$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/FE96F04256EE11F09D243832C4F9AE02.roa File: FE96F04256EE11F09D243832C4F9AE02.roa (raw, json) Hash identifier: oojYcBMoonELSfe45pkI581LosRHOK0/3Xt8Hp4n/PY= Subject key identifier: 9E:8B:71:1B:D9:7A:0A:38:85:B2:47:9D:41:4E:A0:26:A2:2C:0D:39 Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 34D8 Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/FE96F04256EE11F09D243832C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:12:16 +0000 ROA not before: Wed 02 Jul 2025 02:48:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56284 IP address blocks: 103.29.52.0/22 maxlen: 22 119.2.56.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13528 (0x34d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Jul 2 02:48:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a402ef-91ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:2d:fc:2b:5b:1a:c7:8f:44:3a:d3:af:b6: d2:c4:5c:bf:62:58:04:35:40:1b:3e:19:50:59:f8: 07:94:f6:f6:3f:bf:e5:60:6a:9d:01:5f:85:29:15: 73:1b:d6:75:e7:24:e1:8e:e8:df:ab:41:b4:8f:95: 35:0a:b6:ee:ca:3a:68:94:ed:e5:04:0f:35:90:36: c6:86:fc:60:1d:9d:f0:52:dc:81:71:2b:57:f3:30: ae:d8:ad:34:19:85:6d:a5:fe:ac:97:4b:9d:25:5e: 0b:c0:28:25:81:cd:b7:36:bf:fb:ab:94:e5:9c:fc: c1:d9:d7:f6:d2:c8:63:fa:d5:62:68:68:9f:06:d1: b2:2a:b7:32:ed:04:98:8a:0b:67:38:5e:9d:48:47: 07:01:e7:9e:76:a6:78:03:44:ea:14:97:15:3b:05: 1c:ff:54:1a:4f:f0:37:97:8b:dc:a8:23:e7:76:c3: a0:27:86:34:42:93:77:6e:b0:9f:77:92:da:31:cd: 8e:fa:79:08:f2:e1:29:24:1b:2c:68:86:31:aa:2e: 3c:94:05:2b:60:64:2f:43:81:82:23:3d:93:6c:a3: 67:f3:6d:3e:45:ab:e7:f2:67:8c:e7:64:58:76:6f: 19:7a:b7:ae:2f:39:6f:d0:12:1c:03:e2:f1:b1:21: 7c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8B:71:1B:D9:7A:0A:38:85:B2:47:9D:41:4E:A0:26:A2:2C:0D:39 X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/FE96F04256EE11F09D243832C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.29.52.0/22 119.2.56.0/21 Signature Algorithm: sha256WithRSAEncryption 93:bc:5d:28:07:f9:e6:67:fc:4b:5e:ee:b1:22:7d:7b:d0:b1: 3e:1b:33:a9:cb:c4:80:b0:5c:d0:cb:51:c7:b4:77:8a:00:9f: 68:3b:4c:cb:6b:31:a0:5e:b9:ff:ed:ec:c8:39:d1:ce:7e:10: 8d:41:3d:67:9d:05:23:ce:96:68:df:a2:49:f3:b2:b0:f1:19: f5:07:70:19:d4:b8:18:38:1b:0e:d4:01:5a:54:9e:e0:7b:12: fd:c6:b9:70:a7:76:22:c1:23:1d:73:57:58:85:19:fa:de:a7: 17:6a:9d:1e:4e:ba:1c:a5:22:9a:b0:01:a5:e3:7d:94:80:82: ad:5b:65:67:bf:62:a7:03:80:24:d2:de:38:f5:d5:90:f5:86: 6a:4d:30:06:c8:c7:d0:23:93:e8:79:90:a7:5e:63:a4:0e:04: 4c:5d:52:4f:02:69:e3:2a:70:75:d8:07:ab:97:67:60:1d:8f: f6:ac:be:29:f9:5a:26:38:e0:d5:bb:ea:c4:14:b1:58:bd:af: fa:c5:48:66:61:05:34:e0:62:0b:7f:a2:78:bb:d1:4b:ea:e2: 51:a0:b7:1f:ac:29:3d:7a:35:dc:b1:b0:2e:d1:56:70:cc:78: b2:48:f8:92:0b:10:81:09:43:9d:79:cb:87:82:54:8b:cf:ef: 12:8e:4f:94 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICNNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjUwNzAyMDI0ODI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDJlZi05MWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdIt/CtbGsePRDrTr7bSxFy/YlgENUAbPhlQWfgHlPb2P7/lYGqdAV+FKRVz G9Z15yThjujfq0G0j5U1CrbuyjpolO3lBA81kDbGhvxgHZ3wUtyBcStX8zCu2K00 GYVtpf6sl0udJV4LwCglgc23Nr/7q5TlnPzB2df20shj+tViaGifBtGyKrcy7QSY igtnOF6dSEcHAeeedqZ4A0TqFJcVOwUc/1QaT/A3l4vcqCPndsOgJ4Y0QpN3brCf d5LaMc2O+nkI8uEpJBssaIYxqi48lAUrYGQvQ4GCIz2TbKNn820+Ravn8meM52RY dm8ZereuLzlv0BIcA+LxsSF8UwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJ6LcRvZ ego4hbJHnUFOoCaiLA05MB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNGQzQvQjE2NUEzQTgyOTU4MTFFMkIzOEQ1OEZCMDhCMDJDRDIvRkU5NkYwNDI1 NkVFMTFGMDlEMjQzODMyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZx00AwQDdwI4MA0GCSqGSIb3DQEBCwUAA4IBAQCTvF0oB/nmZ/xL Xu6xIn170LE+GzOpy8SAsFzQy1HHtHeKAJ9oO0zLazGgXrn/7ezIOdHOfhCNQT1n nQUjzpZo36JJ87Kw8Rn1B3AZ1LgYOBsO1AFaVJ7gexL9xrlwp3YiwSMdc1dYhRn6 3qcXap0eTrocpSKasAGl432UgIKtW2Vnv2KnA4Ak0t449dWQ9YZqTTAGyMfQI5Po eZCnXmOkDgRMXVJPAmnjKnB12Aerl2dgHY/2rL4p+VomOODVu+rEFLFYva/6xUhm YQU04GILf6J4u9FL6uJRoLcfrCk9ejXcsbAu0VZwzHiySPiSCxCBCUOdecuHglSL z+8Sjk+U -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:25 2026 by rpki-client