE:CA:21:EB Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 03FC Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/FC35CE340A4711F0809C3032C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:51:29 +0000 ROA not before: Sat 13 Sep 2025 01:07:07 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55872 IP address blocks: 115.187.96.0/19 maxlen: 19 118.82.128.0/17 maxlen: 17 118.82.128.0/18 maxlen: 18 118.82.136.0/21 maxlen: 21 118.82.144.0/20 maxlen: 20 118.82.160.0/20 maxlen: 20 118.82.176.0/21 maxlen: 21 118.82.184.0/22 maxlen: 22 118.82.188.0/23 maxlen: 23 118.82.192.0/18 maxlen: 18 118.82.192.0/21 maxlen: 21 118.82.200.0/21 maxlen: 21 118.82.208.0/21 maxlen: 21 118.82.216.0/21 maxlen: 21 118.82.232.0/21 maxlen: 21 118.82.240.0/21 maxlen: 21 119.235.32.0/21 maxlen: 21 202.65.162.0/23 maxlen: 23 202.65.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1020 (0x3fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Sep 13 01:07:07 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a43651-8c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:a2:7c:23:49:e4:d4:4c:2f:c4:92:73:3f: 1d:04:3d:0d:cd:33:9c:f7:2c:c6:5f:ab:2f:58:cf: 2a:9c:20:e6:63:7a:93:dd:d6:81:2f:7d:87:ed:99: 3f:76:42:c7:57:6c:a8:cc:b5:25:a9:62:12:ad:ca: d5:51:88:18:aa:99:f0:e5:2f:2a:f0:86:4e:e3:79: 77:2f:19:ce:4c:c9:a4:9b:75:1f:0c:ae:51:4a:1e: 27:61:cf:29:dc:9c:26:3a:a0:3f:77:ff:75:96:3a: 45:62:9e:cd:08:a8:31:28:2d:9e:db:13:33:4b:95: 68:73:2a:1a:a3:20:24:68:d1:c4:c6:52:5f:d1:f7: ce:04:60:79:8c:49:e5:df:62:65:47:c1:2c:e4:c6: 01:c5:5d:63:b0:7d:41:67:1b:36:e5:38:02:b6:c7: e6:8f:9e:5c:47:7d:2f:97:59:d2:47:6c:4c:bd:08: c3:cb:ff:86:4a:08:d1:73:40:f4:09:d1:2b:a9:02: e0:82:46:dc:d7:a6:4d:b0:9e:71:7b:75:e5:b1:dd: 7b:b9:11:d5:3d:16:a9:d0:9c:33:be:b2:65:0c:c5: 06:5a:5d:ad:23:84:63:40:b7:47:6f:91:ff:50:d2: 9a:07:39:9e:3a:d1:e0:fc:d8:74:d0:18:c6:f8:d8: 9e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:62:CA:E7:06:F1:73:2E:21:7F:45:A7:22:40:FF:68:EE:CA:21:EB X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/FC35CE340A4711F0809C3032C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 115.187.96.0/19 118.82.128.0/17 119.235.32.0/21 202.65.162.0-202.65.167.255 Signature Algorithm: sha256WithRSAEncryption 58:1a:35:3f:d3:9a:e5:94:1a:9c:ec:d6:71:64:d3:be:be:1e: ce:f9:b4:4f:2d:ee:5e:3b:ef:a1:5d:93:ff:79:d3:3a:dc:22: df:b4:f4:c8:f6:88:92:e8:44:91:28:55:65:8f:32:43:66:b3: c8:4c:33:c7:11:6b:c4:e1:37:79:95:3b:39:eb:14:0e:7e:63: f5:72:d1:34:05:94:ff:6e:0a:0d:db:0a:a4:8d:be:4e:4c:98: 4a:f2:62:a7:3b:59:08:1e:dc:d4:e9:7e:46:b1:a9:69:9a:af: 1c:e3:b4:da:c4:69:51:69:cb:f7:70:88:21:c8:e9:36:ea:9b: a9:da:95:e5:79:05:64:ca:e3:c1:4c:f1:10:15:43:4b:26:56: 6a:49:af:17:7c:ce:d5:c9:8b:d0:c4:6d:24:8a:d8:2c:02:af: fb:70:9c:b3:f0:a6:94:0d:ee:55:ab:b9:7b:8a:65:8d:86:52: 42:b4:e8:4f:5a:c2:c3:0d:37:5f:76:fd:0e:50:ee:42:5b:5f: ea:14:39:be:07:0b:42:9a:82:8b:15:16:7e:d2:fc:b5:57:1b: c6:4e:10:b0:dd:6f:f2:eb:23:2c:04:3b:a2:40:81:30:cd:c0: bd:a6:04:02:05:2c:3e:b0:c2:c2:9c:70:7b:65:af:e8:82:c3: 92:4c:d9:1c -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjUwOTEzMDEwNzA3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzY1MS04YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2k6ifCNJ5NRML8SScz8dBD0NzTOc9yzGX6svWM8qnCDmY3qT3daBL32H7Zk/ dkLHV2yozLUlqWISrcrVUYgYqpnw5S8q8IZO43l3LxnOTMmkm3UfDK5RSh4nYc8p 3JwmOqA/d/91ljpFYp7NCKgxKC2e2xMzS5VocyoaoyAkaNHExlJf0ffOBGB5jEnl 32JlR8Es5MYBxV1jsH1BZxs25TgCtsfmj55cR30vl1nSR2xMvQjDy/+GSgjRc0D0 CdErqQLggkbc16ZNsJ5xe3Xlsd17uRHVPRap0JwzvrJlDMUGWl2tI4RjQLdHb5H/ UNKaBzmeOtHg/Nh00BjG+Nie/QIDAQABo4ICejCCAnYwHQYDVR0OBBYEFLxiyucG 8XMuIX9FpyJA/2juyiHrMB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJEQTQvOEFENDlGN0VCQUU4MTFFQ0E4MkYxNDFDQzRGOUFFMDIvRkMzNUNFMzQw QTQ3MTFGMDgwOUMzMDMyQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQFc7tgAwQHdlKAAwQDd+sgMAwDBAHKQaIDBAPKQaAwDQYJKoZIhvcN AQELBQADggEBAFgaNT/TmuWUGpzs1nFk076+Hs75tE8t7l4776Fdk/950zrcIt+0 9Mj2iJLoRJEoVWWPMkNms8hMM8cRa8ThN3mVOznrFA5+Y/Vy0TQFlP9uCg3bCqSN vk5MmEryYqc7WQge3NTpfkaxqWmarxzjtNrEaVFpy/dwiCHI6Tbqm6naleV5BWTK 48FM8RAVQ0smVmpJrxd8ztXJi9DEbSSK2CwCr/twnLPwppQN7lWruXuKZY2GUkK0 6E9awsMNN192/Q5Q7kJbX+oUOb4HC0KagosVFn7S/LVXG8ZOELDdb/LrIywEO6JA gTDNwL2mBAIFLD6wwsKccHtlr+iCw5JM2Rw= -----END CERTIFICATE-----Generated at Mon Mar 2 05:49:22 2026 by rpki-client