$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa File: 6ED5481209DF11EAA6052433C4F9AE02.roa (raw, json) Hash identifier: S8UR8Pn5oelpMcuQkBy3qp9Od6g69KBr7LuxEQT5fp0= Subject key identifier: 05:74:8A:65:6E:39:48:31:68:73:34:49:68:FF:58:7C:3F:B0:91:B6 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0D32 Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa Signing time: Thu 20 Aug 2026 18:36:11 +0000 ROA not before: Thu 20 Aug 2026 18:36:11 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 9441 IP address blocks: 43.224.116.0/22 maxlen: 24 43.225.148.0/24 maxlen: 24 43.225.149.0/24 maxlen: 24 43.225.150.0/24 maxlen: 24 43.225.151.0/24 maxlen: 24 45.124.168.0/22 maxlen: 24 103.4.144.0/22 maxlen: 24 103.230.60.0/22 maxlen: 24 103.245.204.0/22 maxlen: 24 103.250.68.0/24 maxlen: 24 103.250.69.0/24 maxlen: 24 103.250.70.0/24 maxlen: 24 103.250.71.0/24 maxlen: 24 2404:9900::/32 maxlen: 40 2404:9900:1::/48 maxlen: 48 2404:9900:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Aug 20 18:36:11 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a87491b-a657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ae:db:08:5d:ee:63:4a:ad:1e:f3:00:bb:10: 79:5c:3b:7a:0d:e0:fb:1d:7a:4b:b8:f6:a5:26:d9: ef:16:d3:b9:a8:12:af:50:0a:5e:79:00:3c:f5:c4: 09:be:d3:33:e2:fd:4a:78:bb:39:1b:30:06:86:1c: 02:b1:94:a7:2e:19:0f:df:8e:77:91:ec:8a:16:0a: c7:5f:b1:81:6b:66:9f:42:72:3c:a8:16:99:ad:af: ab:d8:c2:00:6b:a5:72:f7:02:3a:0f:53:79:1f:c0: eb:0c:6a:45:60:a8:32:46:c4:87:a7:99:88:4b:ed: 7f:b5:7f:47:20:51:97:e1:0a:d8:6f:06:87:71:2b: e8:e3:99:62:dd:b2:8f:8f:7e:e7:3c:3c:f6:f7:98: 4a:98:c4:17:cc:e8:17:05:e4:53:77:07:22:00:cc: f7:8d:32:f7:00:70:f2:42:72:14:69:62:b5:d1:e0: ae:ea:12:6a:0b:07:d1:84:13:31:64:d2:26:ed:c2: a2:c5:44:bf:aa:0b:f2:f9:6c:a7:fe:5e:18:0a:2e: a7:51:1f:0b:e9:9f:90:0d:b4:f7:15:94:f5:04:d3: 15:b9:e6:4a:f6:e8:e0:5c:f1:a8:3b:3d:17:f4:0c: 34:13:ea:02:91:1d:66:76:b1:5d:62:d0:27:3a:96: b8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:74:8A:65:6E:39:48:31:68:73:34:49:68:FF:58:7C:3F:B0:91:B6 X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.116.0/22 43.225.148.0/22 45.124.168.0/22 103.4.144.0/22 103.230.60.0/22 103.245.204.0/22 103.250.68.0/22 IPv6: 2404:9900::/32 Signature Algorithm: sha256WithRSAEncryption 9f:9f:a9:6d:9e:0e:a4:44:dc:50:65:ae:8d:8f:f9:28:ab:40: 76:9c:33:10:c6:22:94:7b:d7:a0:de:ae:08:c0:47:ae:54:f6: b2:10:cb:bc:fd:21:79:20:32:20:75:99:4e:55:de:cc:30:d2: a1:18:6d:21:34:2e:a4:a4:7f:f7:e9:85:d3:ea:54:67:44:f6: b6:29:c4:ab:92:bb:ea:ff:84:50:e8:35:d4:63:fb:0c:b9:5f: a0:7a:e5:96:ee:2a:c4:b7:f3:13:0a:e9:9b:d1:4a:d6:60:16: 0d:da:92:61:94:66:cb:fa:0c:ca:1d:be:14:4c:78:3d:04:5c: 53:72:54:0f:87:78:23:e4:fe:60:00:b3:bb:65:0c:e5:5c:e5: 25:87:f2:f3:8c:19:fc:6e:63:8d:7f:e1:c7:e7:3f:14:51:eb: 11:0d:96:ab:44:e8:21:71:4a:29:b8:20:24:33:2a:e8:f1:a5: d7:fe:19:68:b9:dc:c7:fc:c6:09:66:c0:e2:2d:d7:6f:7a:5b: 8a:4e:fb:60:22:3e:01:39:e8:00:30:97:d0:c3:42:14:0b:c7: ec:44:59:7c:b9:ba:af:1e:a0:f0:f9:f9:cf:82:64:87:2c:42: 3f:1d:df:ca:a2:a3:aa:35:c1:8a:7e:30:54:dc:45:5d:b1:db: 31:8b:a3:4a -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjYwODIwMTgzNjExWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3NDkxYi1hNjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6K7bCF3uY0qtHvMAuxB5XDt6DeD7HXpLuPalJtnvFtO5qBKvUApeeQA89cQJ vtMz4v1KeLs5GzAGhhwCsZSnLhkP3453keyKFgrHX7GBa2afQnI8qBaZra+r2MIA a6Vy9wI6D1N5H8DrDGpFYKgyRsSHp5mIS+1/tX9HIFGX4QrYbwaHcSvo45li3bKP j37nPDz295hKmMQXzOgXBeRTdwciAMz3jTL3AHDyQnIUaWK10eCu6hJqCwfRhBMx ZNIm7cKixUS/qgvy+Wyn/l4YCi6nUR8L6Z+QDbT3FZT1BNMVueZK9ujgXPGoOz0X 9Aw0E+oCkR1mdrFdYtAnOpa4KQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFAV0imVu OUgxaHM0SWj/WHw/sJG2MB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkU1RkIvQzE1NkRGOEUwOURFMTFFQTlFNEU3RDMyQzRGOUFFMDIvNkVENTQ4MTIw OURGMTFFQUE2MDUyNDMzQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCK+B0AwQCK+GUAwQCLXyoAwQCZwSQAwQCZ+Y8AwQCZ/XMAwQCZ/pE MA0EAgACMAcDBQAkBJkAMA0GCSqGSIb3DQEBCwUAA4IBAQCfn6ltng6kRNxQZa6N j/koq0B2nDMQxiKUe9eg3q4IwEeuVPayEMu8/SF5IDIgdZlOVd7MMNKhGG0hNC6k pH/36YXT6lRnRPa2KcSrkrvq/4RQ6DXUY/sMuV+geuWW7irEt/MTCumb0UrWYBYN 2pJhlGbL+gzKHb4UTHg9BFxTclQPh3gj5P5gALO7ZQzlXOUlh/LzjBn8bmONf+HH 5z8UUesRDZarROghcUopuCAkMyro8aXX/hloudzH/MYJZsDiLddveluKTvtgIj4B OegAMJfQw0IUC8fsRFl8ubqvHqDw+fnPgmSHLEI/Hd/KoqOqNcGKfjBU3EVdsdsx i6NK -----END CERTIFICATE-----Generated at Sun Sep 27 04:10:49 2026 by rpki-client