$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/FA957D0A80FA11ED9B35954DC4F9AE02.roa File: FA957D0A80FA11ED9B35954DC4F9AE02.roa (raw, json) Hash identifier: pFa+f0DCLR0eHCVQw8DYAg8ESO7WEo/O9SNFAFCnIyY= Subject key identifier: 3C:E0:E0:06:FD:D8:61:AF:97:76:D9:65:06:F4:C8:47:18:F2:AD:13 Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Certificate serial: 02C0 Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/FA957D0A80FA11ED9B35954DC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:28:42 +0000 ROA not before: Sat 27 Sep 2025 02:30:36 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 7575 IP address blocks: 203.28.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Validity Not Before: Sep 27 02:30:36 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44d1a-1c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:44:02:d6:23:3f:b7:2f:e5:ce:fb:5b:44: 4e:59:aa:78:39:e8:8f:86:44:a8:77:de:b1:ab:8e: 18:8f:ce:a5:9c:d6:35:be:94:52:65:66:78:d5:2b: c5:18:36:fc:75:49:27:86:f9:e4:38:f3:47:5b:68: b5:ef:87:73:17:56:6a:fc:35:16:18:f6:c2:34:a0: 1e:d8:b9:38:52:73:b6:f9:63:f4:81:85:25:e0:89: b6:5a:e4:79:fb:22:4a:39:a0:b6:27:a1:31:76:af: 6f:d0:4d:08:6c:92:8c:91:83:47:5c:ff:9a:93:3f: e6:93:c8:90:7f:93:0e:15:e4:b3:c8:a6:11:31:86: bc:bc:8b:0e:02:82:61:c6:b1:06:0c:3f:a9:56:4a: 90:b8:bf:51:c2:28:55:42:af:c6:fc:73:f8:8b:3f: a8:77:7c:6b:09:55:fb:86:c2:b7:2b:d5:c2:22:af: ab:2d:f6:0f:d7:53:08:0e:90:9d:bc:b0:70:00:7d: fa:c3:c0:04:fe:a3:f2:88:6f:88:a0:ae:ea:2b:89: 73:79:20:d5:1c:aa:bc:ea:08:5d:1a:70:79:c6:2e: 1e:41:b3:e0:b4:96:7e:b1:03:9e:63:e4:f5:34:63: 61:a1:fd:99:32:98:82:19:95:d9:75:71:0e:c8:20: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E0:E0:06:FD:D8:61:AF:97:76:D9:65:06:F4:C8:47:18:F2:AD:13 X509v3 Authority Key Identifier: keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/FA957D0A80FA11ED9B35954DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.28.79.0/24 Signature Algorithm: sha256WithRSAEncryption 84:cb:2c:7c:16:6a:df:56:96:e2:5c:f8:34:bc:2c:47:2c:db: 42:17:24:a8:58:52:6f:ad:f7:51:53:e6:c8:4d:62:7c:e6:0b: b8:4c:07:15:2e:84:c0:33:05:0e:3b:2b:15:70:55:0d:1b:bf: bd:5e:0e:d2:ea:ed:e0:d3:d1:ac:52:20:df:96:35:ad:98:3a: 78:de:fd:79:16:69:25:c5:0c:71:a1:70:b2:09:75:4d:f0:ae: 95:ef:21:e1:a1:03:20:f0:2b:75:dc:97:ec:5b:fd:77:33:0d: 4e:5c:a2:ca:95:c3:bf:7a:27:99:3c:3c:8c:a2:2f:e8:fd:bb: 9f:fc:ee:36:fb:86:c7:67:ca:01:43:42:42:b5:d3:f7:59:2e: 31:10:95:ca:d3:f0:73:4e:32:55:c9:33:65:35:23:15:e9:93: 5f:bd:f1:37:0e:ba:fa:33:3a:7f:10:57:1d:8f:a9:c9:05:96: 66:df:86:8a:33:0c:50:8f:46:e9:7a:31:a5:7c:95:f5:73:37: dc:ae:c2:3e:44:60:56:aa:c4:6c:3b:fd:39:40:7b:81:52:de: 6d:24:56:8f:9a:75:a9:14:f1:96:0d:92:b1:a7:b3:b1:a9:ac: e0:2d:9c:75:d1:bc:0a:b9:56:96:47:b5:53:4d:57:a2:e3:c0: 71:b7:f8:65 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKEE0Q0QzRTY3RDFCMjI0RjMyNTA0N0U5RjVFNDg0QUNE QzRGNjYzRUMwHhcNMjUwOTI3MDIzMDM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGQxYS0xYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJxEAtYjP7cv5c77W0ROWap4OeiPhkSod96xq44Yj86lnNY1vpRSZWZ41SvF GDb8dUknhvnkOPNHW2i174dzF1Zq/DUWGPbCNKAe2Lk4UnO2+WP0gYUl4Im2WuR5 +yJKOaC2J6Exdq9v0E0IbJKMkYNHXP+akz/mk8iQf5MOFeSzyKYRMYa8vIsOAoJh xrEGDD+pVkqQuL9RwihVQq/G/HP4iz+od3xrCVX7hsK3K9XCIq+rLfYP11MIDpCd vLBwAH36w8AE/qPyiG+IoK7qK4lzeSDVHKq86ghdGnB5xi4eQbPgtJZ+sQOeY+T1 NGNhof2ZMpiCGZXZdXEOyCDaRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDzg4Ab9 2GGvl3bZZQb0yEcY8q0TMB8GA1UdIwQYMBaAFKTNPmfRsiTzJQR+n15ISs3E9mPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80Q0NCMDA5MDJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQTWxCSDZmWGtoS3pjVDJZ LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BNMC1aOUd5SlBNbEJINmZYa2hLemNUMlktdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgxQUQvNENDQjAwOTAyQ0JFMTFFRDk5ODI0QjRDQzRGOUFFMDIvRkE5NTdEMEE4 MEZBMTFFRDlCMzU5NTREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxxPMA0GCSqGSIb3DQEBCwUAA4IBAQCEyyx8FmrfVpbiXPg0vCxH LNtCFySoWFJvrfdRU+bITWJ85gu4TAcVLoTAMwUOOysVcFUNG7+9Xg7S6u3g09Gs UiDfljWtmDp43v15FmklxQxxoXCyCXVN8K6V7yHhoQMg8Ct13JfsW/13Mw1OXKLK lcO/eieZPDyMoi/o/buf/O42+4bHZ8oBQ0JCtdP3WS4xEJXK0/BzTjJVyTNlNSMV 6ZNfvfE3Drr6Mzp/EFcdj6nJBZZm34aKMwxQj0bpejGlfJX1czfcrsI+RGBWqsRs O/05QHuBUt5tJFaPmnWpFPGWDZKxp7OxqazgLZx10bwKuVaWR7VTTVei48Bxt/hl -----END CERTIFICATE-----Generated at Thu Mar 26 10:05:56 2026 by rpki-client