$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/FBD68828FCBF11F0A4D02CBC666F56BC.roa File: FBD68828FCBF11F0A4D02CBC666F56BC.roa (raw, json) Hash identifier: SxJM2aFKgBGF6I9rZ7S9/EziiSoyCz/xteiPP/MBsS8= Subject key identifier: F0:39:88:1C:AC:0D:81:90:1D:97:E8:67:AF:E7:87:78:AF:76:E4:F2 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 26A9 Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/FBD68828FCBF11F0A4D02CBC666F56BC.roa Signing time: Sun 01 Mar 2026 17:18:59 +0000 ROA not before: Thu 29 Jan 2026 04:06:51 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 24389 IP address blocks: 119.30.32.0/20 maxlen: 24 123.108.240.0/21 maxlen: 24 202.56.4.0/22 maxlen: 24 2400:c600:1300::/40 maxlen: 48 2400:c600:1400::/40 maxlen: 48 2400:c600:1500::/40 maxlen: 48 2400:c600:1600::/40 maxlen: 48 2400:c600:3000::/36 maxlen: 44 2400:c600:4000::/36 maxlen: 44 2400:c600:5000::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9897 (0x26a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Jan 29 04:06:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47503-4415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:36:20:52:bb:d8:2d:62:09:ec:a4:21:27:6b: a0:ac:cf:93:6c:8b:a8:26:15:02:1a:67:5a:d6:3a: 85:b8:3f:53:9f:87:b0:ac:b4:2c:3c:f1:8d:a9:02: 2c:3b:c6:57:e4:6b:9b:1a:23:7b:cf:43:d9:32:0f: a0:20:da:e0:67:26:2d:67:e1:5c:4c:1f:51:7e:d2: b3:8e:af:b9:dd:af:14:14:61:87:1a:60:24:e1:2b: 9b:41:1f:b4:3b:2d:e3:cc:86:71:e6:8a:11:f2:a2: 25:c5:b9:be:b5:3a:e5:b9:a0:ba:8d:27:0c:32:58: 5e:5e:64:1c:f1:ff:56:de:49:8f:0b:3e:fc:02:42: 85:13:98:a8:32:ed:61:b9:9d:fa:51:ed:6e:a1:80: aa:bf:e5:bf:fe:7e:8c:6f:da:51:02:6c:34:28:77: 5b:2b:cc:e6:af:03:d8:f2:86:64:59:c0:88:4d:48: 03:15:5b:cb:71:f8:2e:5c:67:ba:7f:c2:da:1b:08: f4:6e:23:7e:ec:e6:ea:ff:31:d3:1b:7c:7b:e6:d2: 78:05:90:46:ae:23:ec:a9:75:93:44:68:cb:98:37: 81:24:6e:3f:69:40:13:ba:df:f8:59:e3:3a:86:f3: 93:71:21:85:d7:ea:ad:04:a4:dc:5c:7c:73:61:d3: 15:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:39:88:1C:AC:0D:81:90:1D:97:E8:67:AF:E7:87:78:AF:76:E4:F2 X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/FBD68828FCBF11F0A4D02CBC666F56BC.roa sbgp-ipAddrBlock: critical IPv4: 119.30.32.0/20 123.108.240.0/21 202.56.4.0/22 IPv6: 2400:c600:1300::-2400:c600:16ff:ffff:ffff:ffff:ffff:ffff 2400:c600:3000::-2400:c600:5fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption c6:b0:91:4b:a2:f3:9e:67:75:dc:75:0f:c2:94:53:f6:24:9e: d9:70:28:23:d7:03:cc:c2:54:cd:59:ba:8e:a2:86:70:09:38: 8c:a3:e7:ad:03:1d:8d:f6:31:b1:bd:2e:d8:af:35:f1:7b:90: cf:b2:ff:4d:0c:42:f5:89:79:aa:de:da:37:f7:01:13:17:a5: 28:8b:5e:05:ec:33:e3:e2:52:f6:87:c0:c4:65:b2:4b:7d:e7: 6b:17:aa:f1:55:c3:a3:ef:a3:2f:0a:59:c9:ce:b6:11:2d:c8: f1:58:43:34:75:9d:69:ef:2c:24:e0:9d:e9:72:d9:f8:2a:80: f0:99:b5:cd:2a:31:4c:3c:72:ea:e2:5a:65:77:9a:3a:a7:f0: 03:55:80:e4:fb:15:2e:2e:18:93:03:77:fe:e5:af:c4:7f:c6: fc:f0:80:e0:db:d6:de:d1:d1:f4:64:f5:a2:69:40:46:8a:4f: ad:a6:31:30:fc:77:ff:90:9f:e0:f1:24:e2:97:e0:13:5f:9d: 82:8d:57:bc:0a:63:54:a9:e9:6c:2b:bd:ea:a8:a1:d9:32:c9: 7c:87:50:82:44:5b:f3:6b:fc:7f:9c:72:f1:83:ca:cc:02:e5: 14:63:d2:6a:2d:57:55:68:4b:33:1c:39:18:59:c0:c2:a6:3b: e1:bf:27:62 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjYwMTI5MDQwNjUxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzUwMy00NDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjYgUrvYLWIJ7KQhJ2ugrM+TbIuoJhUCGmda1jqFuD9Tn4ewrLQsPPGNqQIs O8ZX5GubGiN7z0PZMg+gINrgZyYtZ+FcTB9RftKzjq+53a8UFGGHGmAk4SubQR+0 Oy3jzIZx5ooR8qIlxbm+tTrluaC6jScMMlheXmQc8f9W3kmPCz78AkKFE5ioMu1h uZ36Ue1uoYCqv+W//n6Mb9pRAmw0KHdbK8zmrwPY8oZkWcCITUgDFVvLcfguXGe6 f8LaGwj0biN+7Obq/zHTG3x75tJ4BZBGriPsqXWTRGjLmDeBJG4/aUATut/4WeM6 hvOTcSGF1+qtBKTcXHxzYdMVjQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPA5iBys DYGQHZfoZ6/nh3ivduTyMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNBNzQvN0NCNEEwNTZGRDNBMTFFNDg2Rjg2NzVGQzRGOUFFMDIvRkJENjg4MjhG Q0JGMTFGMEE0RDAyQ0JDNjY2RjU2QkMucm9hMFcGCCsGAQUFBwEHAQH/BEgwRjAY BAIAATASAwQEdx4gAwQDe2zwAwQCyjgEMCoEAgACMCQwEAMGACQAxgATAwYAJADG ABYwEAMGBCQAxgAwAwYFJADGAEAwDQYJKoZIhvcNAQELBQADggEBAMawkUui855n ddx1D8KUU/YkntlwKCPXA8zCVM1Zuo6ihnAJOIyj560DHY32MbG9LtivNfF7kM+y /00MQvWJeare2jf3ARMXpSiLXgXsM+PiUvaHwMRlskt952sXqvFVw6Pvoy8KWcnO thEtyPFYQzR1nWnvLCTgnely2fgqgPCZtc0qMUw8curiWmV3mjqn8ANVgOT7FS4u GJMDd/7lr8R/xvzwgODb1t7R0fRk9aJpQEaKT62mMTD8d/+Qn+DxJOKX4BNfnYKN V7wKY1Sp6WwrveqoodkyyXyHUIJEW/Nr/H+ccvGDyswC5RRj0motV1VoSzMcORhZ wMKmO+G/J2I= -----END CERTIFICATE-----Generated at Mon Mar 2 07:24:22 2026 by rpki-client