$ rpki-client -vvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A66886B4491F11F193C776FB9E833773.roa File: A66886B4491F11F193C776FB9E833773.roa (raw, json) Hash identifier: xXcNcDHlNzFBW5kniWXaJCDFIU93zgQzDwb/xuMFxAc= Subject key identifier: 27:D3:03:BA:80:0E:46:01:B9:33:C0:38:31:2A:B9:0C:8C:9E:6E:A3 Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Certificate serial: 2E Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A66886B4491F11F193C776FB9E833773.roa Signing time: Thu 23 Jul 2026 11:35:37 +0000 ROA not before: Thu 23 Jul 2026 11:35:37 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 45753 IP address blocks: 111.68.0.0/21 maxlen: 21 111.68.0.0/24 maxlen: 24 111.68.1.0/24 maxlen: 24 111.68.2.0/24 maxlen: 24 111.68.3.0/24 maxlen: 24 111.68.4.0/24 maxlen: 24 111.68.5.0/24 maxlen: 24 111.68.6.0/24 maxlen: 24 111.68.7.0/24 maxlen: 24 111.68.8.0/22 maxlen: 22 111.68.8.0/24 maxlen: 24 111.68.9.0/24 maxlen: 24 111.68.10.0/24 maxlen: 24 111.68.11.0/24 maxlen: 24 111.68.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Validity Not Before: Jul 23 11:35:37 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a61fc89-15e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:8e:9d:c8:8d:a4:8f:b3:e1:9d:37:01:d2: 3f:b7:20:ff:0e:dc:e6:cd:01:d1:e4:a8:9f:48:3f: 80:4d:11:0e:a6:d0:90:ba:0a:20:98:ef:6d:17:cf: 10:c1:e3:fa:bc:0e:7c:9e:75:98:ec:3d:ab:fc:9a: c6:3b:a7:7f:0f:dd:54:df:84:49:e5:b8:37:b6:40: e6:a5:e5:3b:b1:18:42:72:f1:40:66:f4:dc:c6:2d: 72:5a:65:db:84:ce:d4:10:93:0f:f3:67:e8:d2:82: 3d:81:c8:90:8c:01:46:6f:b7:1e:13:19:64:4a:ae: 1a:57:6e:3f:a2:dd:e3:92:21:41:88:41:09:63:f9: 63:00:d3:9c:50:d3:07:fb:8d:c0:d2:a1:6e:4b:bf: e2:82:6b:1c:fb:82:6d:0a:d7:cb:48:b1:a0:1e:bf: b3:80:4a:a1:51:06:49:90:a0:5d:13:f2:c2:08:39: dc:5d:e7:0b:50:fd:86:7f:9e:4c:2d:82:a9:a1:ed: 19:ff:c6:ff:6b:bf:99:fd:9c:d7:b2:31:21:64:71: 73:af:f6:2f:36:a8:61:ac:3e:0a:cc:e3:e5:57:f4: 92:1f:a2:ba:f9:8c:61:6f:38:bc:b4:cc:7f:e3:4a: 9c:5c:b0:2a:2f:5c:6a:1c:9f:7f:09:29:ba:d6:65: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D3:03:BA:80:0E:46:01:B9:33:C0:38:31:2A:B9:0C:8C:9E:6E:A3 X509v3 Authority Key Identifier: keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A66886B4491F11F193C776FB9E833773.roa sbgp-ipAddrBlock: critical IPv4: 111.68.0.0-111.68.12.255 Signature Algorithm: sha256WithRSAEncryption b4:4f:1d:2f:02:ae:c6:d5:e8:6d:d3:b4:b3:f5:72:02:37:04: