$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa File: 6492D4985B9011EF8DB48C24C4F9AE02.roa (raw, json) Hash identifier: 4DEeazGwAz5sYBPuOxnvCvjpQyUf0b00dh29elAufJM= Subject key identifier: 28:AD:EE:23:41:A4:74:DC:F2:75:2D:B1:03:F3:5C:C0:11:62:94:97 Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: 0199 Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:17:24 +0000 ROA not before: Wed 04 Feb 2026 12:55:53 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 146943 IP address blocks: 43.230.203.0/24 maxlen: 24 45.64.107.0/24 maxlen: 24 45.113.224.0/24 maxlen: 24 45.113.226.0/24 maxlen: 24 45.113.227.0/24 maxlen: 24 45.120.137.0/24 maxlen: 24 45.120.138.0/24 maxlen: 24 103.26.205.0/24 maxlen: 24 103.250.186.0/24 maxlen: 24 157.119.41.0/24 maxlen: 24 157.119.42.0/24 maxlen: 24 157.119.43.0/24 maxlen: 24 2405:7140:2::/48 maxlen: 48 2405:7140:4::/48 maxlen: 48 2405:7140:5::/48 maxlen: 48 2405:7140:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: Feb 4 12:55:53 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a46694-a5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:f4:c3:f1:83:e0:b0:2a:65:d3:7a:b6:c7: 67:ab:c8:6c:db:aa:18:b0:6d:f6:98:27:81:af:8e: ba:b3:87:23:a7:fb:d8:ff:f2:ec:92:f2:72:72:7c: 61:3d:de:3e:c6:81:5b:f3:20:c4:ac:66:df:3a:14: a3:d6:e4:f9:30:58:3d:c0:20:0a:9a:3e:f0:cd:22: f0:3e:2b:71:69:52:83:6d:71:5a:15:b2:a7:5a:81: 8a:10:77:db:77:f6:d9:ff:c6:94:7c:03:47:28:9f: 00:b3:f9:75:72:4d:c6:a5:bb:54:75:a8:55:53:5e: 12:e0:5d:71:bf:f7:c5:34:66:01:16:f7:de:21:e9: a6:20:c7:f2:a3:05:72:57:56:c3:12:52:4f:b9:6d: c2:57:93:7b:37:cd:9d:40:34:e6:36:13:a2:8a:60: 24:f3:28:9c:34:be:fa:3c:e6:46:ed:17:83:8b:1f: f6:bb:12:0a:ba:b6:98:03:44:3d:a9:78:ab:7e:9c: da:e6:49:f2:aa:48:50:9b:fb:56:69:0e:fd:e7:d3: 67:b0:eb:1c:7c:f3:a2:4c:ec:0f:84:dd:a4:2f:ba: d9:2a:56:7d:fe:7c:81:83:fe:08:ad:cc:02:22:c0: 07:b9:f0:d0:97:43:0e:8d:79:13:de:bd:83:48:9f: 36:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AD:EE:23:41:A4:74:DC:F2:75:2D:B1:03:F3:5C:C0:11:62:94:97 X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.203.0/24 45.64.107.0/24 45.113.224.0/24 45.113.226.0/23 45.120.137.0-45.120.138.255 103.26.205.0/24 103.250.186.0/24 157.119.41.0-157.119.43.255 IPv6: 2405:7140:2::/48 2405:7140:4::-2405:7140:6:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4f:29:15:02:d6:87:ca:80:00:8b:d1:ef:3b:54:f4:b2:ac:75: 22:1f:e9:83:5d:7c:4c:0d:73:0e:8a:d0:06:29:27:08:29:f7: ed:29:1b:28:48:da:1d:99:24:a6:41:be:c4:5a:a1:91:3a:77: ca:93:19:b1:a9:31:ae:bf:e8:41:22:8f:56:a9:b2:fc:df:a3: 45:df:71:05:37:0d:1a:a2:8c:b5:83:1f:6e:77:62:14:d5:cc: 1b:aa:fe:24:81:4c:99:bb:3e:e9:97:38:63:43:4c:a8:eb:f4: 69:da:48:06:68:68:57:35:08:16:2a:62:90:c2:b5:31:75:ab: 9d:9b:ec:f9:1f:9a:f6:00:1c:c5:a6:90:0a:b0:8a:7a:c6:99: 06:0f:06:15:e2:4f:3b:5c:5e:bc:e7:a2:d6:1e:1b:e5:9b:44: 71:88:4c:ea:58:36:92:22:d3:5d:9f:44:9c:0d:13:2c:33:5b: 7d:d0:46:ff:b4:d8:55:6e:56:82:94:37:51:c1:da:52:9b:f9: 10:7c:9f:26:3f:c0:21:2a:1d:14:78:02:38:be:c6:ff:81:16: cc:d9:6e:c6:f4:d6:64:ce:9c:9a:0b:cc:79:1c:77:07:88:1d: 56:d7:85:8a:75:e1:b6:da:17:0c:96:cf:e2:03:8a:07:b3:44: 56:9e:8a:6a -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjYwMjA0MTI1NTUzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjY5NC1hNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnn/0w/GD4LAqZdN6tsdnq8hs26oYsG32mCeBr466s4cjp/vY//LskvJycnxh Pd4+xoFb8yDErGbfOhSj1uT5MFg9wCAKmj7wzSLwPitxaVKDbXFaFbKnWoGKEHfb d/bZ/8aUfANHKJ8As/l1ck3GpbtUdahVU14S4F1xv/fFNGYBFvfeIemmIMfyowVy V1bDElJPuW3CV5N7N82dQDTmNhOiimAk8yicNL76POZG7ReDix/2uxIKuraYA0Q9 qXirfpza5knyqkhQm/tWaQ7959NnsOscfPOiTOwPhN2kL7rZKlZ9/nyBg/4IrcwC IsAHufDQl0MOjXkT3r2DSJ82kQIDAQABo4ICvzCCArswHQYDVR0OBBYEFCit7iNB pHTc8nUtsQPzXMARYpSXMB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMzNjIvNkEwOEY0OTIyNTc3MTFFRkJCMEI4MjUxQzRGOUFFMDIvNjQ5MkQ0OTg1 QjkwMTFFRjhEQjQ4QzI0QzRGOUFFMDIucm9hMH4GCCsGAQUFBwEHAQH/BG8wbTBG BAIAATBAAwQAK+bLAwQALUBrAwQALXHgAwQBLXHiMAwDBAAteIkDBAAteIoDBABn Gs0DBABn+rowDAMEAJ13KQMEAp13KDAjBAIAAjAdAwcAJAVxQAACMBIDBwIkBXFA AAQDBwAkBXFAAAYwDQYJKoZIhvcNAQELBQADggEBAE8pFQLWh8qAAIvR7ztU9LKs dSIf6YNdfEwNcw6K0AYpJwgp9+0pGyhI2h2ZJKZBvsRaoZE6d8qTGbGpMa6/6EEi j1apsvzfo0XfcQU3DRqijLWDH253YhTVzBuq/iSBTJm7PumXOGNDTKjr9GnaSAZo aFc1CBYqYpDCtTF1q52b7PkfmvYAHMWmkAqwinrGmQYPBhXiTztcXrznotYeG+Wb RHGITOpYNpIi012fRJwNEywzW33QRv+02FVuVoKUN1HB2lKb+RB8nyY/wCEqHRR4 Aji+xv+BFszZbsb01mTOnJoLzHkcdweIHVbXhYp14bbaFwyWz+IDigezRFaeimo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:15 2026 by rpki-client