$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa File: 6C1DC926C3E111E9A0172583C4F9AE02.roa (raw, json) Hash identifier: 0mEpj3V1AYE87Bzr4xRBGla/U1m2NCzvdHZ/ZwxJ9F0= Subject key identifier: 0C:03:AD:17:A2:7C:A5:7D:AF:AA:91:72:DE:70:0F:81:69:68:72:34 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 36A0 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa Signing time: Sat 02 Aug 2025 15:53:07 +0000 ROA not before: Sat 02 Aug 2025 15:53:07 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 24211 IP address blocks: 103.49.220.0/22 maxlen: 22 103.49.220.0/23 maxlen: 23 103.49.222.0/23 maxlen: 23 203.190.240.0/21 maxlen: 21 203.190.244.0/23 maxlen: 23 203.190.246.0/23 maxlen: 23 2402:a000::/32 maxlen: 32 2402:a000::/48 maxlen: 48 2402:a000:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13984 (0x36a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Aug 2 15:53:07 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=688e3463-5fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:09:3a:87:4b:ab:38:69:44:86:67:ff:b8:25: bd:25:bc:c7:51:bc:66:0b:67:3e:d0:dc:53:98:7c: e6:b9:b9:66:63:96:f0:4a:c7:13:96:95:86:b2:1f: 56:af:3b:4f:92:55:f8:82:b0:49:1d:10:64:bb:a0: d3:cc:b7:7a:3a:8c:5d:3e:8e:02:20:2a:26:57:e5: 74:47:89:26:50:a9:95:ef:25:d1:19:d1:8d:be:21: 45:12:08:f5:f1:d2:21:e1:2a:31:e2:71:1d:e6:7b: 11:13:63:63:f3:eb:98:bd:87:66:3c:9b:77:c3:4f: dd:62:bb:36:0b:89:1c:cd:80:bf:71:e0:3f:57:3c: 53:e4:ac:11:eb:b1:c8:67:2a:c7:a4:68:04:c6:bb: 95:4e:1e:e6:8a:42:af:7d:06:a3:2d:64:3e:45:f1: 3c:2a:f2:12:d8:61:b9:28:12:43:f9:5d:0d:d3:bc: fb:58:33:54:9e:23:c1:51:9a:65:f5:06:84:4f:76: 89:c3:92:75:ad:ed:87:20:ce:ca:71:12:c5:9c:eb: f1:93:97:34:c5:d9:37:3f:35:b3:fb:23:c2:4d:da: 9e:1c:4a:b5:ec:2d:32:25:64:55:1e:8c:95:9e:16: a0:8b:ec:08:48:3e:5e:93:1e:80:e5:99:f2:bb:84: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:03:AD:17:A2:7C:A5:7D:AF:AA:91:72:DE:70:0F:81:69:68:72:34 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.220.0/22 203.190.240.0/21 IPv6: 2402:a000::/32 Signature Algorithm: sha256WithRSAEncryption 4b:a8:95:7f:87:06:e6:6a:53:54:81:74:25:d7:36:34:57:21: a6:6b:c0:17:5c:46:10:bb:be:8c:e1:f1:4d:4b:ea:8c:eb:df: e7:d3:0c:c1:6f:0a:b3:2e:ca:c6:69:e1:75:04:25:b9:d8:dc: f3:3a:7d:1a:b4:54:03:a0:8d:20:d6:a5:9b:31:5d:3a:56:eb: f7:fa:50:2f:90:65:7f:65:ca:4b:c1:02:33:45:64:e4:f1:74: c0:68:ad:c6:bf:b7:9c:3c:00:90:19:b0:15:47:75:dc:93:d9: 56:12:40:fc:ec:0f:af:39:fc:12:54:90:d0:9c:09:e8:59:d6: ce:2c:a8:c0:0f:68:9c:e5:f4:db:ee:22:ec:d9:67:15:28:23: e5:68:ce:b0:9e:f0:0c:d8:89:c1:96:bb:b5:2c:2a:a8:0d:1f: f2:ef:3e:39:3f:1b:71:66:67:9a:7e:c8:17:da:59:65:3e:95: e0:72:f3:21:9f:a4:1f:07:84:a4:03:7f:12:c6:9b:5a:c9:d9: c0:a4:f2:3e:9b:66:05:1f:af:fe:a9:c5:f4:99:e9:f6:f7:34: 99:18:25:5a:ea:44:b3:4a:4c:88:ac:e3:e0:45:7c:f2:24:a2: 2a:31:3b:d9:6c:b7:10:c3:de:11:d0:55:2a:72:07:16:42:5d: b5:eb:02:42 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICNqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwODAyMTU1MzA3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMzQ2My01ZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQk6h0urOGlEhmf/uCW9JbzHUbxmC2c+0NxTmHzmublmY5bwSscTlpWGsh9W rztPklX4grBJHRBku6DTzLd6OoxdPo4CIComV+V0R4kmUKmV7yXRGdGNviFFEgj1 8dIh4Sox4nEd5nsRE2Nj8+uYvYdmPJt3w0/dYrs2C4kczYC/ceA/VzxT5KwR67HI ZyrHpGgExruVTh7mikKvfQajLWQ+RfE8KvIS2GG5KBJD+V0N07z7WDNUniPBUZpl 9QaET3aJw5J1re2HIM7KcRLFnOvxk5c0xdk3PzWz+yPCTdqeHEq17C0yJWRVHoyV nhagi+wISD5ekx6A5Znyu4RL0QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAwDrRei fKV9r6qRct5wD4FpaHI0MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNkMxREM5MjZD M0UxMTFFOUEwMTcyNTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnMdwDBAPLvvAwDQQCAAIwBwMFACQCoAAwDQYJKoZIhvcN AQELBQADggEBAEuolX+HBuZqU1SBdCXXNjRXIaZrwBdcRhC7vozh8U1L6ozr3+fT DMFvCrMuysZp4XUEJbnY3PM6fRq0VAOgjSDWpZsxXTpW6/f6UC+QZX9lykvBAjNF ZOTxdMBorca/t5w8AJAZsBVHddyT2VYSQPzsD685/BJUkNCcCehZ1s4sqMAPaJzl 9NvuIuzZZxUoI+VozrCe8AzYicGWu7UsKqgNH/LvPjk/G3FmZ5p+yBfaWWU+leBy 8yGfpB8HhKQDfxLGm1rJ2cCk8j6bZgUfr/6pxfSZ6fb3NJkYJVrqRLNKTIis4+BF fPIkoioxO9lstxDD3hHQVSpyBxZCXbXrAkI= -----END CERTIFICATE-----Generated at Sat Aug 9 05:37:25 2025 by rpki-client