$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/FC5AFF000BE011ED9E3AA135C4F9AE02.roa File: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (raw, json) Hash identifier: Yd4aj0Xz2uIrQ1PLk7dpencIrjVP/srZ0d6+nM1nW20= Subject key identifier: 34:E9:20:C5:F8:D4:DF:53:22:63:6F:6A:41:BC:97:82:89:01:13:A3 Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Certificate serial: 04AE Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/FC5AFF000BE011ED9E3AA135C4F9AE02.roa Signing time: Sat 22 Aug 2026 23:49:08 +0000 ROA not before: Sat 22 Aug 2026 23:49:08 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 133861 IP address blocks: 43.242.128.0/24 maxlen: 24 43.242.129.0/24 maxlen: 24 43.242.130.0/24 maxlen: 24 43.242.131.0/24 maxlen: 24 103.251.88.0/24 maxlen: 24 103.251.89.0/24 maxlen: 24 103.251.90.0/24 maxlen: 24 103.251.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1198 (0x4ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Validity Not Before: Aug 22 23:49:08 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8a3574-2b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:ca:fb:08:e0:1d:04:ad:e0:ca:54:9a:a0: 7b:76:c4:24:12:bd:df:c8:cd:40:31:84:36:da:4f: 53:d8:7b:5e:93:ba:cc:cf:04:46:e6:7f:d7:52:48: df:5e:e3:04:df:3c:0a:88:4a:83:2d:28:ca:7b:a6: 09:8f:b7:6f:c2:0e:e7:35:93:f1:73:4c:c2:d8:9f: b4:9a:71:d4:7d:36:a4:a4:de:ee:ea:d4:46:1d:5a: 5e:c1:f2:36:cd:e2:55:b1:13:27:d6:b2:e2:78:bd: 61:3c:5a:d1:a7:e8:f1:d2:16:46:b2:dc:5e:7c:8b: 87:fb:48:39:8d:a1:2f:6b:5c:82:5f:15:6e:18:87: 67:65:cc:bf:53:57:b3:81:5f:7f:f7:a8:57:36:8b: e0:c9:58:24:6c:29:dc:25:4d:28:11:cc:01:54:0f: c8:80:57:d9:ab:35:e7:b6:a8:c3:76:88:af:3d:69: 78:e0:39:9e:7b:9d:48:03:94:40:86:87:48:22:51: 0b:38:f7:c6:8d:b3:8c:f6:ea:47:55:14:70:0b:a6: 04:d5:33:f5:ab:5b:3e:ce:ec:1d:08:1d:03:1c:cd: 88:37:73:f1:86:11:e5:9a:e5:ad:b8:72:f4:b5:66: d1:0b:8c:e7:52:87:51:81:b2:70:34:6b:34:e9:0e: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E9:20:C5:F8:D4:DF:53:22:63:6F:6A:41:BC:97:82:89:01:13:A3 X509v3 Authority Key Identifier: keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/FC5AFF000BE011ED9E3AA135C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.242.128.0/22 103.251.88.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:8f:cf:44:42:e1:88:ff:bd:80:42:4a:ce:a3:2c:7f:30:13: 09:d5:36:9e:aa:4d:47:10:5d:ce:80:4c:55:b7:0f:72:cd:47: 46:2c:da:48:9c:8e:c4:72:11:24:40:3c:62:a0:c2:d0:19:a1: 08:d4:6c:e0:e4:ed:04:ce:e7:a6:48:74:a9:55:e2:c3:56:24: 86:ae:39:5d:13:be:52:2d:8c:94:bb:f3:28:f9:77:b0:a6:ac: 81:ca:ba:28:56:86:71:b6:28:12:28:95:bd:87:03:fa:b9:4a: 9a:e1:78:8f:ca:4a:88:4c:74:a8:e5:b4:4d:3e:10:2a:03:b3: e5:ed:8e:3b:57:0d:bb:6c:db:61:d3:2d:43:95:b7:22:e7:a0: 18:00:ea:ba:35:b8:d1:ba:eb:8c:5e:0e:41:c8:26:a0:04:0f: 60:c2:5f:53:bb:46:89:06:99:52:da:e7:9a:d1:c6:53:dd:36: 6e:38:84:5b:70:b1:81:e7:7a:fd:73:e2:3f:67:74:7c:1d:82: b4:a0:2b:9b:a6:04:a1:b3:d3:99:c9:6e:bb:2b:9b:fe:7f:de: a2:92:b6:82:2c:5b:88:ba:8f:ef:29:6c:65:52:97:79:e2:02: 0a:c9:dc:c6:39:0c:28:5e:ad:04:08:55:1d:15:d4:e5:1a:20: 2d:3c:05:64 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYyMEIxMTAvBgNVBAUTKDc3MDNBNkQ1NkM3MTgwMjFCRDlDODlFQjNDNEJFRDgx N0VENTZBRTUwHhcNMjYwODIyMjM0OTA4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThhMzU3NC0yYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMjK+wjgHQSt4MpUmqB7dsQkEr3fyM1AMYQ22k9T2Htek7rMzwRG5n/XUkjf XuME3zwKiEqDLSjKe6YJj7dvwg7nNZPxc0zC2J+0mnHUfTakpN7u6tRGHVpewfI2 zeJVsRMn1rLieL1hPFrRp+jx0hZGstxefIuH+0g5jaEva1yCXxVuGIdnZcy/U1ez gV9/96hXNovgyVgkbCncJU0oEcwBVA/IgFfZqzXntqjDdoivPWl44Dmee51IA5RA hodIIlELOPfGjbOM9upHVRRwC6YE1TP1q1s+zuwdCB0DHM2IN3PxhhHlmuWtuHL0 tWbRC4znUodRgbJwNGs06Q6aiQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDTpIMX4 1N9TImNvakG8l4KJAROjMB8GA1UdIwQYMBaAFHcDptVscYAhvZyJ6zxL7YF+1Wrl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjIwQi8xOUU0REJGNjk2 MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdDRzluSW5yUEV2dGdYN1Zh dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3T20xV3h4Z0NHOW5JbnJQRXZ0Z1g3VmF1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEYyMEIvMTlFNERCRjY5NjBGMTFFQzg5MEE0NDZEQzRGOUFFMDIvRkM1QUZGMDAw QkUwMTFFRDlFM0FBMTM1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/KAAwQCZ/tYMA0GCSqGSIb3DQEBCwUAA4IBAQBNj89EQuGI/72A QkrOoyx/MBMJ1Taeqk1HEF3OgExVtw9yzUdGLNpInI7EchEkQDxioMLQGaEI1Gzg 5O0EzuemSHSpVeLDViSGrjldE75SLYyUu/Mo+XewpqyByrooVoZxtigSKJW9hwP6 uUqa4XiPykqITHSo5bRNPhAqA7Pl7Y47Vw27bNth0y1Dlbci56AYAOq6NbjRuuuM Xg5ByCagBA9gwl9Tu0aJBplS2uea0cZT3TZuOIRbcLGB53r9c+I/Z3R8HYK0oCub pgShs9OZyW67K5v+f96ikraCLFuIuo/vKWxlUpd54gIKydzGOQwoXq0ECFUdFdTl GiAtPAVk -----END CERTIFICATE-----Generated at Tue Sep 22 08:36:46 2026 by rpki-client