$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa File: FBDB9F4A57F911F0B7986D41C4F9AE02.roa (raw, json) Hash identifier: A2+3/UOM6oofvyDsJXWvisaBfNPZ/cIqKtx2uCmMTcY= Subject key identifier: 17:49:22:F2:B8:91:59:17:3F:49:EB:8D:9E:9F:88:29:7B:42:56:E4 Certificate issuer: /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0 Certificate serial: 7E Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:54:47 +0000 ROA not before: Thu 03 Jul 2025 10:39:23 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150797 IP address blocks: 103.109.8.0/23 maxlen: 24 2400:e8a0::/32 maxlen: 32 2400:e8a0::/36 maxlen: 36 2400:e8a0:1000::/36 maxlen: 36 2400:e8a0:2000::/36 maxlen: 36 2400:e8a0:3000::/36 maxlen: 36 2400:e8a0:4000::/36 maxlen: 36 2400:e8a0:5000::/36 maxlen: 36 2400:e8a0:6000::/36 maxlen: 36 2400:e8a0:7000::/36 maxlen: 36 2400:e8a0:8000::/36 maxlen: 36 2400:e8a0:9000::/36 maxlen: 36 2400:e8a0:a000::/36 maxlen: 36 2400:e8a0:b000::/36 maxlen: 36 2400:e8a0:c000::/36 maxlen: 36 2400:e8a0:d000::/36 maxlen: 36 2400:e8a0:e000::/36 maxlen: 36 2400:e8a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0 Validity Not Before: Jul 3 10:39:23 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48b77-5908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:1e:75:f1:f0:fd:d7:85:a7:67:20:2c:e4: 3a:8c:e9:38:cc:54:6f:b9:9d:9c:97:15:56:df:58: c4:76:df:38:5e:ec:41:40:e0:bf:53:03:d7:df:01: 85:26:40:17:59:7b:f9:91:58:d4:9e:ae:69:d4:a5: ad:17:60:02:19:ad:0a:c8:6e:c4:49:48:cd:80:23: e3:5f:95:d5:4f:9d:3d:b3:74:58:ce:c4:fc:76:10: 17:bf:83:0c:12:cb:fd:39:73:0b:1b:85:8e:96:cb: 57:02:90:17:12:f2:c4:ed:29:c0:b3:29:47:21:2c: 16:c8:8c:73:fd:10:ac:03:86:de:f5:c3:ce:88:af: 30:9b:2e:cb:ac:4c:f4:64:b9:8a:32:79:9b:95:31: a9:81:2c:26:54:b9:a2:3d:e9:30:70:2d:3e:0e:1b: 7c:ad:53:5c:07:a7:02:f9:cb:f0:5d:a8:62:5b:f3: 9d:91:ff:d4:0f:01:4c:07:68:ca:31:a5:2c:76:f6: 17:84:ae:28:c4:cc:9c:be:07:d3:bb:9c:ca:38:46: 3a:b7:bf:a3:c0:3d:4b:e7:44:66:fe:a9:2b:55:72: 06:18:38:45:56:88:b5:96:fb:f3:6e:35:0b:ca:ca: 78:bf:64:d0:b1:ff:ae:d9:e2:d2:a9:00:d9:41:79: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:49:22:F2:B8:91:59:17:3F:49:EB:8D:9E:9F:88:29:7B:42:56:E4 X509v3 Authority Key Identifier: keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.109.8.0/23 IPv6: 2400:e8a0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:eb:8a:79:69:f6:88:1a:4a:cf:87:66:d3:63:9e:53:e3:7b: 