$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C0E589A3F7511F092C7A20DC4F9AE02.roa File: 6C0E589A3F7511F092C7A20DC4F9AE02.roa (raw, json) Hash identifier: JEZCzkGtlrPChBcS4ghZBE72c5F3gtM9O97SVq74GLA= Subject key identifier: 43:62:E6:81:15:2E:BF:E2:B0:F7:DB:54:8D:DF:B5:2E:CB:7A:72:BB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D926 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C0E589A3F7511F092C7A20DC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:57:58 +0000 ROA not before: Fri 06 Jun 2025 15:11:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134004 IP address blocks: 59.153.96.0/22 maxlen: 24 103.51.20.0/22 maxlen: 24 103.215.204.0/22 maxlen: 24 2402:f80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55590 (0xd926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 6 15:11:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c476-4e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:bc:4a:43:c4:13:4d:4c:69:09:25:17:67: 65:f1:6f:24:f5:04:89:aa:53:ca:b5:e1:4a:5a:aa: 65:a9:a8:a5:f4:e1:5b:ee:4a:4d:0f:c4:ca:c9:07: 29:a8:05:b1:0a:19:d4:c3:b1:0c:e0:7e:de:0c:f4: d7:7c:90:2a:66:95:24:50:4e:f1:32:98:d1:51:e0: b7:e1:6b:a3:52:42:70:6b:44:e6:97:4b:0c:28:e3: fb:f2:11:13:11:2d:69:a4:17:4a:89:4d:63:36:67: ec:b0:77:c0:e2:e9:b0:c6:bd:d5:4d:27:cd:26:fc: 39:ea:d6:14:0c:a0:5e:49:b2:d3:bd:9f:a7:6b:0f: 86:46:30:85:cc:b7:71:9c:5e:3c:53:2b:36:ab:eb: 54:91:1b:ee:1b:05:8b:08:a8:01:bb:4a:d6:ca:27: 13:ab:86:4b:6b:98:32:87:86:3c:77:f9:66:c7:9a: 22:00:fe:dd:05:44:cd:09:13:65:e5:38:c8:37:53: cb:3d:3a:91:92:36:c0:dc:c2:8c:47:a3:db:91:20: ac:10:e5:69:a3:ae:6c:df:47:c1:a8:5c:81:a5:db: 7f:87:ad:9f:c3:3d:42:a0:8d:cd:49:a4:28:ef:a3: 8b:95:c0:8c:6d:a5:d3:44:88:8d:ce:66:b8:37:8e: 81:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:62:E6:81:15:2E:BF:E2:B0:F7:DB:54:8D:DF:B5:2E:CB:7A:72:BB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C0E589A3F7511F092C7A20DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.153.96.0/22 103.51.20.0/22 103.215.204.0/22 IPv6: 2402:f80::/32 Signature Algorithm: sha256WithRSAEncryption 2a:16:7e:73:6f:12:58:f6:fb:88:11:04:38:95:ea:bb:4d:e9: 47:5e:63:f1:27:5f:74:fa:a6:55:31:ba:93:40:75:4a:d5:67: 15:33:ba:15:ec:41:07:b8:1a:0b:5e:0e:7c:56:97:d9:ee:b6: 90:04:4e:b9:d7:ce:f3:79:0b:b9:cf:1e:49:7a:bf:0e:b5:2e: 40:16:28:66:a1:64:ff:1a:21:e9:36:06:d0:15:31:f9:99:fb: e0:6e:ba:16:30:da:d6:96:13:aa:08:62:50:36:de:6c:95:23: 45:a9:7f:12:dc:89:5b:c9:96:66:f7:ec:f8:b3:f4:31:fb:4e: bf:d9:12:dd:aa:11:a6:0a:d4:88:2a:e6:2d:a9:fe:7f:77:14: 45:f8:44:3d:21:2d:50:31:cc:33:d2:1b:2f:f7:65:c6:87:cc: 7d:e7:ce:9f:b8:ea:a0:42:34:99:f5:3f:c6:86:fa:8a:b6:ff: c0:c6:6b:36:e3:cb:ea:d7:3f:e9:4e:f1:a6:f6:52:b8:7b:57: e0:d8:c3:aa:df:9c:fe:61:31:5e:6b:b6:8d:24:a6:44:11:bb: 07:20:5a:9f:21:5f:7d:0a:f6:25:3d:2c:b9:a2:8f:89:b7:06: 14:5e:7e:53:c1:ae:b4:6d:04:0a:76:36:54:4c:6a:9e:69:d5: 0c:65:60:7f -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIDANkmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYwNjE1MTExMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM0NzYtNGU5YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnTvEpDxBNNTGkJJRdnZfFvJPUEiapTyrXhSlqqZamopfThW+5KTQ/EyskH KagFsQoZ1MOxDOB+3gz013yQKmaVJFBO8TKY0VHgt+Fro1JCcGtE5pdLDCjj+/IR ExEtaaQXSolNYzZn7LB3wOLpsMa91U0nzSb8OerWFAygXkmy072fp2sPhkYwhcy3 cZxePFMrNqvrVJEb7hsFiwioAbtK1sonE6uGS2uYMoeGPHf5ZseaIgD+3QVEzQkT ZeU4yDdTyz06kZI2wNzCjEej25EgrBDlaaOubN9HwahcgaXbf4etn8M9QqCNzUmk KO+ji5XAjG2l00SIjc5muDeOgfMCAwEAAaOCAnswggJ3MB0GA1UdDgQWBBRDYuaB FS6/4rD321SN37Uuy3pyuzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZDMEU1ODlB M0Y3NTExRjA5MkM3QTIwREM0RjlBRTAyLnJvYTA6BggrBgEFBQcBBwEB/wQrMCkw GAQCAAEwEgMEAjuZYAMEAmczFAMEAmfXzDANBAIAAjAHAwUAJAIPgDANBgkqhkiG 9w0BAQsFAAOCAQEAKhZ+c28SWPb7iBEEOJXqu03pR15j8SdfdPqmVTG6k0B1StVn FTO6FexBB7gaC14OfFaX2e62kAROudfO83kLuc8eSXq/DrUuQBYoZqFk/xoh6TYG 0BUx+Zn74G66FjDa1pYTqghiUDbebJUjRal/EtyJW8mWZvfs+LP0MftOv9kS3aoR pgrUiCrmLan+f3cURfhEPSEtUDHMM9IbL/dlxofMfefOn7jqoEI0mfU/xob6irb/ wMZrNuPL6tc/6U7xpvZSuHtX4NjDqt+c/mExXmu2jSSmRBG7ByBanyFffQr2JT0s uaKPibcGFF5+U8GutG0ECnY2VExqnmnVDGVgfw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:16 2026 by rpki-client