$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FEDF0BA43E5111EF86CB780AC4F9AE02.roa File: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (raw, json) Hash identifier: EFaZCjlUjSPQC3HHJQIX+onynGdsaTardI+2gKmHj0g= Subject key identifier: E3:BA:48:C1:C6:A9:DA:B4:F5:43:42:AB:74:37:FE:54:E5:C5:6F:26 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3C24 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FEDF0BA43E5111EF86CB780AC4F9AE02.roa Signing time: Sun 01 Mar 2026 21:26:36 +0000 ROA not before: Fri 04 Jul 2025 14:50:48 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9454 IP address blocks: 43.247.104.0/22 maxlen: 22 103.229.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15396 (0x3c24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jul 4 14:50:48 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4af0c-50c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:08:97:72:c8:f6:db:67:c5:7a:7f:81:a1: 6b:d5:ce:a6:c0:dc:1d:ed:81:ce:c1:1c:3a:d6:97: 45:48:ca:b5:82:b2:f4:c6:64:d8:a7:3d:ac:7a:82: 3e:df:29:a6:fb:9a:f4:e7:3d:f1:34:16:76:7b:b9: 0c:29:c6:47:51:ad:5e:ee:c1:d9:6e:66:b9:0f:38: b7:e7:ca:5b:d3:80:c2:64:3d:4a:ae:12:d8:b5:86: b6:fb:2a:0f:ee:8a:ed:40:80:b7:a3:8e:32:50:c6: 1f:52:d5:90:b3:21:c0:b1:8c:4d:b9:0c:44:60:77: 4e:31:5f:54:97:e3:d7:0f:76:46:29:52:cb:ce:f4: 3a:82:6f:0b:1b:8b:e8:d6:2c:1b:56:a1:23:e2:3e: c8:46:54:2a:21:b5:25:fc:d4:2b:44:68:a7:97:57: 49:7a:c1:43:bd:39:d2:26:36:a4:3f:8a:0a:70:95: 9a:bf:e4:d4:89:af:ef:b6:f6:2e:87:66:fd:82:3b: f3:76:08:3b:31:76:2b:52:09:f5:6d:a9:9e:15:6e: 91:c7:2a:0d:28:61:8c:cb:c0:0a:e2:60:00:ff:e3: 13:df:da:b5:02:20:46:4c:c5:5d:6a:a4:fd:4f:39: e0:39:d9:c0:47:77:99:c8:b5:42:fe:3e:5f:6a:a3: d0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BA:48:C1:C6:A9:DA:B4:F5:43:42:AB:74:37:FE:54:E5:C5:6F:26 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FEDF0BA43E5111EF86CB780AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.247.104.0/22 103.229.156.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:06:47:f7:d6:d4:f9:c2:b1:d8:98:2a:cf:7b:31:b1:4f:5a: 40:3b:49:c3:b8:65:59:4c:16:a8:04:34:e4:cc:57:83:fd:c4: 86:cb:32:fa:dd:8c:fc:29:3c:45:f3:4c:61:03:28:4e:0e:21: ae:be:dd:78:dd:f6:9a:37:b3:23:78:2f:6a:d6:ca:61:5a:ef: 35:fb:87:45:7d:6b:c3:6d:2c:66:29:eb:37:16:67:22:a6:16: b9:e8:56:de:e4:69:d6:9f:ba:dc:60:c2:37:eb:83:12:f8:97: da:0b:62:de:e0:01:5f:0b:71:91:c8:c1:19:6f:1d:e1:40:81: f0:32:51:d5:36:8c:a5:ba:06:30:ab:5f:ed:e7:f4:9a:7b:92: ea:ad:f3:82:bb:99:b0:d0:0b:fd:d2:db:7a:2a:8b:e2:e5:af: a5:e1:30:a5:e3:db:24:af:6d:d5:db:ad:67:e6:08:e7:ea:f2: 90:35:a7:5e:3d:b0:5c:57:83:2e:15:de:b7:95:6e:c2:8e:fb: 1a:65:ac:98:aa:e8:e0:3d:13:c7:a7:4a:a7:c1:27:83:b3:20: 26:2c:2a:66:e1:6e:b7:96:0a:6f:47:28:bf:39:54:5d:c3:a9: 7e:ae:ea:62:97:77:db:36:98:a7:b6:30:39:64:02:f7:75:a9: 9d:d9:e1:36 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICPCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWYwYy01MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV8Il3LI9ttnxXp/gaFr1c6mwNwd7YHOwRw61pdFSMq1grL0xmTYpz2seoI+ 3ymm+5r05z3xNBZ2e7kMKcZHUa1e7sHZbma5Dzi358pb04DCZD1KrhLYtYa2+yoP 7ortQIC3o44yUMYfUtWQsyHAsYxNuQxEYHdOMV9Ul+PXD3ZGKVLLzvQ6gm8LG4vo 1iwbVqEj4j7IRlQqIbUl/NQrRGinl1dJesFDvTnSJjakP4oKcJWav+TUia/vtvYu h2b9gjvzdgg7MXYrUgn1bameFW6RxyoNKGGMy8AK4mAA/+MT39q1AiBGTMVdaqT9 TzngOdnAR3eZyLVC/j5faqPQAwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOO6SMHG qdq09UNCq3Q3/lTlxW8mMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvRkVERjBCQTQz RTUxMTFFRjg2Q0I3ODBBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/doAwQCZ+WcMA0GCSqGSIb3DQEBCwUAA4IBAQBbBkf31tT5wrHY mCrPezGxT1pAO0nDuGVZTBaoBDTkzFeD/cSGyzL63Yz8KTxF80xhAyhODiGuvt14 3faaN7MjeC9q1sphWu81+4dFfWvDbSxmKes3Fmcipha56Fbe5GnWn7rcYMI364MS +JfaC2Le4AFfC3GRyMEZbx3hQIHwMlHVNoylugYwq1/t5/Sae5LqrfOCu5mw0Av9 0tt6Kovi5a+l4TCl49skr23V261n5gjn6vKQNadePbBcV4MuFd63lW7CjvsaZayY qujgPRPHp0qnwSeDsyAmLCpm4W63lgpvRyi/OVRdw6l+rupil3fbNpintjA5ZAL3 damd2eE2 -----END CERTIFICATE-----Generated at Mon Mar 2 18:26:47 2026 by rpki-client