$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa File: 6ED5481209DF11EAA6052433C4F9AE02.roa (raw, json) Hash identifier: bP4mtdPcC9gJRT9cgoHrxBppsqMyFJRwGR6OCAipZzc= Subject key identifier: EE:49:0F:82:89:2D:50:34:55:E3:B4:87:34:83:93:D7:F8:44:27:96 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0C69 Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa Signing time: Tue 02 Sep 2025 19:08:28 +0000 ROA not before: Tue 02 Sep 2025 19:08:28 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9441 IP address blocks: 43.224.116.0/22 maxlen: 24 43.225.148.0/24 maxlen: 24 43.225.149.0/24 maxlen: 24 43.225.150.0/24 maxlen: 24 43.225.151.0/24 maxlen: 24 45.124.168.0/22 maxlen: 24 103.4.144.0/22 maxlen: 24 103.230.60.0/22 maxlen: 24 103.245.204.0/22 maxlen: 24 103.250.68.0/24 maxlen: 24 103.250.69.0/24 maxlen: 24 103.250.70.0/24 maxlen: 24 103.250.71.0/24 maxlen: 24 2404:9900::/32 maxlen: 40 2404:9900:1::/48 maxlen: 48 2404:9900:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Sep 2 19:08:28 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b740ab-ac1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:32:02:54:2f:00:2f:51:35:b8:95:dd:93: ad:95:53:6e:b2:ac:2f:db:1a:40:fa:e7:7e:6a:21: 20:31:0d:b3:02:c9:d6:90:ca:51:30:48:4f:53:72: 26:b3:ac:83:eb:71:99:56:34:11:a5:9d:20:49:24: 0c:18:73:6b:38:e7:da:3e:6b:ba:ba:28:ba:ae:18: 08:b0:fa:51:80:53:b3:4a:bd:c6:e9:b8:1d:6d:2d: e5:97:84:89:f7:52:1f:33:74:f7:d9:17:24:a9:2b: a6:7e:e0:ba:14:f8:80:83:ec:81:89:e2:7e:96:13: 56:92:f6:dc:fd:90:05:c5:77:9a:39:a7:8b:56:be: ac:a8:96:35:5f:0b:d8:b3:bc:b6:08:dc:99:9b:ca: 1e:93:fd:39:34:bf:b4:4d:a3:0d:ec:d0:96:13:60: 58:06:76:9c:7b:8a:c0:f3:1c:03:65:1c:ea:30:6e: f8:af:d8:d0:31:1c:39:33:98:74:c3:0a:b1:bf:dc: 57:8c:ea:1f:53:1d:9c:d0:aa:17:63:13:eb:4a:b5: 00:bf:ab:fa:fc:d4:83:97:cf:62:3e:5c:85:e4:c1: 83:50:14:88:b5:23:0e:f8:44:fb:8a:41:51:48:f2: ce:d3:c2:41:fb:1f:19:c0:4e:5c:53:85:16:65:a9: 15:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:49:0F:82:89:2D:50:34:55:E3:B4:87:34:83:93:D7:F8:44:27:96 X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.116.0/22 43.225.148.0/22 45.124.168.0/22 103.4.144.0/22 103.230.60.0/22 103.245.204.0/22 103.250.68.0/22 IPv6: 2404:9900::/32 Signature Algorithm: sha256WithRSAEncryption a8:1b:7d:1f:e1:bf:fb:be:10:8f:eb:5d:80:c1:45:5f:ea:2b: ff:1a:14:69:93:e3:8f:f2:dd:d6:54:5f:4a:e8:f7:c2:08:2f: 65:43:3e:81:25:7f:47:72:68:d1:06:90:e5:56:d0:c4:e5:48: 93:b1:c3:fc:d8:7d:fb:6d:28:d0:f1:24:fe:61:bb:a3:2f:a2: 01:16:90:66:a0:8b:6a:db:6f:cd:79:8e:99:d3:d6:46:8e:51: c0:da:1e:7d:52:fa:5f:1b:a8:42:78:8c:47:a4:1a:c0:da:ea: aa:67:1a:98:10:63:09:a9:6c:20:81:d9:29:38:3e:42:4a:7f: cd:ff:29:23:39:f5:dd:5d:87:75:c9:66:8e:80:d9:54:67:4a: 53:ea:2d:b7:f7:f5:2d:f3:1e:e5:50:73:eb:6c:0a:cb:24:2b: 00:05:d5:87:39:a4:4b:86:51:b6:33:d8:dc:e6:b0:17:e8:84: 26:cb:49:26:a9:cc:41:b8:dc:08:34:e3:3c:6f:bc:bf:31:00: af:c1:a5:13:1b:a7:b3:12:49:3a:7f:76:f5:51:6a:a7:32:e3: e8:dc:30:47:6a:6b:29:02:fb:3c:9e:d0:db:49:81:33:90:ad: 70:a1:8d:ca:2e:76:24:3e:2d:f8:dc:e5:59:88:f7:08:8d:d8: 7a:58:c1:38 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjUwOTAyMTkwODI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NDBhYi1hYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys4yAlQvAC9RNbiV3ZOtlVNusqwv2xpA+ud+aiEgMQ2zAsnWkMpRMEhPU3Im s6yD63GZVjQRpZ0gSSQMGHNrOOfaPmu6uii6rhgIsPpRgFOzSr3G6bgdbS3ll4SJ 91IfM3T32RckqSumfuC6FPiAg+yBieJ+lhNWkvbc/ZAFxXeaOaeLVr6sqJY1XwvY s7y2CNyZm8oek/05NL+0TaMN7NCWE2BYBnace4rA8xwDZRzqMG74r9jQMRw5M5h0 wwqxv9xXjOofUx2c0KoXYxPrSrUAv6v6/NSDl89iPlyF5MGDUBSItSMO+ET7ikFR SPLO08JB+x8ZwE5cU4UWZakVJwIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFO5JD4KJ LVA0VeO0hzSDk9f4RCeWMB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkU1RkIvQzE1NkRGOEUwOURFMTFFQTlFNEU3RDMyQzRGOUFFMDIvNkVENTQ4MTIw OURGMTFFQUE2MDUyNDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMDAEAgABMCoDBAIr4HQDBAIr4ZQDBAItfKgDBAJnBJADBAJn5jwDBAJn9cwD BAJn+kQwDQQCAAIwBwMFACQEmQAwDQYJKoZIhvcNAQELBQADggEBAKgbfR/hv/u+ EI/rXYDBRV/qK/8aFGmT44/y3dZUX0ro98IIL2VDPoElf0dyaNEGkOVW0MTlSJOx w/zYffttKNDxJP5hu6MvogEWkGagi2rbb815jpnT1kaOUcDaHn1S+l8bqEJ4jEek GsDa6qpnGpgQYwmpbCCB2Sk4PkJKf83/KSM59d1dh3XJZo6A2VRnSlPqLbf39S3z HuVQc+tsCsskKwAF1Yc5pEuGUbYz2NzmsBfohCbLSSapzEG43Ag04zxvvL8xAK/B pRMbp7MSSTp/dvVRaqcy4+jcMEdqaykC+zye0NtJgTOQrXChjcoudiQ+Lfjc5VmI 9wiN2HpYwTg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:42 2025 by rpki-client