$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/FA3E8D68BA2911F0A4AFE171C4F9AE02.roa File: FA3E8D68BA2911F0A4AFE171C4F9AE02.roa (raw, json) Hash identifier: IBw3K5oTaYkP1Lamfe7f4AbVCUVD2an81GV/CK0SpBk= Subject key identifier: D6:01:9F:93:EB:7B:21:34:53:26:BA:36:39:BB:80:84:9C:13:7D:52 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 0405 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/FA3E8D68BA2911F0A4AFE171C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:51:00 +0000 ROA not before: Wed 05 Nov 2025 09:29:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134806 IP address blocks: 103.185.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Nov 5 09:29:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a43634-1f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:1c:70:62:53:1d:0d:5d:06:33:2f:81:0c: 83:cd:de:91:61:a8:7d:51:90:f4:4d:83:f8:e7:0d: 8f:7c:45:99:36:e9:fd:c6:c6:a3:8a:47:38:0f:b2: c0:59:db:be:18:6c:d9:41:55:0c:bc:28:a3:38:54: df:4b:00:31:77:e8:21:82:34:95:37:89:6f:83:a3: c4:09:15:21:b0:81:39:a2:0c:6b:24:f8:b5:fc:21: 41:78:d3:cf:c7:98:96:89:e4:15:e9:9b:83:34:36: c5:e1:7f:bb:31:3d:9b:e2:f0:fd:91:2b:73:18:d9: ed:02:90:12:ba:23:13:35:14:fa:e3:17:07:61:3e: 59:24:69:94:ad:25:bc:5b:5e:30:7e:3d:19:04:fc: 5e:e2:c5:05:28:e2:fc:a5:52:5d:1d:73:fc:d2:14: 43:0e:91:ab:f7:78:de:06:e7:27:c3:18:2d:36:76: 0c:8d:e4:51:12:1c:c3:7f:55:83:5a:de:71:24:43: 3d:db:18:ea:fb:39:8b:3f:e4:67:bf:b3:1d:9b:59: 76:70:50:69:90:41:c1:82:bd:cb:ba:da:d6:66:75: 8e:6b:37:f3:62:b6:ad:3d:54:a3:fb:28:32:f4:44: 35:62:5f:a6:0b:dd:03:1b:ff:3d:e1:49:f5:42:67: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:9F:93:EB:7B:21:34:53:26:BA:36:39:BB:80:84:9C:13:7D:52 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/FA3E8D68BA2911F0A4AFE171C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.185.21.0/24 Signature Algorithm: sha256WithRSAEncryption 49:f7:80:77:ac:28:99:e6:dd:da:ee:36:7f:bf:cc:f7:9f:3e: 2a:b4:b7:a4:00:62:96:14:c5:8b:d5:7e:ee:15:75:25:ed:c5: 71:46:5d:ab:e7:e6:76:b0:51:08:3e:b3:03:22:cf:16:70:3a: d1:75:4c:81:a2:58:a8:f4:20:46:2b:59:75:13:28:9b:88:03: 6c:65:97:f5:74:68:5f:68:50:25:20:2f:ff:3d:7f:db:d8:70: 23:30:45:77:5c:33:f2:22:17:c2:d6:eb:5c:2e:cc:f2:19:65: 41:22:a7:ce:f6:62:53:58:82:ce:4d:6f:ef:19:6a:12:58:93: 4e:2a:8b:71:fa:15:22:14:1b:77:3f:78:a8:22:5b:17:bd:4d: d5:86:36:c4:e4:a9:ac:0d:43:22:96:60:d1:9c:46:b5:74:57: e6:5a:41:cd:1d:34:76:7e:a7:42:63:af:ca:de:b7:b5:a5:30: af:52:eb:2e:d4:b3:27:62:b0:6f:c6:51:cd:90:40:16:6b:f4: 95:f6:8d:b1:be:69:ea:4f:96:0f:81:b9:a2:5a:e5:f4:40:a4: e0:ee:4e:a8:62:e9:1d:1f:ca:be:ed:44:10:c6:ba:29:94:f6: 92:22:ea:4d:ef:e0:9b:ec:1d:db:84:e2:23:62:34:47:19:05: e1:a5:2a:e2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjUxMTA1MDkyOTUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzYzNC0xZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx18ccGJTHQ1dBjMvgQyDzd6RYah9UZD0TYP45w2PfEWZNun9xsajikc4D7LA Wdu+GGzZQVUMvCijOFTfSwAxd+ghgjSVN4lvg6PECRUhsIE5ogxrJPi1/CFBeNPP x5iWieQV6ZuDNDbF4X+7MT2b4vD9kStzGNntApASuiMTNRT64xcHYT5ZJGmUrSW8 W14wfj0ZBPxe4sUFKOL8pVJdHXP80hRDDpGr93jeBucnwxgtNnYMjeRREhzDf1WD Wt5xJEM92xjq+zmLP+Rnv7Mdm1l2cFBpkEHBgr3LutrWZnWOazfzYratPVSj+ygy 9EQ1Yl+mC90DG/894Un1Qmc4qQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNYBn5Pr eyE0Uya6Njm7gIScE31SMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc2RTIvNDdDNDRBRDhBRTg5MTFFQzhBOEQzMzY4QzRGOUFFMDIvRkEzRThENjhC QTI5MTFGMEE0QUZFMTcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ7kVMA0GCSqGSIb3DQEBCwUAA4IBAQBJ94B3rCiZ5t3a7jZ/v8z3 nz4qtLekAGKWFMWL1X7uFXUl7cVxRl2r5+Z2sFEIPrMDIs8WcDrRdUyBolio9CBG K1l1EyibiANsZZf1dGhfaFAlIC//PX/b2HAjMEV3XDPyIhfC1utcLszyGWVBIqfO 9mJTWILOTW/vGWoSWJNOKotx+hUiFBt3P3ioIlsXvU3VhjbE5KmsDUMilmDRnEa1 dFfmWkHNHTR2fqdCY6/K3re1pTCvUusu1LMnYrBvxlHNkEAWa/SV9o2xvmnqT5YP gbmiWuX0QKTg7k6oYukdH8q+7UQQxroplPaSIupN7+Cb7B3bhOIjYjRHGQXhpSri -----END CERTIFICATE-----Generated at Mon Mar 2 06:16:50 2026 by rpki-client