$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/FCF8B992679111F09C8F057DC4F9AE02.roa File: FCF8B992679111F09C8F057DC4F9AE02.roa (raw, json) Hash identifier: hP6hvlAGVL2IjCd9PS9GV8LvEVC18omA9yYrbvB5Dqk= Subject key identifier: 9C:E3:64:3A:2A:1A:6A:47:BF:17:61:9E:7D:1A:7C:9D:09:63:BE:06 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 074F Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/FCF8B992679111F09C8F057DC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:29:35 +0000 ROA not before: Tue 16 Dec 2025 22:17:57 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45593 IP address blocks: 119.2.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1871 (0x74f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Validity Not Before: Dec 16 22:17:57 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4312e-ded3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e3:8c:cb:40:6a:0d:45:f3:94:ba:6f:ac:a8: cb:b8:d2:35:e9:fe:f4:e3:cc:ab:75:bf:14:3a:fc: b4:3c:d1:17:2c:48:bc:ee:10:e0:68:41:02:f5:8c: 6f:8a:a3:ce:a5:cf:85:f9:e6:e2:dd:0d:0f:c5:80: c8:2d:1f:9f:44:70:1d:80:5c:05:21:70:22:ad:7a: ef:f2:89:35:ea:ae:55:1d:de:38:14:ed:1e:55:62: 3b:45:97:55:20:86:fc:09:a2:44:36:44:02:0d:19: a4:2d:5c:9f:a4:85:ac:d8:a8:14:63:a0:ce:87:5c: 37:6e:74:6e:19:65:62:1a:e8:34:da:b5:a3:7b:3c: 97:68:52:06:35:1b:e4:c0:b3:21:91:f5:58:16:09: cd:36:ab:34:12:fc:dd:f5:51:a2:fa:38:a7:02:83: cd:2b:f1:b9:ba:db:aa:19:43:f5:85:f2:a5:00:1d: 7a:e6:2c:76:c1:f9:0f:fa:be:4a:3b:46:91:98:68: 88:60:ff:3b:97:33:ef:01:49:81:a2:ed:6a:f2:f2: 86:8a:d0:2a:b5:85:78:45:b0:2b:a3:11:74:b9:f2: 37:80:94:a0:e9:43:24:27:e8:cc:cc:b3:9a:50:61: 59:eb:44:9f:3a:4a:c1:45:63:1e:be:e7:67:47:3c: 08:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E3:64:3A:2A:1A:6A:47:BF:17:61:9E:7D:1A:7C:9D:09:63:BE:06 X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/FCF8B992679111F09C8F057DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.2.37.0/24 Signature Algorithm: sha256WithRSAEncryption 03:30:c0:40:a8:48:b7:a3:c9:0d:c9:bd:90:f3:4b:fd:e3:72: d3:42:a3:60:6f:de:08:ca:55:17:b9:13:9f:d5:db:63:3f:e8: 18:f9:9a:e7:9a:34:95:5a:13:8f:0e:d9:ea:38:7f:73:15:77: e9:72:1f:c2:50:d3:b4:21:ac:0d:4b:8f:e7:eb:83:dc:62:ac: f9:f0:94:4b:24:2a:bd:3d:26:40:69:c8:c2:2d:a2:2d:5e:14: 50:59:f8:8c:ad:37:b9:62:59:65:e1:8b:22:45:1c:15:26:da: 39:4a:93:eb:ce:a1:18:c6:79:a0:04:4a:17:4f:ab:5a:a1:71: 58:58:9d:fe:e7:c0:fc:36:88:fb:82:73:dd:39:4d:e8:ab:70: bc:95:25:36:72:ab:af:36:0f:42:96:50:d2:d6:5d:6c:93:a9: 3f:c8:1f:cd:c2:b8:4e:56:03:e4:44:f0:86:40:8d:5e:7a:40: a3:b3:34:d4:5b:f3:1f:7c:5f:7f:26:af:8b:7d:95:96:7b:52: d6:65:76:9f:bb:c5:f3:05:c5:c2:bc:6f:af:20:db:2a:f3:22: 1c:ff:55:e5:54:9c:f9:39:21:ff:28:d1:98:da:89:c7:6c:90: f4:69:fd:fa:34:1b:66:34:53:41:f2:2d:c1:0d:b9:b6:6c:56: 3e:a7:08:b5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjUxMjE2MjIxNzU3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzEyZS1kZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9eOMy0BqDUXzlLpvrKjLuNI16f7048yrdb8UOvy0PNEXLEi87hDgaEEC9Yxv iqPOpc+F+ebi3Q0PxYDILR+fRHAdgFwFIXAirXrv8ok16q5VHd44FO0eVWI7RZdV IIb8CaJENkQCDRmkLVyfpIWs2KgUY6DOh1w3bnRuGWViGug02rWjezyXaFIGNRvk wLMhkfVYFgnNNqs0Evzd9VGi+jinAoPNK/G5utuqGUP1hfKlAB165ix2wfkP+r5K O0aRmGiIYP87lzPvAUmBou1q8vKGitAqtYV4RbAroxF0ufI3gJSg6UMkJ+jMzLOa UGFZ60SfOkrBRWMevudnRzwI3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJzjZDoq GmpHvxdhnn0afJ0JY74GMB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0M1MkQvOEZBOTc2QkU1QkI3MTFFQjhCQUQyMTQyQzRGOUFFMDIvRkNGOEI5OTI2 NzkxMTFGMDlDOEYwNTdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdwIlMA0GCSqGSIb3DQEBCwUAA4IBAQADMMBAqEi3o8kNyb2Q80v9 43LTQqNgb94IylUXuROf1dtjP+gY+ZrnmjSVWhOPDtnqOH9zFXfpch/CUNO0IawN S4/n64PcYqz58JRLJCq9PSZAacjCLaItXhRQWfiMrTe5Ylll4YsiRRwVJto5SpPr zqEYxnmgBEoXT6taoXFYWJ3+58D8Noj7gnPdOU3oq3C8lSU2cquvNg9CllDS1l1s k6k/yB/NwrhOVgPkRPCGQI1eekCjszTUW/MffF9/Jq+LfZWWe1LWZXafu8XzBcXC vG+vINsq8yIc/1XlVJz5OSH/KNGY2onHbJD0af36NBtmNFNB8i3BDbm2bFY+pwi1 -----END CERTIFICATE-----Generated at Thu Mar 26 08:50:43 2026 by rpki-client