$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa File: 6ED5481209DF11EAA6052433C4F9AE02.roa (raw, json) Hash identifier: C3RgvD5sPzLlBXfiiW3TziQAdATMPl8r0fgRpNe+V8Y= Subject key identifier: B6:11:22:E9:AE:B0:B9:FF:F1:A6:72:D1:06:38:D7:EA:E2:3F:29:5D Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0CCD Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:25:19 +0000 ROA not before: Tue 02 Sep 2025 19:08:28 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9441 IP address blocks: 43.224.116.0/22 maxlen: 24 43.225.148.0/24 maxlen: 24 43.225.149.0/24 maxlen: 24 43.225.150.0/24 maxlen: 24 43.225.151.0/24 maxlen: 24 45.124.168.0/22 maxlen: 24 103.4.144.0/22 maxlen: 24 103.230.60.0/22 maxlen: 24 103.245.204.0/22 maxlen: 24 103.250.68.0/24 maxlen: 24 103.250.69.0/24 maxlen: 24 103.250.70.0/24 maxlen: 24 103.250.71.0/24 maxlen: 24 2404:9900::/32 maxlen: 40 2404:9900:1::/48 maxlen: 48 2404:9900:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Sep 2 19:08:28 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a45a5e-0c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:15:30:ff:0b:43:41:84:da:b4:0e:1d:b6: 10:84:ce:19:f2:04:ac:9a:8f:34:ea:13:fd:7b:f1: df:8f:72:c5:91:a6:48:93:9f:30:1e:b9:0f:1b:09: 9c:2b:a8:ee:3c:0a:e5:50:59:0e:f5:be:7d:7e:28: 2c:10:b1:27:41:1b:85:b5:79:07:90:7a:bd:31:2b: 1f:87:35:f2:e1:d0:40:20:4b:6b:18:8f:14:76:a1: fc:2d:a9:49:d3:ec:6a:62:1c:ea:61:b0:64:92:45: d2:e0:ab:69:3e:a1:f8:92:f3:30:57:f0:36:3b:36: 56:ae:29:ec:2b:29:f3:78:bb:dd:99:50:6c:1e:cc: 52:e5:fc:9e:01:32:4c:f4:7f:df:7d:e2:31:95:1a: 93:4c:fb:de:25:8d:f9:92:1f:c9:d3:bb:df:1a:7f: f4:de:8e:6b:0f:55:bf:35:b1:83:2f:07:86:0e:cc: 55:6c:06:6b:8b:5b:34:b8:7d:58:4e:4e:b4:9d:bf: a9:32:88:d0:d3:1c:7e:42:7c:57:d0:40:6c:f5:fd: 82:1f:31:45:07:2d:3f:bf:36:43:14:55:12:29:f7: 14:e9:6a:0a:2d:b8:9e:52:60:be:6e:7c:3b:16:f0: ec:87:91:f4:6a:01:c2:43:7a:3a:f5:88:2a:04:39: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:11:22:E9:AE:B0:B9:FF:F1:A6:72:D1:06:38:D7:EA:E2:3F:29:5D X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.116.0/22 43.225.148.0/22 45.124.168.0/22 103.4.144.0/22 103.230.60.0/22 103.245.204.0/22 103.250.68.0/22 IPv6: 2404:9900::/32 Signature Algorithm: sha256WithRSAEncryption 5f:05:6a:9f:3b:91:ff:2c:36:9c:6d:45:d6:74:cb:92:ad:19: ad:c3:cc:f9:c2:dd:a4:3e:b2:b1:50:01:bb:8a:37:34:a9:e6: 9b:dd:7f:07:a1:f2:d5:bb:b0:c7:4b:a4:a4:d3:af:68:98:bf: 7a:88:91:81:d2:03:f1:49:80:54:18:d3:58:95:60:63:06:12: da:4d:2e:fd:69:ea:5e:fb:4a:f5:70:78:23:d4:57:8d:63:cf: c7:8e:34:75:fe:5a:4e:dd:1c:4a:d6:4e:2a:ec:13:3f:dd:88: a0:2e:b0:86:1a:24:8b:a7:c2:b5:e5:13:d5:a2:07:ef:e8:48: 8d:9a:31:40:5c:62:c4:f3:9c:aa:11:51:c4:4a:96:dc:c4:01: 06:24:0d:ba:ac:5a:d3:ce:97:b3:e2:c9:c4:b7:7d:84:ec:77: 54:59:06:88:98:b6:e7:1a:86:98:d5:22:a0:ea:c9:2d:8d:d1: 57:c1:25:d5:ab:94:f3:24:67:23:ce:69:ee:9a:bf:a4:30:71: fc:22:2b:37:49:0c:2f:3f:47:0a:95:e5:75:2b:ee:8f:c6:a5: 03:01:2c:16:e1:99:44:17:9a:0b:0e:cd:f9:d2:b7:75:35:d1: ca:82:4d:98:a8:70:04:ba:fd:98:00:dd:ce:e1:4d:80:c9:62: 56:ad:ff:9d -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjUwOTAyMTkwODI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWE1ZS0wYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4IVMP8LQ0GE2rQOHbYQhM4Z8gSsmo806hP9e/Hfj3LFkaZIk58wHrkPGwmc K6juPArlUFkO9b59figsELEnQRuFtXkHkHq9MSsfhzXy4dBAIEtrGI8UdqH8LalJ 0+xqYhzqYbBkkkXS4KtpPqH4kvMwV/A2OzZWrinsKynzeLvdmVBsHsxS5fyeATJM 9H/ffeIxlRqTTPveJY35kh/J07vfGn/03o5rD1W/NbGDLweGDsxVbAZri1s0uH1Y Tk60nb+pMojQ0xx+QnxX0EBs9f2CHzFFBy0/vzZDFFUSKfcU6WoKLbieUmC+bnw7 FvDsh5H0agHCQ3o69YgqBDl9PwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFLYRIumu sLn/8aZy0QY41+riPyldMB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkU1RkIvQzE1NkRGOEUwOURFMTFFQTlFNEU3RDMyQzRGOUFFMDIvNkVENTQ4MTIw OURGMTFFQUE2MDUyNDMzQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCK+B0AwQCK+GUAwQCLXyoAwQCZwSQAwQCZ+Y8AwQCZ/XMAwQCZ/pE MA0EAgACMAcDBQAkBJkAMA0GCSqGSIb3DQEBCwUAA4IBAQBfBWqfO5H/LDacbUXW dMuSrRmtw8z5wt2kPrKxUAG7ijc0qeab3X8HofLVu7DHS6Sk069omL96iJGB0gPx SYBUGNNYlWBjBhLaTS79aepe+0r1cHgj1FeNY8/HjjR1/lpO3RxK1k4q7BM/3Yig LrCGGiSLp8K15RPVogfv6EiNmjFAXGLE85yqEVHESpbcxAEGJA26rFrTzpez4snE t32E7HdUWQaImLbnGoaY1SKg6sktjdFXwSXVq5TzJGcjzmnumr+kMHH8Iis3SQwv P0cKleV1K+6PxqUDASwW4ZlEF5oLDs350rd1NdHKgk2YqHAEuv2YAN3O4U2AyWJW rf+d -----END CERTIFICATE-----Generated at Mon Mar 2 07:51:09 2026 by rpki-client