$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/FB2EC05CA3B111EE92169F16C4F9AE02.roa File: FB2EC05CA3B111EE92169F16C4F9AE02.roa (raw, json) Hash identifier: ZcWtfkepcoTH3hYySssNcb8QgN4PKAntgG2yhFuPzqs= Subject key identifier: 6A:5F:DF:2F:31:4F:CE:D2:31:95:B3:8E:42:84:C4:5C:9D:43:D6:82 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0C84 Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/FB2EC05CA3B111EE92169F16C4F9AE02.roa Signing time: Mon 16 Mar 2026 19:24:06 +0000 ROA not before: Mon 16 Mar 2026 19:24:06 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 139901 IP address blocks: 103.85.236.0/22 maxlen: 22 103.85.236.0/23 maxlen: 23 103.85.236.0/24 maxlen: 24 103.85.237.0/24 maxlen: 24 103.85.238.0/23 maxlen: 23 103.85.238.0/24 maxlen: 24 103.85.239.0/24 maxlen: 24 2400:b340::/32 maxlen: 40 2400:b340::/48 maxlen: 48 2400:b340:236::/48 maxlen: 48 2400:b340:237::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: Mar 16 19:24:06 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69b858d6-51c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:4b:81:f7:28:0e:8b:2c:35:6e:de:36:d3: 55:84:b2:74:a4:8b:83:36:d7:1e:7a:55:be:2d:37: 2f:82:b3:f7:bd:bb:7a:a4:fa:b2:33:01:df:f5:de: fa:f8:8a:bb:e8:1a:7f:01:93:50:40:b9:5b:24:73: 90:a2:32:6a:7d:61:48:65:1b:a5:8d:ab:53:f2:82: c4:95:a4:9b:7f:5f:f7:c4:5c:9d:6f:35:4a:49:1a: 7a:a3:f7:5b:18:ec:c0:bd:6d:36:1e:62:96:18:d3: 8d:01:79:95:ea:12:3a:5c:95:ea:23:48:7b:fd:a6: 12:dc:78:8e:81:b1:49:9b:01:b7:ef:86:6e:b0:2e: 83:0c:b4:88:e1:c6:af:e1:c9:2c:77:e6:33:c3:a0: 82:bd:6b:ec:76:d3:06:80:b6:05:34:7e:68:1b:bc: 51:83:2e:d8:16:d3:0f:ec:52:7b:14:ac:81:ed:fb: 0a:88:63:17:99:3a:8d:3a:21:d2:06:75:1d:0e:29: b6:c5:cf:c4:94:ec:33:03:2a:f1:9a:6a:31:56:03: 8b:dc:e7:ed:f0:5f:4d:a7:39:88:b8:47:e8:60:fe: fa:37:7c:ab:79:35:90:c9:97:2c:10:c0:4a:fb:3d: 67:47:55:9e:c6:ab:27:48:1b:d1:2c:c7:29:00:75: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5F:DF:2F:31:4F:CE:D2:31:95:B3:8E:42:84:C4:5C:9D:43:D6:82 X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/FB2EC05CA3B111EE92169F16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.85.236.0/22 IPv6: 2400:b340::/32 Signature Algorithm: sha256WithRSAEncryption 91:31:e5:99:d3:a8:20:e0:76:b7:34:22:45:0f:4f:1a:d9:d7: 27:ed:fd:ef:1e:64:9a:fc:bd:f1:e0:65:4d:34:6e:26:c7:71: 69:78:56:ab:3e:90:e5:7a:20:2d:0f:43:c1:73:33:71:f8:35: cc:e4:89:b5:5b:40:c3:e6:f8:51:1f:11:aa:30:5d:ab:2f:98: 44:e2:77:d1:e4:c3:78:70:9c:7d:69:1a:55:ac:12:de:db:54: a8:be:a3:49:46:f5:73:b6:17:17:1e:be:3e:6c:01:7a:4b:08: 50:08:c3:0b:6d:c1:01:5f:d6:2f:10:36:7d:ea:03:03:e7:36: d7:f1:79:14:1e:fb:26:d8:01:53:98:52:16:cb:5a:5a:8f:f4: 35:f8:11:78:a3:c3:8f:5c:de:21:6c:b5:6a:3e:f0:eb:3d:c9: bb:59:9d:4f:ad:f4:9b:78:42:a6:8a:57:71:61:26:dc:1e:88: e3:1c:c6:58:5c:5c:81:3a:b2:87:4e:49:e7:b7:ac:9a:b7:85: 65:1d:6f:2c:51:07:ad:4e:b2:d2:ca:58:a7:3e:b1:49:cc:38: 20:98:60:86:e3:1e:a3:83:bf:1e:a5:1b:00:f1:f5:ad:49:74: 1d:5d:d6:93:46:45:e8:02:57:99:67:e8:1d:87:a1:29:f6:d5: 7e:6e:70:5b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjYwMzE2MTkyNDA2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4NThkNi01MWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFJLgfcoDossNW7eNtNVhLJ0pIuDNtceelW+LTcvgrP3vbt6pPqyMwHf9d76 +Iq76Bp/AZNQQLlbJHOQojJqfWFIZRuljatT8oLElaSbf1/3xFydbzVKSRp6o/db GOzAvW02HmKWGNONAXmV6hI6XJXqI0h7/aYS3HiOgbFJmwG374ZusC6DDLSI4cav 4cksd+Yzw6CCvWvsdtMGgLYFNH5oG7xRgy7YFtMP7FJ7FKyB7fsKiGMXmTqNOiHS BnUdDim2xc/ElOwzAyrxmmoxVgOL3Oft8F9NpzmIuEfoYP76N3yreTWQyZcsEMBK +z1nR1WexqsnSBvRLMcpAHWX+wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGpf3y8x T87SMZWzjkKExFydQ9aCMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VCMEMvNjEzNzVCNkEyMjJBMTFFQTlBODI2RDQ1QzRGOUFFMDIvRkIyRUMwNUNB M0IxMTFFRTkyMTY5RjE2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ1XsMA0EAgACMAcDBQAkALNAMA0GCSqGSIb3DQEBCwUAA4IBAQCR MeWZ06gg4Ha3NCJFD08a2dcn7f3vHmSa/L3x4GVNNG4mx3FpeFarPpDleiAtD0PB czNx+DXM5Im1W0DD5vhRHxGqMF2rL5hE4nfR5MN4cJx9aRpVrBLe21SovqNJRvVz thcXHr4+bAF6SwhQCMMLbcEBX9YvEDZ96gMD5zbX8XkUHvsm2AFTmFIWy1paj/Q1 +BF4o8OPXN4hbLVqPvDrPcm7WZ1PrfSbeEKmildxYSbcHojjHMZYXFyBOrKHTknn t6yat4VlHW8sUQetTrLSylinPrFJzDggmGCG4x6jg78epRsA8fWtSXQdXdaTRkXo AleZZ+gdh6Ep9tV+bnBb -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:18 2026 by rpki-client