$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/A6E8B05401D611F1A42696D7366F56BC.roa File: A6E8B05401D611F1A42696D7366F56BC.roa (raw, json) Hash identifier: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g= Subject key identifier: 6C:A7:F1:EB:18:95:06:E2:26:3E:CD:D2:AF:AC:F7:C4:53:E4:E1:60 Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 04DE Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/A6E8B05401D611F1A42696D7366F56BC.roa Signing time: Sun 01 Mar 2026 18:43:27 +0000 ROA not before: Wed 04 Feb 2026 14:34:46 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9009 IP address blocks: 43.228.156.0/24 maxlen: 24 43.228.158.0/24 maxlen: 24 103.47.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Feb 4 14:34:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a488cf-3a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b4:77:29:08:0f:ac:9f:eb:a2:4d:58:f7:97: 84:d4:63:87:f0:b3:f8:ea:7d:74:d2:4a:f7:8d:53: 17:96:1b:09:90:98:fd:ab:71:71:42:22:2c:52:b1: 1f:54:96:32:89:5e:1a:eb:4d:79:0a:d6:43:e1:f3: 4d:a4:c1:b8:82:8f:0b:3c:e7:9b:ae:29:1d:af:d5: 2e:99:79:59:a1:d9:e6:89:27:86:38:25:a1:fe:ed: ca:4c:eb:71:89:96:87:9a:6e:7d:e8:32:ac:9f:de: c8:e5:9b:ce:55:78:e6:d0:4e:80:6b:73:6d:e2:52: 70:77:1e:a3:e2:ad:8f:0d:6b:ec:fb:b8:73:e8:f9: 93:03:64:f4:5e:c7:6d:ef:96:c4:98:cc:bf:e3:91: 68:e2:f7:17:2c:46:d1:7c:3b:0f:d1:b1:65:5a:bc: 43:05:75:4b:79:b1:8f:f3:40:2b:fb:7d:13:7e:d3: 91:16:c5:b1:9e:86:6e:b3:7f:a3:eb:db:6e:30:24: 85:82:35:c0:9c:20:04:a9:dd:75:f6:7d:6e:74:1b: 8b:08:f3:06:bb:c7:33:10:25:26:34:6e:67:2e:ff: 07:46:b8:b8:4a:10:ac:68:ad:ca:ba:dd:70:4f:85: e3:38:b3:dc:38:ec:e3:d9:fa:29:dc:2b:1f:da:e0: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A7:F1:EB:18:95:06:E2:26:3E:CD:D2:AF:AC:F7:C4:53:E4:E1:60 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/A6E8B05401D611F1A42696D7366F56BC.roa sbgp-ipAddrBlock: critical IPv4: 43.228.156.0/24 43.228.158.0/24 103.47.146.0/24 Signature Algorithm: sha256WithRSAEncryption a0:34:f7:c1:01:3d:75:00:a0:99:df:9d:b9:9d:6c:9e:a1:8e: 40:2d:21:e2:dc:00:e4:35:1f:da:cd:fb:50:55:aa:00:ae:7a: 73:9a:9f:87:5f:82:ab:55:c3:8c:9c:b3:d2:fd:d9:54:b6:03: 2d:9a:ed:c5:a9:df:ed:90:aa:6e:0e:a7:2f:21:d9:78:08:ee: 55:38:40:3d:d7:32:3f:b4:5b:81:44:60:d7:1b:2e:6f:de:9f: e0:19:93:c7:ac:01:29:ad:bd:5c:e5:75:3e:ab:f0:bf:2f:f8: 25:2d:3f:d4:bc:73:6c:53:16:b2:da:65:cd:23:f1:4a:fa:64: 2e:50:5e:da:92:07:62:64:6f:89:ba:1c:14:44:12:50:16:7b: ff:c3:c6:43:c7:61:a5:d4:97:0a:01:e6:47:92:bc:7e:a7:61: 96:c7:13:9e:ad:f8:19:64:70:d5:49:f7:f0:bb:d9:56:aa:e2: fa:79:e5:bc:14:25:07:57:f2:8c:a1:ed:6e:72:ee:1d:3f:b9: b9:43:51:49:d4:1f:e5:e1:01:40:ad:6d:bd:80:aa:69:6e:85: 2c:e8:cb:d4:87:c8:d0:60:e8:2c:4a:04:bb:15:68:fd:80:1d: 63:b3:bc:69:9d:d7:22:c5:71:34:42:fb:27:e2:6b:e4:c1:55: 0b:26:ad:9c -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjYwMjA0MTQzNDQ2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODhjZi0zYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkLR3KQgPrJ/rok1Y95eE1GOH8LP46n100kr3jVMXlhsJkJj9q3FxQiIsUrEf VJYyiV4a6015CtZD4fNNpMG4go8LPOebrikdr9UumXlZodnmiSeGOCWh/u3KTOtx iZaHmm596DKsn97I5ZvOVXjm0E6Aa3Nt4lJwdx6j4q2PDWvs+7hz6PmTA2T0Xsdt 75bEmMy/45Fo4vcXLEbRfDsP0bFlWrxDBXVLebGP80Ar+30TftORFsWxnoZus3+j 69tuMCSFgjXAnCAEqd119n1udBuLCPMGu8czECUmNG5nLv8HRri4ShCsaK3Kut1w T4XjOLPcOOzj2fop3Csf2uDHCQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGyn8esY lQbiJj7N0q+s98RT5OFgMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvQTZFOEIwNTQw MUQ2MTFGMUE0MjY5NkQ3MzY2RjU2QkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK+ScAwQAK+SeAwQAZy+SMA0GCSqGSIb3DQEBCwUAA4IBAQCgNPfB AT11AKCZ3525nWyeoY5ALSHi3ADkNR/azftQVaoArnpzmp+HX4KrVcOMnLPS/dlU tgMtmu3Fqd/tkKpuDqcvIdl4CO5VOEA91zI/tFuBRGDXGy5v3p/gGZPHrAEprb1c 5XU+q/C/L/glLT/UvHNsUxay2mXNI/FK+mQuUF7akgdiZG+JuhwURBJQFnv/w8ZD x2Gl1JcKAeZHkrx+p2GWxxOerfgZZHDVSffwu9lWquL6eeW8FCUHV/KMoe1ucu4d P7m5Q1FJ1B/l4QFArW29gKppboUs6MvUh8jQYOgsSgS7FWj9gB1js7xpndcixXE0 Qvsn4mvkwVULJq2c -----END CERTIFICATE-----Generated at Mon Mar 2 10:34:14 2026 by rpki-client