$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa File: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (raw, json) Hash identifier: 5rrOVTWhZFhPeg37xthqwcVuXMjL6vt+NLzRbtYbxNk= Subject key identifier: 65:75:4F:1F:DE:1C:F6:1D:3D:C6:7C:E1:3E:BC:6F:AA:04:A7:15:84 Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 08B1 Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa Signing time: Tue 08 Sep 2026 20:42:02 +0000 ROA not before: Tue 08 Sep 2026 20:42:02 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134518 IP address blocks: 43.246.132.0/22 maxlen: 22 43.246.132.0/23 maxlen: 23 43.246.134.0/23 maxlen: 23 43.246.134.0/24 maxlen: 24 43.246.135.0/24 maxlen: 24 103.194.236.0/22 maxlen: 22 2402:c680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2225 (0x8b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Sep 8 20:42:02 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa07319-2c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:82:03:20:64:04:e6:c5:c8:9a:3b:42:92: 79:cf:ad:66:6d:a4:7b:4d:f9:57:12:1d:5d:d3:32: 95:96:7b:b9:f3:6f:5e:5e:ca:63:bc:09:b6:51:24: 79:8b:d4:2b:2c:ad:26:6f:f5:4d:ed:16:1c:37:61: de:0b:b9:ce:a4:0a:46:9b:35:98:40:88:3e:92:44: 8d:85:77:45:f1:11:43:52:89:ab:cd:01:98:49:1d: 0a:6c:bd:ed:bc:7e:0e:1d:cf:60:19:0f:62:ba:56: ba:1f:c0:a6:61:e0:ad:48:c2:35:ff:83:82:e4:46: 44:e6:41:9c:de:89:62:83:9c:7b:a3:d0:9e:d5:7a: ec:c8:9c:68:75:68:dc:41:87:fd:43:5c:73:82:b0: 5b:70:8b:43:8f:30:fe:6a:2c:95:53:af:6a:c0:ee: 3a:4f:5b:54:c7:6d:0e:36:27:69:d5:fe:cc:9c:3b: ed:f1:53:14:a9:6a:02:02:40:db:30:b0:0b:d4:7a: 44:fd:6a:44:f5:eb:31:93:1a:ac:e3:c1:1c:1f:34: aa:e8:ad:66:9b:69:70:b6:d1:8a:5e:47:bb:7c:41: ec:28:a9:81:55:f6:6e:9a:63:86:b9:51:ad:20:a5: 5c:fc:97:2f:78:8a:78:14:81:61:8c:8c:37:a4:7d: 4d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:75:4F:1F:DE:1C:F6:1D:3D:C6:7C:E1:3E:BC:6F:AA:04:A7:15:84 X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.132.0/22 103.194.236.0/22 IPv6: 2402:c680::/32 Signature Algorithm: sha256WithRSAEncryption 25:62:93:1f:1a:40:e6:4f:5c:31:96:e9:d6:a3:d2:2b:4b:2c: e8:4e:4e:16:9e:48:b8:cc:b7:1c:0e:a4:84:8d:91:a8:da:48: 9d:ac:1b:85:c1:b7:db:54:c6:b4:43:9f:b8:30:91:01:e2:0b: e0:e9:a4:09:35:a9:6e:0f:6a:4d:41:1f:92:de:1f:12:ad:71: 01:4e:fa:3f:59:73:cc:c3:b8:21:36:a1:a9:5d:48:c2:a6:f2: f4:85:fb:fe:e8:82:10:f4:93:56:9c:e2:f0:f3:82:6a:54:0d: e0:71:11:3a:4d:94:1e:55:63:a1:4e:32:4a:3f:e8:62:d6:77: d4:85:06:ed:10:ac:98:2d:79:b8:44:ed:82:e7:d9:cd:4d:8d: 8b:f4:71:8b:c5:63:10:bc:20:20:66:d2:26:7b:53:b2:f4:e9: 61:52:27:e2:ed:9c:ca:6c:8f:c4:fa:7b:c4:28:0c:0a:f1:19: 99:54:68:7c:b8:82:88:3a:a2:0c:c3:6c:7d:15:99:7b:ec:5b: ea:f2:f7:5d:fd:5c:6e:b4:14:cf:30:36:ba:03:ae:63:c8:b5: 00:9d:80:95:9b:76:a6:f7:b0:6f:c0:dc:9b:9c:0b:5f:3e:0a: 22:91:13:41:ed:c6:0c:49:97:04:77:bd:dc:ff:81:84:43:3b: 7f:02:2e:d5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjYwOTA4MjA0MjAyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwNzMxOS0yYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiCCAyBkBObFyJo7QpJ5z61mbaR7TflXEh1d0zKVlnu5829eXspjvAm2USR5 i9QrLK0mb/VN7RYcN2HeC7nOpApGmzWYQIg+kkSNhXdF8RFDUomrzQGYSR0KbL3t vH4OHc9gGQ9iula6H8CmYeCtSMI1/4OC5EZE5kGc3olig5x7o9Ce1XrsyJxodWjc QYf9Q1xzgrBbcItDjzD+aiyVU69qwO46T1tUx20ONidp1f7MnDvt8VMUqWoCAkDb MLAL1HpE/WpE9esxkxqs48EcHzSq6K1mm2lwttGKXke7fEHsKKmBVfZummOGuVGt IKVc/JcveIp4FIFhjIw3pH1NPwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGV1Tx/e HPYdPcZ84T68b6oEpxWEMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTgxNjYvMjhDMUQwMjJGRDg5MTFFQTk0NjNCNjM1QzRGOUFFMDIvNkFGOEY4MjJG REFCMTFFQUFBQjFGQjM3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/aEAwQCZ8LsMA0EAgACMAcDBQAkAsaAMA0GCSqGSIb3DQEBCwUA A4IBAQAlYpMfGkDmT1wxlunWo9IrSyzoTk4Wnki4zLccDqSEjZGo2kidrBuFwbfb VMa0Q5+4MJEB4gvg6aQJNaluD2pNQR+S3h8SrXEBTvo/WXPMw7ghNqGpXUjCpvL0 hfv+6IIQ9JNWnOLw84JqVA3gcRE6TZQeVWOhTjJKP+hi1nfUhQbtEKyYLXm4RO2C 59nNTY2L9HGLxWMQvCAgZtIme1Oy9OlhUifi7ZzKbI/E+nvEKAwK8RmZVGh8uIKI OqIMw2x9FZl77Fvq8vdd/VxutBTPMDa6A65jyLUAnYCVm3am97BvwNybnAtfPgoi kRNB7cYMSZcEd73c/4GEQzt/Ai7V -----END CERTIFICATE-----Generated at Tue Sep 22 11:49:38 2026 by rpki-client