$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/B6C42C027E7111ECA6454787C4F9AE02.roa File: B6C42C027E7111ECA6454787C4F9AE02.roa (raw, json) Hash identifier: M/+6+zmNMUvA6JNrgynPFdNhvv1L8eRbrIvaeGcptyk= Subject key identifier: B6:AC:CE:CC:C0:3B:F5:E7:F8:2C:9A:95:01:19:77:9C:88:F2:F6:06 Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 269C Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/B6C42C027E7111ECA6454787C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:27:59 +0000 ROA not before: Sun 28 Sep 2025 16:13:26 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58752 IP address blocks: 43.245.232.0/22 maxlen: 24 103.31.176.0/23 maxlen: 24 2407:1500::/32 maxlen: 32 2407:1500:20::/48 maxlen: 48 2407:1500:21::/48 maxlen: 48 2407:1500:22::/48 maxlen: 48 2407:1500:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9884 (0x269c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Sep 28 16:13:26 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45aff-1026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:e2:16:23:a1:3b:06:d4:a5:c5:03:4c:31: 08:6f:7c:83:91:4f:c5:a7:52:7d:c1:a9:22:4e:f2: 80:b3:89:8e:4d:4e:bb:89:14:9a:71:7b:da:79:f2: 47:00:20:fd:58:05:c7:32:e0:12:d0:30:b6:4d:83: 23:f7:15:bb:f7:82:dc:b1:f4:f9:c0:d3:ff:9d:64: e6:a6:ca:97:95:ee:1a:2b:85:8f:64:75:15:01:d9: 80:6d:06:6d:17:51:24:fd:ec:c3:6d:63:4e:f0:0c: 03:aa:d6:0b:2b:ea:e8:7d:02:b6:6f:42:00:05:20: 3e:15:fb:37:96:62:24:1b:8b:e1:e4:c3:f8:f7:c1: a2:6f:b6:93:06:4a:06:0a:f4:71:dd:10:a1:c1:f5: 32:5f:e7:30:9d:ab:21:1c:ed:d4:b1:12:85:e6:7c: a2:19:69:fa:17:6c:4c:df:0a:16:2e:50:ac:86:85: a2:88:21:96:4e:49:0c:bb:e3:60:3a:6c:f7:6d:fe: c6:b7:11:e9:20:61:a5:6c:88:a6:4d:53:cb:a6:d5: 24:50:3b:3f:85:62:fe:d5:40:91:88:10:dd:56:57: 37:c6:7c:f6:47:ad:2a:31:27:8a:e6:62:55:ac:d1: da:65:d2:61:9e:3b:78:5f:b4:cc:06:24:24:a5:d1: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AC:CE:CC:C0:3B:F5:E7:F8:2C:9A:95:01:19:77:9C:88:F2:F6:06 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/B6C42C027E7111ECA6454787C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.232.0/22 103.31.176.0/23 IPv6: 2407:1500::/32 Signature Algorithm: sha256WithRSAEncryption 53:57:3f:39:ed:89:54:c8:4c:cb:19:96:79:01:33:19:44:09: 0c:94:e2:b0:fc:32:c2:7d:4c:a0:0c:ef:d3:9b:75:48:a1:e1: fd:d3:3e:10:af:e1:15:4f:a4:e6:a1:2a:ec:f0:37:55:6f:94: 90:0d:e6:db:a8:f6:0a:f1:4b:aa:a0:71:85:49:73:8a:7c:c0: 37:5b:43:bb:f5:f2:b2:6f:9d:83:93:20:73:64:f5:fd:d6:a6: e1:cc:04:20:e7:63:1c:a7:8a:9a:fd:77:c7:ba:c9:0d:78:2e: 72:da:87:26:08:21:f3:80:6b:39:11:ce:bd:7f:df:25:05:b4: d6:9c:29:c2:6d:d6:03:fe:b8:a6:72:25:c3:a3:8b:95:a4:11: a4:9b:d4:ee:a8:72:25:2e:2b:f0:67:00:8e:a9:c3:d3:88:2a: 8c:05:38:b6:d6:2e:8b:34:bd:d7:40:79:fc:f1:eb:5e:c3:e5: 3f:76:51:d5:39:48:3c:6d:9c:f0:fe:2b:78:e3:66:15:9c:55: c8:8d:a0:0d:ab:5c:dd:84:0d:e6:e1:c7:3a:57:d0:3f:f5:ae: 1c:4b:50:22:1b:92:c2:44:80:25:64:6e:06:9d:55:60:fd:25: cd:62:97:60:12:5a:68:0f:aa:c6:68:52:8a:75:9a:d7:d2:dd: d5:c1:78:de -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICJpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjUwOTI4MTYxMzI2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWFmZi0xMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoHiFiOhOwbUpcUDTDEIb3yDkU/Fp1J9wakiTvKAs4mOTU67iRSacXvaefJH ACD9WAXHMuAS0DC2TYMj9xW794LcsfT5wNP/nWTmpsqXle4aK4WPZHUVAdmAbQZt F1Ek/ezDbWNO8AwDqtYLK+rofQK2b0IABSA+Ffs3lmIkG4vh5MP498Gib7aTBkoG CvRx3RChwfUyX+cwnashHO3UsRKF5nyiGWn6F2xM3woWLlCshoWiiCGWTkkMu+Ng Omz3bf7GtxHpIGGlbIimTVPLptUkUDs/hWL+1UCRiBDdVlc3xnz2R60qMSeK5mJV rNHaZdJhnjt4X7TMBiQkpdH5wwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFLaszszA O/Xn+CyalQEZd5yI8vYGMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc1NEYvMkFEMTZGMzAxQTRBMTFFNTkyMDlFRDcyQzRGOUFFMDIvQjZDNDJDMDI3 RTcxMTFFQ0E2NDU0Nzg3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/XoAwQBZx+wMA0EAgACMAcDBQAkBxUAMA0GCSqGSIb3DQEBCwUA A4IBAQBTVz857YlUyEzLGZZ5ATMZRAkMlOKw/DLCfUygDO/Tm3VIoeH90z4Qr+EV T6TmoSrs8DdVb5SQDebbqPYK8UuqoHGFSXOKfMA3W0O79fKyb52DkyBzZPX91qbh zAQg52Mcp4qa/XfHuskNeC5y2ocmCCHzgGs5Ec69f98lBbTWnCnCbdYD/rimciXD o4uVpBGkm9TuqHIlLivwZwCOqcPTiCqMBTi21i6LNL3XQHn88etew+U/dlHVOUg8 bZzw/it442YVnFXIjaANq1zdhA3m4cc6V9A/9a4cS1AiG5LCRIAlZG4GnVVg/SXN YpdgElpoD6rGaFKKdZrX0t3VwXje -----END CERTIFICATE-----Generated at Mon Mar 2 21:11:56 2026 by rpki-client