$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/FC4FFE066C7211F18CC7D03C7347A888.roa File: FC4FFE066C7211F18CC7D03C7347A888.roa (raw, json) Hash identifier: dyeQGA/UBOIAhbkggjSvDhu8jNmpC8DjUcg5u7Epdgc= Subject key identifier: BD:A8:DB:ED:1E:05:A3:14:5F:FA:D5:16:DD:23:8E:26:C1:32:EB:3A Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0C1E Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/FC4FFE066C7211F18CC7D03C7347A888.roa Signing time: Wed 26 Aug 2026 19:38:56 +0000 ROA not before: Wed 26 Aug 2026 19:38:56 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 64018 IP address blocks: 103.35.168.0/22 maxlen: 23 103.35.168.0/24 maxlen: 24 103.35.170.0/23 maxlen: 24 2403:2d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3102 (0xc1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Aug 26 19:38:56 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a8f40cf-c464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7c:88:d7:a8:ea:5f:19:20:ed:b0:b9:70:fd: d2:f1:21:6d:99:0f:a5:53:e7:3b:c5:be:7e:d0:98: 0e:0c:49:c9:7e:22:df:39:12:63:e6:9b:e7:f1:70: 08:ee:e2:c9:0b:94:e2:d8:08:a0:b1:99:f1:0e:11: 3c:51:b9:4e:ce:40:02:59:6e:6c:05:62:6d:67:af: ec:23:fa:84:54:ad:6d:e3:61:5e:18:2c:97:79:50: ea:9c:7c:64:47:f5:bf:3a:36:4b:59:82:bb:d5:30: eb:e8:d8:85:81:21:e9:24:4f:20:7a:23:e3:0a:1b: ba:64:77:62:ee:64:49:ab:32:17:65:26:4f:c9:c2: 1b:3b:4f:9f:fb:24:bf:fc:83:25:e5:74:2b:c9:21: ab:df:a8:ed:14:f7:7b:ba:36:1e:38:41:da:5e:5c: e5:df:45:53:3a:90:1c:d9:82:6b:8f:61:0d:fa:25: 25:ab:48:0a:3e:77:35:00:06:16:98:e5:61:a3:b0: 83:9d:d9:e7:d3:2d:08:c3:f2:22:7e:6d:29:14:d8: d7:54:a2:7c:c2:79:d8:11:ba:16:42:b5:87:c0:95: 5e:c1:6a:50:6c:1b:6c:39:01:a0:a7:c4:98:37:00: 49:1f:a6:1b:ec:93:54:13:87:46:15:cc:31:ed:54: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A8:DB:ED:1E:05:A3:14:5F:FA:D5:16:DD:23:8E:26:C1:32:EB:3A X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/FC4FFE066C7211F18CC7D03C7347A888.roa sbgp-ipAddrBlock: critical IPv4: 103.35.168.0/22 IPv6: 2403:2d40::/32 Signature Algorithm: sha256WithRSAEncryption 9a:eb:c1:6f:ef:e7:2c:ad:44:cd:9d:52:47:48:17:17:15:68: 72:b8:4d:ea:8f:c9:78:07:34:7e:5c:51:b0:c1:25:16:ca:8f: 63:60:43:ba:af:20:9e:b6:fe:7a:fb:a5:e2:2b:1a:d4:dd:51: c5:43:a2:d7:5a:cb:bb:35:38:f3:55:02:ca:44:45:06:0e:83: 58:6f:dd:bd:5a:66:a2:d9:f9:73:a1:60:fc:e7:9f:44:00:f3: 20:16:bf:55:ec:34:46:be:3a:c7:8d:79:b0:a6:34:b4:86:1a: 8d:0a:cf:25:59:f2:23:67:8b:c2:4c:a8:d9:88:5e:09:8b:4d: dc:cd:04:be:1c:f3:97:f9:d5:ba:cb:fb:e9:fd:ac:43:c4:1a: fa:b2:dd:e2:3a:55:25:cd:9a:53:c6:1c:91:ae:75:be:3a:a1: 99:9c:56:f3:d1:57:54:1c:57:f3:53:3c:5b:06:04:d7:24:2c: 2c:8b:be:ff:f6:d6:b5:4e:96:ad:30:56:7b:ec:7c:b7:dd:08: 9e:2e:53:5c:d1:d8:32:4c:82:ec:94:05:23:53:03:0a:f4:5f: 40:4e:b4:bf:26:aa:d0:01:cf:f4:f3:b4:d4:d3:9a:8a:77:68: 01:74:3f:a9:c9:f8:d8:17:54:1e:a0:6f:8f:27:72:8a:9c:6a: c2:f9:7a:ce -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjYwODI2MTkzODU2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmNDBjZi1jNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13yI16jqXxkg7bC5cP3S8SFtmQ+lU+c7xb5+0JgODEnJfiLfORJj5pvn8XAI 7uLJC5Ti2AigsZnxDhE8UblOzkACWW5sBWJtZ6/sI/qEVK1t42FeGCyXeVDqnHxk R/W/OjZLWYK71TDr6NiFgSHpJE8geiPjChu6ZHdi7mRJqzIXZSZPycIbO0+f+yS/ /IMl5XQrySGr36jtFPd7ujYeOEHaXlzl30VTOpAc2YJrj2EN+iUlq0gKPnc1AAYW mOVho7CDndnn0y0Iw/Iifm0pFNjXVKJ8wnnYEboWQrWHwJVewWpQbBtsOQGgp8SY NwBJH6Yb7JNUE4dGFcwx7VS+lwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFL2o2+0e BaMUX/rVFt0jjibBMus6MB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgxMzEvOTgyQUI2RTY0OEIxMTFFQTk2QTA2QzdFQzRGOUFFMDIvRkM0RkZFMDY2 QzcyMTFGMThDQzdEMDNDNzM0N0E4ODgucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZyOoMA0EAgACMAcDBQAkAy1AMA0GCSqGSIb3DQEBCwUAA4IBAQCa 68Fv7+csrUTNnVJHSBcXFWhyuE3qj8l4BzR+XFGwwSUWyo9jYEO6ryCetv56+6Xi KxrU3VHFQ6LXWsu7NTjzVQLKREUGDoNYb929Wmai2flzoWD8559EAPMgFr9V7DRG vjrHjXmwpjS0hhqNCs8lWfIjZ4vCTKjZiF4Ji03czQS+HPOX+dW6y/vp/axDxBr6 st3iOlUlzZpTxhyRrnW+OqGZnFbz0VdUHFfzUzxbBgTXJCwsi77/9ta1TpatMFZ7 7Hy33QieLlNc0dgyTILslAUjUwMK9F9ATrS/JqrQAc/087TU05qKd2gBdD+pyfjY F1QeoG+PJ3KKnGrC+XrO -----END CERTIFICATE-----Generated at Sun Sep 27 07:03:13 2026 by rpki-client