$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FC90C520213411EA8D675645C4F9AE02.roa File: FC90C520213411EA8D675645C4F9AE02.roa (raw, json) Hash identifier: wRh3N1lkasKdB1iov51RXGczR9sD9duj3/LCNc3iLBY= Subject key identifier: 2A:89:4D:AB:72:09:FA:18:93:CF:0D:9A:A9:A6:59:5E:B4:45:FA:C2 Certificate issuer: /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Certificate serial: 0C4A Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FC90C520213411EA8D675645C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:56:01 +0000 ROA not before: Fri 28 Nov 2025 18:22:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 58910 IP address blocks: 43.241.96.0/22 maxlen: 24 103.18.88.0/22 maxlen: 24 2400:5380::/32 maxlen: 32 2400:5380::/33 maxlen: 33 2400:5380:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Validity Not Before: Nov 28 18:22:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44571-c0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:e6:58:0b:e9:2b:d3:cf:d4:da:12:92:e9: a1:78:68:85:26:3d:6a:ed:36:bb:0e:72:40:d0:a9: 2a:b1:19:8a:7d:0b:d8:f5:39:ec:22:da:35:ca:bc: 40:2b:b3:94:1b:62:82:a7:40:f9:25:ff:0d:54:7f: be:0e:49:bc:52:01:82:eb:e0:3a:1f:92:1f:cf:fd: a2:bc:8c:7f:33:6f:3e:2f:42:72:77:a2:99:57:18: b8:be:c1:9f:b5:ca:be:c8:f9:e0:bb:a4:5a:25:c1: a7:b7:ec:ad:6d:2f:22:be:80:82:9a:3e:61:91:8f: c3:03:de:0c:e5:62:46:9e:3a:74:45:e4:bf:31:2e: 81:e5:e7:0a:cc:89:18:4f:67:1e:2b:f2:3b:37:f8: 4e:4a:0e:9e:57:76:16:ad:7d:f8:8e:b6:bb:fb:26: ce:a9:6f:2e:91:ef:85:0d:67:bc:c9:84:4e:14:27: 40:a6:f0:7c:2b:d1:86:b6:96:d8:36:0f:ae:46:01: 30:49:6f:4a:07:d0:85:f0:4f:e3:d8:61:3d:17:84: 45:c5:1a:9a:50:1a:10:42:bd:74:9c:70:da:7d:76: 70:4e:dc:50:23:94:ed:d2:7e:de:8f:a5:95:ef:f8: e6:b4:6a:0a:f8:de:d5:16:73:82:e0:64:b1:15:96: d8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:89:4D:AB:72:09:FA:18:93:CF:0D:9A:A9:A6:59:5E:B4:45:FA:C2 X509v3 Authority Key Identifier: keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FC90C520213411EA8D675645C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.241.96.0/22 103.18.88.0/22 IPv6: 2400:5380::/32 Signature Algorithm: sha256WithRSAEncryption 45:0c:6d:02:be:71:06:62:4f:2e:93:8a:11:76:0a:b0:36:7e: 0a:53:43:34:8a:87:7d:e7:18:c4:d5:f9:b7:2e:85:d5:53:69: ff:2b:5e:84:a7:da:80:c6:bd:18:a7:c6:01:83:f4:1a:48:44: b1:84:e2:7f:9d:e5:61:e5:d8:da:71:0c:c0:bc:4b:ed:bf:55: 52:ab:97:a2:79:af:53:cd:51:6c:d5:f7:6a:a1:1e:db:cb:0c: 23:15:0e:a3:e7:b4:67:1e:21:af:43:18:b6:12:c2:91:46:cb: 7f:0f:77:29:59:55:16:4d:be:af:ab:68:bf:00:28:67:1d:5a: 35:04:9d:45:da:f1:11:39:0c:21:c4:8a:3b:7c:81:60:a7:69: ea:80:16:35:b7:b6:92:a7:2d:6b:20:70:e1:64:25:17:4c:1c: 4a:71:e5:97:0e:1d:00:1f:e1:aa:a9:42:5d:56:a3:90:e3:39: a4:f8:e3:75:65:9c:b3:f2:26:07:d1:a0:e6:6b:32:9a:77:c8: 9e:45:57:68:b5:26:a1:a5:0e:e6:08:74:10:5e:a0:c7:7e:14: 0f:d0:35:3b:97:5a:60:88:6d:ec:7d:79:1d:19:b6:3b:85:8c: ad:40:92:c3:75:01:27:14:6d:52:40:e6:3b:48:56:76:69:f1: 9a:95:37:cc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3 NzU4MzAwRjkwHhcNMjUxMTI4MTgyMjUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDU3MS1jMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtD7mWAvpK9PP1NoSkumheGiFJj1q7Ta7DnJA0KkqsRmKfQvY9TnsIto1yrxA K7OUG2KCp0D5Jf8NVH++Dkm8UgGC6+A6H5Ifz/2ivIx/M28+L0Jyd6KZVxi4vsGf tcq+yPngu6RaJcGnt+ytbS8ivoCCmj5hkY/DA94M5WJGnjp0ReS/MS6B5ecKzIkY T2ceK/I7N/hOSg6eV3YWrX34jra7+ybOqW8uke+FDWe8yYROFCdApvB8K9GGtpbY Ng+uRgEwSW9KB9CF8E/j2GE9F4RFxRqaUBoQQr10nHDafXZwTtxQI5Tt0n7ej6WV 7/jmtGoK+N7VFnOC4GSxFZbY/wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFCqJTaty CfoYk88NmqmmWV60RfrCMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTAzQkIvNDcyNUZDNzgyMTJGMTFFQTgzMEUwQTM1QzRGOUFFMDIvRkM5MEM1MjAy MTM0MTFFQThENjc1NjQ1QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/FgAwQCZxJYMA0EAgACMAcDBQAkAFOAMA0GCSqGSIb3DQEBCwUA A4IBAQBFDG0CvnEGYk8uk4oRdgqwNn4KU0M0iod95xjE1fm3LoXVU2n/K16Ep9qA xr0Yp8YBg/QaSESxhOJ/neVh5djacQzAvEvtv1VSq5eiea9TzVFs1fdqoR7bywwj FQ6j57RnHiGvQxi2EsKRRst/D3cpWVUWTb6vq2i/AChnHVo1BJ1F2vEROQwhxIo7 fIFgp2nqgBY1t7aSpy1rIHDhZCUXTBxKceWXDh0AH+GqqUJdVqOQ4zmk+ON1ZZyz 8iYH0aDmazKad8ieRVdotSahpQ7mCHQQXqDHfhQP0DU7l1pgiG3sfXkdGbY7hYyt QJLDdQEnFG1SQOY7SFZ2afGalTfM -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:06 2026 by rpki-client