e5:d2:1a:71:06:8e:b1:db:a7:19:25:24:d7:80:ef:5f:5f:ef: 7c:39:70:53:53:bc:2e:8b:a9:02:91:08:68:5d:76:51:e3:69: df:7e:fd:27:76:fe:dd:51:b4:07:69:d1:47:4e:b3:51:9c:0c: 1e:3d:73:23:f8:dd:e3:73:b3:29:6f:8f:ef:64:72:9f:a4:6e: df:ff:ab:56:76:5f:44:ab:85:05:dd:1e:84:4d:16:a0:da:b4: 74:c7:d5:42:e5:20:3e:63:d4:be:bb:7e:7f:2a:8b:1e:c6:33: 11:81:51:63:84:6b:c7:1b:78:c8:8f:4a:df:84:12:4d:62:3f: 58:7d:25:1e:04:97:0e:0f:e8:18:9d:07:87:b0:a2:96:72:e5: 03:ab:ef:d2:de:ed:58:b8:7a:6b:db:47:15:cc:4c:6d:6e:1b: db:5a:88:07:a8:d1:f0:1c:23:68:2a:24:25:b5:51:56:ad:2b: a5:60:57:bf:9b:ac:6a:6a:43:ed:2d:0f:9e:02:b1:cf:2c:02: e2:77:60:ec:e3:42:d6:60:97:d7:40:05:0d:5c:a9:07:06:9b: 5f:5b:b4:04:9d:fe:d6:9d:7b:44:dc:b8:31:16:e3:c6:46:8e: b5:dd:7f:cf -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REUwNjExMC8GA1UEBRMoNDY5MEMxMDZBRUI4M0M3NEQ3QkRGM0E0RTc5OTNDMDk4 MTJCQUNGQzAeFw0yNjA3MjMxMTM1MzdaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNjFmYzg5LTE1ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsrI6dyI2kj7PhnTcB0j+3IP8O3ObNAdHkqJ9IP4BNEQ6m0JC6CiCY720XzxDB 4/q8DnyedZjsPav8msY7p38P3VTfhEnluDe2QOal5TuxGEJy8UBm9NzGLXJaZduE ztQQkw/zZ+jSgj2ByJCMAUZvtx4TGWRKrhpXbj+i3eOSIUGIQQlj+WMA05xQ0wf7 jcDSoW5Lv+KCaxz7gm0K18tIsaAev7OASqFRBkmQoF0T8sIIOdxd5wtQ/YZ/nkwt gqmh7Rn/xv9rv5n9nNeyMSFkcXOv9i82qGGsPgrM4+VX9JIforr5jGFvOLy0zH/j SpxcsCovXGocn38JKbrWZQ/5AgMBAAGjggJnMIICYzAdBgNVHQ4EFgQUJ9MDuoAO RgG5M8A4MSq5DIyebqMwHwYDVR0jBBgwFoAURpDBBq64PHTXvfOk55k8CYErrPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERTA2LzY2OURCNTcyNDkx RjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhUWHZmT2s1NWs4Q1lFcnJQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnBEQkJxNjRQSFRYdmZPazU1azhDWUVyclB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REUwNi82NjlEQjU3MjQ5MUYxMUYxODM1OTMyQ0E5RTgzMzc3My9BNjY4ODZCNDQ5 MUYxMUYxOTNDNzc2RkI5RTgzMzc3My5yb2EwJgYIKwYBBQUHAQcBAf8EFzAVMBME AgABMA0wCwMDAm9EAwQAb0QMMA0GCSqGSIb3DQEBCwUAA4IBAQC0Tx0vAq7G1eht 07Sz9XICNwTl0hpxBo6x26cZJSTXgO9fX+98OXBTU7wui6kCkQhoXXZR42nffv0n dv7dUbQHadFHTrNRnAwePXMj+N3jc7Mpb4/vZHKfpG7f/6tWdl9Eq4UF3R6ETRag 2rR0x9VC5SA+Y9S+u35/KosexjMRgVFjhGvHG3jIj0rfhBJNYj9YfSUeBJcOD+gY nQeHsKKWcuUDq+/S3u1YuHpr20cVzExtbhvbWogHqNHwHCNoKiQltVFWrSulYFe/ m6xqakPtLQ+eArHPLALid2Ds40LWYJfXQAUNXKkHBptfW7QEnf7WnXtE3LgxFuPG Ro613X/P -----END CERTIFICATE-----Generated at Fri Jul 24 21:30:14 2026 by rpki-client