5a:20:38:50:c1:4d:c3:a4:27:79:70:ef:35:01:d0:46:06:5c: 0d:eb:5a:51:da:a9:8e:ff:fd:ea:93:dc:8a:6d:9b:bf:48:1c: 20:5b:eb:03:9f:7d:b5:16:48:aa:87:39:56:dc:73:10:e4:70: 8a:aa:48:f6:ef:d7:dc:ad:3a:25:bf:86:84:54:63:10:2b:bb: 62:3b:24:ac:7e:76:44:27:e9:b9:2e:26:30:24:0b:76:25:53: be:f4:9f:14:bf:ae:fb:85:f1:d4:01:f3:f4:8a:71:88:5c:aa: cf:e7:d6:a9:5c:14:2e:f9:79:56:4f:78:2b:f9:e8:0b:7f:0d: 4c:93:b9:be:55:7c:a2:8f:61:4e:39:b8:d9:1d:68:7b:52:74: 59:f0:19:c9:93:75:26:7a:8c:7d:81:62:a0:cf:ef:24:67:03: cf:9a:4a:1e:e2:b9:65:ea:fb:0c:75:dc:dc:a6:98:76:74:f5: 0d:c4:96:af:7a:24:b4:5f:8d:54:23:f9:84:8b:c3:98:d5:fe: 79:b9:fd:5f:6c:1d:88:6f:bb:9f:d9:ee:0c:58:92:79:b1:4e: 6c:49:fe:06:93:a4:69:b1:7a:b6:25:9b:01:a4:d6:86:08:1c: a1:0b:64:53 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDYxNDExMC8GA1UEBRMoNEI1QzE2MjNGQkIzM0Q5NkEyNDFBQjM1REIwRjBCREVC NUMzOUNCMDAeFw0yNTA3MDMxMDM5MjNaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQ4Yjc3LTU5MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN7B518fD914WnZyAs5DqM6TjMVG+5nZyXFVbfWMR23zhe7EFA4L9TA9ffAYUm QBdZe/mRWNSermnUpa0XYAIZrQrIbsRJSM2AI+NfldVPnT2zdFjOxPx2EBe/gwwS y/05cwsbhY6Wy1cCkBcS8sTtKcCzKUchLBbIjHP9EKwDht71w86IrzCbLsusTPRk uYoyeZuVMamBLCZUuaI96TBwLT4OG3ytU1wHpwL5y/BdqGJb852R/9QPAUwHaMox pSx29heErijEzJy+B9O7nMo4Rjq3v6PAPUvnRGb+qStVcgYYOEVWiLWW+/NuNQvK yni/ZNCx/67Z4tKpANlBeU3zAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUF0ki8riR WRc/SeuNnp+IKXtCVuQwHwYDVR0jBBgwFoAUS1wWI/uzPZaiQas12w8L3rXDnLAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJENjE0LzFERjA3NUUyQkVE QzExRUQ4RTBBREQ4MEM0RjlBRTAyL1Mxd1dJX3V6UFphaVFhczEydzhMM3JYRG5M QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzF3V0lfdXpQWmFpUWFzMTJ3OEwzclhEbkxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDYxNC8xREYwNzVFMkJFREMxMUVEOEUwQUREODBDNEY5QUUwMi9GQkRCOUY0QTU3 RjkxMUYwQjc5ODZENDFDNEY5QUUwMi5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAFnbQgwDQQCAAIwBwMFACQA6KAwDQYJKoZIhvcNAQELBQADggEBAF7r inlp9ogaSs+HZtNjnlPje1ogOFDBTcOkJ3lw7zUB0EYGXA3rWlHaqY7//eqT3Ipt m79IHCBb6wOffbUWSKqHOVbccxDkcIqqSPbv19ytOiW/hoRUYxAru2I7JKx+dkQn 6bkuJjAkC3YlU770nxS/rvuF8dQB8/SKcYhcqs/n1qlcFC75eVZPeCv56At/DUyT ub5VfKKPYU45uNkdaHtSdFnwGcmTdSZ6jH2BYqDP7yRnA8+aSh7iuWXq+wx13Nym mHZ09Q3Elq96JLRfjVQj+YSLw5jV/nm5/V9sHYhvu5/Z7gxYknmxTmxJ/gaTpGmx erYlmwGk1oYIHKELZFM= -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:26 2026 by rpki-client