$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6B09C1DAB16811ECBB0AD94EC4F9AE02.roa File: 6B09C1DAB16811ECBB0AD94EC4F9AE02.roa (raw, json) Hash identifier: bJsvmUyY4RkQ9FdjlARrJUmiaMImRmXsWePN2NAKgqM= Subject key identifier: ED:BA:C3:DC:9A:DC:19:A3:57:4D:94:FD:5A:FE:CC:7D:1D:D5:B4:6A Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Certificate serial: 1AA1 Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6B09C1DAB16811ECBB0AD94EC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:24:02 +0000 ROA not before: Sat 12 Apr 2025 16:24:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17649 IP address blocks: 116.89.224.0/20 maxlen: 20 203.97.224.0/24 maxlen: 24 203.97.225.0/24 maxlen: 24 203.97.226.0/24 maxlen: 24 203.97.227.0/24 maxlen: 24 203.97.229.0/24 maxlen: 24 203.144.32.0/20 maxlen: 20 2406:9a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6817 (0x1aa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Validity Not Before: Apr 12 16:24:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48442-7f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:93:1a:28:f5:ff:db:48:aa:dd:e3:84:09: 92:71:d8:f4:db:7a:8b:ea:51:2c:18:ce:49:86:f6: 56:6c:55:9b:fc:74:ea:28:7f:df:b4:9c:c8:ff:11: c6:03:20:e9:4f:e4:6e:c1:d1:4b:2d:6e:42:3b:a0: 58:81:3f:4e:fb:53:13:be:59:89:a7:a2:c5:0a:99: f7:17:f8:03:8e:3c:3f:1c:d8:d5:9f:7b:1b:f4:d7: 8e:37:91:59:fb:a6:56:a2:64:a9:9d:3a:af:9b:ba: d7:d5:64:ed:b5:54:ff:d2:85:8e:0f:f9:6c:ec:3a: 47:b7:58:29:5d:06:42:11:d0:4d:82:fb:dd:27:ab: b3:19:12:95:6c:b2:c0:36:d1:b8:85:b4:28:0a:84: f2:f6:fd:07:fd:dc:72:a0:dc:fb:ca:99:95:95:ca: 33:a7:4e:bb:26:9a:5f:8f:db:f6:ca:97:9f:66:03: ae:c9:80:8f:0c:e6:28:e7:d2:f5:ba:8b:dd:15:2d: eb:7c:38:1b:79:16:35:14:1a:7f:9c:88:c6:c0:c9: 7e:e5:c9:09:cb:f7:97:12:b1:5d:6b:87:b7:3a:b8: 65:c0:b2:55:53:fc:9d:78:ac:1a:a0:6d:78:9c:4b: 93:50:52:48:ea:b5:0d:e6:f1:92:fb:ce:e0:de:63: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BA:C3:DC:9A:DC:19:A3:57:4D:94:FD:5A:FE:CC:7D:1D:D5:B4:6A X509v3 Authority Key Identifier: keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6B09C1DAB16811ECBB0AD94EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.89.224.0/20 203.97.224.0/22 203.97.229.0/24 203.144.32.0/20 IPv6: 2406:9a00::/32 Signature Algorithm: sha256WithRSAEncryption ac:68:9b:8f:23:51:19:c9:c9:99:d5:a6:19:1c:6a:22:16:49: a7:61:98:26:ce:b2:a2:98:4d:03:17:66:4a:ad:f7:88:29:d7: 1c:79:27:ef:ab:8b:f7:fd:71:a6:8f:e7:ae:a9:c4:d8:be:de: 3f:2a:2a:a2:90:31:ca:85:58:21:57:8b:d4:cc:51:43:d7:8e: 7a:82:f4:aa:a1:47:ff:af:9a:6a:9e:e4:8c:f7:b6:f3:e2:b1: 29:30:42:6d:b3:b2:5a:86:6d:d1:59:bb:30:34:be:e0:fc:f0: 12:2e:89:cf:28:c7:7e:1f:94:be:97:f1:67:03:c9:14:a0:ab: c0:ae:ac:7f:a8:10:11:c8:5d:8a:68:34:6e:fa:2e:fb:87:96: 16:de:71:ce:85:2c:61:e0:e5:98:98:8e:d5:55:2c:3e:71:92: d7:ea:1f:f0:87:f3:70:e0:e3:cd:53:43:f8:44:90:a4:bf:2c: 2b:b6:82:1c:e9:59:ac:97:16:5e:ed:a5:12:79:c7:0c:73:29: 61:c3:ea:06:c2:4d:01:69:9f:c8:1a:05:17:cc:aa:2a:7a:65: 5a:0e:dc:89:43:02:59:c4:40:7d:fc:94:ea:27:14:0a:47:15: 47:5f:b2:a2:e1:5b:b5:84:ab:22:56:72:11:82:22:48:b7:79: 8d:3a:cd:e6 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICGqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2 RjhFRDkwMDUwHhcNMjUwNDEyMTYyNDU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODQ0Mi03ZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+OTGij1/9tIqt3jhAmScdj023qL6lEsGM5JhvZWbFWb/HTqKH/ftJzI/xHG AyDpT+RuwdFLLW5CO6BYgT9O+1MTvlmJp6LFCpn3F/gDjjw/HNjVn3sb9NeON5FZ +6ZWomSpnTqvm7rX1WTttVT/0oWOD/ls7DpHt1gpXQZCEdBNgvvdJ6uzGRKVbLLA NtG4hbQoCoTy9v0H/dxyoNz7ypmVlcozp067Jppfj9v2ypefZgOuyYCPDOYo59L1 uovdFS3rfDgbeRY1FBp/nIjGwMl+5ckJy/eXErFda4e3OrhlwLJVU/ydeKwaoG14 nEuTUFJI6rUN5vGS+87g3mP7VQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFO26w9ya 3BmjV02U/Vr+zH0d1bRqMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvNkIwOUMxREFC MTY4MTFFQ0JCMEFEOTRFQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQEdFngAwQCy2HgAwQAy2HlAwQEy5AgMA0EAgACMAcDBQAkBpoAMA0G CSqGSIb3DQEBCwUAA4IBAQCsaJuPI1EZycmZ1aYZHGoiFkmnYZgmzrKimE0DF2ZK rfeIKdcceSfvq4v3/XGmj+euqcTYvt4/KiqikDHKhVghV4vUzFFD1456gvSqoUf/ r5pqnuSM97bz4rEpMEJts7Jahm3RWbswNL7g/PASLonPKMd+H5S+l/FnA8kUoKvA rqx/qBARyF2KaDRu+i77h5YW3nHOhSxh4OWYmI7VVSw+cZLX6h/wh/Nw4OPNU0P4 RJCkvywrtoIc6VmslxZe7aUSeccMcylhw+oGwk0BaZ/IGgUXzKoqemVaDtyJQwJZ xEB9/JTqJxQKRxVHX7Ki4Vu1hKsiVnIRgiJIt3mNOs3m -----END CERTIFICATE-----Generated at Mon Mar 2 06:17:31 2026 by rpki-client