$ rpki-client -vvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa File: A6F2C5C2491F11F193C776FB9E833773.roa (raw, json) Hash identifier: TIPSpd8GDTa/HiS4PdTYKDX+P5DkBR89f8e9l36/XBU= Subject key identifier: CA:BD:52:DF:25:B4:6C:EE:4E:59:1E:BC:7F:8B:B4:5E:89:C3:73:B2 Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Certificate serial: 2F Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa Signing time: Thu 23 Jul 2026 11:35:39 +0000 ROA not before: Thu 23 Jul 2026 11:35:38 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 963 IP address blocks: 111.68.0.0/21 maxlen: 24 111.68.13.0/24 maxlen: 24 111.68.14.0/24 maxlen: 24 111.68.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Validity Not Before: Jul 23 11:35:38 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a61fc8a-28e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:63:0b:f7:41:87:95:a9:6b:41:18:7c:a0: 00:ee:46:6b:df:6e:4a:02:f3:af:87:36:28:ab:df: b0:3b:2c:83:d9:2e:e5:0c:0b:99:de:3e:97:b0:d9: 48:67:2f:6b:be:91:fb:d4:21:d3:b5:ab:7b:54:9d: 97:bd:8d:80:7a:de:0b:92:ae:69:6a:40:3e:90:97: 80:3f:a6:93:f7:99:7b:bd:0c:82:74:2f:17:d4:5d: a0:49:98:62:a8:ea:c1:de:35:6d:4b:d2:65:5f:34: e9:a2:de:21:b3:ca:a4:eb:fe:6d:89:1c:dc:a5:4c: 8a:f3:b8:dd:86:9d:06:a1:aa:84:92:e0:98:4f:5b: 06:5b:d1:5a:7c:0d:c6:ae:c3:81:ee:18:14:9e:e8: c0:c1:cb:81:f4:e4:76:37:61:80:5c:3c:d3:07:5d: 66:4f:43:1d:ea:85:28:90:55:79:b0:dd:f1:d8:d6: 73:dd:d3:0e:73:1e:06:03:eb:11:de:4b:e3:c6:41: 3f:53:76:fe:6a:2c:0b:8f:69:e1:b7:a6:c3:cb:e9: 87:a4:87:45:29:22:99:82:96:a6:6f:d0:48:a1:8b: 7e:b6:cb:ee:39:b9:0a:54:78:fb:22:b2:f0:f9:ec: 55:13:5b:24:c0:4e:5a:56:c7:c1:bc:53:56:8e:ec: fc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BD:52:DF:25:B4:6C:EE:4E:59:1E:BC:7F:8B:B4:5E:89:C3:73:B2 X509v3 Authority Key Identifier: keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa sbgp-ipAddrBlock: critical IPv4: 111.68.0.0/21 111.68.13.0-111.68.15.255 Signature Algorithm: sha256WithRSAEncryption 0d:5f:93:ae:74:32:65:a0:f3:9f:f9:86:be:22:99:9a:f8:8c: 2a:04:37:37:b7:94:39:cd:da:81:3a:e8:2d:f1:c6:ae:ba:2a: 76:0a:84:2a:d1:58:53:be:b1:32:b8:fd:ae:47:09:94:72:fb: 30:be:3a:ec:10:c0:f7:cc:02:ea:39:dc:15:40:8b:f3:6c:ee: 9d:67:6b:66:a8:be:f3:20:f8:bb:e7:da:53:92:29:f0:dd:b8: 46:03:39:45:fa:45:25:2f:6d:96:a8:5d:6c:ba:13:14:fb:7b: 54:ac:1e:9a:84:4d:5e:fa:aa:ae:ed:6b:01:f4:0d:e4:4c:25: 91:80:9f:95:28:9c:ed:ba:cd:66:ed:d8:4a:dd:c2:37:ae:f9: 48:39:3c:81:a4:db:72:d6:32:89:7e:de:e0:9d:1b:67:b5:bb: cd:1b:c6:44:f7:23:d0:3d:c0:1c:19:9b:3c:12:53:74:c1:c9: 22:1c:f0:ed:ca:83:57:d9:04:1d:af:04:5a:f1:52:27:a5:99: 6c:e0:01:9f:88:d8:36:86:8b:4b:da:91:2e:26:62:cc:ad:bb: 9c:9d:37:35:f8:c1:9d:52:51:0a:6a:54:42:3f:02:31:a9:cf: d8:7f:64:c7:2d:e7:15:fa:0b:31:bf:71:45:9e:db:05:8b:dd: ed:b0:de:cc -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REUwNjExMC8GA1UEBRMoNDY5MEMxMDZBRUI4M0M3NEQ3QkRGM0E0RTc5OTNDMDk4 MTJCQUNGQzAeFw0yNjA3MjMxMTM1MzhaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNjFmYzhhLTI4ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYkWML90GHlalrQRh8oADuRmvfbkoC86+HNiir37A7LIPZLuUMC5nePpew2Uhn L2u+kfvUIdO1q3tUnZe9jYB63guSrmlqQD6Ql4A/ppP3mXu9DIJ0LxfUXaBJmGKo 6sHeNW1L0mVfNOmi3iGzyqTr/m2JHNylTIrzuN2GnQahqoSS4JhPWwZb0Vp8Dcau w4HuGBSe6MDBy4H05HY3YYBcPNMHXWZPQx3qhSiQVXmw3fHY1nPd0w5zHgYD6xHe S+PGQT9Tdv5qLAuPaeG3psPL6Yekh0UpIpmClqZv0Eihi362y+45uQpUePsisvD5 7FUTWyTATlpWx8G8U1aO7Py1AgMBAAGjggJuMIICajAdBgNVHQ4EFgQUyr1S3yW0 bO5OWR68f4u0XonDc7IwHwYDVR0jBBgwFoAURpDBBq64PHTXvfOk55k8CYErrPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERTA2LzY2OURCNTcyNDkx RjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhUWHZmT2s1NWs4Q1lFcnJQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnBEQkJxNjRQSFRYdmZPazU1azhDWUVyclB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REUwNi82NjlEQjU3MjQ5MUYxMUYxODM1OTMyQ0E5RTgzMzc3My9BNkYyQzVDMjQ5 MUYxMUYxOTNDNzc2RkI5RTgzMzc3My5yb2EwLQYIKwYBBQUHAQcBAf8EHjAcMBoE AgABMBQDBANvRAAwDAMEAG9EDQMEBG9EADANBgkqhkiG9w0BAQsFAAOCAQEADV+T rnQyZaDzn/mGviKZmviMKgQ3N7eUOc3agTroLfHGrroqdgqEKtFYU76xMrj9rkcJ lHL7ML467BDA98wC6jncFUCL82zunWdrZqi+8yD4u+faU5Ip8N24RgM5RfpFJS9t lqhdbLoTFPt7VKwemoRNXvqqru1rAfQN5EwlkYCflSic7brNZu3YSt3CN675SDk8 gaTbctYyiX7e4J0bZ7W7zRvGRPcj0D3AHBmbPBJTdMHJIhzw7cqDV9kEHa8EWvFS J6WZbOABn4jYNoaLS9qRLiZizK27nJ03NfjBnVJRCmpUQj8CManP2H9kxy3nFfoL Mb9xRZ7bBYvd7bDezA== -----END CERTIFICATE-----Generated at Fri Jul 24 17:00:54 2026 by rpki-client