$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FBC8E45C111911F1A97187A4173D8C67.roa File: FBC8E45C111911F1A97187A4173D8C67.roa (raw, json) Hash identifier: yHspMcsWsAwbYnL56MRkI9lvKoy09DuoV0NwrJ89IyQ= Subject key identifier: 42:2E:DC:A8:FD:69:F5:05:56:8E:9E:5E:53:7C:33:71:A6:E5:F7:39 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3C3F Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FBC8E45C111911F1A97187A4173D8C67.roa Signing time: Sun 01 Mar 2026 21:26:59 +0000 ROA not before: Wed 25 Feb 2026 01:45:00 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135120 IP address blocks: 45.120.64.0/24 maxlen: 24 45.120.67.0/24 maxlen: 24 121.0.111.0/24 maxlen: 24 203.210.17.0/24 maxlen: 24 203.210.18.0/23 maxlen: 23 210.87.193.0/24 maxlen: 24 210.87.195.0/24 maxlen: 24 210.87.196.0/24 maxlen: 24 210.87.197.0/24 maxlen: 24 210.87.199.0/24 maxlen: 24 210.87.204.0/24 maxlen: 24 210.87.208.0/21 maxlen: 21 210.87.216.0/22 maxlen: 22 210.87.220.0/24 maxlen: 24 210.87.221.0/24 maxlen: 24 210.87.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15423 (0x3c3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Feb 25 01:45:00 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4af23-9589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:73:55:e6:43:82:29:26:cb:bf:ad:f3:7b:2f: 53:23:bf:8b:89:a8:d0:70:c0:49:44:49:aa:48:74: b8:62:43:d5:48:cf:2e:c1:76:62:a8:33:4b:ac:ce: 97:c6:5b:97:39:cc:8b:81:df:25:79:54:9c:67:77: 50:11:8e:12:e1:e5:d0:11:d8:22:44:23:d5:a6:96: d8:13:05:ed:13:7e:2f:51:51:76:f3:79:12:a4:a6: 37:b9:4c:56:42:0c:0c:be:b6:5f:69:28:fb:ec:8f: 45:e2:d6:d1:03:5e:9e:84:e0:f9:1b:3e:74:1b:76: 3e:06:cd:30:9f:a4:e6:5b:16:79:19:d4:83:33:8c: 35:5e:70:02:23:92:8c:e1:14:00:e9:eb:3b:03:37: 31:c3:87:6e:b2:b5:f2:ea:80:05:95:c0:31:fa:c0: 60:df:73:47:60:49:43:fb:d8:b0:24:4c:18:a8:f7: 09:02:76:97:ab:20:3d:60:75:e1:a3:6d:4e:24:48: 8b:0f:3b:32:3c:96:7e:38:de:c8:84:27:34:f4:71: 4e:a3:6a:53:b7:55:79:ad:14:84:3e:8c:92:42:95: 87:d8:53:ff:cb:cd:c7:ef:b6:7e:e3:42:13:b5:1d: 6c:41:d5:0e:ad:cc:0e:ca:f6:56:bf:b9:25:a0:35: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2E:DC:A8:FD:69:F5:05:56:8E:9E:5E:53:7C:33:71:A6:E5:F7:39 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FBC8E45C111911F1A97187A4173D8C67.roa sbgp-ipAddrBlock: critical IPv4: 45.120.64.0/24 45.120.67.0/24 121.0.111.0/24 203.210.17.0-203.210.19.255 210.87.193.0/24 210.87.195.0-210.87.197.255 210.87.199.0/24 210.87.204.0/24 210.87.208.0-210.87.222.255 Signature Algorithm: sha256WithRSAEncryption 17:c4:c8:26:00:7d:ce:37:ea:fe:07:e5:14:ff:8e:bc:a0:19: 4c:38:6c:ce:a1:40:a1:0c:54:4a:85:1c:46:f3:8f:b1:5f:48: 34:12:9e:54:22:7f:01:62:ec:34:cc:db:04:6e:64:03:b4:e3: 74:d6:24:53:52:7c:50:7e:dc:bf:c1:de:f6:f4:67:2a:75:3b: 7f:08:e9:79:51:32:fc:eb:22:be:74:af:1f:42:82:9e:49:db: 06:31:fe:c9:62:3c:c8:6c:d4:9b:80:66:51:ff:e6:cd:53:92: bd:1f:b8:0b:f1:e5:01:eb:5f:08:4b:31:f2:f1:13:50:24:a3: c8:58:b5:4b:dc:31:2f:8d:8c:76:3c:14:36:1d:e2:ca:4d:07: 1f:6e:e4:12:eb:7c:b6:4d:2f:0a:f9:aa:72:b0:a5:02:5f:65: 13:cc:22:65:ea:47:92:dd:07:01:58:2d:d5:42:65:4a:92:b2: e0:51:3b:bd:c8:33:1b:fa:67:6e:9e:80:19:a5:4b:ef:83:57: 93:0b:1e:3d:19:fb:93:60:4a:9a:d5:59:8d:ce:d3:01:84:94: 1c:9b:9b:ac:db:67:17:7a:61:6e:88:fb:f0:05:a8:6e:eb:6f: e5:3c:5a:5c:9d:14:af:f9:3b:57:a2:4e:31:74:ac:7c:ad:86: 10:ee:55:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICPD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwMjI1MDE0NTAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWYyMy05NTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiXNV5kOCKSbLv63zey9TI7+LiajQcMBJREmqSHS4YkPVSM8uwXZiqDNLrM6X xluXOcyLgd8leVScZ3dQEY4S4eXQEdgiRCPVppbYEwXtE34vUVF283kSpKY3uUxW QgwMvrZfaSj77I9F4tbRA16ehOD5Gz50G3Y+Bs0wn6TmWxZ5GdSDM4w1XnACI5KM 4RQA6es7Azcxw4dusrXy6oAFlcAx+sBg33NHYElD+9iwJEwYqPcJAnaXqyA9YHXh o21OJEiLDzsyPJZ+ON7IhCc09HFOo2pTt1V5rRSEPoySQpWH2FP/y83H77Z+40IT tR1sQdUOrcwOyvZWv7kloDV1BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIu3Kj9 afUFVo6eXlN8M3Gm5fc5MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvRkJDOEU0NUMx MTE5MTFGMUE5NzE4N0E0MTczRDhDNjcucm9hMGcGCCsGAQUFBwEHAQH/BFgwVjBU BAIAATBOAwQALXhAAwQALXhDAwQAeQBvMAwDBADL0hEDBALL0hADBADSV8EwDAME ANJXwwMEAdJXxAMEANJXxwMEANJXzDAMAwQE0lfQAwQA0lfeMA0GCSqGSIb3DQEB CwUAA4IBAQAXxMgmAH3ON+r+B+UU/468oBlMOGzOoUChDFRKhRxG84+xX0g0Ep5U In8BYuw0zNsEbmQDtON01iRTUnxQfty/wd729GcqdTt/COl5UTL86yK+dK8fQoKe SdsGMf7JYjzIbNSbgGZR/+bNU5K9H7gL8eUB618ISzHy8RNQJKPIWLVL3DEvjYx2 PBQ2HeLKTQcfbuQS63y2TS8K+apysKUCX2UTzCJl6keS3QcBWC3VQmVKkrLgUTu9 yDMb+mdunoAZpUvvg1eTCx49GfuTYEqa1VmNztMBhJQcm5us22cXemFuiPvwBahu 62/lPFpcnRSv+TtXok4xdKx8rYYQ7lU4 -----END CERTIFICATE-----Generated at Mon Mar 2 13:13:29 2026 by rpki-client