$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/F6A8B3960A1511F0BB6C770DC4F9AE02.roa File: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (raw, json) Hash identifier: KGNNcKyC/9ZNG33rV3+WnydQa40FOtfcMASpCbQGvcA= Subject key identifier: 2C:35:2C:8B:00:C5:45:BF:53:6C:49:CF:78:83:C6:25:05:A9:35:42 Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 0158 Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/F6A8B3960A1511F0BB6C770DC4F9AE02.roa Signing time: Wed 23 Sep 2026 07:50:53 +0000 ROA not before: Wed 23 Sep 2026 07:50:53 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 150706 IP address blocks: 43.231.186.0/24 maxlen: 24 2404:de80::/32 maxlen: 32 2404:de80::/39 maxlen: 39 2404:de80:0:1::/64 maxlen: 64 2404:de80:200::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Sep 23 07:50:53 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6ab384dd-aec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:bf:c6:0f:ed:bb:b4:be:17:8a:88:fc:19: 1e:25:06:48:ee:41:0d:4b:15:aa:89:03:42:11:95: dc:28:bb:96:d0:bc:06:5d:34:55:30:2d:08:46:6e: e8:ad:e9:66:8e:38:ac:bd:7d:4f:4d:0e:34:4d:de: 14:9a:3a:19:0c:9a:c2:96:ed:21:7d:9e:63:a3:15: 34:9d:46:56:a3:4d:44:4a:9c:f2:6e:2a:8a:3e:3b: eb:68:b2:07:21:42:84:11:e4:30:a6:a9:4b:f7:39: b5:ca:1d:f0:ab:89:dc:95:8a:b7:18:ff:d6:27:0d: 34:18:a3:98:5c:22:a8:44:36:1d:e9:ea:d2:97:0b: fa:05:1c:a2:f1:69:1b:67:48:38:74:d0:12:f1:33: a3:ca:41:33:b6:1b:09:ac:52:f4:dc:37:9f:79:0b: 4e:f5:ea:f5:de:fc:a4:99:bb:4e:5e:25:69:39:bb: 58:9b:e9:53:6c:ff:ef:f3:18:e1:5f:66:4c:97:a8: 37:13:0b:a2:20:a5:05:c2:7e:4e:1f:f5:4d:1f:8c: c3:29:9a:e6:d6:3d:6e:db:62:0f:b4:77:04:82:c6: a1:a7:5d:dc:f2:2c:ac:1e:be:ae:23:a0:88:af:6c: 1e:6e:5f:6a:69:5a:a5:a2:91:c9:d3:2e:06:30:d2: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:35:2C:8B:00:C5:45:BF:53:6C:49:CF:78:83:C6:25:05:A9:35:42 X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/F6A8B3960A1511F0BB6C770DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.186.0/24 IPv6: 2404:de80::/32 Signature Algorithm: sha256WithRSAEncryption 47:02:43:ab:cb:80:bb:5f:a3:27:67:d3:8e:b9:03:cb:ff:34: e6:05:a4:a5:13:24:17:be:02:94:fe:2f:6d:c7:39:ff:dc:54: e1:48:73:ae:42:38:4f:1c:82:b6:e0:82:bb:b2:3c:fc:49:c1: 70:3e:f7:9b:8d:91:6d:c6:1b:93:08:3b:4e:40:8c:cc:29:cc: 73:78:76:fa:9c:23:c3:e4:98:94:5c:56:76:4f:c2:8b:61:98: d5:b2:6b:c6:0e:39:bc:be:9c:8c:0d:8d:6c:d2:01:11:0b:b5: 55:79:c1:e1:cb:1c:71:9f:cb:c4:b0:0c:c2:a9:7e:17:d7:e8: b1:c5:f8:d0:fe:a1:d4:69:47:26:fd:94:29:74:eb:ec:36:fa: fd:16:0b:d0:8a:f0:a3:1b:1e:26:02:f1:29:ce:ed:da:12:0d: b0:9f:5d:70:b5:0b:b1:cf:47:69:e6:2f:f7:98:e7:9a:28:79: 0b:c8:d6:4a:e9:2f:c5:67:03:3c:a7:53:07:29:25:77:1c:1d: e9:b1:48:a6:59:ea:47:40:47:90:43:d3:6d:53:3d:c3:6b:46: 60:09:db:67:53:60:8d:e5:d0:92:70:fd:05:f9:96:ea:8a:ba: 42:fb:a5:cc:a6:f6:86:6c:74:f2:09:73:27:8e:35:e9:f7:9c: 3a:37:75:2a -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjYwOTIzMDc1MDUzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzODRkZC1hZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj0a/xg/tu7S+F4qI/BkeJQZI7kENSxWqiQNCEZXcKLuW0LwGXTRVMC0IRm7o relmjjisvX1PTQ40Td4UmjoZDJrClu0hfZ5joxU0nUZWo01ESpzybiqKPjvraLIH IUKEEeQwpqlL9zm1yh3wq4nclYq3GP/WJw00GKOYXCKoRDYd6erSlwv6BRyi8Wkb Z0g4dNAS8TOjykEzthsJrFL03DefeQtO9er13vykmbtOXiVpObtYm+lTbP/v8xjh X2ZMl6g3EwuiIKUFwn5OH/VNH4zDKZrm1j1u22IPtHcEgsahp13c8iysHr6uI6CI r2webl9qaVqlopHJ0y4GMNI8TwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCw1LIsA xUW/U2xJz3iDxiUFqTVCMB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJGRTEvQzQ1NjEwMkUwOUYxMTFGMDhCNDRBMzI1QzRGOUFFMDIvRjZBOEIzOTYw QTE1MTFGMEJCNkM3NzBEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAK+e6MA0EAgACMAcDBQAkBN6AMA0GCSqGSIb3DQEBCwUAA4IBAQBH AkOry4C7X6MnZ9OOuQPL/zTmBaSlEyQXvgKU/i9txzn/3FThSHOuQjhPHIK24IK7 sjz8ScFwPvebjZFtxhuTCDtOQIzMKcxzeHb6nCPD5JiUXFZ2T8KLYZjVsmvGDjm8 vpyMDY1s0gERC7VVecHhyxxxn8vEsAzCqX4X1+ixxfjQ/qHUaUcm/ZQpdOvsNvr9 FgvQivCjGx4mAvEpzu3aEg2wn11wtQuxz0dp5i/3mOeaKHkLyNZK6S/FZwM8p1MH KSV3HB3psUimWepHQEeQQ9NtUz3Da0ZgCdtnU2CN5dCScP0F+ZbqirpC+6XMpvaG bHTyCXMnjjXp95w6N3Uq -----END CERTIFICATE-----Generated at Fri Sep 25 10:40:30 2026 by rpki-client