$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/FC4FFE066C7211F18CC7D03C7347A888.roa File: FC4FFE066C7211F18CC7D03C7347A888.roa (raw, json) Hash identifier: PhvpoQx2/9PmVjvCn+k4gUxlwdooj8BhMHQv9Sbja0U= Subject key identifier: 7E:E3:75:3B:E7:2A:AD:B2:4C:B3:B6:2C:EF:7A:6D:43:26:16:26:87 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0BF7 Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/FC4FFE066C7211F18CC7D03C7347A888.roa Signing time: Sat 20 Jun 2026 06:40:54 +0000 ROA not before: Sat 20 Jun 2026 06:40:54 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 64018 IP address blocks: 103.35.168.0/22 maxlen: 23 103.35.168.0/24 maxlen: 24 103.35.170.0/23 maxlen: 24 2403:2d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 19:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Jun 20 06:40:54 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6a3635f6-ad86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:d7:7d:c2:f9:5d:8a:b2:94:50:15:de:2c: 52:5d:6b:03:40:b4:21:97:cb:37:d1:c1:e2:ac:00: f6:d4:91:ef:87:7f:6e:c7:6a:73:9f:19:b3:a6:97: d5:4f:83:c5:7e:74:7c:19:e5:26:d8:ec:a7:31:0f: 9e:47:51:66:05:95:81:fb:e5:7a:be:9e:ec:92:4b: 18:fd:72:a4:53:35:1b:ec:e3:7d:7a:44:49:ce:78: 7f:d5:6c:45:44:fc:71:81:e5:2a:8d:70:45:62:fa: be:e3:b0:b6:be:ab:27:20:d1:df:9a:50:ed:f5:48: 73:be:ae:1a:b6:69:da:2d:94:ac:e6:ce:8c:bd:17: 2e:42:4d:2e:22:60:7f:db:a0:fd:e0:db:2f:f2:17: 4f:b4:46:cb:8e:3c:14:3d:d9:97:2a:9d:1b:5f:05: 76:24:bb:a4:b4:f7:7e:c8:c1:16:f1:de:12:cb:08: 2d:ee:28:55:10:a4:2c:df:ca:b1:27:87:e3:07:10: 3e:4d:ba:26:e1:d7:59:fc:a4:f6:06:c0:9e:d3:02: 0c:96:ff:34:20:1c:8d:23:60:b5:24:85:f7:43:32: 11:27:88:2a:03:38:42:38:3e:9e:9c:d7:d7:b0:17: e9:9d:2e:d9:a2:ee:7f:06:37:f6:30:16:89:e8:4f: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E3:75:3B:E7:2A:AD:B2:4C:B3:B6:2C:EF:7A:6D:43:26:16:26:87 X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/FC4FFE066C7211F18CC7D03C7347A888.roa sbgp-ipAddrBlock: critical IPv4: 103.35.168.0/22 IPv6: 2403:2d40::/32 Signature Algorithm: sha256WithRSAEncryption 8e:1c:14:95:a8:8e:2d:f5:a8:18:11:65:95:e7:d1:58:a8:1c: 76:82:e4:81:12:71:3a:43:91:63:f2:19:93:e5:b2:c4:03:cb: b9:4b:a0:67:ab:a5:7e:5d:db:a0:90:60:e2:fb:c2:5b:2a:8b: 5f:a8:f6:97:26:d6:6b:dc:a3:58:3a:3f:16:59:43:a6:81:b9: d8:02:c1:a0:b9:18:3b:e1:ea:40:11:50:e5:6e:97:d2:e7:2e: 9c:8e:c0:3e:26:a3:1a:7e:96:b6:5f:ff:50:bf:8d:53:7e:82: c6:a3:54:ae:56:8e:52:2d:1c:5b:ea:d6:4f:01:0c:df:19:62: bc:0b:4f:a0:45:00:3a:e8:5e:04:ae:34:54:ac:b5:d5:fa:eb: 4c:f5:cc:1b:5b:d0:df:d3:82:44:60:73:5a:ba:6d:f7:3c:27: 94:8a:db:d1:f5:b2:ed:c3:32:05:be:ea:38:52:60:4f:12:35: 64:35:ce:8c:2e:74:ae:28:26:c7:9c:24:93:db:78:e8:62:b2: a2:e9:7a:9a:d6:f9:fc:f0:00:30:69:d6:cb:a7:e7:f0:e0:5d: f0:78:af:39:67:96:6a:37:b0:f8:6e:22:44:5c:49:ae:c6:83: d8:88:6c:40:de:b0:d1:d1:9a:3a:3c:e8:a1:27:65:1a:8b:68: 10:6a:aa:7d -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjYwNjIwMDY0MDU0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM2MzVmNi1hZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJjXfcL5XYqylFAV3ixSXWsDQLQhl8s30cHirAD21JHvh39ux2pznxmzppfV T4PFfnR8GeUm2OynMQ+eR1FmBZWB++V6vp7skksY/XKkUzUb7ON9ekRJznh/1WxF RPxxgeUqjXBFYvq+47C2vqsnINHfmlDt9Uhzvq4atmnaLZSs5s6MvRcuQk0uImB/ 26D94Nsv8hdPtEbLjjwUPdmXKp0bXwV2JLuktPd+yMEW8d4Sywgt7ihVEKQs38qx J4fjBxA+Tbom4ddZ/KT2BsCe0wIMlv80IByNI2C1JIX3QzIRJ4gqAzhCOD6enNfX sBfpnS7Zou5/Bjf2MBaJ6E9hqQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFH7jdTvn Kq2yTLO2LO96bUMmFiaHMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgxMzEvOTgyQUI2RTY0OEIxMTFFQTk2QTA2QzdFQzRGOUFFMDIvRkM0RkZFMDY2 QzcyMTFGMThDQzdEMDNDNzM0N0E4ODgucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZyOoMA0EAgACMAcDBQAkAy1AMA0GCSqGSIb3DQEBCwUAA4IBAQCO HBSVqI4t9agYEWWV59FYqBx2guSBEnE6Q5Fj8hmT5bLEA8u5S6Bnq6V+XdugkGDi +8JbKotfqPaXJtZr3KNYOj8WWUOmgbnYAsGguRg74epAEVDlbpfS5y6cjsA+JqMa fpa2X/9Qv41TfoLGo1SuVo5SLRxb6tZPAQzfGWK8C0+gRQA66F4ErjRUrLXV+utM 9cwbW9Df04JEYHNaum33PCeUitvR9bLtwzIFvuo4UmBPEjVkNc6MLnSuKCbHnCST 23joYrKi6Xqa1vn88AAwadbLp+fw4F3weK85Z5ZqN7D4biJEXEmuxoPYiGxA3rDR 0Zo6POihJ2Uai2gQaqp9 -----END CERTIFICATE-----Generated at Sat Jul 25 01:35:17 2026 by rpki-client