$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/B6A9D8EEB0F411E5BE86D757C4F9AE02.roa File: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (raw, json) Hash identifier: p8PtYpgOItBVMhVqBrQ+db64yM9ZewS6DCTfoLsZaro= Subject key identifier: 17:AF:3D:C7:0F:07:3B:21:73:17:2C:EA:54:B8:16:31:6F:68:79:ED Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 2514 Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/B6A9D8EEB0F411E5BE86D757C4F9AE02.roa Signing time: Fri 26 Jun 2026 16:18:19 +0000 ROA not before: Fri 26 Jun 2026 16:18:19 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 132267 IP address blocks: 103.9.136.0/24 maxlen: 24 103.9.137.0/24 maxlen: 24 103.9.138.0/24 maxlen: 24 103.9.139.0/24 maxlen: 24 163.53.140.0/24 maxlen: 24 163.53.141.0/24 maxlen: 24 163.53.142.0/24 maxlen: 24 2403:eb00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9492 (0x2514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: Jun 26 16:18:19 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3ea64b-9c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:02:60:9c:d9:69:10:d0:89:e4:10:6c:29:1f: c1:a4:a3:14:25:38:9d:12:3f:96:b6:7f:31:2f:55: 15:fe:0b:fb:9b:b1:db:bd:b2:c6:46:fa:c8:d8:9c: cd:68:33:6e:3c:c6:49:c0:39:53:d0:cb:67:dd:bb: dd:75:0a:73:fd:88:ea:4c:bc:58:1b:88:c0:3f:23: 22:66:43:9e:d8:80:7d:b3:c5:b7:be:b4:2b:2d:33: 4c:b1:ee:63:b1:ac:03:3e:1d:74:62:86:ed:dc:ed: fa:5b:ef:0b:80:ce:84:79:cf:38:b9:07:32:a4:58: 80:33:78:b6:69:86:81:18:f9:71:88:a2:cc:93:74: c5:71:b7:0c:fd:eb:f7:e7:90:13:5c:b5:20:96:39: de:10:c6:92:00:ce:ad:07:7c:9f:09:c8:15:79:8b: b7:01:43:92:be:ea:7b:23:4d:52:6f:49:51:7b:fd: 1c:78:71:0c:a5:0e:ee:8c:e6:ed:49:ae:60:fd:12: 6c:4c:b0:15:7c:0b:39:6b:d4:a4:cf:4b:53:e6:0e: fb:23:06:53:f7:8f:f1:35:89:5b:b6:d6:ad:8a:eb: fb:0d:6e:cb:43:7d:af:b6:a1:ef:dd:14:ab:9c:a5: 7f:43:4f:5f:c1:af:21:fe:8f:3d:78:a6:ee:3c:39: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:3D:C7:0F:07:3B:21:73:17:2C:EA:54:B8:16:31:6F:68:79:ED X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/B6A9D8EEB0F411E5BE86D757C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.9.136.0/22 163.53.140.0-163.53.142.255 IPv6: 2403:eb00::/32 Signature Algorithm: sha256WithRSAEncryption 61:84:c2:3d:39:a0:ae:bc:1f:05:7c:a4:a2:22:6c:6b:61:10: 4d:31:05:06:5b:31:10:2b:ad:d9:94:c4:f0:8d:e1:5d:3f:6e: 7c:9d:7a:cd:44:f5:d9:49:ca:03:6e:50:ec:21:b3:e6:aa:47: b9:41:9a:31:80:fb:2a:0f:f3:29:ea:21:49:ab:83:a6:94:9c: 68:6d:c1:d2:3a:06:d6:a2:8b:20:be:8f:9f:eb:3d:9f:cb:d9: 27:19:fd:cd:e2:4a:58:00:b0:24:4e:5f:7e:bb:95:cd:06:a8: 81:29:4a:79:93:8f:e4:bb:12:93:1a:e3:77:7b:9a:93:45:0e: c6:2f:38:aa:c8:34:08:66:dd:c1:16:b2:16:c3:82:b5:0e:61: b5:9c:45:80:49:9c:4c:2c:78:03:23:d4:68:15:27:98:60:8a: 04:44:a2:92:b2:69:a5:2b:d7:3c:fa:22:be:c1:c4:e4:50:6b: d9:8d:dc:b3:ed:0e:2f:ce:fd:88:23:d0:6f:1e:9d:c2:8d:f7: 65:c4:3a:70:fb:c4:7c:b4:01:37:82:69:61:a6:c9:95:09:e3: a0:9c:e2:9b:b1:8b:d4:a5:7a:be:7e:0b:33:ce:8d:0c:c1:dd: b5:cc:d8:c2:34:be:2a:d9:c4:ae:6e:ee:7f:ae:ad:c2:5a:39: 40:5b:55:63 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICJRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjYwNjI2MTYxODE5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNlYTY0Yi05YzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gJgnNlpENCJ5BBsKR/BpKMUJTidEj+Wtn8xL1UV/gv7m7HbvbLGRvrI2JzN aDNuPMZJwDlT0Mtn3bvddQpz/YjqTLxYG4jAPyMiZkOe2IB9s8W3vrQrLTNMse5j sawDPh10Yobt3O36W+8LgM6Eec84uQcypFiAM3i2aYaBGPlxiKLMk3TFcbcM/ev3 55ATXLUgljneEMaSAM6tB3yfCcgVeYu3AUOSvup7I01Sb0lRe/0ceHEMpQ7ujObt Sa5g/RJsTLAVfAs5a9Skz0tT5g77IwZT94/xNYlbttatiuv7DW7LQ32vtqHv3RSr nKV/Q09fwa8h/o89eKbuPDlMdwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFBevPccP Bzshcxcs6lS4FjFvaHntMB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjM1OUUvNkYyQjY1NTI1NDdDMTFFNTk3MUYzQjQ4QzRGOUFFMDIvQjZBOUQ4RUVC MEY0MTFFNUJFODZENzU3QzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAa BAIAATAUAwQCZwmIMAwDBAKjNYwDBACjNY4wDQQCAAIwBwMFACQD6wAwDQYJKoZI hvcNAQELBQADggEBAGGEwj05oK68HwV8pKIibGthEE0xBQZbMRArrdmUxPCN4V0/ bnydes1E9dlJygNuUOwhs+aqR7lBmjGA+yoP8ynqIUmrg6aUnGhtwdI6BtaiiyC+ j5/rPZ/L2ScZ/c3iSlgAsCROX367lc0GqIEpSnmTj+S7EpMa43d7mpNFDsYvOKrI NAhm3cEWshbDgrUOYbWcRYBJnEwseAMj1GgVJ5hgigREopKyaaUr1zz6Ir7BxORQ a9mN3LPtDi/O/Ygj0G8encKN92XEOnD7xHy0ATeCaWGmyZUJ46Cc4puxi9Sler5+ CzPOjQzB3bXM2MI0virZxK5u7n+urcJaOUBbVWM= -----END CERTIFICATE-----Generated at Fri Jul 24 19:15:25 2026 by rpki-client