$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa File: 6ED5481209DF11EAA6052433C4F9AE02.roa (raw, json) Hash identifier: HrmVnXUGJt8jw2Un+GAxOWQzRcn/YFzs1aPIkDSrkXs= Subject key identifier: 80:BC:B1:C4:58:C1:7B:DC:E1:43:F3:2C:F3:83:0C:AA:45:34:EB:67 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0CD7 Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:02:24 +0000 ROA not before: Tue 02 Sep 2025 19:08:28 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9441 IP address blocks: 43.224.116.0/22 maxlen: 24 43.225.148.0/24 maxlen: 24 43.225.149.0/24 maxlen: 24 43.225.150.0/24 maxlen: 24 43.225.151.0/24 maxlen: 24 45.124.168.0/22 maxlen: 24 103.4.144.0/22 maxlen: 24 103.230.60.0/22 maxlen: 24 103.245.204.0/22 maxlen: 24 103.250.68.0/24 maxlen: 24 103.250.69.0/24 maxlen: 24 103.250.70.0/24 maxlen: 24 103.250.71.0/24 maxlen: 24 2404:9900::/32 maxlen: 40 2404:9900:1::/48 maxlen: 48 2404:9900:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Sep 2 19:08:28 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a519e0-0335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:dc:97:23:c3:eb:2e:c9:0b:e6:a2:59:31: af:ae:e2:89:c5:e7:be:59:23:c3:56:3b:f5:3d:57: d6:45:0c:0e:0c:68:5e:c8:ac:60:c2:c0:50:33:74: ca:94:18:fe:5e:26:dd:74:95:0d:f3:2a:ba:86:f2: fc:e9:36:bb:ff:3d:bd:2b:ea:95:f2:6a:43:ae:17: 61:95:e7:e6:21:36:05:2a:a3:22:ed:9f:ba:a6:56: 78:3a:5f:c0:b3:9d:2b:b0:22:43:3e:fa:ca:ff:22: e0:b1:63:a8:d8:e8:bf:79:ec:8b:ff:7b:72:9a:c2: 93:51:70:69:2a:8e:b2:c7:9d:58:3b:83:ce:e4:6b: b1:b0:84:0c:cb:44:99:24:c3:73:f7:c0:c5:0b:f8: 5e:d6:89:72:e7:76:55:ee:fd:65:0c:e7:cc:5b:07: 36:5b:e9:3c:a5:19:1a:32:36:6f:16:eb:b1:40:5a: 68:ae:91:8e:59:a3:7f:ec:94:4d:b0:66:4b:23:c0: 15:ff:d8:1a:f3:5b:7c:ef:8d:d6:0e:a5:88:c3:e3: 32:1e:03:3b:ed:0b:d1:52:21:ad:c7:f1:23:3b:99: 00:6c:a6:c6:0e:d1:88:97:6b:df:d3:72:a0:c9:de: 72:e4:b2:44:68:9d:43:ae:ea:25:1a:28:ba:2a:6b: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BC:B1:C4:58:C1:7B:DC:E1:43:F3:2C:F3:83:0C:AA:45:34:EB:67 X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.116.0/22 43.225.148.0/22 45.124.168.0/22 103.4.144.0/22 103.230.60.0/22 103.245.204.0/22 103.250.68.0/22 IPv6: 2404:9900::/32 Signature Algorithm: sha256WithRSAEncryption 5f:93:36:5c:84:39:ec:f9:c9:d8:23:89:1c:5a:81:63:83:a0: 06:f4:ec:15:c2:0d:cc:a3:8b:04:6e:99:2e:6e:4f:f5:6a:e6: 26:9c:c6:c0:6f:14:f5:be:d0:a5:8d:6f:03:5e:63:07:4b:7b: 45:d6:8f:f2:35:92:3e:2b:29:73:93:6e:fc:2e:2b:84:48:4c: 9a:54:4b:73:94:a0:27:d7:3b:b2:e6:0b:10:46:9f:e9:3c:31: 7c:5e:a4:51:28:8b:27:d8:4e:35:c1:bf:80:2c:2d:ef:9c:99: 4a:db:60:91:ce:18:90:02:6d:84:5f:3d:3c:93:99:8b:92:28: cc:10:a4:98:66:1e:52:2b:ca:fe:fc:82:87:4c:bf:88:c8:4e: e4:b2:c3:cb:a0:8c:3e:91:3c:51:f8:d9:89:7c:77:22:78:50: f8:f1:af:bc:ca:38:29:86:c3:9a:db:e3:81:15:44:c7:32:e5: ed:24:75:f6:a5:c2:c1:16:c8:60:a6:9c:18:71:fb:cd:7d:c8: 3f:d6:41:59:43:92:e6:61:d9:6d:28:4d:a9:28:d9:d8:11:6f: 6e:44:fe:be:d1:4d:27:bd:eb:e9:24:0a:e8:e3:6f:55:a0:6d: f7:30:03:7b:fc:57:15:02:9a:1f:04:db:19:5a:8b:27:20:84: 32:54:dc:af -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjUwOTAyMTkwODI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTllMC0wMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1jclyPD6y7JC+aiWTGvruKJxee+WSPDVjv1PVfWRQwODGheyKxgwsBQM3TK lBj+XibddJUN8yq6hvL86Ta7/z29K+qV8mpDrhdhlefmITYFKqMi7Z+6plZ4Ol/A s50rsCJDPvrK/yLgsWOo2Oi/eeyL/3tymsKTUXBpKo6yx51YO4PO5GuxsIQMy0SZ JMNz98DFC/he1oly53ZV7v1lDOfMWwc2W+k8pRkaMjZvFuuxQFporpGOWaN/7JRN sGZLI8AV/9ga81t8743WDqWIw+MyHgM77QvRUiGtx/EjO5kAbKbGDtGIl2vf03Kg yd5y5LJEaJ1DruolGii6KmswRwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFIC8scRY wXvc4UPzLPODDKpFNOtnMB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkU1RkIvQzE1NkRGOEUwOURFMTFFQTlFNEU3RDMyQzRGOUFFMDIvNkVENTQ4MTIw OURGMTFFQUE2MDUyNDMzQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCK+B0AwQCK+GUAwQCLXyoAwQCZwSQAwQCZ+Y8AwQCZ/XMAwQCZ/pE MA0EAgACMAcDBQAkBJkAMA0GCSqGSIb3DQEBCwUAA4IBAQBfkzZchDns+cnYI4kc WoFjg6AG9OwVwg3Mo4sEbpkubk/1auYmnMbAbxT1vtCljW8DXmMHS3tF1o/yNZI+ Kylzk278LiuESEyaVEtzlKAn1zuy5gsQRp/pPDF8XqRRKIsn2E41wb+ALC3vnJlK 22CRzhiQAm2EXz08k5mLkijMEKSYZh5SK8r+/IKHTL+IyE7kssPLoIw+kTxR+NmJ fHcieFD48a+8yjgphsOa2+OBFUTHMuXtJHX2pcLBFshgppwYcfvNfcg/1kFZQ5Lm YdltKE2pKNnYEW9uRP6+0U0nvevpJAro429VoG33MAN7/FcVApofBNsZWosnIIQy VNyv -----END CERTIFICATE-----Generated at Thu Mar 26 05:18:23 2026 by rpki-client