$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6C286292CFEB11F085499838C4F9AE02.roa File: 6C286292CFEB11F085499838C4F9AE02.roa (raw, json) Hash identifier: Tc8T+jGZvUc2gOggw2WJDYb6YDi/7ZL/F4f3pz9OafU= Subject key identifier: A3:94:CC:9D:CC:41:67:92:46:63:9E:D0:EF:5B:72:AB:D7:C7:E1:3C Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC Certificate serial: 19F7 Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6C286292CFEB11F085499838C4F9AE02.roa Signing time: Tue 15 Sep 2026 00:08:26 +0000 ROA not before: Tue 15 Sep 2026 00:08:26 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 31898 IP address blocks: 101.0.64.0/18 maxlen: 24 103.208.218.0/23 maxlen: 24 110.173.128.0/19 maxlen: 24 111.118.160.0/20 maxlen: 24 116.90.0.0/18 maxlen: 24 182.160.128.0/18 maxlen: 24 203.19.59.0/24 maxlen: 24 203.98.70.0/23 maxlen: 24 203.98.73.0/24 maxlen: 24 203.98.75.0/24 maxlen: 24 203.98.80.0/24 maxlen: 24 203.98.84.0/24 maxlen: 24 203.98.86.0/24 maxlen: 24 203.98.91.0/24 maxlen: 24 203.98.95.0/24 maxlen: 24 203.123.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6647 (0x19f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC Validity Not Before: Sep 15 00:08:26 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6aa88c7a-dd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:39:40:5d:79:d2:cc:ca:27:1a:b6:12:b7: e2:fd:a6:c4:b4:ff:98:bb:48:ce:62:dc:da:fd:69: 51:e9:3d:dc:73:32:6d:17:e5:02:e9:c5:d1:b4:b6: 81:71:e2:17:a6:4c:f0:b8:58:46:a0:24:87:ce:f4: 1b:f4:96:59:34:f0:6a:25:a5:10:ce:8c:ba:97:bf: 87:8e:47:18:d3:3e:a9:49:2f:3c:da:b0:4a:ed:0d: 2c:98:fe:1b:23:68:b3:33:dd:0c:d9:69:e7:85:fd: f0:74:bc:95:4b:e5:03:29:94:cf:b3:e1:e1:26:89: 25:a5:f5:ae:98:f1:f6:4e:4c:90:1b:3c:0a:09:4c: c5:36:87:3a:48:a1:5f:68:60:09:5c:4f:80:4b:e6: 4e:c6:99:24:77:d6:af:24:3f:ce:eb:90:75:9c:7f: 1a:70:75:96:ae:6d:7f:9d:2d:a8:1f:f0:31:08:16: 24:f7:de:10:ef:29:fa:c0:1e:b2:42:42:73:ff:54: 1a:83:b9:9f:9a:35:59:4c:fd:60:7e:29:19:43:40: ed:a0:8b:04:2b:66:97:fa:dc:40:5f:93:6c:49:9e: 9d:90:5a:49:8d:0a:9c:bd:dc:5a:1e:85:0e:ea:c1: 86:90:38:f0:65:51:6e:2b:da:3e:cf:80:3a:28:91: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:94:CC:9D:CC:41:67:92:46:63:9E:D0:EF:5B:72:AB:D7:C7:E1:3C X509v3 Authority Key Identifier: keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6C286292CFEB11F085499838C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.0.64.0/18 103.208.218.0/23 110.173.128.0/19 111.118.160.0/20 116.90.0.0/18 182.160.128.0/18 203.19.59.0/24 203.98.70.0/23 203.98.73.0/24 203.98.75.0/24 203.98.80.0/24 203.98.84.0/24 203.98.86.0/24 203.98.91.0/24 203.98.95.0/24 203.123.59.