$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/FDE510BCC2E511EBBDB1B180C4F9AE02.roa File: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (raw, json) Hash identifier: KeHN4yC8HCgWU7NC7+u9JXzLgmJ0RzLzePi7iCwVwGQ= Subject key identifier: BD:7B:5A:B5:10:E6:A7:D5:11:55:D4:05:53:59:C3:E9:26:BD:7D:74 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 3707 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/FDE510BCC2E511EBBDB1B180C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:54:03 +0000 ROA not before: Tue 06 Jan 2026 15:10:22 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 17495 IP address blocks: 203.124.128.0/20 maxlen: 24 203.124.144.0/20 maxlen: 24 203.124.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14087 (0x3707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Jan 6 15:10:22 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47d3a-3952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:e5:45:1d:cf:85:7e:04:34:60:aa:77:a8: cb:4b:11:c3:c6:98:95:9e:d0:28:6c:87:66:d0:e3: 40:c6:64:6a:85:f9:94:44:b1:a7:89:d6:1e:2f:fd: d0:99:87:0e:de:52:a3:41:96:6c:3c:e0:31:9b:6c: b7:21:5a:18:8f:05:2b:e7:8a:f8:ce:ef:f7:38:85: 80:48:57:42:1c:79:2f:6d:1f:dc:65:02:e0:e3:e4: f2:f6:cd:6a:16:49:e3:1e:53:a8:5e:4a:9f:30:9d: 73:87:e2:1e:4e:b4:ae:a8:d9:49:6b:d0:29:95:25: 3d:1c:cb:1b:55:40:1e:22:de:01:2e:2c:da:04:83: ae:cf:3a:7b:c0:6e:6f:c7:60:6d:a2:f1:d3:57:8a: 4b:f5:e9:39:1d:bb:c9:c2:30:a5:df:29:ad:1a:f5: 95:7c:14:37:dd:2a:8f:16:7c:92:73:c3:ec:0a:3b: 5e:d4:92:39:f4:ef:8a:03:f1:b3:7e:80:06:20:23: 62:bf:f3:4c:69:c3:47:98:1d:c6:7c:61:e9:f9:1d: 6a:c6:e0:65:71:dd:b5:a6:9a:1a:82:fb:a4:2a:09: ce:9b:a8:c6:c3:e4:41:83:9f:cd:b3:74:a3:6d:25: 2a:15:38:ea:ea:02:33:93:69:62:38:8e:ad:28:08: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7B:5A:B5:10:E6:A7:D5:11:55:D4:05:53:59:C3:E9:26:BD:7D:74 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/FDE510BCC2E511EBBDB1B180C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.124.128.0-203.124.175.255 Signature Algorithm: sha256WithRSAEncryption 5d:87:49:cb:85:d0:55:f8:d0:7b:04:8b:64:82:c9:16:5c:38: f5:f0:be:f2:7f:fc:88:67:4c:7b:dc:7b:82:d3:bf:43:6b:e0: 3c:9a:2b:33:41:08:d4:37:55:28:66:74:43:cc:9b:36:76:c3: 46:51:d9:09:8f:98:e1:9f:ad:3a:3d:0f:85:ac:a7:eb:f2:a2: 8f:00:9a:ca:a1:69:0d:6d:50:1c:fa:f2:9c:47:9d:f3:00:dc: d0:c5:0d:d1:7d:f0:fb:61:ed:cf:cc:99:6e:40:62:fe:85:b0: 7c:f6:d0:cb:c0:88:3b:d8:9b:ee:16:f2:bf:07:3d:3e:1e:bf: cd:5c:d8:b5:d5:b1:38:64:e6:f2:d8:58:10:45:e8:fe:99:ae: 8e:1d:a6:da:4b:9c:41:71:42:c4:c9:e1:9f:52:13:91:71:6f: f8:75:07:81:ac:fc:84:e9:cc:61:9d:4f:97:3a:fd:0d:75:7b: 6d:88:f9:06:81:14:41:e7:bc:89:10:7b:e4:26:b2:f6:84:cb: cd:33:ef:75:6c:d8:ae:05:e7:b5:4c:09:b4:5d:46:2b:c7:ef: a1:c1:ec:90:3c:2b:03:3d:5a:5a:2b:3a:2d:e3:be:b2:4d:cf: 99:26:31:20:65:c6:ea:38:62:97:2d:4e:ec:8f:f8:1e:9f:d9: 95:fc:cc:64 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICNwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjYwMTA2MTUxMDIyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2QzYS0zOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxczlRR3PhX4ENGCqd6jLSxHDxpiVntAobIdm0ONAxmRqhfmURLGnidYeL/3Q mYcO3lKjQZZsPOAxm2y3IVoYjwUr54r4zu/3OIWASFdCHHkvbR/cZQLg4+Ty9s1q FknjHlOoXkqfMJ1zh+IeTrSuqNlJa9AplSU9HMsbVUAeIt4BLizaBIOuzzp7wG5v x2BtovHTV4pL9ek5HbvJwjCl3ymtGvWVfBQ33SqPFnySc8PsCjte1JI59O+KA/Gz foAGICNiv/NMacNHmB3GfGHp+R1qxuBlcd21ppoagvukKgnOm6jGw+RBg5/Ns3Sj bSUqFTjq6gIzk2liOI6tKAgWgwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFL17WrUQ 5qfVEVXUBVNZw+kmvX10MB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFGQTUvMDgwNTZDRTQxRDg3MTFFMjlERDNDNkRFMDhCMDJDRDIvRkRFNTEwQkND MkU1MTFFQkJEQjFCMTgwQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAfLfIADBATLfKAwDQYJKoZIhvcNAQELBQADggEBAF2HScuF0FX4 0HsEi2SCyRZcOPXwvvJ//IhnTHvce4LTv0Nr4DyaKzNBCNQ3VShmdEPMmzZ2w0ZR 2QmPmOGfrTo9D4Wsp+vyoo8AmsqhaQ1tUBz68pxHnfMA3NDFDdF98Pth7c/MmW5A Yv6FsHz20MvAiDvYm+4W8r8HPT4ev81c2LXVsThk5vLYWBBF6P6Zro4dptpLnEFx QsTJ4Z9SE5Fxb/h1B4Gs/ITpzGGdT5c6/Q11e22I+QaBFEHnvIkQe+QmsvaEy80z 73Vs2K4F57VMCbRdRivH76HB7JA8KwM9WlorOi3jvrJNz5kmMSBlxuo4YpctTuyP +B6f2ZX8zGQ= -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:07 2026 by rpki-client