$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/FA9BD5C2C5DC11F0A5504261C4F9AE02.roa File: FA9BD5C2C5DC11F0A5504261C4F9AE02.roa (raw, json) Hash identifier: iXf9KuDSIbIFYMh4V2pQ7flo3c0UEktI37Pu46KLsLQ= Subject key identifier: 8E:69:40:F9:DE:19:11:EC:E9:44:A9:B6:BD:2D:64:00:52:C0:40:AD Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 0291 Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/FA9BD5C2C5DC11F0A5504261C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:10:30 +0000 ROA not before: Thu 20 Nov 2025 06:48:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 152475 IP address blocks: 103.96.1.0/24 maxlen: 24 113.212.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: Nov 20 06:48:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48116-a204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:1e:86:1e:b0:0d:36:86:5f:24:39:45:1d: f3:b7:29:c3:86:1e:f7:63:79:a9:b8:7c:8e:85:24: f9:5e:8b:a3:47:00:c8:42:0a:8a:db:09:bb:41:d3: 2a:45:5e:5a:2a:17:a4:16:a1:bf:2e:90:d5:97:28: d4:72:2d:37:76:16:ef:23:a1:fd:b7:fa:51:6c:98: 24:65:71:62:63:7f:5f:ce:fc:1b:78:1d:fd:2c:7b: 89:0a:04:08:b2:3d:8a:b3:5b:14:29:63:da:7e:86: 8a:3e:7d:44:c0:6c:9e:ce:29:6f:e5:1d:a6:f3:3e: 13:f4:c3:39:96:51:c8:d5:7e:51:56:0b:a4:15:f9: bd:7d:33:a5:21:db:6d:00:31:ae:b5:b1:e5:d3:3c: f8:42:5c:39:46:13:ad:5e:1d:e4:d7:76:f3:84:d9: e7:71:da:da:90:10:eb:7b:c0:be:a4:a6:ba:88:cc: 8b:48:ad:1e:b5:c0:75:da:a9:79:f0:6d:d1:1f:05: e3:4c:ca:48:4e:25:9b:63:f5:bc:09:96:e7:85:8b: 18:df:12:0c:ca:95:c2:bf:17:be:0c:ad:54:33:13: 35:83:3d:3d:42:27:5b:7f:e1:e5:67:51:ad:7c:e0: 2c:72:69:69:d7:e2:60:0d:3f:00:73:fb:3d:05:7e: 95:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:69:40:F9:DE:19:11:EC:E9:44:A9:B6:BD:2D:64:00:52:C0:40:AD X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/FA9BD5C2C5DC11F0A5504261C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.96.1.0/24 113.212.88.0/24 Signature Algorithm: sha256WithRSAEncryption 49:35:28:af:1b:d7:76:48:d0:93:bc:d8:9c:d0:fe:3b:97:1d: b8:dc:58:2f:cc:cf:ad:60:ab:c8:44:fe:a2:65:79:fd:79:db: 89:e6:36:8b:a8:c3:a1:10:f3:58:87:37:cd:6f:1f:7d:e8:30: bd:94:22:a3:08:89:9b:f9:a5:eb:ce:5c:07:64:88:b0:62:84: a5:1b:ec:05:d9:25:8d:cb:db:62:4d:2b:f7:ef:f0:f9:ea:76: ca:8e:ae:14:77:6c:a3:9f:b8:b8:c4:9b:8c:c3:2b:7a:93:56: 94:e3:6a:19:3e:fb:c9:b2:04:94:df:18:8b:d6:36:3e:c3:a6: 81:0e:5d:2e:d4:82:9c:0d:68:dc:09:79:51:68:d2:0e:c8:ee: 6c:16:89:84:97:56:6b:f3:2f:53:14:05:78:2c:0c:0a:d7:95: dd:84:0d:84:8f:86:d8:0c:55:7c:09:91:d4:c6:33:08:e0:2a: 8c:b8:cb:4c:cc:bf:bf:29:e2:5e:85:e4:00:38:ba:1a:75:fe: 02:20:42:fd:c9:16:a9:a8:47:f0:6b:0c:b6:4e:21:62:76:18: a1:76:f6:96:7c:0c:ae:99:8b:ec:d0:d0:16:97:bf:3e:35:44: f1:ff:78:79:95:d9:4f:c3:59:d0:15:7b:50:99:ac:9c:08:36: 5d:d3:af:c3 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjUxMTIwMDY0ODU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODExNi1hMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOcehh6wDTaGXyQ5RR3ztynDhh73Y3mpuHyOhST5XoujRwDIQgqK2wm7QdMq RV5aKhekFqG/LpDVlyjUci03dhbvI6H9t/pRbJgkZXFiY39fzvwbeB39LHuJCgQI sj2Ks1sUKWPafoaKPn1EwGyezilv5R2m8z4T9MM5llHI1X5RVgukFfm9fTOlIdtt ADGutbHl0zz4Qlw5RhOtXh3k13bzhNnncdrakBDre8C+pKa6iMyLSK0etcB12ql5 8G3RHwXjTMpITiWbY/W8CZbnhYsY3xIMypXCvxe+DK1UMxM1gz09Qidbf+HlZ1Gt fOAscmlp1+JgDT8Ac/s9BX6VwwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFI5pQPne GRHs6USptr0tZABSwECtMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkxRDMvNUZBMzZFMzQ4OTIzMTFFREJDQTI5NjEzQzRGOUFFMDIvRkE5QkQ1QzJD NURDMTFGMEE1NTA0MjYxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ2ABAwQAcdRYMA0GCSqGSIb3DQEBCwUAA4IBAQBJNSivG9d2SNCT vNic0P47lx243FgvzM+tYKvIRP6iZXn9eduJ5jaLqMOhEPNYhzfNbx996DC9lCKj CImb+aXrzlwHZIiwYoSlG+wF2SWNy9tiTSv37/D56nbKjq4Ud2yjn7i4xJuMwyt6 k1aU42oZPvvJsgSU3xiL1jY+w6aBDl0u1IKcDWjcCXlRaNIOyO5sFomEl1Zr8y9T FAV4LAwK15XdhA2Ej4bYDFV8CZHUxjMI4CqMuMtMzL+/KeJeheQAOLoadf4CIEL9 yRapqEfwawy2TiFidhihdvaWfAyumYvs0NAWl78+NUTx/3h5ldlPw1nQFXtQmayc CDZd06/D -----END CERTIFICATE-----Generated at Mon Mar 2 08:18:44 2026 by rpki-client