$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa File: 6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa (raw, json) Hash identifier: D6tpPp7Ll/A4y9ONxhcjbknEAvuM6o4uTR2oa0SXvww= Subject key identifier: 90:47:C7:96:63:D9:4E:EC:BD:AE:B4:9A:98:82:EB:D6:F8:DE:B3:AA Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 36B2 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa Signing time: Sat 02 Aug 2025 15:53:23 +0000 ROA not before: Sat 02 Aug 2025 15:53:22 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 55666 IP address blocks: 43.252.156.0/22 maxlen: 24 49.128.176.0/21 maxlen: 24 103.17.244.0/22 maxlen: 24 103.247.120.0/22 maxlen: 24 103.249.65.0/24 maxlen: 24 103.255.240.0/22 maxlen: 24 111.68.24.0/21 maxlen: 24 112.78.32.0/21 maxlen: 24 116.254.112.0/21 maxlen: 24 119.2.48.0/21 maxlen: 24 203.30.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14002 (0x36b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Aug 2 15:53:22 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=688e3472-7115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:cf:2b:39:7a:d4:d7:b5:ad:3a:36:e5:08: 5e:e2:31:19:74:20:bb:6a:3c:44:ef:fc:e8:53:4b: 80:ec:ff:e9:0a:bc:85:44:36:09:4f:18:88:d1:82: d4:a5:ed:70:2c:c2:d4:a6:5f:f9:e2:8c:6a:e3:b7: 7c:c1:c9:91:28:ea:fd:c8:b4:67:2e:46:a5:35:e1: 79:5a:2e:a4:bb:6e:e6:55:75:61:98:22:d0:a3:2b: 11:28:48:23:6a:67:b2:f4:d2:3e:af:a4:bb:28:65: 72:e2:fd:bd:d4:aa:5c:be:aa:54:2e:37:b3:0b:54: 87:a9:07:df:8a:91:7c:ce:7f:53:1e:81:10:82:2c: 1a:b2:1f:e0:c8:7a:97:81:da:71:d9:23:22:4f:d7: 47:a4:c8:d2:65:ea:e7:d9:b0:fc:0f:51:07:f6:f9: 8d:3d:a7:88:c7:b2:98:26:79:6f:ee:b2:25:08:6e: fb:3d:2a:54:34:9f:a5:d4:35:33:33:58:da:ca:54: 89:10:aa:89:a6:4a:1c:55:9d:19:48:e7:78:74:71: d0:84:e3:ff:2d:fb:cb:3d:da:22:15:98:d2:80:df: 78:78:e2:40:1d:07:c3:9c:50:0a:b2:2f:5f:dd:38: 48:4c:3d:db:b8:5f:57:1a:0b:5b:f9:0e:50:e6:f5: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:47:C7:96:63:D9:4E:EC:BD:AE:B4:9A:98:82:EB:D6:F8:DE:B3:AA X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.156.0/22 49.128.176.0/21 103.17.244.0/22 103.247.120.0/22 103.249.65.0/24 103.255.240.0/22 111.68.24.0/21 112.78.32.0/21 116.254.112.0/21 119.2.48.0/21 203.30.236.0/23 Signature Algorithm: sha256WithRSAEncryption 20:bf:4d:37:0b:b9:7d:d1:68:28:c1:89:c7:4d:79:62:4a:33: 6a:34:63:05:d5:03:87:9c:7f:ad:a2:4c:3e:fe:8b:ac:b7:b8: ef:a3:3f:75:26:2f:59:9a:64:c3:3f:9e:a4:f5:73:fb:a1:87: 0f:e0:38:39:76:0b:ca:a3:40:c5:91:aa:e5:da:e9:28:ec:c9: ad:8f:4e:46:4c:1a:4b:ab:aa:8f:17:80:b6:53:1f:24:fe:4c: 86:71:2b:75:c9:63:65:21:7d:b8:93:cd:cd:a1:7e:22:5e:24: e3:b0:48:3a:dd:0d:a7:8c:0c:03:7f:fd:a8:97:83:63:ac:da: 97:80:74:40:78:d5:00:38:3c:b9:81:f2:c7:ad:a7:0a:15:60: 84:6a:da:bc:37:f5:73:e0:94:22:ee:7d:8b:f8:f0:ec:78:ee: c9:49:3d:17:a8:d6:71:85:b1:da:e3:a0:d6:4c:d1:b0:d5:af: 4a:a4:d2:51:a7:b0:6e:ad:3b:ed:0a:1e:e2:18:08:14:43:cb: 88:92:53:d1:dc:ec:58:4b:44:0b:f7:64:be:77:96:f1:c6:d2: 34:f3:ee:54:75:ad:8b:09:ac:48:3c:1d:6c:82:1c:ce:c4:a0: cc:23:d5:e2:aa:6b:bb:43:2f:0c:71:98:3b:3b:81:39:f6:8d: 9f:46:ea:f5 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgICNrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwODAyMTU1MzIyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMzQ3Mi03MTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjPPKzl61Ne1rTo25Qhe4jEZdCC7ajxE7/zoU0uA7P/pCryFRDYJTxiI0YLU pe1wLMLUpl/54oxq47d8wcmRKOr9yLRnLkalNeF5Wi6ku27mVXVhmCLQoysRKEgj amey9NI+r6S7KGVy4v291KpcvqpULjezC1SHqQffipF8zn9THoEQgiwash/gyHqX gdpx2SMiT9dHpMjSZern2bD8D1EH9vmNPaeIx7KYJnlv7rIlCG77PSpUNJ+l1DUz M1jaylSJEKqJpkocVZ0ZSOd4dHHQhOP/LfvLPdoiFZjSgN94eOJAHQfDnFAKsi9f 3ThITD3buF9XGgtb+Q5Q5vUklQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFJBHx5Zj 2U7sva60mpiC69b43rOqMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNkQ2QTZCN0FC RTdBMTFFOTlBRERGRDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E TDBKMEgEAgABMEIDBAIr/JwDBAMxgLADBAJnEfQDBAJn93gDBABn+UEDBAJn//AD BANvRBgDBANwTiADBAN0/nADBAN3AjADBAHLHuwwDQYJKoZIhvcNAQELBQADggEB ACC/TTcLuX3RaCjBicdNeWJKM2o0YwXVA4ecf62iTD7+i6y3uO+jP3UmL1maZMM/ nqT1c/uhhw/gODl2C8qjQMWRquXa6Sjsya2PTkZMGkurqo8XgLZTHyT+TIZxK3XJ Y2UhfbiTzc2hfiJeJOOwSDrdDaeMDAN//aiXg2Os2peAdEB41QA4PLmB8setpwoV YIRq2rw39XPglCLufYv48Ox47slJPReo1nGFsdrjoNZM0bDVr0qk0lGnsG6tO+0K HuIYCBRDy4iSU9Hc7FhLRAv3ZL53lvHG0jTz7lR1rYsJrEg8HWyCHM7EoMwj1eKq a7tDLwxxmDs7gTn2jZ9G6vU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:38:28 2025 by rpki-client