$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/6B6223B294D011F08FAC1420C4F9AE02.roa File: 6B6223B294D011F08FAC1420C4F9AE02.roa (raw, json) Hash identifier: ywPnX5HWIz7gB+GZOiMioEbYiFIq0HckI3yhWxQCoN4= Subject key identifier: 6E:48:D4:5B:43:D0:62:92:F9:75:31:F5:F1:8E:C8:58:88:FC:95:53 Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Certificate serial: 0D0E Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/6B6223B294D011F08FAC1420C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:43:39 +0000 ROA not before: Mon 24 Nov 2025 18:08:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139735 IP address blocks: 103.111.14.0/23 maxlen: 23 103.111.14.0/24 maxlen: 24 103.111.15.0/24 maxlen: 24 103.144.89.0/24 maxlen: 24 103.160.137.0/24 maxlen: 24 2001:df1:ba80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3342 (0xd0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Validity Not Before: Nov 24 18:08:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46cbb-d5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:55:a6:2f:8e:92:5e:19:fe:ac:5a:52:76: 97:17:3d:76:88:6c:92:82:6a:ff:d5:ac:9e:a5:81: e5:91:6e:57:be:c6:f6:5f:bf:1f:b7:0a:01:45:93: 70:e7:c9:ef:b6:22:3f:c5:da:a9:9b:d9:e7:c4:2e: 83:d9:99:83:fd:34:4a:c6:b8:67:a7:d3:3e:1f:cd: ed:d0:48:27:bc:60:80:c7:79:50:d3:db:05:1a:5a: c5:0c:c1:b4:66:b2:43:49:34:b7:0f:52:72:1f:d6: 55:73:61:4d:4b:48:52:0a:df:76:a5:cb:74:e0:63: 0a:5c:48:7b:74:ae:20:8b:39:0d:ed:0d:0e:86:0a: 1a:50:2f:b3:a5:a5:fd:0e:29:49:22:2d:67:28:eb: 5c:59:cc:25:52:e2:93:ee:bf:1a:c4:4a:a6:da:d3: 5f:a9:49:70:fc:0f:e7:05:9f:43:87:3f:4f:99:18: 2f:13:2c:07:bd:52:26:1f:b3:bb:fc:76:d3:02:a7: 8e:31:d6:bd:86:23:be:2c:7a:fa:d8:6d:b3:0e:c7: 0a:67:a1:10:5e:7d:11:85:a5:4d:6b:64:c5:0e:93: 21:e6:45:9b:b7:51:1f:45:39:2d:32:ff:55:84:47: bb:eb:7b:b9:dc:73:d0:d5:fe:a2:dd:bd:b5:46:7f: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:48:D4:5B:43:D0:62:92:F9:75:31:F5:F1:8E:C8:58:88:FC:95:53 X509v3 Authority Key Identifier: keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/6B6223B294D011F08FAC1420C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.111.14.0/23 103.144.89.0/24 103.160.137.0/24 IPv6: 2001:df1:ba80::/48 Signature Algorithm: sha256WithRSAEncryption 82:f4:5d:c0:f2:82:96:b4:46:e3:67:62:d9:ef:d0:cb:d2:8b: 2a:f0:fd:12:1f:79:4b:10:72:6c:31:2b:36:ed:b8:ca:83:e3: 24:f2:77:94:03:aa:cd:d5:f7:61:12:99:e6:d5:ee:d1:5f:a0: 9f:c9:7d:e2:99:f7:22:78:52:e9:84:02:de:11:66:75:93:37: 70:09:1d:91:c4:96:5b:f9:28:08:f4:87:d9:3c:22:8b:a8:04: ba:78:07:10:d3:1b:fd:4f:c0:52:19:87:1a:d5:24:7b:68:64: a8:cf:f0:a7:45:4b:5f:5e:3a:a1:80:77:0a:d1:83:98:c3:a9: 98:63:2c:9b:1e:b2:38:f5:e6:0e:c5:6c:6e:8c:61:9f:0b:c9: c4:0a:f4:12:93:3a:bb:33:92:2a:29:92:4e:89:43:79:2a:dd: ea:07:3c:26:a6:34:96:53:67:c0:11:b1:75:78:0a:bc:53:df: dd:61:e0:c5:ca:de:4e:9b:a2:2f:d5:04:61:d9:88:d7:26:55: 6e:bd:27:2d:ad:ec:82:25:4a:e5:50:e2:50:3e:c2:2b:41:69: f1:c5:97:2c:20:ec:bb:f8:4c:22:96:76:2b:63:88:ba:d5:2b: d7:15:ed:0c:b1:b4:22:5d:3f:f3:36:e4:25:12:ca:a4:71:c7: bb:26:49:e7 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICDQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzMzYxMTAvBgNVBAUTKEU2MjQ0MTJBNDI3OTU4OUI5RUMyRkFCMzIyMkJBQjA2 MjZEMzEyNUEwHhcNMjUxMTI0MTgwODA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmNiYi1kNWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv11Vpi+Okl4Z/qxaUnaXFz12iGySgmr/1ayepYHlkW5Xvsb2X78ftwoBRZNw 58nvtiI/xdqpm9nnxC6D2ZmD/TRKxrhnp9M+H83t0EgnvGCAx3lQ09sFGlrFDMG0 ZrJDSTS3D1JyH9ZVc2FNS0hSCt92pct04GMKXEh7dK4gizkN7Q0OhgoaUC+zpaX9 DilJIi1nKOtcWcwlUuKT7r8axEqm2tNfqUlw/A/nBZ9Dhz9PmRgvEywHvVImH7O7 /HbTAqeOMda9hiO+LHr62G2zDscKZ6EQXn0RhaVNa2TFDpMh5kWbt1EfRTktMv9V hEe763u53HPQ1f6i3b21Rn8z1wIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFG5I1FtD 0GKS+XUx9fGOyFiI/JVTMB8GA1UdIwQYMBaAFOYkQSpCeVibnsL6syIrqwYm0xJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODMzNi8xOUY3NUE2NjAx Q0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdKdWV3dnF6SWl1ckJpYlRF bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpUkJLa0o1V0p1ZXd2cXpJaXVyQmliVEVsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjgzMzYvMTlGNzVBNjYwMUNEMTFFQUI4NjVFQTIyQzRGOUFFMDIvNkI2MjIzQjI5 NEQwMTFGMDhGQUMxNDIwQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQBZ28OAwQAZ5BZAwQAZ6CJMA8EAgACMAkDBwAgAQ3xuoAwDQYJKoZI hvcNAQELBQADggEBAIL0XcDygpa0RuNnYtnv0MvSiyrw/RIfeUsQcmwxKzbtuMqD 4yTyd5QDqs3V92ESmebV7tFfoJ/JfeKZ9yJ4UumEAt4RZnWTN3AJHZHEllv5KAj0 h9k8IouoBLp4BxDTG/1PwFIZhxrVJHtoZKjP8KdFS19eOqGAdwrRg5jDqZhjLJse sjj15g7FbG6MYZ8LycQK9BKTOrszkiopkk6JQ3kq3eoHPCamNJZTZ8ARsXV4CrxT 391h4MXK3k6boi/VBGHZiNcmVW69Jy2t7IIlSuVQ4lA+witBafHFlywg7Lv4TCKW ditjiLrVK9cV7QyxtCJdP/M25CUSyqRxx7smSec= -----END CERTIFICATE-----Generated at Mon Mar 2 06:23:33 2026 by rpki-client