$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/FCC951D6FB1211EDBFADE86AC4F9AE02.roa File: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (raw, json) Hash identifier: 4+wSosNz8NVRn6V4mMR47c6x1Lj87Hhq2R9wSUX/xWw= Subject key identifier: 06:E2:A4:7F:3F:56:6F:CF:A8:7C:DC:5E:DB:EA:80:94:2A:89:DA:22 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 09F3 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/FCC951D6FB1211EDBFADE86AC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:19:55 +0000 ROA not before: Thu 26 Jun 2025 20:06:20 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134204 IP address blocks: 103.138.122.0/24 maxlen: 24 103.138.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Jun 26 20:06:20 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42eeb-4323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:26:e9:d7:bb:fe:78:7c:b5:f7:fb:2a:d5: a1:f5:ce:27:dd:00:f2:60:48:2c:f2:32:30:5d:10: cc:87:3a:ca:7e:03:8e:6e:a2:76:e6:fa:96:1e:f6: df:41:0d:83:51:52:18:4d:50:83:f7:4d:d8:8c:fc: 73:04:7c:71:75:9a:d4:98:24:77:90:6a:89:4a:36: 52:25:2a:d8:f8:f6:1f:ee:ed:df:1a:8a:73:bc:58: fe:24:7a:5d:34:19:97:81:b6:8c:c3:98:29:2e:dd: 67:65:a1:8d:e7:1b:fb:7c:e8:ee:34:96:50:7f:03: ff:c3:de:d5:4f:4d:8d:d4:8b:5a:82:f0:2f:8a:64: a1:e0:63:81:4e:91:5c:b8:2e:d0:ad:5c:05:71:b7: 37:f6:ba:ae:3b:11:2e:f7:11:9a:e1:c5:66:2d:c4: 2d:8a:d2:22:8c:3e:5a:5d:78:56:ce:99:7d:c0:97: 9c:95:2d:1f:bf:00:87:3a:b4:21:02:16:42:51:29: 97:42:ff:0a:49:d6:c9:d2:b1:bf:a3:70:f0:a1:ba: 54:88:a2:75:26:3a:40:b0:f9:20:fc:97:27:88:93: be:65:17:b4:e4:95:54:27:d8:b1:ae:18:40:07:45: ba:a6:ce:32:be:88:dd:09:8a:47:da:c6:6e:81:ec: fe:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E2:A4:7F:3F:56:6F:CF:A8:7C:DC:5E:DB:EA:80:94:2A:89:DA:22 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/FCC951D6FB1211EDBFADE86AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.122.0/23 Signature Algorithm: sha256WithRSAEncryption 45:bc:18:04:a6:b9:6e:d2:6e:75:51:01:e3:a4:8c:70:b2:0f: f9:60:a6:2a:20:da:d9:47:9d:96:d4:48:06:70:c9:4c:f0:c2: 72:8e:39:1c:6a:ea:eb:12:6a:86:dc:e5:57:65:c5:f9:4a:62: 4f:dc:a3:5c:cc:0d:bb:46:7a:39:27:3b:5d:20:a4:71:b6:ea: a0:02:c1:be:3f:ed:f7:af:88:d8:e4:54:94:7d:61:a2:ec:57: 8c:ee:3e:a3:b5:f8:dc:1a:5e:9e:43:0d:e5:1c:f5:64:3c:55: 01:5e:fc:85:11:cc:6b:23:1c:34:f0:f4:47:ff:c6:24:06:89: 80:53:71:95:64:f5:4b:6b:31:bb:3d:99:0f:78:62:09:25:08: 0f:8e:3d:1e:d7:23:12:a6:5f:bc:92:3f:ed:e4:c9:28:ac:96: 33:57:85:2e:bb:92:1c:ab:d3:eb:e4:a7:b5:a1:7c:00:a8:4e: 53:47:70:e9:15:23:0b:91:7f:1e:ca:73:81:34:22:01:cc:9b: 16:4f:56:01:32:a1:ae:4b:e5:1b:bc:6a:6b:2b:a4:2a:e7:eb: 5a:e5:69:37:de:8a:a4:5d:f5:b1:b8:7a:4a:4b:3c:6f:9a:78: 46:30:d5:95:0e:b9:00:f5:d5:eb:f7:cd:1a:6c:d4:ff:72:52: c7:46:ee:de -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjUwNjI2MjAwNjIwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmVlYi00MzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTMm6de7/nh8tff7KtWh9c4n3QDyYEgs8jIwXRDMhzrKfgOObqJ25vqWHvbf QQ2DUVIYTVCD903YjPxzBHxxdZrUmCR3kGqJSjZSJSrY+PYf7u3fGopzvFj+JHpd NBmXgbaMw5gpLt1nZaGN5xv7fOjuNJZQfwP/w97VT02N1ItagvAvimSh4GOBTpFc uC7QrVwFcbc39rquOxEu9xGa4cVmLcQtitIijD5aXXhWzpl9wJeclS0fvwCHOrQh AhZCUSmXQv8KSdbJ0rG/o3DwobpUiKJ1JjpAsPkg/JcniJO+ZRe05JVUJ9ixrhhA B0W6ps4yvojdCYpH2sZugez+NQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAbipH8/ Vm/PqHzcXtvqgJQqidoiMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI4QzEvRjhBRkExNDA5OUUwMTFFQTk2NjUyRjMyQzRGOUFFMDIvRkNDOTUxRDZG QjEyMTFFREJGQURFODZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ4p6MA0GCSqGSIb3DQEBCwUAA4IBAQBFvBgEprlu0m51UQHjpIxw sg/5YKYqINrZR52W1EgGcMlM8MJyjjkcaurrEmqG3OVXZcX5SmJP3KNczA27Rno5 JztdIKRxtuqgAsG+P+33r4jY5FSUfWGi7FeM7j6jtfjcGl6eQw3lHPVkPFUBXvyF EcxrIxw08PRH/8YkBomAU3GVZPVLazG7PZkPeGIJJQgPjj0e1yMSpl+8kj/t5Mko rJYzV4Uuu5Icq9Pr5Ke1oXwAqE5TR3DpFSMLkX8eynOBNCIBzJsWT1YBMqGuS+Ub vGprK6Qq5+ta5Wk33oqkXfWxuHpKSzxvmnhGMNWVDrkA9dXr980abNT/clLHRu7e -----END CERTIFICATE-----Generated at Mon Mar 2 05:45:07 2026 by rpki-client