$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/FBD80F88F92111EAABA5882BC4F9AE02.roa File: FBD80F88F92111EAABA5882BC4F9AE02.roa (raw, json) Hash identifier: a5QR6qFaLHW8X+pHKmc+aeeAQ06cOZZNDQiWNrIkUgM= Subject key identifier: EE:15:08:46:C2:D6:A5:58:C7:5F:FF:07:6F:E4:AC:60:88:76:E4:88 Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 3375 Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/FBD80F88F92111EAABA5882BC4F9AE02.roa Signing time: Sat 02 May 2026 16:17:48 +0000 ROA not before: Sat 02 May 2026 16:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40009 IP address blocks: 121.244.74.0/23 maxlen: 23 121.244.136.0/24 maxlen: 24 121.244.137.0/24 maxlen: 24 121.244.172.0/24 maxlen: 24 121.244.173.0/24 maxlen: 24 121.244.190.0/23 maxlen: 23 121.244.204.0/24 maxlen: 24 121.244.205.0/24 maxlen: 24 203.200.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 14:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13173 (0x3375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: May 2 16:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f623ac-1737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:bd:c4:1b:a6:63:47:87:a3:5e:ec:80:94: 76:d5:7d:f0:6e:fe:25:cb:b5:6d:60:9e:27:d2:f3: de:7d:42:ad:f9:d1:0c:59:3e:ed:b7:e0:85:ee:95: 5d:55:56:61:c3:12:f6:0c:47:29:c0:94:f2:d4:4d: d1:12:52:b9:8d:cb:c7:22:bf:e3:6e:06:a0:78:e1: a5:d7:ef:b8:e6:e4:9c:0b:b4:35:49:f2:d1:7b:34: 83:36:09:23:89:d4:a6:d1:1e:21:b6:6e:3c:1f:10: 2f:36:ae:48:18:72:c5:6e:08:78:69:a8:4f:04:b7: 1c:e3:f0:f0:3f:a4:34:e5:7a:30:eb:5e:d9:25:0c: 31:8e:81:23:3a:20:be:33:5a:8d:7b:03:f2:dc:cd: 6e:e6:06:f0:8d:a8:b3:d5:43:6a:0b:10:6a:22:67: 01:22:a6:9e:c0:34:35:6b:50:13:59:53:7b:29:b7: 6c:d4:bf:d3:74:51:f5:c3:41:21:dc:ea:c7:22:12: 37:49:dc:ec:4f:42:04:26:12:76:e4:49:ca:65:68: 25:d9:41:e0:d4:aa:d4:f1:13:5b:95:e7:bc:76:57: 2a:76:8d:45:ac:4e:09:84:a5:6a:f4:3d:d4:09:0b: b2:9d:fa:00:7d:e2:78:2d:83:5e:17:22:b8:54:d8: 96:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:15:08:46:C2:D6:A5:58:C7:5F:FF:07:6F:E4:AC:60:88:76:E4:88 X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/FBD80F88F92111EAABA5882BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.244.74.0/23 121.244.136.0/23 121.244.172.0/23 121.244.190.0/23 121.244.204.0/23 203.200.108.0/24 Signature Algorithm: sha256WithRSAEncryption 67:1b:f3:03:3d:37:c1:4a:9f:1b:d8:e2:08:11:25:06:e5:66: ca:db:b6:30:81:36:93:2d:e2:83:93:3a:8a:52:ce:86:0e:4c: c7:4a:40:6a:5a:c3:20:fb:57:ed:3a:e3:8e:72:cc:e8:cb:5c: bd:d5:58:36:59:23:f1:aa:21:55:13:d8:3e:06:bd:60:18:6e: fc:3a:33:7f:93:21:24:aa:d8:49:39:05:cc:71:5a:a6:48:d4: 2a:36:0e:c8:df:ff:c6:49:f2:ce:6c:c8:fb:a8:8f:de:09:8f: fc:f8:93:55:5b:89:5b:ad:d9:91:fd:0e:34:56:17:0a:a5:e3: d9:35:a7:4f:f1:d2:b4:42:06:d9:ac:85:3f:d7:8e:37:37:36: 12:79:a9:69:bf:62:b6:53:c9:ec:68:83:59:da:db:6b:5f:2a: cb:ee:3e:73:79:a4:94:08:2a:a9:02:6d:98:21:cf:f8:16:f7: 86:17:43:3c:3c:36:1f:94:77:f8:4e:0f:2f:9f:ce:2a:28:1d: af:a7:c1:e2:e9:5b:b0:2f:4b:76:08:1c:bf:b6:89:3f:be:05: ea:cc:31:d1:40:c8:da:e6:6b:a8:ca:13:fe:57:14:ad:2e:43: 5b:84:c8:31:8e:ba:b3:9b:3a:68:62:b7:07:dc:a4:fb:1a:95: 3e:5a:a8:e3 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICM3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjYwNTAyMTYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY2MjNhYy0xNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwba9xBumY0eHo17sgJR21X3wbv4ly7VtYJ4n0vPefUKt+dEMWT7tt+CF7pVd VVZhwxL2DEcpwJTy1E3RElK5jcvHIr/jbgageOGl1++45uScC7Q1SfLRezSDNgkj idSm0R4htm48HxAvNq5IGHLFbgh4aahPBLcc4/DwP6Q05Xow617ZJQwxjoEjOiC+ M1qNewPy3M1u5gbwjaiz1UNqCxBqImcBIqaewDQ1a1ATWVN7Kbds1L/TdFH1w0Eh 3OrHIhI3SdzsT0IEJhJ25EnKZWgl2UHg1KrU8RNblee8dlcqdo1FrE4JhKVq9D3U CQuynfoAfeJ4LYNeFyK4VNiW6QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFO4VCEbC 1qVYx1//B2/krGCIduSIMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvRkJEODBGODhG OTIxMTFFQUFCQTU4ODJCQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQBefRKAwQBefSIAwQBefSsAwQBefS+AwQBefTMAwQAy8hsMA0GCSqG SIb3DQEBCwUAA4IBAQBnG/MDPTfBSp8b2OIIESUG5WbK27YwgTaTLeKDkzqKUs6G DkzHSkBqWsMg+1ftOuOOcszoy1y91Vg2WSPxqiFVE9g+Br1gGG78OjN/kyEkqthJ OQXMcVqmSNQqNg7I3//GSfLObMj7qI/eCY/8+JNVW4lbrdmR/Q40VhcKpePZNadP 8dK0QgbZrIU/1443NzYSealpv2K2U8nsaINZ2ttrXyrL7j5zeaSUCCqpAm2YIc/4 FveGF0M8PDYflHf4Tg8vn84qKB2vp8Hi6VuwL0t2CBy/tok/vgXqzDHRQMja5muo yhP+VxStLkNbhMgxjrqzmzpoYrcH3KT7GpU+Wqjj -----END CERTIFICATE-----Generated at Fri May 8 18:24:14 2026 by rpki-client