$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/FB675E140F0311E997412A4EC4F9AE02.roa File: FB675E140F0311E997412A4EC4F9AE02.roa (raw, json) Hash identifier: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ= Subject key identifier: B9:2A:F7:16:B5:19:1C:B3:97:FA:DB:CC:9A:B7:94:E4:76:D6:5D:45 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 11F4 Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/FB675E140F0311E997412A4EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:26:28 +0000 ROA not before: Tue 18 Nov 2025 17:06:22 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133136 IP address blocks: 45.119.156.0/24 maxlen: 24 103.6.149.0/24 maxlen: 24 103.7.202.0/24 maxlen: 24 223.25.88.0/24 maxlen: 24 223.25.89.0/24 maxlen: 24 223.25.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4596 (0x11f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Nov 18 17:06:22 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a468b4-e116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:dc:7e:56:75:10:4f:b0:3f:60:db:4c:30: eb:fd:44:1b:95:31:e6:4d:65:5b:63:40:69:96:b9: d4:b5:1b:9c:ff:36:84:c2:e2:fb:2d:a7:27:4c:1c: ee:f5:00:75:8f:82:d4:81:c4:b8:cf:32:6b:2a:d6: 63:9d:b5:9c:a3:79:66:c8:d6:48:5e:a7:85:15:38: 64:99:08:ed:c8:83:1d:73:b1:a5:bc:f4:34:9f:62: ea:86:f3:e3:a1:74:de:58:f2:a7:37:ef:f4:74:85: 66:9b:da:0c:79:cb:35:57:51:1b:10:43:d1:04:54: 58:27:a5:c1:53:2a:c2:f0:c5:fb:92:03:44:c4:0f: 3e:4a:f4:7b:29:a2:7e:a1:8b:bc:c5:f2:5f:4b:07: a8:9a:f9:2e:1c:3f:69:25:1f:08:44:bf:16:d9:5b: 2f:61:d4:8d:75:f8:85:9e:f0:93:57:c2:a4:c8:cf: a2:4f:1d:66:d1:22:7b:0c:d1:50:8a:ff:3f:14:fa: f4:90:21:14:44:c6:8d:d7:f4:54:5a:70:4d:90:0d: 91:68:2f:4b:b2:01:e0:55:63:b6:d1:65:7b:11:4b: 63:42:4d:44:16:c8:e5:6d:eb:32:be:b3:e6:a9:3f: 8b:3c:09:0a:07:b0:f3:8b:93:50:c1:04:63:a5:68: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2A:F7:16:B5:19:1C:B3:97:FA:DB:CC:9A:B7:94:E4:76:D6:5D:45 X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/FB675E140F0311E997412A4EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.119.156.0/24 103.6.149.0/24 103.7.202.0/24 223.25.88.0/23 223.25.93.0/24 Signature Algorithm: sha256WithRSAEncryption 88:07:77:78:27:0e:75:f0:d0:2a:3b:1e:fa:86:fe:6f:1d:8e: 82:a8:8c:af:97:1f:40:02:5c:62:28:87:b8:83:82:5a:d3:61: c2:2e:0f:e8:2e:13:f6:e7:71:ce:ff:4b:9f:58:83:4e:7d:2b: 43:a8:76:a6:b4:f5:e9:1b:d7:5a:28:4e:07:da:35:7b:27:65: e4:29:29:a1:5a:48:6a:56:af:10:e0:fa:2b:6e:e9:a9:d2:40: 2e:67:c2:56:f6:3d:3f:35:f6:8d:1b:b6:10:d5:71:dd:0e:6a: 59:40:77:e4:1d:9c:19:21:02:1c:77:aa:23:d8:b3:74:d2:58: 3b:9f:03:ee:0a:32:b2:cc:fb:f5:2a:7e:00:c7:ce:bb:68:91: b2:15:16:f9:6d:cc:ce:c9:be:96:c9:c7:91:4d:d7:93:3e:de: f3:28:bd:e8:ea:f9:04:98:56:8b:a8:6f:73:8b:52:04:a8:ae: de:a3:d2:71:ec:af:6c:08:69:b6:df:ab:3b:b8:eb:e6:ab:94: e4:5c:3c:52:60:e9:cd:1c:d5:02:7b:47:a9:d2:46:af:f1:8f: c1:ac:f6:eb:88:b7:bf:ad:c7:03:ab:08:03:d0:6b:32:bb:85: db:3e:60:48:09:01:02:fc:ad:e5:43:60:a7:84:21:77:98:d0: e2:ac:04:83 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICEfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjUxMTE4MTcwNjIyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjhiNC1lMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7zcflZ1EE+wP2DbTDDr/UQblTHmTWVbY0BplrnUtRuc/zaEwuL7LacnTBzu 9QB1j4LUgcS4zzJrKtZjnbWco3lmyNZIXqeFFThkmQjtyIMdc7GlvPQ0n2LqhvPj oXTeWPKnN+/0dIVmm9oMecs1V1EbEEPRBFRYJ6XBUyrC8MX7kgNExA8+SvR7KaJ+ oYu8xfJfSweomvkuHD9pJR8IRL8W2VsvYdSNdfiFnvCTV8KkyM+iTx1m0SJ7DNFQ iv8/FPr0kCEURMaN1/RUWnBNkA2RaC9LsgHgVWO20WV7EUtjQk1EFsjlbesyvrPm qT+LPAkKB7Dzi5NQwQRjpWir3QIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFLkq9xa1 GRyzl/rbzJq3lOR21l1FMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY3QkIvQzlEQjg5RUUwRTNFMTFFOTgzNkY0MDE0QzRGOUFFMDIvRkI2NzVFMTQw RjAzMTFFOTk3NDEyQTRFQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQALXecAwQAZwaVAwQAZwfKAwQB3xlYAwQA3xldMA0GCSqGSIb3DQEB CwUAA4IBAQCIB3d4Jw518NAqOx76hv5vHY6CqIyvlx9AAlxiKIe4g4Ja02HCLg/o LhP253HO/0ufWINOfStDqHamtPXpG9daKE4H2jV7J2XkKSmhWkhqVq8Q4Porbump 0kAuZ8JW9j0/NfaNG7YQ1XHdDmpZQHfkHZwZIQIcd6oj2LN00lg7nwPuCjKyzPv1 Kn4Ax867aJGyFRb5bczOyb6WyceRTdeTPt7zKL3o6vkEmFaLqG9zi1IEqK7eo9Jx 7K9sCGm236s7uOvmq5TkXDxSYOnNHNUCe0ep0kav8Y/BrPbriLe/rccDqwgD0Gsy u4XbPmBICQEC/K3lQ2CnhCF3mNDirASD -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:31 2026 by rpki-client