$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/FA13BAAC504611ED9AE40711C4F9AE02.roa File: FA13BAAC504611ED9AE40711C4F9AE02.roa (raw, json) Hash identifier: NXGbpmoMOzAZwcgSz2AYwCb8kwzGpslvQ3JE0B3JbOg= Subject key identifier: 0E:BF:0D:2E:50:C8:D4:95:38:D4:ED:1F:2E:23:C0:1C:7F:26:03:D5 Certificate issuer: /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Certificate serial: 028B Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/FA13BAAC504611ED9AE40711C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:20:43 +0000 ROA not before: Thu 21 Aug 2025 02:39:56 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150118 IP address blocks: 103.191.19.0/24 maxlen: 26 2001:df0:f4c0::/48 maxlen: 48 2001:df0:f4c0::/49 maxlen: 49 2001:df0:f4c0::/50 maxlen: 50 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Validity Not Before: Aug 21 02:39:56 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a51e2a-72d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:fe:e6:24:2a:25:18:48:24:3e:8d:53:ae: 33:66:9e:45:25:5c:06:33:53:f4:07:14:65:7c:8d: 51:d1:c6:3f:73:29:d2:a7:fd:dc:22:ae:a9:c0:36: ce:8f:54:01:8e:ce:3a:b0:54:ac:d9:71:27:6a:3c: 8d:d9:ab:67:18:8b:75:90:a7:1f:aa:7c:ab:f0:d3: df:ff:2a:c3:ef:e7:57:19:d9:b4:3b:f9:2e:c7:16: 25:27:b4:53:05:2c:cf:01:c7:83:bd:14:a6:51:2c: c5:96:8d:b8:61:1a:2f:a0:39:62:91:c7:cd:df:53: 6e:8d:fa:d2:be:99:1d:ef:35:6c:52:b7:92:d4:e7: 35:2c:08:e3:8e:15:77:86:71:f3:1b:48:e9:b8:54: 1a:31:75:a8:34:b6:d1:9c:0e:8c:79:51:d4:bf:0e: 30:5c:00:1c:35:ae:12:31:18:d5:2c:fb:ac:7d:43: c8:f8:12:95:82:7f:16:8b:85:cd:ca:1d:bd:ef:bf: 19:95:07:7a:c1:bb:95:80:5c:1b:e0:ea:d5:e9:41: 5e:27:c7:71:f6:46:89:8a:4d:5b:cf:86:be:a6:3d: 8b:f4:45:73:99:2d:6e:16:66:70:e9:84:48:82:7f: 71:b1:10:82:74:48:46:d7:29:e2:b4:8f:8b:49:6b: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BF:0D:2E:50:C8:D4:95:38:D4:ED:1F:2E:23:C0:1C:7F:26:03:D5 X509v3 Authority Key Identifier: keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/FA13BAAC504611ED9AE40711C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.191.19.0/24 IPv6: 2001:df0:f4c0::/48 Signature Algorithm: sha256WithRSAEncryption 1a:6d:70:c6:37:9b:32:d1:00:67:b7:c9:d2:69:ca:99:35:82: 80:4c:92:d9:2e:cf:c4:cc:57:23:7f:c9:c3:e0:17:85:b8:f2: 12:da:b5:be:9a:e1:2e:b8:c3:35:72:66:b3:9a:4a:e3:1b:f0: bf:44:7b:db:fb:68:ca:2e:e5:20:10:ce:ad:57:5b:ed:f8:a6: 97:7b:76:24:26:ab:84:a0:ae:32:6f:79:14:9b:5b:09:98:63: 06:9c:e3:86:d9:86:d9:af:92:84:78:8d:f7:0b:4e:cd:89:95: 13:63:e5:d3:8c:17:81:fe:d0:6d:f8:32:b2:83:59:28:8b:1a: 18:29:7f:8d:ac:ed:2e:b2:90:49:6f:98:7e:2c:ea:de:7b:37: 07:0c:25:9d:b9:5e:a6:03:fd:d3:ec:70:3d:69:b8:00:49:54: 59:a2:21:22:92:e4:9f:24:38:e1:39:01:50:7f:7d:9a:a7:24: dd:2a:84:a8:a3:7b:5f:08:98:55:8d:22:e3:94:74:c9:d1:9c: 7f:60:01:94:b8:6b:7c:6a:60:5e:01:15:39:70:ca:9d:01:fe: ff:d9:72:7a:8d:31:49:7c:09:63:ee:93:a3:53:a7:d5:5f:17: 21:4d:1a:65:83:9b:ea:6f:f7:c8:9e:7b:c6:e4:f8:1e:c6:78: 7f:9f:1a:c9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDQzAxMTAvBgNVBAUTKEZFMkUzNTJCNDJGNzRGMTBENTc2ODM1MzAzQTJFOTc4 RTFDNDM3QjYwHhcNMjUwODIxMDIzOTU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWUyYS03MmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXL+5iQqJRhIJD6NU64zZp5FJVwGM1P0BxRlfI1R0cY/cynSp/3cIq6pwDbO j1QBjs46sFSs2XEnajyN2atnGIt1kKcfqnyr8NPf/yrD7+dXGdm0O/kuxxYlJ7RT BSzPAceDvRSmUSzFlo24YRovoDlikcfN31NujfrSvpkd7zVsUreS1Oc1LAjjjhV3 hnHzG0jpuFQaMXWoNLbRnA6MeVHUvw4wXAAcNa4SMRjVLPusfUPI+BKVgn8Wi4XN yh29778ZlQd6wbuVgFwb4OrV6UFeJ8dx9kaJik1bz4a+pj2L9EVzmS1uFmZw6YRI gn9xsRCCdEhG1ynitI+LSWvapwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFA6/DS5Q yNSVONTtHy4jwBx/JgPVMB8GA1UdIwQYMBaAFP4uNStC908Q1XaDUwOi6XjhxDe2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNDMC9DRkE3OUYxQTUw M0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4RFZkb05UQTZMcGVPSEVO N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pNDFLMEwzVHhEVmRvTlRBNkxwZU9IRU43WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVDQzAvQ0ZBNzlGMUE1MDNGMTFFRDgxRDA3NTZCQzRGOUFFMDIvRkExM0JBQUM1 MDQ2MTFFRDlBRTQwNzExQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ78TMA8EAgACMAkDBwAgAQ3w9MAwDQYJKoZIhvcNAQELBQADggEB ABptcMY3mzLRAGe3ydJpypk1goBMktkuz8TMVyN/ycPgF4W48hLatb6a4S64wzVy ZrOaSuMb8L9Ee9v7aMou5SAQzq1XW+34ppd7diQmq4SgrjJveRSbWwmYYwac44bZ htmvkoR4jfcLTs2JlRNj5dOMF4H+0G34MrKDWSiLGhgpf42s7S6ykElvmH4s6t57 NwcMJZ25XqYD/dPscD1puABJVFmiISKS5J8kOOE5AVB/fZqnJN0qhKije18ImFWN IuOUdMnRnH9gAZS4a3xqYF4BFTlwyp0B/v/ZcnqNMUl8CWPuk6NTp9VfFyFNGmWD m+pv98iee8bk+B7GeH+fGsk= -----END CERTIFICATE-----Generated at Thu Mar 26 04:09:13 2026 by rpki-client