$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa File: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (raw, json) Hash identifier: d9YDBLOSLP/FYANr6D5ENZatQDGA2KDEhAgJYQsuAaw= Subject key identifier: C6:97:E9:6F:20:43:7C:3E:F2:23:38:36:C7:49:14:17:88:21:AC:34 Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 07FF Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa Signing time: Tue 14 Oct 2025 22:51:28 +0000 ROA not before: Tue 14 Oct 2025 22:51:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134518 IP address blocks: 43.246.132.0/22 maxlen: 22 43.246.132.0/23 maxlen: 23 43.246.134.0/23 maxlen: 23 103.194.236.0/22 maxlen: 22 2402:c680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Oct 14 22:51:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68eed3f0-01bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:80:bd:c3:cf:8b:3b:04:5a:0e:89:81:e8: 6e:8d:a7:62:11:5d:62:3c:db:47:7c:82:1a:95:75: 07:94:fb:30:5f:d2:b0:c0:2b:58:f5:36:f2:5b:dd: d2:8a:20:d2:cd:4d:50:e1:b9:dc:5a:b0:c8:17:bf: 50:9f:95:3c:48:e2:a2:8c:5f:3c:cc:f9:22:52:44: 9a:12:48:5c:27:c0:20:72:11:9a:2f:ac:a8:bb:a9: 0c:2f:b5:ba:cb:89:e1:e5:d8:88:d8:a2:60:13:9b: 19:c0:28:d1:a6:25:e3:b6:52:41:28:d9:b8:74:92: 3d:63:e7:31:ed:3d:46:26:f9:98:76:2a:6f:29:0c: 75:ff:9a:ee:bc:cf:6d:5a:bf:21:05:66:51:33:0c: f0:cc:65:0b:c5:1d:cd:3e:3e:fe:07:99:5d:a0:88: 9c:6e:e6:8a:50:67:c8:83:55:b3:d6:dc:d2:ff:5e: a2:8e:73:83:22:7f:1f:ec:8a:33:7f:7b:c8:d1:10: b5:9f:4b:eb:0e:4b:b8:f1:e7:6b:9f:0b:39:17:32: 9f:f5:8f:be:5e:17:14:49:34:8a:e5:d8:f0:28:0a: 18:78:dd:3b:d4:23:55:f5:37:31:9e:ac:b8:a2:ae: 85:0e:05:7a:37:fa:1f:84:8d:dc:88:36:62:60:4c: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:97:E9:6F:20:43:7C:3E:F2:23:38:36:C7:49:14:17:88:21:AC:34 X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.132.0/22 103.194.236.0/22 IPv6: 2402:c680::/32 Signature Algorithm: sha256WithRSAEncryption b1:95:4e:fc:b8:43:d8:75:86:26:e8:18:23:ac:1c:35:82:39: d3:3c:e4:83:e4:c7:17:7b:94:92:0a:85:49:06:e9:4d:b1:b7: 58:af:a9:ba:45:99:8e:81:69:1f:37:1d:20:db:25:79:5a:26: 54:e9:a1:07:57:09:e5:e9:0b:7f:ab:52:34:9b:6b:fc:d5:12: 15:8a:3e:73:78:01:8a:2a:99:a3:15:12:c0:f9:12:78:e9:54: 41:23:33:2b:f3:26:d8:21:ee:5a:c5:cf:85:1f:29:e5:e8:ae: c7:4e:39:02:ed:1a:c9:c5:02:dd:b1:cc:2a:13:75:64:18:ef: 1d:10:59:a6:31:bb:d0:1a:0e:c0:3a:fa:30:ed:49:5d:c2:22: d6:43:5e:27:10:c7:22:33:f1:c7:4e:33:f3:ad:6e:88:d6:21: ae:df:cd:e5:b4:d8:5a:22:da:de:f9:84:41:9d:17:7e:18:fb: 5a:4f:0f:e5:ce:97:8d:e0:34:8a:4e:eb:6e:17:18:83:54:de: 0d:2f:18:4b:7f:b3:13:62:4a:45:cd:c7:a8:97:9b:4e:c6:31: 0e:9a:97:5f:94:80:a7:35:48:0f:97:81:7e:39:87:50:69:96: 44:03:f9:5a:85:8e:fd:60:b6:e0:ce:d4:52:d3:0b:53:7c:0a: 94:bd:a3:06 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUxMDE0MjI1MTI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVlZDNmMC0wMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKiAvcPPizsEWg6JgehujadiEV1iPNtHfIIalXUHlPswX9KwwCtY9TbyW93S iiDSzU1Q4bncWrDIF79Qn5U8SOKijF88zPkiUkSaEkhcJ8AgchGaL6you6kML7W6 y4nh5diI2KJgE5sZwCjRpiXjtlJBKNm4dJI9Y+cx7T1GJvmYdipvKQx1/5ruvM9t Wr8hBWZRMwzwzGULxR3NPj7+B5ldoIicbuaKUGfIg1Wz1tzS/16ijnODIn8f7Ioz f3vI0RC1n0vrDku48edrnws5FzKf9Y++XhcUSTSK5djwKAoYeN071CNV9Tcxnqy4 oq6FDgV6N/ofhI3ciDZiYEyeJwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMaX6W8g Q3w+8iM4NsdJFBeIIaw0MB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTgxNjYvMjhDMUQwMjJGRDg5MTFFQTk0NjNCNjM1QzRGOUFFMDIvNkFGOEY4MjJG REFCMTFFQUFBQjFGQjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr9oQDBAJnwuwwDQQCAAIwBwMFACQCxoAwDQYJKoZIhvcN AQELBQADggEBALGVTvy4Q9h1hiboGCOsHDWCOdM85IPkxxd7lJIKhUkG6U2xt1iv qbpFmY6BaR83HSDbJXlaJlTpoQdXCeXpC3+rUjSba/zVEhWKPnN4AYoqmaMVEsD5 EnjpVEEjMyvzJtgh7lrFz4UfKeXorsdOOQLtGsnFAt2xzCoTdWQY7x0QWaYxu9Aa DsA6+jDtSV3CItZDXicQxyIz8cdOM/OtbojWIa7fzeW02Foi2t75hEGdF34Y+1pP D+XOl43gNIpO624XGINU3g0vGEt/sxNiSkXNx6iXm07GMQ6al1+UgKc1SA+XgX45 h1BplkQD+VqFjv1gtuDO1FLTC1N8CpS9owY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:48:50 2025 by rpki-client