$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/FC98D5921DD311F1A4A9CCCC0B3D8C67.roa File: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (raw, json) Hash identifier: k8lZ7CX7mgq/3LVgfyzktUqzG5SajWKj3uNNsmVcBrg= Subject key identifier: 40:C3:C6:B2:FD:B6:22:34:56:10:FF:CB:FF:F4:68:DA:E0:66:04:49 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 01C3 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/FC98D5921DD311F1A4A9CCCC0B3D8C67.roa Signing time: Thu 12 Mar 2026 05:30:18 +0000 ROA not before: Thu 12 Mar 2026 05:30:18 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 329611 IP address blocks: 43.224.224.0/22 maxlen: 24 103.215.77.0/24 maxlen: 24 103.215.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Mar 12 05:30:18 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69b24f6a-d73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d0:db:60:21:48:8a:c7:44:2b:65:f7:5f:3c: ec:23:6e:12:6f:f8:d6:45:79:7d:76:46:50:3f:76: c3:5c:9d:0a:56:9e:8c:7b:21:ba:6e:3a:d2:3e:0c: 33:50:f4:f0:bf:e0:32:3a:dc:75:66:5e:1f:89:99: 48:59:1c:07:33:19:0d:c9:15:d9:b2:85:cd:9c:04: 54:1b:49:66:0d:46:40:e5:3f:62:0c:ca:45:65:3f: 0b:6f:89:a2:68:98:f9:f1:c9:c5:e1:10:8b:fd:13: 84:98:6a:d7:94:9b:e9:f0:68:f7:e2:dc:40:ff:c5: f2:c7:79:b2:35:7c:c9:b5:06:07:72:50:30:ac:8d: e4:cc:8e:26:31:03:0b:9a:d2:eb:a6:00:58:e5:8b: 37:79:b2:e4:bb:17:40:48:08:ad:c1:c1:a0:ea:c7: 68:78:9c:0f:1a:e0:a4:46:be:2a:4d:9f:c1:7a:42: 61:7b:ce:82:44:1a:36:22:16:55:4f:1c:d1:f6:b1: 12:84:3c:c7:de:9f:0e:f3:e6:1d:ec:d9:a8:b3:52: df:74:0e:0d:eb:f4:36:08:0f:c0:53:d1:ca:9c:2a: 0c:b8:40:e7:b0:da:6b:e0:9f:c7:47:a5:f6:73:e3: 32:f4:71:5c:af:b1:63:a4:c2:14:1e:83:fc:c8:ff: 22:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C3:C6:B2:FD:B6:22:34:56:10:FF:CB:FF:F4:68:DA:E0:66:04:49 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/FC98D5921DD311F1A4A9CCCC0B3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.224.224.0/22 103.215.77.0-103.215.78.255 Signature Algorithm: sha256WithRSAEncryption 26:e5:13:62:c7:ad:49:81:9d:4f:b6:b4:57:81:bd:82:98:de: 43:0a:d1:a2:b3:fa:22:f7:f8:1f:04:d9:50:76:2e:85:7a:d2: 24:bf:9f:9b:3c:56:55:74:d5:3d:e0:c0:7a:c2:7e:3e:ef:53: 4f:19:4d:a4:ed:4f:d2:4d:25:38:d4:97:c8:52:62:08:bb:8b: 9d:b4:2e:2a:e0:9e:1f:2b:6d:58:db:0b:8c:ac:60:be:34:24: 8c:a0:76:eb:32:78:03:dd:4c:eb:d8:0d:0d:18:bc:a1:a0:22: 04:d9:d9:5a:47:c4:5a:f0:6e:ee:4b:fd:b9:01:7d:8a:92:6a: bf:90:0e:84:0c:7f:e8:20:7a:79:96:ce:e5:cb:b7:3e:7a:e6: 4b:ea:08:d8:77:4f:50:64:f2:da:2e:54:48:d2:47:05:25:56: b8:1a:83:d0:94:47:3b:4c:30:82:7f:fc:f2:7a:ec:da:3a:3c: 58:d2:bc:a6:39:e1:d7:ff:08:fc:8e:71:e1:22:6f:35:d4:53: 5e:60:a2:1c:48:f7:7c:87:81:86:a4:2b:2c:f5:f6:06:99:ce: 73:a5:82:b9:f0:c6:57:0e:2f:21:87:14:d5:f0:59:42:20:76: 68:4d:e6:6a:5b:f8:bf:31:2e:33:84:f8:a1:e3:31:5f:28:bf: f7:04:fb:1e -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjYwMzEyMDUzMDE4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIyNGY2YS1kNzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tDbYCFIisdEK2X3XzzsI24Sb/jWRXl9dkZQP3bDXJ0KVp6MeyG6bjrSPgwz UPTwv+AyOtx1Zl4fiZlIWRwHMxkNyRXZsoXNnARUG0lmDUZA5T9iDMpFZT8Lb4mi aJj58cnF4RCL/ROEmGrXlJvp8Gj34txA/8Xyx3myNXzJtQYHclAwrI3kzI4mMQML mtLrpgBY5Ys3ebLkuxdASAitwcGg6sdoeJwPGuCkRr4qTZ/BekJhe86CRBo2IhZV TxzR9rEShDzH3p8O8+Yd7Nmos1LfdA4N6/Q2CA/AU9HKnCoMuEDnsNpr4J/HR6X2 c+My9HFcr7FjpMIUHoP8yP8iNQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFEDDxrL9 tiI0VhD/y//0aNrgZgRJMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY1MzUvNjlBNTgwNzhCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvRkM5OEQ1OTIx REQzMTFGMUE0QTlDQ0NDMEIzRDhDNjcucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQCK+DgMAwDBABn100DBABn104wDQYJKoZIhvcNAQELBQADggEBACbl E2LHrUmBnU+2tFeBvYKY3kMK0aKz+iL3+B8E2VB2LoV60iS/n5s8VlV01T3gwHrC fj7vU08ZTaTtT9JNJTjUl8hSYgi7i520Lirgnh8rbVjbC4ysYL40JIygdusyeAPd TOvYDQ0YvKGgIgTZ2VpHxFrwbu5L/bkBfYqSar+QDoQMf+ggenmWzuXLtz565kvq CNh3T1Bk8touVEjSRwUlVrgag9CURztMMIJ//PJ67No6PFjSvKY54df/CPyOceEi bzXUU15gohxI93yHgYakKyz19gaZznOlgrnwxlcOLyGHFNXwWUIgdmhN5mpb+L8x LjOE+KHjMV8ov/cE+x4= -----END CERTIFICATE-----Generated at Sat Mar 21 20:04:33 2026 by rpki-client