$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/FB1F8158242A11ED9547B486C4F9AE02.roa File: FB1F8158242A11ED9547B486C4F9AE02.roa (raw, json) Hash identifier: /GgOSNIsN8dBbb8Vje/7amrLJkz9iVVzHHHxG8WPW68= Subject key identifier: 4B:BD:26:DF:BC:1A:0B:0E:E3:62:F6:FB:17:F2:F3:52:04:F1:18:45 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 02D1 Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/FB1F8158242A11ED9547B486C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:24:02 +0000 ROA not before: Wed 09 Apr 2025 01:37:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23859 IP address blocks: 129.94.0.0/16 maxlen: 16 131.236.0.0/16 maxlen: 16 149.171.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Apr 9 01:37:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3e992-65bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:20:8a:05:2a:85:b1:f1:a0:fa:6d:3a:85: 40:56:76:03:e3:3e:de:b1:59:26:73:be:2f:76:b0: 40:52:dd:a4:36:db:6e:ff:38:bc:64:30:9d:35:bc: e6:d6:cc:c6:b4:9c:8b:fb:ce:d5:3c:e0:96:94:e9: 30:f3:e1:dd:c1:62:c2:82:42:35:d5:31:c1:29:79: 07:ab:c0:a5:a0:25:f0:3c:52:13:fd:fd:e9:54:47: b8:a4:84:12:49:26:30:9e:1c:4e:93:4e:8b:f4:be: 85:c1:59:86:24:6f:f6:dc:06:26:21:45:7d:0b:d4: d9:f7:ab:8a:6a:d4:4e:db:a0:1a:19:e6:af:cc:49: 74:8c:a9:82:aa:00:67:48:38:66:b2:ac:c2:ca:8d: 65:36:1e:4b:06:2e:40:3d:04:56:af:1c:28:f6:16: 39:5d:df:ac:73:61:26:ae:aa:57:38:a1:51:27:9e: a8:06:51:42:bd:0d:03:b5:33:fd:8b:e6:f6:b9:a2: 95:4a:5b:9d:92:8d:76:7e:89:15:0a:08:bd:a9:df: 7f:94:e3:0d:b7:6c:91:62:3b:e6:94:69:57:e1:f8: da:f7:51:89:00:df:a8:fd:0a:f2:7e:e7:21:14:4d: 5c:3f:ff:66:29:66:83:b2:e5:7f:1e:14:3b:97:4a: 5c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:26:DF:BC:1A:0B:0E:E3:62:F6:FB:17:F2:F3:52:04:F1:18:45 X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/FB1F8158242A11ED9547B486C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 129.94.0.0/16 131.236.0.0/16 149.171.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:6a:68:85:25:92:9d:5f:84:42:07:d4:52:1b:f3:9d:44:62: 89:48:e9:31:f2:74:71:29:a4:83:8a:0d:8f:a4:49:0d:35:30: 65:3a:e8:ff:3e:e7:77:6f:95:f4:61:b8:81:6c:95:c4:2e:c0: a6:9e:43:1d:20:3c:1f:d0:fb:12:82:77:bc:b4:57:24:14:ca: 9a:17:5c:e5:a8:30:a4:0e:85:11:8d:fc:d4:3a:aa:06:48:3d: 2c:2f:02:ef:f4:c9:a1:b8:16:cf:bc:a9:3b:b1:c3:de:ce:00: 31:af:1f:e9:ed:22:41:f4:ec:be:48:9c:85:7b:0f:fe:6d:c8: b5:ce:7c:49:b7:39:32:17:f4:7a:29:2a:85:ba:d7:7c:d9:35: 0c:73:e3:f0:c0:37:8f:53:1b:cb:9e:e9:99:2c:e2:de:7a:06: 40:48:67:4f:47:00:12:2a:79:00:0a:f8:14:95:0d:60:b4:18: 7e:53:43:25:d3:9d:5f:a8:5f:c0:94:91:9b:e2:1a:00:35:c7: 80:15:e4:7d:2d:0f:cd:54:cd:08:2a:11:fb:88:c9:77:7d:08: 55:8c:61:85:39:b5:a2:e4:a1:2a:3f:58:0d:05:aa:d0:b9:ed: 7c:65:d4:62:d3:f0:01:3e:74:20:c4:e3:11:59:77:42:79:46: 81:89:c6:1a -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjUwNDA5MDEzNzI1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTk5Mi02NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtS8gigUqhbHxoPptOoVAVnYD4z7esVkmc74vdrBAUt2kNttu/zi8ZDCdNbzm 1szGtJyL+87VPOCWlOkw8+HdwWLCgkI11THBKXkHq8CloCXwPFIT/f3pVEe4pIQS SSYwnhxOk06L9L6FwVmGJG/23AYmIUV9C9TZ96uKatRO26AaGeavzEl0jKmCqgBn SDhmsqzCyo1lNh5LBi5APQRWrxwo9hY5Xd+sc2EmrqpXOKFRJ56oBlFCvQ0DtTP9 i+b2uaKVSludko12fokVCgi9qd9/lOMNt2yRYjvmlGlX4fja91GJAN+o/Qryfuch FE1cP/9mKWaDsuV/HhQ7l0pcowIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFEu9Jt+8 GgsO42L2+xfy81IE8RhFMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk1QUEvMTU2QkQ4OUUyNDI3MTFFREIzRUEzNDgwQzRGOUFFMDIvRkIxRjgxNTgy NDJBMTFFRDk1NDdCNDg2QzRGOUFFMDIucm9hMCgGCCsGAQUFBwEHAQH/BBkwFzAV BAIAATAPAwMAgV4DAwCD7AMDAJWrMA0GCSqGSIb3DQEBCwUAA4IBAQCfamiFJZKd X4RCB9RSG/OdRGKJSOkx8nRxKaSDig2PpEkNNTBlOuj/Pud3b5X0YbiBbJXELsCm nkMdIDwf0PsSgne8tFckFMqaF1zlqDCkDoURjfzUOqoGSD0sLwLv9MmhuBbPvKk7 scPezgAxrx/p7SJB9Oy+SJyFew/+bci1znxJtzkyF/R6KSqFutd82TUMc+PwwDeP UxvLnumZLOLeegZASGdPRwASKnkACvgUlQ1gtBh+U0Ml051fqF/AlJGb4hoANceA FeR9LQ/NVM0IKhH7iMl3fQhVjGGFObWi5KEqP1gNBarQue18ZdRi0/ABPnQgxOMR WXdCeUaBicYa -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:43 2026 by rpki-client