$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/FEA1EB7219FA11EBA0F82851C4F9AE02.roa File: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (raw, json) Hash identifier: P/YzwZrXirAfHcAYuoDInMv7oeZdvQaJfgoo3K4BZhU= Subject key identifier: 1D:D4:AB:59:47:A1:10:B3:5C:B0:FD:F4:20:31:2B:5A:82:F7:4C:68 Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Certificate serial: 081F Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/FEA1EB7219FA11EBA0F82851C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:52:53 +0000 ROA not before: Wed 26 Nov 2025 20:42:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141377 IP address blocks: 103.157.248.0/24 maxlen: 24 103.157.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2079 (0x81f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B36DC, serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Validity Not Before: Nov 26 20:42:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a452c5-e809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:f3:f4:a0:d2:f6:86:6d:45:a8:e1:f5:1f: 8a:6c:32:07:55:09:e4:21:00:3a:5f:9e:30:28:39: ff:17:72:05:4d:bd:5e:c3:ce:09:01:d9:fc:2a:9d: 04:2d:7f:5c:7d:0e:e0:bd:6a:dc:48:02:d6:bd:dd: ef:01:2a:a1:83:be:b7:10:23:41:d0:10:aa:04:e5: 56:5a:4f:b9:39:be:fe:90:bb:ea:50:95:69:8a:42: 02:08:ba:36:ac:e6:95:3b:f4:8c:a3:df:08:cd:f4: e2:e3:40:70:d2:a4:0f:96:d5:ce:a0:60:39:f4:be: 80:40:7a:85:e6:f5:06:09:5d:12:86:b7:3d:2f:d7: 17:d0:9c:bd:73:8a:aa:b5:39:ff:0a:ff:1c:1a:1a: cf:eb:6c:6b:b8:a7:be:ed:0d:96:d1:73:d4:78:dc: ff:58:7c:04:30:9c:4a:33:f7:ce:8d:b9:44:00:eb: c8:8f:b8:b9:01:14:a5:ee:66:db:85:79:ec:bf:35: 76:b4:ff:53:54:f0:92:b7:68:be:f2:e8:39:a1:46: 55:05:2b:57:aa:f3:02:55:ee:34:0a:60:b8:00:30: 29:20:95:51:f1:3f:f8:41:7e:4f:ed:57:3f:43:4c: 00:1e:b5:a4:03:c1:37:48:16:fd:d8:9c:24:0b:2c: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D4:AB:59:47:A1:10:B3:5C:B0:FD:F4:20:31:2B:5A:82:F7:4C:68 X509v3 Authority Key Identifier: keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/FEA1EB7219FA11EBA0F82851C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.157.248.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:52:72:a0:98:01:06:33:8a:c5:10:33:a5:c6:d3:72:3b:f9: ff:7b:2a:d5:d1:db:cf:21:0d:06:65:19:38:61:cd:8d:ec:89: 1b:14:c6:2c:fe:d0:36:76:05:0d:eb:28:0a:c6:4c:c7:42:6e: f0:4a:81:64:5e:56:19:b0:0a:14:0b:32:e0:4e:5d:e7:19:ad: 78:a0:0b:09:ba:89:1a:1e:63:f5:70:74:7c:77:fb:0d:09:50: b2:3a:1f:45:f4:52:9b:b1:78:db:33:17:40:e4:38:06:13:22: b2:4e:3e:4f:c9:ee:01:af:7c:dc:84:b9:ea:3a:7c:3f:63:00: 57:d7:51:e1:09:64:67:a0:4a:92:51:c0:d4:f5:c1:dc:89:9c: db:2e:29:63:55:17:24:18:41:e6:db:13:41:3b:b7:75:d1:00: a7:b3:07:51:2d:84:06:d8:48:ae:1c:8c:3d:a9:83:5c:68:16: 5a:e4:ce:6e:55:3f:d3:e2:a1:3a:f1:d2:1e:af:f4:8d:87:22: 09:2c:37:26:84:bb:58:f0:b8:41:72:42:5e:e8:b4:cc:ab:22: b8:1a:ac:9b:41:69:b9:ae:a5:46:2f:a7:1f:8b:7d:52:0f:53: 4d:d3:38:bf:6d:c9:e6:af:82:20:fc:c2:01:05:22:e8:68:0b: 95:9a:fa:3c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM2REMxMTAvBgNVBAUTKEJDMDJCMDA1Q0NBQTA0NTNGQzlCODE3QkI3OENCQTkx NUYyN0MyQTgwHhcNMjUxMTI2MjA0MjAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTJjNS1lODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0irz9KDS9oZtRajh9R+KbDIHVQnkIQA6X54wKDn/F3IFTb1ew84JAdn8Kp0E LX9cfQ7gvWrcSALWvd3vASqhg763ECNB0BCqBOVWWk+5Ob7+kLvqUJVpikICCLo2 rOaVO/SMo98IzfTi40Bw0qQPltXOoGA59L6AQHqF5vUGCV0Shrc9L9cX0Jy9c4qq tTn/Cv8cGhrP62xruKe+7Q2W0XPUeNz/WHwEMJxKM/fOjblEAOvIj7i5ARSl7mbb hXnsvzV2tP9TVPCSt2i+8ug5oUZVBStXqvMCVe40CmC4ADApIJVR8T/4QX5P7Vc/ Q0wAHrWkA8E3SBb92JwkCyyxCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB3Uq1lH oRCzXLD99CAxK1qC90xoMB8GA1UdIwQYMBaAFLwCsAXMqgRT/JuBe7eMupFfJ8Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzZEQy9CMDQzNjQ3QTE5 RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJGUDhtNEY3dDR5NmtWOG53 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZBS3dCY3lxQkZQOG00Rjd0NHk2a1Y4bndxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM2REMvQjA0MzY0N0ExOUY5MTFFQkI4Q0RFRDRGQzRGOUFFMDIvRkVBMUVCNzIx OUZBMTFFQkEwRjgyODUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ534MA0GCSqGSIb3DQEBCwUAA4IBAQAKUnKgmAEGM4rFEDOlxtNy O/n/eyrV0dvPIQ0GZRk4Yc2N7IkbFMYs/tA2dgUN6ygKxkzHQm7wSoFkXlYZsAoU CzLgTl3nGa14oAsJuokaHmP1cHR8d/sNCVCyOh9F9FKbsXjbMxdA5DgGEyKyTj5P ye4Br3zchLnqOnw/YwBX11HhCWRnoEqSUcDU9cHciZzbLiljVRckGEHm2xNBO7d1 0QCnswdRLYQG2EiuHIw9qYNcaBZa5M5uVT/T4qE68dIer/SNhyIJLDcmhLtY8LhB ckJe6LTMqyK4GqybQWm5rqVGL6cfi31SD1NN0zi/bcnmr4Ig/MIBBSLoaAuVmvo8 -----END CERTIFICATE-----Generated at Mon Mar 2 13:02:48 2026 by rpki-client