$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/FBD68828FCBF11F0A4D02CBC666F56BC.roa File: FBD68828FCBF11F0A4D02CBC666F56BC.roa (raw, json) Hash identifier: ZS4ikLAhBTV7iHIbRzx3EPKHhPqoS1TC9UqhJPnWrvs= Subject key identifier: A4:9F:74:84:38:EF:41:19:04:6A:36:05:84:2D:CD:36:6B:DF:D9:A0 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 2694 Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/FBD68828FCBF11F0A4D02CBC666F56BC.roa Signing time: Thu 29 Jan 2026 04:06:51 +0000 ROA not before: Thu 29 Jan 2026 04:06:51 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 24389 IP address blocks: 119.30.32.0/20 maxlen: 24 123.108.240.0/21 maxlen: 24 202.56.4.0/22 maxlen: 24 2400:c600:1300::/40 maxlen: 48 2400:c600:1400::/40 maxlen: 48 2400:c600:1500::/40 maxlen: 48 2400:c600:1600::/40 maxlen: 48 2400:c600:3000::/36 maxlen: 44 2400:c600:4000::/36 maxlen: 44 2400:c600:5000::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 15:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9876 (0x2694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Jan 29 04:06:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697adcdb-1d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:9f:4d:dc:ec:f5:02:83:cd:09:4a:fa:60: 10:76:93:96:8c:3a:7f:b1:1e:de:4a:65:45:a2:3c: dc:05:8d:90:90:a9:b0:37:cf:0f:ea:06:50:8b:ff: a7:1d:ac:70:11:8b:fe:3a:28:2f:cd:c8:35:c0:83: f4:a0:fc:71:61:89:6d:6c:ca:25:60:bd:a9:dc:f2: 04:da:3b:f8:5f:f5:3a:39:6e:cc:be:38:5a:ec:8a: 48:b3:a0:06:37:e2:0c:a2:04:b7:f7:fb:af:1b:7a: 90:be:5c:06:d2:87:a1:0c:32:e7:93:8b:ec:28:ce: cd:03:67:b3:3b:21:50:f0:17:43:2c:05:2a:ba:83: 30:aa:b7:dc:c3:6d:a6:bb:5e:ae:ad:fd:76:8f:81: e0:83:98:bc:8e:aa:c5:71:1b:52:17:fd:e0:43:d0: 55:3d:7e:d8:0f:43:9d:64:2c:04:d6:2d:94:d9:ce: d7:f1:24:ff:ef:54:b7:31:dc:17:2f:d2:e3:7a:39: f3:cd:8d:c5:bf:3a:9f:d9:6c:9b:28:ae:4e:21:e5: ca:9a:bd:68:de:5a:04:67:91:9d:ee:b8:11:11:73: d0:2a:e8:ea:36:8f:50:dd:ca:b2:35:84:75:0e:2a: 43:6a:3e:ac:f9:81:df:e3:3d:55:31:60:c4:bc:27: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9F:74:84:38:EF:41:19:04:6A:36:05:84:2D:CD:36:6B:DF:D9:A0 X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/FBD68828FCBF11F0A4D02CBC666F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.30.32.0/20 123.108.240.0/21 202.56.4.0/22 IPv6: 2400:c600:1300::-2400:c600:16ff:ffff:ffff:ffff:ffff:ffff 2400:c600:3000::-2400:c600:5fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7f:a8:90:34:60:45:2c:b7:1a:cf:1e:9b:43:06:dd:fd:77:89: fe:92:83:8f:ff:81:00:0b:c0:6e:52:ca:50:13:43:5c:90:93: f9:5f:7b:65:ae:29:f4:36:0d:d1:04:e7:93:df:9e:22:cf:9e: 90:cf:7c:e3:f6:a6:74:06:03:a5:73:fe:eb:df:ca:f7:f3:cd: 7e:a8:df:35:e1:c7:3a:92:5d:cd:c7:4d:f5:1d:9a:27:54:06: e6:5a:39:c5:ed:2e:41:c7:39:a2:59:67:10:32:43:6b:1b:77: c9:f3:29:6c:36:09:e3:c8:19:9c:53:31:42:16:db:ea:3f:f9: bb:62:65:27:90:2b:9b:1f:59:d7:ac:f3:06:8a:f9:be:f4:50: 1d:57:bd:82:ba:04:8e:0d:e4:71:19:40:7a:08:d2:35:07:d3: ab:ef:f7:39:0d:1c:08:5a:b8:88:36:c0:8c:6b:04:4f:b5:58: fa:0c:01:88:4c:73:3b:86:72:0d:72:9c:b2:a0:fe:bd:f6:77: 35:49:76:6f:98:ec:43:17:2d:02:06:95:ed:47:5c:34:55:1c: e9:24:c5:ee:1c:fb:7d:a9:fe:c7:fe:32:76:b7:b8:d2:ef:5a: a5:2a:2e:8d:58:62:04:78:d5:21:a1:a8:10:30:65:29:c7:41: 40:f8:ac:54 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgICJpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjYwMTI5MDQwNjUxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdhZGNkYi0xZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3GfTdzs9QKDzQlK+mAQdpOWjDp/sR7eSmVFojzcBY2QkKmwN88P6gZQi/+n HaxwEYv+Oigvzcg1wIP0oPxxYYltbMolYL2p3PIE2jv4X/U6OW7Mvjha7IpIs6AG N+IMogS39/uvG3qQvlwG0oehDDLnk4vsKM7NA2ezOyFQ8BdDLAUquoMwqrfcw22m u16urf12j4Hgg5i8jqrFcRtSF/3gQ9BVPX7YD0OdZCwE1i2U2c7X8ST/71S3MdwX L9LjejnzzY3Fvzqf2WybKK5OIeXKmr1o3loEZ5Gd7rgREXPQKujqNo9Q3cqyNYR1 DipDaj6s+YHf4z1VMWDEvCfXVQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFKSfdIQ4 70EZBGo2BYQtzTZr39mgMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNBNzQvN0NCNEEwNTZGRDNBMTFFNDg2Rjg2NzVGQzRGOUFFMDIvRkJENjg4MjhG Q0JGMTFGMEE0RDAyQ0JDNjY2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E SDBGMBgEAgABMBIDBAR3HiADBAN7bPADBALKOAQwKgQCAAIwJDAQAwYAJADGABMD BgAkAMYAFjAQAwYEJADGADADBgUkAMYAQDANBgkqhkiG9w0BAQsFAAOCAQEAf6iQ NGBFLLcazx6bQwbd/XeJ/pKDj/+BAAvAblLKUBNDXJCT+V97Za4p9DYN0QTnk9+e Is+ekM984/amdAYDpXP+69/K9/PNfqjfNeHHOpJdzcdN9R2aJ1QG5lo5xe0uQcc5 ollnEDJDaxt3yfMpbDYJ48gZnFMxQhbb6j/5u2JlJ5Armx9Z16zzBor5vvRQHVe9 groEjg3kcRlAegjSNQfTq+/3OQ0cCFq4iDbAjGsET7VY+gwBiExzO4ZyDXKcsqD+ vfZ3NUl2b5jsQxctAgaV7UdcNFUc6STF7hz7fan+x/4ydre40u9apSoujVhiBHjV IaGoEDBlKcdBQPisVA== -----END CERTIFICATE-----Generated at Fri Feb 20 00:43:11 2026 by rpki-client