$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/7606086E914611ED8DE00A16C4F9AE02.roa File: 7606086E914611ED8DE00A16C4F9AE02.roa (raw, json) Hash identifier: 8+Zy2+XVCGA+aHk/+gqV29ugPCKWdcGR+5k5svBK88M= Subject key identifier: EC:8D:FE:D4:30:DD:4D:3D:D0:1B:38:55:58:1F:B9:44:70:36:5F:4B Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0298 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/7606086E914611ED8DE00A16C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:45:01 +0000 ROA not before: Sun 07 Dec 2025 00:40:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9328 IP address blocks: 150.173.0.0/16 maxlen: 16 202.137.200.0/21 maxlen: 21 202.160.96.0/20 maxlen: 24 203.89.192.0/19 maxlen: 19 203.89.224.0/19 maxlen: 19 203.214.160.0/19 maxlen: 19 203.214.169.0/24 maxlen: 24 203.214.184.0/21 maxlen: 21 203.214.184.0/23 maxlen: 23 203.214.186.0/23 maxlen: 23 203.214.188.0/23 maxlen: 23 203.214.190.0/23 maxlen: 23 203.214.192.0/18 maxlen: 18 203.214.192.0/22 maxlen: 22 203.214.192.0/24 maxlen: 24 2404:c400::/32 maxlen: 32 2404:c400:401::/48 maxlen: 48 2404:c400:403::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Dec 7 00:40:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47b1d-aa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:49:e1:5f:bb:eb:bc:90:a2:bc:8f:ca:22:0a: 96:c2:cc:ca:b4:0d:03:68:30:96:ae:bf:0f:79:1d: 84:9f:a8:e8:bc:fa:50:68:b4:37:46:48:68:06:8c: 85:46:f6:ac:b2:d2:06:18:e0:2f:9b:a6:a0:3c:fb: f4:8b:cb:2e:05:ef:21:5f:84:5f:6c:77:c4:54:14: ef:6a:57:ed:ad:79:0c:d2:08:03:a2:ae:0a:53:9d: 7a:ac:80:aa:18:69:f3:49:3d:e7:d4:7a:bd:75:0c: d9:54:bd:07:8b:ec:3a:1a:18:73:7c:33:54:f9:a7: 10:97:ee:d8:fd:bf:a5:f8:4f:7f:90:37:59:53:fe: a7:78:55:6d:78:10:4c:eb:d0:fc:f9:ad:09:7e:d8: f1:18:9c:35:a7:df:69:2a:e4:6d:55:02:91:2a:b4: 51:5d:a2:90:d4:29:60:e6:d5:73:2e:2f:24:20:c0: f5:9a:6c:f5:10:c4:b1:d8:bb:5d:8f:74:4f:de:36: cf:bf:12:c8:11:70:3f:76:8f:48:ee:28:fb:5f:3f: 3a:35:09:ff:45:65:b4:97:18:e9:83:da:59:16:6e: ed:71:2a:1b:1b:c9:0f:e0:98:a9:e4:42:07:bf:79: ab:0c:7a:d0:a5:75:36:52:bc:ae:1c:5d:0a:5a:19: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8D:FE:D4:30:DD:4D:3D:D0:1B:38:55:58:1F:B9:44:70:36:5F:4B X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/7606086E914611ED8DE00A16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 150.173.0.0/16 202.137.200.0/21 202.160.96.0/20 203.89.192.0/18 203.214.160.0-203.214.255.255 IPv6: 2404:c400::/32 Signature Algorithm: sha256WithRSAEncryption 4c:6f:9d:12:b6:b9:e0:5a:52:a3:b5:04:94:68:4d:00:46:d6: 94:a1:b2:d0:ae:2a:de:db:01:0a:60:2d:a5:69:dd:1f:43:2f: 26:86:6c:b1:bb:b2:00:bf:81:84:f3:5d:b2:2a:9d:52:34:24: 31:a5:ae:70:f2:40:83:bf:6a:a0:4e:74:e9:df:ab:25:9d:74: 97:84:7f:1c:4d:ef:c4:9d:93:4f:5e:8a:2a:fb:85:09:7f:e8: 71:3c:7c:5c:7c:d6:7c:bd:ed:13:1d:fd:fc:59:ad:8f:09:c2: da:56:12:28:77:89:60:aa:0d:19:a4:ce:95:b3:f9:ce:39:05: da:e8:15:a8:92:b9:d3:ef:f2:dc:67:3e:74:83:cf:10:7f:00: 57:3e:55:d1:9e:45:c1:c8:c1:d9:5d:ac:32:24:e6:8b:54:13: be:21:d9:12:70:03:b1:a4:b8:2b:d2:4f:d1:21:9c:62:d1:37: 6a:61:3b:dc:18:44:b1:b3:2b:d1:0f:6b:1a:f0:db:bf:25:51: ea:9b:38:32:56:f4:b1:de:ac:17:45:ef:78:43:ce:5d:1a:94: 4a:70:be:83:05:e2:0b:5c:bc:f9:56:b8:87:15:9e:57:de:8f: 08:3c:ba:d4:0b:54:75:51:d8:10:e7:16:6f:aa:6a:82:17:00: 51:43:b3:48 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUxMjA3MDA0MDExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2IxZC1hYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UnhX7vrvJCivI/KIgqWwszKtA0DaDCWrr8PeR2En6jovPpQaLQ3RkhoBoyF RvasstIGGOAvm6agPPv0i8suBe8hX4RfbHfEVBTvalftrXkM0ggDoq4KU516rICq GGnzST3n1Hq9dQzZVL0Hi+w6GhhzfDNU+acQl+7Y/b+l+E9/kDdZU/6neFVteBBM 69D8+a0JftjxGJw1p99pKuRtVQKRKrRRXaKQ1Clg5tVzLi8kIMD1mmz1EMSx2Ltd j3RP3jbPvxLIEXA/do9I7ij7Xz86NQn/RWW0lxjpg9pZFm7tcSobG8kP4Jip5EIH v3mrDHrQpXU2UryuHF0KWhlHpQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFOyN/tQw 3U090Bs4VVgfuURwNl9LMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvNzYwNjA4NkU5 MTQ2MTFFRDhERTAwQTE2QzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwMAlq0DBAPKicgDBATKoGADBAbLWcAwCwMEBcvWoAMDAMvWMA0EAgAC MAcDBQAkBMQAMA0GCSqGSIb3DQEBCwUAA4IBAQBMb50StrngWlKjtQSUaE0ARtaU obLQrire2wEKYC2lad0fQy8mhmyxu7IAv4GE812yKp1SNCQxpa5w8kCDv2qgTnTp 36slnXSXhH8cTe/EnZNPXooq+4UJf+hxPHxcfNZ8ve0THf38Wa2PCcLaVhIod4lg qg0ZpM6Vs/nOOQXa6BWokrnT7/LcZz50g88QfwBXPlXRnkXByMHZXawyJOaLVBO+ IdkScAOxpLgr0k/RIZxi0TdqYTvcGESxsyvRD2sa8Nu/JVHqmzgyVvSx3qwXRe94 Q85dGpRKcL6DBeILXLz5VriHFZ5X3o8IPLrUC1R1UdgQ5xZvqmqCFwBRQ7NI -----END CERTIFICATE-----Generated at Mon Mar 2 06:22:20 2026 by rpki-client