$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E6B9A5DA95F611EC88E42C7EC4F9AE02.roa File: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (raw, json) Hash identifier: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c= Subject key identifier: 1E:37:F5:4E:E6:3F:73:11:56:E4:2B:48:0A:D5:DA:A7:96:61:A3:57 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 045A Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E6B9A5DA95F611EC88E42C7EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:09:49 +0000 ROA not before: Mon 24 Nov 2025 23:15:56 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9299 IP address blocks: 103.146.59.0/24 maxlen: 24 202.0.116.0/24 maxlen: 24 2001:df2:4d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Nov 24 23:15:56 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a464cd-0b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:28:4d:74:0e:5b:7f:98:8f:6f:8a:13:11: ed:15:56:55:f9:21:80:ce:2d:fb:c9:c6:a1:df:45: 68:2a:aa:80:3e:ec:02:cf:57:5a:a1:e1:d7:e7:1c: 89:05:e9:56:d2:16:f6:3b:77:57:0f:1e:d7:cf:45: cc:f1:69:d6:d0:40:38:71:7f:60:32:a6:13:01:99: 3b:1b:dc:e4:52:e9:a4:58:10:4e:c7:11:d9:98:37: 77:03:91:89:5e:ae:8d:1e:77:e0:d2:ef:19:40:8d: 57:50:d0:54:79:6f:4d:ed:41:82:a2:75:62:72:67: a6:94:97:a3:7e:37:b1:6e:9b:ed:e6:59:58:85:5f: 4a:58:4b:8e:12:d0:90:7b:dd:3f:b9:cf:96:a1:f4: 21:3e:48:ae:cb:08:20:9c:03:c1:2d:ab:67:6e:36: b4:cc:b3:59:a8:e8:73:92:d1:19:7c:c5:07:4d:4b: c9:9b:b8:88:7b:a5:ad:86:e9:9a:71:a8:58:9d:b4: ef:50:d2:86:43:3a:d6:31:65:07:0b:c0:71:46:69: 85:ec:00:dc:6b:ef:34:7a:6f:76:d6:a8:3e:25:1b: 31:57:2b:33:e9:19:62:aa:58:a6:a2:ba:6b:8e:c0: f5:02:46:3a:e6:6c:0c:13:4c:22:09:f8:ba:44:3b: 73:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:37:F5:4E:E6:3F:73:11:56:E4:2B:48:0A:D5:DA:A7:96:61:A3:57 X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E6B9A5DA95F611EC88E42C7EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.146.59.0/24 202.0.116.0/24 IPv6: 2001:df2:4d80::/48 Signature Algorithm: sha256WithRSAEncryption b8:4c:9e:03:dd:2a:59:1c:16:31:67:f6:c6:b9:ea:15:7f:a7: 36:ca:a2:b3:b7:3e:f1:09:25:9b:f9:f2:e4:d7:29:dd:95:78: fc:97:31:a8:87:aa:8b:e3:62:15:a2:52:9c:5c:9b:55:ec:44: 08:4f:49:44:1a:46:cf:89:e6:f7:73:27:3a:22:7f:d1:57:72: 4f:9c:ac:5e:fc:ad:b5:c4:77:47:8b:20:e4:2a:cd:ea:c7:6d: f4:f2:31:78:4f:09:e7:9a:c9:0b:ff:7b:a9:b9:89:9e:77:00: c6:03:be:50:ab:ab:56:21:9f:23:80:e1:b9:ee:34:ee:46:20: 9b:6a:93:a2:5c:72:df:c3:7f:fc:4d:48:7b:db:45:81:a4:7e: fb:3d:a6:76:54:ff:f6:ed:8f:a1:c1:13:fe:9b:98:d0:18:af: 49:8f:3c:bd:34:76:e2:a5:e0:ae:4e:52:b6:6d:76:b4:bc:31: c0:93:71:77:0c:14:f0:a8:69:7a:ad:12:c7:d3:fb:45:87:8e: 27:3e:7b:99:18:5d:3a:bc:9f:67:21:55:3d:21:16:7a:3b:db: e5:11:cf:c4:cf:11:c5:c8:f8:81:da:e7:eb:df:21:66:68:2f: 7b:20:87:7d:24:a8:16:46:89:19:26:f8:39:6a:81:2b:22:a2: db:f0:c7:64 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjUxMTI0MjMxNTU2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjRjZC0wYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluYoTXQOW3+Yj2+KExHtFVZV+SGAzi37ycah30VoKqqAPuwCz1daoeHX5xyJ BelW0hb2O3dXDx7Xz0XM8WnW0EA4cX9gMqYTAZk7G9zkUumkWBBOxxHZmDd3A5GJ Xq6NHnfg0u8ZQI1XUNBUeW9N7UGConVicmemlJejfjexbpvt5llYhV9KWEuOEtCQ e90/uc+WofQhPkiuywggnAPBLatnbja0zLNZqOhzktEZfMUHTUvJm7iIe6Wthuma cahYnbTvUNKGQzrWMWUHC8BxRmmF7ADca+80em921qg+JRsxVysz6Rliqlimorpr jsD1AkY65mwME0wiCfi6RDtzxwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFB439U7m P3MRVuQrSArV2qeWYaNXMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzUwMjAvQkUxRUU1MDQ5NDcwMTFFQzkxQjQ2QzREQzRGOUFFMDIvRTZCOUE1REE5 NUY2MTFFQzg4RTQyQzdFQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ5I7AwQAygB0MA8EAgACMAkDBwAgAQ3yTYAwDQYJKoZIhvcNAQEL BQADggEBALhMngPdKlkcFjFn9sa56hV/pzbKorO3PvEJJZv58uTXKd2VePyXMaiH qovjYhWiUpxcm1XsRAhPSUQaRs+J5vdzJzoif9FXck+crF78rbXEd0eLIOQqzerH bfTyMXhPCeeayQv/e6m5iZ53AMYDvlCrq1YhnyOA4bnuNO5GIJtqk6Jcct/Df/xN SHvbRYGkfvs9pnZU//btj6HBE/6bmNAYr0mPPL00duKl4K5OUrZtdrS8McCTcXcM FPCoaXqtEsfT+0WHjic+e5kYXTq8n2chVT0hFno72+URz8TPEcXI+IHa5+vfIWZo L3sgh30kqBZGiRkm+DlqgSsiotvwx2Q= -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:54 2026 by rpki-client