$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/FDAEEFB0A12A11EAB063A548C4F9AE02.roa File: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (raw, json) Hash identifier: cNrjBilbrF0h5gqh8r2I8xpeSdxfHL1i6pc3sR9uCdw= Subject key identifier: FC:F9:27:C7:91:71:32:C7:BC:8C:1F:14:41:41:BA:4A:F6:96:EA:EF Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 09B9 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/FDAEEFB0A12A11EAB063A548C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:50:45 +0000 ROA not before: Fri 04 Jul 2025 21:01:36 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 23760 IP address blocks: 202.41.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2489 (0x9b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Jul 4 21:01:36 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a42815-2131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:70:df:40:d6:b3:da:33:a1:6c:37:eb:12: 69:47:37:7d:c8:a7:7e:9d:b8:5c:20:4c:1d:69:de: fc:bd:20:15:0f:24:b2:44:9a:ee:de:61:6a:8c:81: da:33:d2:17:23:ec:31:33:4d:06:38:63:db:45:bb: 46:fc:ee:86:70:78:6b:e0:54:fc:4b:58:59:d2:69: 02:96:aa:d0:d3:f1:43:4b:52:e0:d0:64:b6:69:a9: f1:d2:93:2a:84:1d:fa:85:5b:34:bc:c0:75:46:1d: c7:9d:33:b6:e7:46:66:2e:3b:62:8b:79:69:85:88: 95:36:6e:12:fb:ca:be:ab:6a:c3:08:09:45:28:a8: 79:01:c1:8e:c1:5e:58:f2:c4:12:6a:d7:83:be:bb: 20:7f:57:26:6f:ad:32:fa:79:0a:df:d3:27:c9:28: 39:c7:73:47:1e:3e:a8:24:a7:cf:cb:1a:7d:19:c4: ff:c7:81:01:cb:6d:1b:15:bd:d4:c5:ee:0c:8a:b4: 3b:a9:32:bf:56:a9:25:15:cb:7f:bb:54:90:71:c5: ca:23:10:ce:2b:7e:5e:6a:3a:1f:cc:64:8e:45:2d: f6:c8:08:0a:49:b6:35:76:6d:91:cb:66:9d:78:70: bf:40:9a:84:ac:6c:b6:45:fa:23:8d:e0:61:6f:2e: 9c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F9:27:C7:91:71:32:C7:BC:8C:1F:14:41:41:BA:4A:F6:96:EA:EF X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/FDAEEFB0A12A11EAB063A548C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.41.135.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:91:94:8d:c5:bf:ae:3b:68:67:47:76:b8:73:36:a3:1a:7e: 4f:12:c8:fa:5f:d5:f9:70:25:61:69:ff:c7:8f:c6:d7:57:c0: e6:ca:4a:16:88:7b:ad:4d:fe:23:26:b4:6b:01:fe:8c:4b:19: f1:1b:41:f9:88:c4:63:87:52:d7:94:a1:6d:3e:0a:3d:6e:46: f0:48:b7:27:01:04:b3:bc:39:70:c4:d6:b7:d1:09:12:5c:ca: ad:09:45:bf:e8:e9:95:fc:38:02:b3:a1:f8:c8:8d:d9:26:35: 6a:c3:f9:67:06:30:04:b7:3c:bd:62:f5:4e:bd:ac:54:c9:1b: 20:05:33:04:77:81:56:d8:b2:55:81:35:32:d5:e7:f1:2b:8e: 80:4a:a6:e5:57:84:b5:f5:3b:b0:f1:b9:36:e6:b9:ef:78:ca: e8:8d:4e:08:f8:0f:bb:73:a6:6a:56:44:17:55:c9:32:77:0c: 22:ad:4a:84:04:e0:31:f6:91:06:48:31:9d:8d:41:6f:d3:10: cf:35:a2:db:4f:04:5f:26:bc:46:d6:d1:cd:b5:22:f5:2e:0d: 28:48:ac:b4:25:b3:da:d1:c9:2a:2d:a5:17:52:f5:ef:03:b6: 3d:ad:2d:92:41:d8:81:14:69:32:b2:ec:be:1a:52:56:6a:a0: 51:98:a1:ec -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjUwNzA0MjEwMTM2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjgxNS0yMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3Vw30DWs9ozoWw36xJpRzd9yKd+nbhcIEwdad78vSAVDySyRJru3mFqjIHa M9IXI+wxM00GOGPbRbtG/O6GcHhr4FT8S1hZ0mkClqrQ0/FDS1Lg0GS2aanx0pMq hB36hVs0vMB1Rh3HnTO250ZmLjtii3lphYiVNm4S+8q+q2rDCAlFKKh5AcGOwV5Y 8sQSateDvrsgf1cmb60y+nkK39MnySg5x3NHHj6oJKfPyxp9GcT/x4EBy20bFb3U xe4MirQ7qTK/VqklFct/u1SQccXKIxDOK35eajofzGSORS32yAgKSbY1dm2Ry2ad eHC/QJqErGy2RfojjeBhby6cgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPz5J8eR cTLHvIwfFEFBukr2lurvMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg5MEUvOEQ0MTM1RkVBMTI5MTFFQUEwMjI3NzQ2QzRGOUFFMDIvRkRBRUVGQjBB MTJBMTFFQUIwNjNBNTQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyimHMA0GCSqGSIb3DQEBCwUAA4IBAQA+kZSNxb+uO2hnR3a4czaj Gn5PEsj6X9X5cCVhaf/Hj8bXV8DmykoWiHutTf4jJrRrAf6MSxnxG0H5iMRjh1LX lKFtPgo9bkbwSLcnAQSzvDlwxNa30QkSXMqtCUW/6OmV/DgCs6H4yI3ZJjVqw/ln BjAEtzy9YvVOvaxUyRsgBTMEd4FW2LJVgTUy1efxK46ASqblV4S19Tuw8bk25rnv eMrojU4I+A+7c6ZqVkQXVckydwwirUqEBOAx9pEGSDGdjUFv0xDPNaLbTwRfJrxG 1tHNtSL1Lg0oSKy0JbPa0ckqLaUXUvXvA7Y9rS2SQdiBFGkysuy+GlJWaqBRmKHs -----END CERTIFICATE-----Generated at Thu Mar 26 09:52:29 2026 by rpki-client