$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6BAC9870794A11F1A904CD4C78A30FBC.roa File: 6BAC9870794A11F1A904CD4C78A30FBC.roa (raw, json) Hash identifier: 262UbGbc8eLoGfsvXqOYudnevL8QRt8Jw0cKF1qSA+c= Subject key identifier: EC:20:6A:75:90:EF:EE:0E:CE:96:7B:A1:53:F7:EF:13:02:64:D9:7E Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1 Certificate serial: 032E Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6BAC9870794A11F1A904CD4C78A30FBC.roa Signing time: Sat 31 Oct 2026 01:48:33 +0000 ROA not before: Sat 31 Oct 2026 01:48:33 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 46606 IP address blocks: 43.225.52.0/22 maxlen: 24 103.50.160.0/22 maxlen: 24 103.195.184.0/23 maxlen: 24 103.195.186.0/24 maxlen: 24 103.195.187.0/24 maxlen: 24 103.224.22.0/24 maxlen: 24 137.59.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1 Validity Not Before: Oct 31 01:48:33 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ae548f0-1a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:d5:15:19:63:72:b7:50:1c:d8:8a:81:98: 46:c4:e7:fb:1d:5b:cd:26:ca:2b:ee:ac:07:93:e2: 09:64:a0:a1:dd:c4:72:ed:e0:ff:e2:8e:e9:3b:a7: 96:94:34:fe:ca:9f:c5:e9:ea:93:f8:31:55:5e:79: 6b:ae:6e:10:8c:f6:b8:49:1c:2d:84:28:24:80:bc: 2d:58:a5:a9:74:bf:d4:45:d7:0a:9a:b9:9d:f9:97: 79:12:c2:0e:6c:18:81:31:43:95:bf:3d:0b:67:9a: 49:c6:4d:8c:ba:f0:b2:47:d3:7e:0c:28:a3:89:8a: 11:67:0e:44:74:aa:76:e5:69:55:a5:77:88:b5:bd: 20:0a:fb:29:88:32:bf:30:ee:40:53:ee:e0:7a:8e: 96:05:b9:cb:04:8a:7c:26:fc:32:b0:83:fd:c8:11: c8:2d:c6:ac:df:d9:d7:12:b8:49:8d:9f:09:2b:45: d0:75:fa:1b:dd:4a:f2:09:04:3d:d4:7e:6f:4a:58: 4d:7a:43:64:e0:ff:d1:02:e4:01:9c:2d:40:c9:ea: 21:ff:e3:29:6b:c3:9e:a8:01:e4:13:ec:ca:18:bd: 16:0b:e8:04:fe:dc:1d:af:f3:2d:de:28:e8:ce:1c: 15:b1:8c:52:f5:8d:88:d2:e4:96:ca:eb:77:53:fc: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:20:6A:75:90:EF:EE:0E:CE:96:7B:A1:53:F7:EF:13:02:64:D9:7E X509v3 Authority Key Identifier: keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6BAC9870794A11F1A904CD4C78A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.225.52.0/22 103.50.160.0/22 103.195.184.0/22 103.224.22.0/24 137.59.148.0/22 Signature Algorithm: sha256WithRSAEncryption c4:14:1c:01:e9:ad:34:a1:7b:dd:56:d9:64:8b:76:aa:58:f9: 75:15:b4:14:56:c9:95:3b:b3:5c:ab:be:05:ce:47:6b:24:71: 18:ba:de:6f:91:d3:5f:04:bf:91:f4:70:e9:99:cb:27:e6:34: 69:52:34:b3:00:c4:d5:4e:6a:f6:78:df:46:9d:4c:4a:0f:8f: c5:61:63:51:e4:9e:ee:60:46:e8:25:21:b5:17:b1:2e:83:5d: 2a:57:e9:d0:25:34:59:b3:84:30:df:3c:7a:b0:85:45:03:d9: 62:8e:c2:cd:74:30:45:a4:73:f6:90:73:b2:1b:81:b5:ac:5c: 07:0a:70:a0:da:d4:13:84:56:c7:e5:08:fe:91:f0:ff:64:cd: b1:5b:55:0c:64:37:4f:c0:9a:ae:ff:8b:88:7a:be:f1:5b:5e: d1:cb:d0:8a:60:4e:72:73:c4:0e:81:d2:aa:8c:35:c9:62:b4: 29:e7:ec:58:22:37:e2:2c:e2:13:b6:e3:59:53:81:eb:eb:45: 50:b3:d9:74:b4:a0:96:e3:15:f2:87:e6:99:d0:4e:31:6f:1d: ae:79:ab:78:00:9a:af:50:b7:a4:6b:e5:35:b3:73:4b:f8:aa: 7a:4c:54:b3:2f:0e:4b:95:9e:91:1e:1e:91:c3:46:d3:5d:e0: ef:4d:74:18 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKEFFOTM4M0E5M0I2QzVBMTM1RDI2MTNBOTdDNURFQzk2 MDk2MjMzRjEwHhcNMjYxMDMxMDE0ODMzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU1NDhmMC0xYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8PVFRljcrdQHNiKgZhGxOf7HVvNJsor7qwHk+IJZKCh3cRy7eD/4o7pO6eW lDT+yp/F6eqT+DFVXnlrrm4QjPa4SRwthCgkgLwtWKWpdL/URdcKmrmd+Zd5EsIO bBiBMUOVvz0LZ5pJxk2MuvCyR9N+DCijiYoRZw5EdKp25WlVpXeItb0gCvspiDK/ MO5AU+7geo6WBbnLBIp8JvwysIP9yBHILcas39nXErhJjZ8JK0XQdfob3UryCQQ9 1H5vSlhNekNk4P/RAuQBnC1Ayeoh/+Mpa8OeqAHkE+zKGL0WC+gE/twdr/Mt3ijo zhwVsYxS9Y2I0uSWyut3U/zv6wIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFOwganWQ 7+4OzpZ7oVP37xMCZNl+MB8GA1UdIwQYMBaAFK6Tg6k7bFoTXSYTqXxd7JYJYjPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS81NzExNTlFMjRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9ycE9EcVR0c1doTmRKaE9wZkYzc2xnbGlN X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JwT0RxVHRzV2hOZEpoT3BmRjNzbGdsaU1fRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc0OEUvNTcxMTU5RTI0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvNkJBQzk4NzA3 OTRBMTFGMUE5MDRDRDRDNzhBMzBGQkMucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCK+E0AwQCZzKgAwQCZ8O4AwQAZ+AWAwQCiTuUMA0GCSqGSIb3DQEB CwUAA4IBAQDEFBwB6a00oXvdVtlki3aqWPl1FbQUVsmVO7Ncq74FzkdrJHEYut5v kdNfBL+R9HDpmcsn5jRpUjSzAMTVTmr2eN9GnUxKD4/FYWNR5J7uYEboJSG1F7Eu g10qV+nQJTRZs4Qw3zx6sIVFA9lijsLNdDBFpHP2kHOyG4G1rFwHCnCg2tQThFbH 5Qj+kfD/ZM2xW1UMZDdPwJqu/4uIer7xW17Ry9CKYE5yc8QOgdKqjDXJYrQp5+xY IjfiLOITtuNZU4Hr60VQs9l0tKCW4xXyh+aZ0E4xbx2ueat4AJqvULeka+U1s3NL +Kp6TFSzLw5LlZ6RHh6Rw0bTXeDvTXQY -----END CERTIFICATE-----Generated at Sun Nov 15 11:24:46 2026 by rpki-client