$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa File: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (raw, json) Hash identifier: pI7DQlML4G8nsrMbEd9F1IKO++WC4YpDB08JHhvsskQ= Subject key identifier: 3E:D9:E3:C3:86:F9:04:7D:36:2F:22:FF:93:77:1B:59:D6:DB:61:E6 Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 032A Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:06:54 +0000 ROA not before: Mon 22 Dec 2025 06:39:05 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 3550 IP address blocks: 165.220.0.0/21 maxlen: 21 165.220.16.0/21 maxlen: 21 165.220.24.0/21 maxlen: 21 165.220.32.0/19 maxlen: 19 165.220.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Validity Not Before: Dec 22 06:39:05 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4722e-7b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:2f:6a:fd:9e:5b:e5:07:42:b8:4b:95:89: 54:0b:6b:cf:4e:78:bd:f8:68:c9:0f:a4:7f:c1:2a: 2a:85:52:16:75:ed:4c:b8:9d:8a:fd:27:ed:47:bd: 42:2f:d4:2e:3e:98:ac:24:5d:65:4e:92:63:13:c9: 4d:5a:da:b6:d2:25:b2:de:a5:50:2b:3e:ed:ce:d0: 07:e0:c2:76:c9:a6:7e:81:be:94:ca:0e:91:55:b1: 00:c1:2e:09:b1:a4:1e:e0:88:99:49:14:0a:76:4f: 2e:67:1d:f4:78:11:ba:fc:62:19:b5:a4:c0:a3:66: f2:70:13:6e:53:90:fc:69:65:9e:31:ac:80:da:6c: 5f:7b:ef:d5:91:0f:64:eb:56:15:55:21:90:8b:7c: 87:79:49:f6:92:f3:cc:a6:02:53:a7:ba:6b:6f:d9: 1f:92:25:90:a9:84:89:eb:7d:9d:ef:5f:71:cb:2b: 03:6b:04:df:3c:c4:f3:65:91:79:2b:da:ab:37:c7: ab:31:af:ce:dd:9b:b8:24:9e:00:87:5e:09:7a:cc: 4a:d4:0b:78:6e:ff:b1:e0:0b:7f:77:79:15:60:25: 66:2a:5e:77:01:a8:47:f4:37:0b:e1:1f:3f:52:32: 01:35:bf:30:f5:05:82:ec:d1:5b:58:1f:82:b6:d8: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D9:E3:C3:86:F9:04:7D:36:2F:22:FF:93:77:1B:59:D6:DB:61:E6 X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.220.0.0/21 165.220.16.0-165.220.127.255 Signature Algorithm: sha256WithRSAEncryption b7:9d:26:1f:f9:af:ea:bb:ab:6b:7e:34:c7:c2:49:ce:78:bc: 3c:86:12:32:94:9b:df:df:dd:da:a2:f6:ee:9c:b6:e3:13:a7: 6b:d1:1e:21:37:41:3a:c6:8e:f8:94:22:35:38:9f:66:3e:ce: 19:30:05:25:7f:02:63:27:19:5e:4c:5e:77:22:32:22:9d:36: 38:2a:c4:72:de:50:e2:75:f8:5d:8b:da:40:79:7b:43:cf:4e: 06:13:d0:d1:dc:28:cb:27:a3:32:9a:60:27:6e:37:9c:b2:8c: 1b:0c:25:92:05:55:4c:89:e6:d5:6b:3a:91:e1:47:72:75:95: 39:85:4d:18:34:69:7e:97:54:50:49:6a:b0:0b:2c:56:6c:34: a7:2f:fc:40:cf:90:85:c2:6b:65:28:ef:e4:94:a6:c9:0f:f6: 87:a6:4a:f9:52:02:c2:f7:76:08:0d:81:48:5b:95:50:d7:53: 3c:aa:30:0f:29:82:a9:b9:ed:96:33:29:44:d2:43:08:ed:48: 2e:f2:3a:04:bb:36:fe:9a:e9:cc:52:cc:d9:45:ee:95:51:06: 25:bf:c1:57:c2:d8:7a:d9:8f:29:28:a6:f1:c5:df:c7:67:af: 59:c2:79:31:33:d3:cf:d1:dc:ce:04:43:eb:35:88:66:65:49: 81:a8:53:01 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjUxMjIyMDYzOTA1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzIyZS03YjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuO8vav2eW+UHQrhLlYlUC2vPTni9+GjJD6R/wSoqhVIWde1MuJ2K/SftR71C L9QuPpisJF1lTpJjE8lNWtq20iWy3qVQKz7tztAH4MJ2yaZ+gb6Uyg6RVbEAwS4J saQe4IiZSRQKdk8uZx30eBG6/GIZtaTAo2bycBNuU5D8aWWeMayA2mxfe+/VkQ9k 61YVVSGQi3yHeUn2kvPMpgJTp7prb9kfkiWQqYSJ632d719xyysDawTfPMTzZZF5 K9qrN8erMa/O3Zu4JJ4Ah14JesxK1At4bv+x4At/d3kVYCVmKl53AahH9DcL4R8/ UjIBNb8w9QWC7NFbWB+CttjW9QIDAQABo4ICbjCCAmowHQYDVR0OBBYEFD7Z48OG +QR9Ni8i/5N3G1nW22HmMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg0OTQvMzFCODI2M0MwOTkzMTFFREIyMUM5QjRCQzRGOUFFMDIvRkJERkM5MjJD QjZCMTFGMEI3RENFMDZCQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQDpdwAMAwDBASl3BADBAel3AAwDQYJKoZIhvcNAQELBQADggEBALed Jh/5r+q7q2t+NMfCSc54vDyGEjKUm9/f3dqi9u6ctuMTp2vRHiE3QTrGjviUIjU4 n2Y+zhkwBSV/AmMnGV5MXnciMiKdNjgqxHLeUOJ1+F2L2kB5e0PPTgYT0NHcKMsn ozKaYCduN5yyjBsMJZIFVUyJ5tVrOpHhR3J1lTmFTRg0aX6XVFBJarALLFZsNKcv /EDPkIXCa2Uo7+SUpskP9oemSvlSAsL3dggNgUhblVDXUzyqMA8pgqm57ZYzKUTS QwjtSC7yOgS7Nv6a6cxSzNlF7pVRBiW/wVfC2HrZjykopvHF38dnr1nCeTEz08/R 3M4EQ+s1iGZlSYGoUwE= -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:42 2026 by rpki-client