$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6BAC9870794A11F1A904CD4C78A30FBC.roa File: 6BAC9870794A11F1A904CD4C78A30FBC.roa (raw, json) Hash identifier: uT/amMHTwHlIRlyCymPbnAFM1uqBIqKOQHg945Nk16U= Subject key identifier: CC:D0:C7:63:4F:C3:78:F4:00:A7:37:46:D5:B8:03:60:3F:B0:1F:1E Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1 Certificate serial: 0310 Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6BAC9870794A11F1A904CD4C78A30FBC.roa Signing time: Tue 15 Sep 2026 20:06:42 +0000 ROA not before: Tue 15 Sep 2026 20:06:42 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 46606 IP address blocks: 43.225.52.0/22 maxlen: 24 103.50.160.0/22 maxlen: 24 103.195.184.0/23 maxlen: 24 103.195.186.0/24 maxlen: 24 103.195.187.0/24 maxlen: 24 103.224.22.0/24 maxlen: 24 137.59.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 784 (0x310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1 Validity Not Before: Sep 15 20:06:42 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6aa9a552-c4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:cb:a1:3e:41:ff:95:b1:5c:90:2e:ff:c3: b1:85:ac:b5:07:05:fc:ff:84:8b:2e:1d:ad:ac:e1: 82:91:02:21:a2:ae:b9:77:aa:1a:d6:e3:ea:f6:73: 3c:db:fa:02:c9:b9:87:a4:ca:25:93:01:15:5d:4f: a4:f9:aa:b6:0c:76:0e:62:dc:45:5d:b7:7b:d7:f2: 7b:20:1a:a0:b0:a9:af:aa:24:de:17:33:09:bf:e6: 55:d1:ef:5c:dc:8f:40:90:93:89:2a:18:5a:03:9e: 29:58:a9:f7:b5:bf:3e:32:59:8a:0b:af:a7:02:4f: 45:d4:fe:80:08:c8:b4:a0:7c:04:66:71:3a:8b:7e: a3:0c:b2:0e:47:b3:d4:05:b7:d8:9d:65:80:ea:f8: d4:2c:ea:ed:61:8a:49:dd:db:67:83:38:c8:f3:8d: 5e:03:06:d1:d4:bc:2b:cc:ef:ab:ab:3a:5c:9e:6b: ac:ec:fb:57:f3:ba:4a:9d:16:2b:97:d6:1d:01:c5: 20:87:1f:6c:2e:2a:19:b7:8f:d6:7b:39:1f:22:d3: 93:e0:9e:dc:26:69:6c:fe:fb:88:a2:d7:1b:a8:3d: 8d:11:d4:cf:02:07:24:19:57:a7:58:c9:83:3c:a6: fe:74:00:6e:c6:90:77:64:c3:68:60:84:cd:77:f9: d6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D0:C7:63:4F:C3:78:F4:00:A7:37:46:D5:B8:03:60:3F:B0:1F:1E X509v3 Authority Key Identifier: keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6BAC9870794A11F1A904CD4C78A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.225.52.0/22 103.50.160.0/22 103.195.184.0/22 103.224.22.0/24 137.59.148.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:c7:06:92:0d:3b:62:af:d8:64:25:c8:a6:e4:5e:fb:df:e4: 9b:c5:c2:3c:8c:6e:35:a1:32:32:7c:30:3d:cc:36:ef:fa:43: f9:3d:ee:8d:ed:25:1e:df:30:e1:a1:0f:44:d1:11:66:3b:5c: 5f:e4:3b:2d:33:d1:0c:93:65:bb:34:cc:d3:17:09:c1:a5:60: 0c:b4:1d:7e:90:e2:19:cd:f8:ed:88:87:6f:7d:b8:d1:24:22: 6c:0e:a8:25:2a:88:f4:61:7d:79:0b:11:40:c8:6a:b2:71:5f: 1d:66:9f:ee:28:bc:26:63:4a:c8:bd:c1:0f:a4:63:11:70:91: e2:21:ee:d5:b0:5b:16:05:0b:b9:a9:aa:90:d3:ba:a0:0a:35: 39:34:46:ee:3f:07:4c:d6:d5:4f:ae:ea:31:48:cc:a3:7b:5d: b2:a4:29:28:51:00:91:b3:98:fc:69:82:0d:de:e5:c8:68:79: d6:e9:31:56:11:d3:94:32:96:d1:24:65:2a:ce:fe:6f:e0:f0: 08:fa:82:19:c5:b7:64:ac:87:79:13:c3:b7:13:c4:1d:56:5c: 95:81:b9:40:42:38:a6:55:44:49:cb:13:d3:f0:eb:28:03:f3: 74:ff:89:4e:c7:e8:4d:11:37:e2:d3:3a:ae:ff:f8:99:38:2c: 1a:f1:8b:ac -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKEFFOTM4M0E5M0I2QzVBMTM1RDI2MTNBOTdDNURFQzk2 MDk2MjMzRjEwHhcNMjYwOTE1MjAwNjQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE5YTU1Mi1jNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqPLoT5B/5WxXJAu/8Oxhay1BwX8/4SLLh2trOGCkQIhoq65d6oa1uPq9nM8 2/oCybmHpMolkwEVXU+k+aq2DHYOYtxFXbd71/J7IBqgsKmvqiTeFzMJv+ZV0e9c 3I9AkJOJKhhaA54pWKn3tb8+MlmKC6+nAk9F1P6ACMi0oHwEZnE6i36jDLIOR7PU BbfYnWWA6vjULOrtYYpJ3dtngzjI841eAwbR1LwrzO+rqzpcnmus7PtX87pKnRYr l9YdAcUghx9sLioZt4/WezkfItOT4J7cJmls/vuIotcbqD2NEdTPAgckGVenWMmD PKb+dABuxpB3ZMNoYITNd/nWAQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFMzQx2NP w3j0AKc3RtW4A2A/sB8eMB8GA1UdIwQYMBaAFK6Tg6k7bFoTXSYTqXxd7JYJYjPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS81NzExNTlFMjRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9ycE9EcVR0c1doTmRKaE9wZkYzc2xnbGlN X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JwT0RxVHRzV2hOZEpoT3BmRjNzbGdsaU1fRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc0OEUvNTcxMTU5RTI0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvNkJBQzk4NzA3 OTRBMTFGMUE5MDRDRDRDNzhBMzBGQkMucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCK+E0AwQCZzKgAwQCZ8O4AwQAZ+AWAwQCiTuUMA0GCSqGSIb3DQEB CwUAA4IBAQCcxwaSDTtir9hkJcim5F773+SbxcI8jG41oTIyfDA9zDbv+kP5Pe6N 7SUe3zDhoQ9E0RFmO1xf5DstM9EMk2W7NMzTFwnBpWAMtB1+kOIZzfjtiIdvfbjR JCJsDqglKoj0YX15CxFAyGqycV8dZp/uKLwmY0rIvcEPpGMRcJHiIe7VsFsWBQu5 qaqQ07qgCjU5NEbuPwdM1tVPruoxSMyje12ypCkoUQCRs5j8aYIN3uXIaHnW6TFW EdOUMpbRJGUqzv5v4PAI+oIZxbdkrId5E8O3E8QdVlyVgblAQjimVURJyxPT8Oso A/N0/4lOx+hNETfi0zqu//iZOCwa8Yus -----END CERTIFICATE-----Generated at Sun Sep 20 16:25:05 2026 by rpki-client