$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa File: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (raw, json) Hash identifier: fjYuyAngv4FpC64FfvFs/sDFwj8AagNP89TumEQGCIM= Subject key identifier: 23:23:CF:AF:89:06:65:F9:F4:9F:3E:25:8A:24:B1:54:A2:93:82:FE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 0893 Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa Signing time: Tue 21 Jul 2026 04:14:19 +0000 ROA not before: Tue 21 Jul 2026 04:14:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134518 IP address blocks: 43.246.132.0/22 maxlen: 22 43.246.132.0/23 maxlen: 23 43.246.134.0/23 maxlen: 23 43.246.134.0/24 maxlen: 24 43.246.135.0/24 maxlen: 24 103.194.236.0/22 maxlen: 22 2402:c680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2195 (0x893) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Jul 21 04:14:19 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a5ef21b-a534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:55:27:6e:eb:48:66:bc:5b:b7:dd:60:1f: 59:b0:3b:49:35:ce:eb:45:1f:3c:0a:b6:61:ef:87: 97:79:e4:5c:7f:f1:aa:4e:9a:b9:40:56:c0:ea:07: 33:82:c3:1b:2c:ec:ca:c7:73:ee:bf:80:82:6d:7b: 90:ff:b6:1b:66:e5:76:4e:82:d5:a3:4a:23:0b:49: 5e:21:a2:88:74:50:c2:bb:85:cc:82:94:84:08:80: 46:09:e3:3a:c7:d0:59:1b:96:00:3f:87:43:dd:26: e5:ae:33:07:2d:c8:fa:55:65:87:7f:3d:9a:6d:8f: d9:1e:e5:cb:e8:6d:47:37:98:f4:ff:b1:58:de:a5: 5f:0f:75:f0:2d:ba:d2:02:2e:28:0b:ac:2c:4b:9a: b0:79:0b:02:f5:d4:7b:7d:20:17:a7:09:9e:a8:64: e5:47:4f:10:3e:f2:f4:c4:82:7b:51:1e:59:d3:8e: a6:1e:0f:d3:80:e8:7d:b5:01:96:3e:af:48:cb:82: 29:30:1d:d7:b6:99:04:b1:35:c7:09:e5:9d:a5:63: 5a:a4:00:23:08:11:21:9b:ae:2b:54:9d:aa:d3:ea: 4e:c8:e2:6c:95:34:10:57:e3:17:8b:ad:3c:6c:92: e1:e5:6e:77:a8:13:e9:fb:e4:0c:7e:07:3d:2f:28: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:CF:AF:89:06:65:F9:F4:9F:3E:25:8A:24:B1:54:A2:93:82:FE X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.132.0/22 103.194.236.0/22 IPv6: 2402:c680::/32 Signature Algorithm: sha256WithRSAEncryption 00:1a:4d:ee:88:f5:aa:5c:d2:26:dd:7c:ef:13:e8:ab:30:39: 69:f5:1d:93:51:e7:db:59:39:dc:a2:31:fb:b6:29:16:83:5f: 1b:f2:e9:d6:ab:d4:73:63:43:27:48:c1:62:71:2d:c4:1f:50: de:80:b3:34:93:d7:6b:49:a3:c1:74:81:f3:07:27:0e:da:6b: 0f:7c:7c:f1:ca:6a:4e:35:e8:16:c1:43:6c:ae:96:2e:2f:3e: d3:2f:44:a3:90:3f:2a:c2:ad:cf:cf:b6:78:c1:4e:47:7c:f9: 6d:88:bf:c0:e2:c2:41:9c:2e:1a:85:97:d4:db:d9:0f:d2:92: 81:e8:ba:31:ef:a6:9d:f7:b1:96:e3:0b:0e:86:ed:1d:35:9c: e3:bd:5e:34:f9:c9:ef:2b:b8:ba:f9:ca:31:a2:1f:27:cb:ab: 46:50:65:00:b9:f0:c0:0e:6b:2a:d9:70:94:5a:4c:6c:57:f0: e5:67:a0:14:27:7a:22:c0:74:fe:eb:cb:a8:1a:47:74:af:fd: 36:be:99:a4:60:6d:3e:b7:2a:c0:ae:35:ad:c2:24:57:a5:60: 40:2d:99:d0:fe:3d:4c:d3:aa:18:fa:d5:47:bc:13:c6:94:ae: a7:a0:a5:bb:44:53:65:11:85:31:1f:e4:bd:35:9e:45:30:a0: d2:3d:a2:50 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjYwNzIxMDQxNDE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlZjIxYi1hNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkFJVJ27rSGa8W7fdYB9ZsDtJNc7rRR88CrZh74eXeeRcf/GqTpq5QFbA6gcz gsMbLOzKx3Puv4CCbXuQ/7YbZuV2ToLVo0ojC0leIaKIdFDCu4XMgpSECIBGCeM6 x9BZG5YAP4dD3SblrjMHLcj6VWWHfz2abY/ZHuXL6G1HN5j0/7FY3qVfD3XwLbrS Ai4oC6wsS5qweQsC9dR7fSAXpwmeqGTlR08QPvL0xIJ7UR5Z046mHg/TgOh9tQGW Pq9Iy4IpMB3XtpkEsTXHCeWdpWNapAAjCBEhm64rVJ2q0+pOyOJslTQQV+MXi608 bJLh5W53qBPp++QMfgc9Lyj/XwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFCMjz6+J BmX59J8+JYoksVSik4L+MB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTgxNjYvMjhDMUQwMjJGRDg5MTFFQTk0NjNCNjM1QzRGOUFFMDIvNkFGOEY4MjJG REFCMTFFQUFBQjFGQjM3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/aEAwQCZ8LsMA0EAgACMAcDBQAkAsaAMA0GCSqGSIb3DQEBCwUA A4IBAQAAGk3uiPWqXNIm3XzvE+irMDlp9R2TUefbWTncojH7tikWg18b8unWq9Rz Y0MnSMFicS3EH1DegLM0k9drSaPBdIHzBycO2msPfHzxympONegWwUNsrpYuLz7T L0SjkD8qwq3Pz7Z4wU5HfPltiL/A4sJBnC4ahZfU29kP0pKB6Lox76ad97GW4wsO hu0dNZzjvV40+cnvK7i6+coxoh8ny6tGUGUAufDADmsq2XCUWkxsV/DlZ6AUJ3oi wHT+68uoGkd0r/02vpmkYG0+tyrArjWtwiRXpWBALZnQ/j1M06oY+tVHvBPGlK6n oKW7RFNlEYUxH+S9NZ5FMKDSPaJQ -----END CERTIFICATE-----Generated at Fri Jul 24 14:17:05 2026 by rpki-client