$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa File: 6EC9CC12746911F0B5BCC83EC4F9AE02.roa (raw, json) Hash identifier: f96o6rUcuvbRDJPCEiM6Sq+WIzNhMD0cqlWVmBsEdAg= Subject key identifier: B2:93:B7:67:91:3F:BC:64:11:A7:57:88:5D:3A:D9:EB:FF:1F:F6:F5 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 074E Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:55:39 +0000 ROA not before: Fri 08 Aug 2025 15:07:43 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 21859 IP address blocks: 122.10.140.0/22 maxlen: 24 122.10.196.0/23 maxlen: 24 122.10.221.0/24 maxlen: 24 122.10.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Aug 8 15:07:43 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4536b-2579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:3e:72:9a:18:e8:69:ee:12:12:27:61:06: 00:fb:ea:71:bf:4a:29:89:b1:7b:e2:d2:43:ad:f9: ce:2d:b7:08:8a:85:13:48:28:37:3c:35:1f:0f:d7: e0:60:1b:92:79:de:7d:dd:26:9e:88:fc:50:af:01: 62:8f:da:26:13:cb:f2:68:e4:75:52:90:96:c3:61: bb:99:3e:6b:44:f1:56:6a:64:10:11:62:ab:a0:b4: bd:ee:05:63:0f:c2:da:bb:39:90:51:08:0d:5c:26: 43:28:8b:86:97:be:29:2c:89:c9:26:b3:b6:0a:6c: e5:24:6c:27:5d:b2:97:ce:e3:3a:69:ae:19:8f:63: 13:92:24:c2:6e:39:97:4a:c2:7c:80:b9:15:95:c9: e3:96:a2:9d:72:3a:35:bb:b0:fd:7c:61:3e:8f:ca: e1:de:4a:6a:b2:05:e8:e7:29:35:85:a2:5a:87:5f: 22:d9:75:bf:e7:43:4f:9e:a5:13:ba:21:d2:06:63: 1f:46:2e:c7:a2:7a:26:b5:b2:1e:b7:c7:85:70:95: 5e:30:fc:ed:4c:66:d0:7e:32:9b:8f:47:2a:4d:d1: c7:8f:be:8b:3b:6d:26:95:d9:a0:1a:90:78:d9:ef: 00:8a:de:8e:09:ae:54:40:8a:21:ba:d6:71:db:6d: 1f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:93:B7:67:91:3F:BC:64:11:A7:57:88:5D:3A:D9:EB:FF:1F:F6:F5 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.10.140.0/22 122.10.196.0/23 122.10.221.0/24 122.10.223.0/24 Signature Algorithm: sha256WithRSAEncryption 21:91:58:ce:86:4a:81:da:08:07:9e:a8:90:1f:48:5a:f5:23: 84:38:8c:73:33:75:dc:6e:29:ec:38:53:22:51:50:6a:2b:27: 1f:72:c3:b5:d0:3e:cb:aa:6d:d2:8c:54:2a:d7:74:47:e7:44: fe:19:bc:41:2e:96:cf:05:07:b9:9b:37:70:0f:ce:ba:2c:00: f8:47:f4:44:4a:02:b5:84:5d:41:ef:5c:a0:5d:4f:db:38:c2: 3e:70:24:e8:fb:4b:4f:fe:ff:7d:66:4c:71:5d:a7:be:63:75: c6:db:42:cd:30:5c:01:1e:67:11:0a:81:3d:61:a7:a4:02:7a: 49:d8:e0:53:11:35:8c:41:48:83:94:28:d1:78:dc:c4:1e:af: f0:78:31:ff:7e:88:d7:23:7e:a1:36:14:42:5b:b3:cd:77:59: bc:51:e3:31:20:ef:7e:7b:c5:11:18:09:ec:73:b0:9d:c6:05: 4c:0b:7d:75:51:b4:5d:28:89:0f:8e:9a:ea:09:88:fb:42:11: 50:6c:fa:ee:bc:3e:19:8b:d7:6f:a9:52:7e:3e:31:25:8a:14: a9:20:e9:d3:61:48:93:5e:bc:b0:5d:c7:7d:06:a2:a0:ff:b5: 6e:e0:d8:72:2e:8d:4c:2f:41:85:65:ee:d6:99:ea:53:d5:ae: f4:04:90:39 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjUwODA4MTUwNzQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTM2Yi0yNTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ4+cpoY6GnuEhInYQYA++pxv0opibF74tJDrfnOLbcIioUTSCg3PDUfD9fg YBuSed593SaeiPxQrwFij9omE8vyaOR1UpCWw2G7mT5rRPFWamQQEWKroLS97gVj D8LauzmQUQgNXCZDKIuGl74pLInJJrO2CmzlJGwnXbKXzuM6aa4Zj2MTkiTCbjmX SsJ8gLkVlcnjlqKdcjo1u7D9fGE+j8rh3kpqsgXo5yk1haJah18i2XW/50NPnqUT uiHSBmMfRi7HonomtbIet8eFcJVeMPztTGbQfjKbj0cqTdHHj76LO20mldmgGpB4 2e8Ait6OCa5UQIohutZx220fTwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFLKTt2eR P7xkEadXiF062ev/H/b1MB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNTc2NDczN0E3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvNkVDOUNDMTI3 NDY5MTFGMEI1QkNDODNFQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCegqMAwQBegrEAwQAegrdAwQAegrfMA0GCSqGSIb3DQEBCwUAA4IB AQAhkVjOhkqB2ggHnqiQH0ha9SOEOIxzM3XcbinsOFMiUVBqKycfcsO10D7Lqm3S jFQq13RH50T+GbxBLpbPBQe5mzdwD866LAD4R/RESgK1hF1B71ygXU/bOMI+cCTo +0tP/v99ZkxxXae+Y3XG20LNMFwBHmcRCoE9YaekAnpJ2OBTETWMQUiDlCjReNzE Hq/weDH/fojXI36hNhRCW7PNd1m8UeMxIO9+e8URGAnsc7CdxgVMC311UbRdKIkP jprqCYj7QhFQbPruvD4Zi9dvqVJ+PjElihSpIOnTYUiTXrywXcd9BqKg/7Vu4Nhy Lo1ML0GFZe7WmepT1a70BJA5 -----END CERTIFICATE-----Generated at Mon Mar 2 04:13:48 2026 by rpki-client