$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa File: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (raw, json) Hash identifier: 0atk63T1W/wzmM9R09qN0CbSSQOZFaD/GMI/cNzoG4U= Subject key identifier: D9:16:A5:E9:1B:93:C9:70:02:EE:40:ED:61:9A:E0:C4:B4:D3:47:EF Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 0848 Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:23:17 +0000 ROA not before: Tue 14 Oct 2025 22:51:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134518 IP address blocks: 43.246.132.0/22 maxlen: 22 43.246.132.0/23 maxlen: 23 43.246.134.0/23 maxlen: 23 103.194.236.0/22 maxlen: 22 2402:c680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Oct 14 22:51:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42fb5-0fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:36:5a:9e:99:78:55:24:ff:4c:cb:6e:61: ea:98:df:27:65:fa:32:ec:0a:c9:84:39:dc:3e:87: 73:2b:b7:cb:2a:12:1d:8c:e2:34:56:25:ec:90:4d: e6:4a:d6:c0:ca:af:99:ba:1a:a7:38:56:08:b6:a8: 2d:6c:6b:d7:d6:14:69:6f:ff:cb:5d:e6:f5:34:fc: bd:f9:18:f4:96:d6:f2:30:db:9c:2f:45:11:e7:3e: 39:a4:4a:9b:8d:63:a8:45:df:5d:17:bb:df:8c:01: be:81:f2:b8:5d:04:f9:9a:f1:fc:df:45:54:3d:6b: b2:c9:88:74:67:80:5c:e3:87:cc:5e:41:34:9d:b1: f5:62:e7:72:63:8b:7b:ac:1b:26:5c:c4:df:c4:39: dc:c1:94:38:3d:95:5e:38:0a:81:4a:61:6e:02:0a: 7c:3a:e7:4a:6f:3b:20:65:4f:e7:42:44:8d:72:35: 17:54:89:19:0f:0c:d0:c6:dd:a6:42:5e:5a:fa:9f: 1c:0d:0e:15:a1:e3:d0:11:ba:fe:01:a6:7e:ef:67: 18:04:f5:fa:fc:77:64:4f:fe:a5:e2:80:a6:91:cb: 9a:65:69:3f:df:47:5c:a7:17:b8:d8:d5:39:f1:f6: a0:3c:e6:99:eb:6d:92:71:39:6f:66:76:59:b3:57: 66:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:16:A5:E9:1B:93:C9:70:02:EE:40:ED:61:9A:E0:C4:B4:D3:47:EF X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.132.0/22 103.194.236.0/22 IPv6: 2402:c680::/32 Signature Algorithm: sha256WithRSAEncryption ab:a9:03:8e:e8:60:da:fb:f2:73:78:80:bf:46:64:25:f7:b8: 08:dd:4b:be:97:32:ff:2b:1d:88:f9:09:aa:ee:ca:32:23:94: 52:82:dc:3b:ca:48:31:bc:45:c0:47:84:42:af:7d:ef:a3:57: 4c:13:07:5f:df:97:d4:7d:5f:c7:94:1d:c1:68:84:cc:c5:af: 48:fe:ed:e2:3a:96:c8:e7:bb:e2:84:cb:d8:12:c1:02:25:e9: 74:4f:2e:4e:ca:9e:66:a3:ed:31:d9:2a:9e:1f:d2:3d:11:69: 1a:80:ef:8d:93:fd:3a:df:a7:85:b7:8f:c7:12:18:59:7d:90: 6a:8b:96:2a:13:70:3a:70:cf:b4:25:ac:99:1e:33:dc:4a:eb: 25:69:38:e1:ee:93:fc:aa:cc:fa:7d:d3:fe:1f:6e:e0:bd:c9: 39:d7:2e:1a:c9:c5:49:0b:dd:d7:f7:f9:69:71:5e:e5:55:bb: 45:68:9f:8b:aa:02:44:a5:1b:58:cb:bc:a6:46:a4:2b:4b:de: 1d:66:6c:d0:11:4e:c2:51:3e:9e:c8:03:03:af:bb:5e:7c:b3: 33:51:07:42:0e:e8:92:51:91:e1:a4:aa:ad:35:5d:3c:4d:09: 0a:7f:78:91:37:a0:60:63:f8:3c:9c:4a:65:68:5d:00:47:ed: 9d:e9:6f:b4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUxMDE0MjI1MTI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmZiNS0wZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2c2Wp6ZeFUk/0zLbmHqmN8nZfoy7ArJhDncPodzK7fLKhIdjOI0ViXskE3m StbAyq+ZuhqnOFYItqgtbGvX1hRpb//LXeb1NPy9+Rj0ltbyMNucL0UR5z45pEqb jWOoRd9dF7vfjAG+gfK4XQT5mvH830VUPWuyyYh0Z4Bc44fMXkE0nbH1YudyY4t7 rBsmXMTfxDncwZQ4PZVeOAqBSmFuAgp8OudKbzsgZU/nQkSNcjUXVIkZDwzQxt2m Ql5a+p8cDQ4VoePQEbr+AaZ+72cYBPX6/HdkT/6l4oCmkcuaZWk/30dcpxe42NU5 8fagPOaZ622ScTlvZnZZs1dmjwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNkWpekb k8lwAu5A7WGa4MS000fvMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTgxNjYvMjhDMUQwMjJGRDg5MTFFQTk0NjNCNjM1QzRGOUFFMDIvNkFGOEY4MjJG REFCMTFFQUFBQjFGQjM3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/aEAwQCZ8LsMA0EAgACMAcDBQAkAsaAMA0GCSqGSIb3DQEBCwUA A4IBAQCrqQOO6GDa+/JzeIC/RmQl97gI3Uu+lzL/Kx2I+Qmq7soyI5RSgtw7ykgx vEXAR4RCr33vo1dMEwdf35fUfV/HlB3BaITMxa9I/u3iOpbI57vihMvYEsECJel0 Ty5Oyp5mo+0x2SqeH9I9EWkagO+Nk/0636eFt4/HEhhZfZBqi5YqE3A6cM+0JayZ HjPcSuslaTjh7pP8qsz6fdP+H27gvck51y4aycVJC93X9/lpcV7lVbtFaJ+LqgJE pRtYy7ymRqQrS94dZmzQEU7CUT6eyAMDr7tefLMzUQdCDuiSUZHhpKqtNV08TQkK f3iRN6BgY/g8nEplaF0AR+2d6W+0 -----END CERTIFICATE-----Generated at Thu Mar 26 04:12:18 2026 by rpki-client