$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa File: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (raw, json) Hash identifier: w6jopDYdBCSKneIqUB+uGylPK/ivurOX7DEN4AdjgnA= Subject key identifier: 83:4C:02:4E:C9:D8:1C:6B:B9:71:08:7A:47:07:C7:B3:F1:B2:82:D7 Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 3149 Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:54:15 +0000 ROA not before: Wed 30 Apr 2025 15:52:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 40009 IP address blocks: 120.29.192.0/23 maxlen: 23 120.29.196.0/24 maxlen: 24 120.29.197.0/24 maxlen: 24 120.29.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12617 (0x3149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Apr 30 15:52:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a47d46-0395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:be:48:39:1a:53:50:f6:57:c0:43:9f:a4: c1:73:65:5a:4c:bf:42:57:66:c4:db:80:5f:e4:59: 20:2f:89:d9:89:e3:7d:b6:47:19:8a:48:26:7e:4b: 8f:61:ce:04:24:d2:c8:2f:75:09:28:53:6e:25:eb: e6:3d:d9:48:46:6c:ac:ba:a1:43:5b:57:a9:b0:b9: 0b:d6:59:27:b5:c3:db:eb:02:08:47:3b:05:b4:39: f0:c6:25:f6:6d:00:98:56:b5:f7:3c:04:a0:35:10: 81:cc:a1:6f:b1:37:d6:29:7b:1e:a0:ef:5b:ab:77: 73:a8:3c:af:ed:84:ff:b8:22:0c:a0:bb:64:a0:e7: 17:09:13:43:f7:cd:47:d2:3f:23:2a:21:4b:71:1e: cd:7f:2d:30:db:6f:65:d1:fb:bb:c4:28:cd:9a:39: 8b:34:12:41:48:a8:76:fe:d4:71:1f:54:be:82:ed: 1c:8a:e3:7d:3f:1d:1b:7e:d9:ec:27:6b:88:8f:4e: aa:85:f1:ef:96:8b:7f:44:4e:e6:95:d7:38:92:9b: 46:f5:77:7f:5f:90:51:81:b2:ae:a2:ef:9a:99:ef: 0f:43:21:68:af:e9:d4:a9:35:4d:5d:ee:d5:09:c0: 6e:87:a6:15:7c:90:01:0f:75:e9:b1:73:17:6e:2f: 05:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4C:02:4E:C9:D8:1C:6B:B9:71:08:7A:47:07:C7:B3:F1:B2:82:D7 X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.192.0/23 120.29.196.0/22 Signature Algorithm: sha256WithRSAEncryption 00:01:6a:cb:a0:df:a1:9a:87:2c:67:b7:3f:17:90:83:6d:1a: 97:9d:c6:3e:8c:e5:2b:29:85:54:45:06:bf:79:cb:52:1e:54: e9:88:bd:4a:62:51:0b:32:f6:45:ab:39:1a:bb:a1:38:9a:6e: 0e:34:16:70:09:0c:2e:26:fc:a9:35:67:47:59:d1:ea:61:aa: 63:2e:86:98:f5:d8:79:de:3f:7c:7d:62:2e:14:04:e9:67:05: bd:55:ad:96:6f:aa:f2:00:10:c2:25:21:1b:4b:a1:91:2b:94: 2a:46:43:56:40:ab:cb:de:95:e5:b6:6a:8c:76:4e:35:cc:f0: cf:3e:cb:48:18:da:0b:d7:37:f5:5b:97:21:c4:dd:98:1e:bd: ac:b7:33:3c:49:50:44:0a:fc:a6:09:26:8f:8c:5d:78:e3:32: a4:00:42:39:a5:0c:6f:38:64:d1:3a:87:57:48:bf:eb:47:aa: 9a:f7:8c:c3:7e:ad:48:e1:5a:30:23:c5:8b:ce:ca:11:53:35: a3:87:e5:37:29:eb:db:b2:e9:bd:e4:2f:e8:c4:36:b6:b6:64: 4b:28:54:9c:fc:13:ae:4f:00:f8:5b:53:51:12:08:f8:67:8d: 1d:ee:4b:18:94:1f:9e:73:e7:db:d5:60:14:22:f1:21:7d:9d: 7a:f9:84:a9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICMUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjUwNDMwMTU1MjUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Q0Ni0wMzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDm+SDkaU1D2V8BDn6TBc2VaTL9CV2bE24Bf5FkgL4nZieN9tkcZikgmfkuP Yc4EJNLIL3UJKFNuJevmPdlIRmysuqFDW1epsLkL1lkntcPb6wIIRzsFtDnwxiX2 bQCYVrX3PASgNRCBzKFvsTfWKXseoO9bq3dzqDyv7YT/uCIMoLtkoOcXCRND981H 0j8jKiFLcR7Nfy0w229l0fu7xCjNmjmLNBJBSKh2/tRxH1S+gu0ciuN9Px0bftns J2uIj06qhfHvlot/RE7mldc4kptG9Xd/X5BRgbKuou+ame8PQyFor+nUqTVNXe7V CcBuh6YVfJABD3XpsXMXbi8FOQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFINMAk7J 2BxruXEIekcHx7PxsoLXMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTU1QzgvOUNEM0U4RjZGRjU4MTFFMkJCNEIyRTNGNTkxMUVBMzIvRTZCNkJDMEFF MDJFMTFFQUExNkVBQTU5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBeB3AAwQCeB3EMA0GCSqGSIb3DQEBCwUAA4IBAQAAAWrLoN+hmocs Z7c/F5CDbRqXncY+jOUrKYVURQa/ectSHlTpiL1KYlELMvZFqzkau6E4mm4ONBZw CQwuJvypNWdHWdHqYapjLoaY9dh53j98fWIuFATpZwW9Va2Wb6ryABDCJSEbS6GR K5QqRkNWQKvL3pXltmqMdk41zPDPPstIGNoL1zf1W5chxN2YHr2stzM8SVBECvym CSaPjF144zKkAEI5pQxvOGTROodXSL/rR6qa94zDfq1I4VowI8WLzsoRUzWjh+U3 Kevbsum95C/oxDa2tmRLKFSc/BOuTwD4W1NREgj4Z40d7ksYlB+ec+fb1WAUIvEh fZ16+YSp -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:47 2026 by rpki-client