$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/FA870AFA94E011EDB701A974C4F9AE02.roa File: FA870AFA94E011EDB701A974C4F9AE02.roa (raw, json) Hash identifier: cBxkgJsthKBviRSkPw5GD8Pfh6SKDkyp5oP6Tqej7Fc= Subject key identifier: 9C:C6:F9:EF:F4:CA:0E:44:FB:FB:45:1C:AB:FC:83:72:C4:21:6F:FE Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 089E Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/FA870AFA94E011EDB701A974C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:06:02 +0000 ROA not before: Tue 12 Aug 2025 21:31:37 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140992 IP address blocks: 103.154.160.0/24 maxlen: 24 2001:df4:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: Aug 12 21:31:37 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a447ca-9a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:87:4f:9e:07:5d:6c:f9:85:3a:f2:a6:63: 89:13:04:99:ae:54:d7:fa:76:7e:5c:03:b3:46:15: 25:48:9e:ce:a2:14:dd:a4:e6:66:9b:87:3a:33:a8: 62:76:30:97:12:88:51:bd:79:00:39:51:c3:5a:92: 84:68:5d:e5:ae:62:83:68:b5:b2:49:f5:c9:4f:be: 48:78:a3:4e:9c:29:29:8c:5b:fd:82:87:15:bd:e8: 4e:72:49:02:1c:89:84:3a:98:33:17:c3:f1:ee:c6: 69:9f:9d:90:f3:7e:3a:8f:d6:0f:53:07:74:21:cd: 6b:75:18:6a:28:75:88:69:c0:c0:4e:5c:cb:21:13: 06:3d:95:b9:fc:35:f9:03:9e:a5:35:dc:2c:06:2e: 5e:e9:10:65:8a:a2:3b:eb:c5:a2:b5:b6:2a:12:dd: 7d:1b:db:36:67:d2:2e:13:ab:56:99:21:63:41:78: 54:8a:c5:7c:e1:b2:47:af:ea:0f:df:ec:f7:86:c1: 90:a7:05:7e:06:ea:b6:14:9d:2d:75:7e:1f:86:39: 73:be:ea:8a:b5:11:b7:e2:cf:7b:a4:57:b9:5c:a2: 99:81:bf:fe:7a:8a:1b:f4:42:87:30:ac:00:f7:2c: b4:b9:d0:3b:fb:1a:ed:5b:ef:2d:f7:8f:c4:e7:99: 84:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C6:F9:EF:F4:CA:0E:44:FB:FB:45:1C:AB:FC:83:72:C4:21:6F:FE X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/FA870AFA94E011EDB701A974C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.160.0/24 IPv6: 2001:df4:9080::/48 Signature Algorithm: sha256WithRSAEncryption 9c:b8:d7:40:df:09:45:d5:58:b7:e7:40:ef:29:e2:3a:de:13: c1:3f:09:e4:35:c9:52:2a:e9:ea:cd:88:67:9e:43:4f:23:0a: 37:0a:f4:a1:99:62:d7:97:96:95:80:d5:61:0a:93:11:71:69: 87:02:bb:d4:44:f4:e6:b2:c3:a9:03:e1:b1:82:b9:0d:7b:03: b8:57:9e:46:5c:d7:b9:03:44:7b:da:06:2a:a8:3f:92:59:f4: 00:28:00:28:89:b2:0a:59:48:0f:70:1d:19:c2:93:0d:30:c7: 0a:15:48:81:fd:23:b7:d1:12:82:ed:df:45:c8:5a:e1:a5:d7: 59:61:0f:03:fd:b6:e5:65:c0:3a:81:90:e6:b8:ca:cb:67:96: b3:3c:86:26:48:62:28:ec:c3:a5:da:dc:73:e5:74:44:d2:f9: fa:4f:2c:56:95:32:0a:94:d7:1d:c5:93:43:42:d4:96:56:5a: f0:0d:18:25:35:34:55:57:ee:3c:8c:a8:f8:fc:26:6e:14:89: 58:a5:47:68:8d:3e:bc:f3:7d:68:04:39:b6:e8:90:af:fe:fc: 27:39:c6:cf:b5:33:3f:3c:c0:26:a6:fb:6c:79:60:2c:a3:9e: 27:1f:58:f6:f7:ee:5a:b2:a0:bb:1d:aa:ed:3c:d5:47:a8:d0: 00:c7:5f:1b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjUwODEyMjEzMTM3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDdjYS05YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrGHT54HXWz5hTrypmOJEwSZrlTX+nZ+XAOzRhUlSJ7OohTdpOZmm4c6M6hi djCXEohRvXkAOVHDWpKEaF3lrmKDaLWySfXJT75IeKNOnCkpjFv9gocVvehOckkC HImEOpgzF8Px7sZpn52Q8346j9YPUwd0Ic1rdRhqKHWIacDATlzLIRMGPZW5/DX5 A56lNdwsBi5e6RBliqI768WitbYqEt19G9s2Z9IuE6tWmSFjQXhUisV84bJHr+oP 3+z3hsGQpwV+Buq2FJ0tdX4fhjlzvuqKtRG34s97pFe5XKKZgb/+eoob9EKHMKwA 9yy0udA7+xrtW+8t94/E55mERwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJzG+e/0 yg5E+/tFHKv8g3LEIW/+MB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjFDOEMvMjNFNUQ1REVERjk5MTFFQTlGODVEOTgyQzRGOUFFMDIvRkE4NzBBRkE5 NEUwMTFFREI3MDFBOTc0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ5qgMA8EAgACMAkDBwAgAQ30kIAwDQYJKoZIhvcNAQELBQADggEB AJy410DfCUXVWLfnQO8p4jreE8E/CeQ1yVIq6erNiGeeQ08jCjcK9KGZYteXlpWA 1WEKkxFxaYcCu9RE9Oayw6kD4bGCuQ17A7hXnkZc17kDRHvaBiqoP5JZ9AAoACiJ sgpZSA9wHRnCkw0wxwoVSIH9I7fREoLt30XIWuGl11lhDwP9tuVlwDqBkOa4ystn lrM8hiZIYijsw6Xa3HPldETS+fpPLFaVMgqU1x3Fk0NC1JZWWvANGCU1NFVX7jyM qPj8Jm4UiVilR2iNPrzzfWgEObbokK/+/Cc5xs+1Mz88wCam+2x5YCyjnicfWPb3 7lqyoLsdqu081Ueo0ADHXxs= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:28 2026 by rpki-client