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:bd:c9:37:b8:9d:a3:43:f3:fe:0f:d8:07:2d:8e:11:2b:38: a0:f5:72:bb:da:90:28:18:50:41:a2:a4:10:7c:3d:44:8e:b6: 4a:44:37:ab:7a:bf:8f:95:87:75:1a:f3:7c:bc:d8:3a:1b:44: 80:89:03:d6:d9:76:88:f1:2d:b8:8b:c6:8f:d5:e8:3d:82:b4: d2:1a:50:a8:be:5c:1d:77:bc:fe:d3:7b:ac:35:1c:8a:23:73: 5e:66:40:0c:32:7d:bd:b5:ab:06:2d:c8:e0:cc:c4:5e:ae:7a: 4d:1d:05:16:cb:ec:17:55:fd:68:a3:84:91:6c:5e:9a:dd:64: 17:a1:85:0c:59:ce:81:43:10:77:05:03:17:05:18:bc:b1:1b: ff:33:d8:ef:b9:75:3c:70:77:ad:3e:50:a5:70:9c:28:27:bd: 7c:0b:be:77:af:20:b5:bb:94:e1:3b:1a:2a:40:65:03:89:bb: 87:ed:b5:22:dd:c1:8b:df:ef:7d:62:b3:69:66:3c:0a:f8:04: d6:31:37:43:78:1a:ed:83:59:da:15:50:a2:ae:34:1d:35:fd: f5:c8:68:3c:07:20:98:0d:fd:e5:d8:55:fc:2f:43:1b:36:4d: b7:42:9d:dc:7d:ac:06:55:0f:d2:37:1d:11:29:50:ff:bb:4f: 56:d8:7c:73 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICGfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw REQzQTMzRUMwHhcNMjYwOTE1MDAwODI2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4OGM3YS1kZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpE5QF150szKJxq2Erfi/abEtP+Yu0jOYtza/WlR6T3cczJtF+UC6cXRtLaB ceIXpkzwuFhGoCSHzvQb9JZZNPBqJaUQzoy6l7+HjkcY0z6pSS882rBK7Q0smP4b I2izM90M2Wnnhf3wdLyVS+UDKZTPs+HhJoklpfWumPH2TkyQGzwKCUzFNoc6SKFf aGAJXE+AS+ZOxpkkd9avJD/O65B1nH8acHWWrm1/nS2oH/AxCBYk994Q7yn6wB6y QkJz/1Qag7mfmjVZTP1gfikZQ0DtoIsEK2aX+txAX5NsSZ6dkFpJjQqcvdxaHoUO 6sGGkDjwZVFuK9o+z4A6KJGAzQIDAQABo4ICujCCArYwHQYDVR0OBBYEFKOUzJ3M QWeSRmOe0O9bcqvXx+E8MB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4 M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIzM0UvMkY2NkI1N0FCODNFMTFFN0EwMUQ2NjUwQzRGOUFFMDIvNkMyODYyOTJD RkVCMTFGMDg1NDk5ODM4QzRGOUFFMDIucm9hMHkGCCsGAQUFBwEHAQH/BGowaDBm BAIAATBgAwQGZQBAAwQBZ9DaAwQFbq2AAwQEb3agAwQGdFoAAwQGtqCAAwQAyxM7 AwQBy2JGAwQAy2JJAwQAy2JLAwQAy2JQAwQAy2JUAwQAy2JWAwQAy2JbAwQAy2Jf AwQAy3s7MA0GCSqGSIb3DQEBCwUAA4IBAQCfvck3uJ2jQ/P+D9gHLY4RKzig9XK7 2pAoGFBBoqQQfD1EjrZKRDerer+PlYd1GvN8vNg6G0SAiQPW2XaI8S24i8aP1eg9 grTSGlCovlwdd7z+03usNRyKI3NeZkAMMn29tasGLcjgzMRernpNHQUWy+wXVf1o o4SRbF6a3WQXoYUMWc6BQxB3BQMXBRi8sRv/M9jvuXU8cHetPlClcJwoJ718C753 ryC1u5ThOxoqQGUDibuH7bUi3cGL3+99YrNpZjwK+ATWMTdDeBrtg1naFVCirjQd Nf31yGg8ByCYDf3l2FX8L0MbNk23Qp3cfawGVQ/SNx0RKVD/u09W2Hxz -----END CERTIFICATE-----Generated at Tue Sep 22 22:09:23 2026 by rpki-client