$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/B6C42C027E7111ECA6454787C4F9AE02.roa File: B6C42C027E7111ECA6454787C4F9AE02.roa (raw, json) Hash identifier: 8q4Vi4HVYjQUA8ghEZ3LJ9W3FYoT2yvANYapfAcNddI= Subject key identifier: 94:9F:90:0E:97:7B:E5:07:66:99:15:98:CA:A3:EA:6E:36:2D:67:31 Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 26B5 Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/B6C42C027E7111ECA6454787C4F9AE02.roa Signing time: Mon 09 Mar 2026 09:55:27 +0000 ROA not before: Mon 09 Mar 2026 09:55:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58752 IP address blocks: 43.245.232.0/22 maxlen: 24 103.31.176.0/23 maxlen: 24 2407:1500::/32 maxlen: 32 2407:1500:1::/48 maxlen: 48 2407:1500:2::/48 maxlen: 48 2407:1500:3::/48 maxlen: 48 2407:1500:4::/48 maxlen: 48 2407:1500:10::/48 maxlen: 48 2407:1500:20::/48 maxlen: 48 2407:1500:21::/48 maxlen: 48 2407:1500:22::/48 maxlen: 48 2407:1500:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9909 (0x26b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Mar 9 09:55:27 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69ae990f-2e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4e:60:b6:a5:d9:e7:de:55:07:92:6f:b4:56: a3:0d:10:56:00:43:fd:57:a3:6c:6a:a4:66:ae:a3: d0:4e:85:cd:94:93:97:84:7f:55:ca:bf:a7:1b:de: 6b:aa:d8:e3:28:6a:c7:32:1e:3d:01:f4:ef:c7:db: 07:79:a0:b6:6b:81:27:68:3b:38:9b:27:24:48:bc: b4:78:4a:11:e9:df:e2:60:b9:57:5c:d6:0e:c3:d8: 0c:dc:d6:b4:60:68:a0:06:3f:e2:e9:a2:26:ee:ce: 9f:cb:05:dc:d5:20:5c:16:58:34:cb:aa:00:94:6c: ea:1c:6d:bf:ea:a7:ac:23:53:d5:b4:a9:3b:a8:56: 23:c0:aa:b3:fd:39:9c:92:d4:e1:b8:cb:0b:fa:85: 2e:bb:c9:8a:ee:f7:c6:c6:73:d8:0a:23:ab:6b:c1: 26:87:b9:d2:cc:1f:7d:34:4d:ab:89:b0:35:5c:02: ec:76:81:81:61:f8:de:5d:4c:26:6f:e7:c4:bc:ad: c4:f7:c3:21:5f:4b:3e:85:fe:1f:cc:8c:6e:1a:90: 5b:fb:f3:62:ca:81:c1:7a:b7:03:1b:ea:36:20:79: 00:29:38:72:77:f9:c6:e9:90:fe:7c:c6:0f:7a:1a: 03:af:7e:0a:8f:9b:29:16:43:1d:6b:0f:d7:9c:ba: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9F:90:0E:97:7B:E5:07:66:99:15:98:CA:A3:EA:6E:36:2D:67:31 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/B6C42C027E7111ECA6454787C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.232.0/22 103.31.176.0/23 IPv6: 2407:1500::/32 Signature Algorithm: sha256WithRSAEncryption 45:de:9a:95:85:1d:8c:42:39:36:f8:b1:5d:04:0e:90:86:f6: b8:d0:ac:8e:b3:e8:a1:05:82:50:13:c6:dd:fe:ae:4a:9e:18: 72:ed:bd:46:57:35:f8:c2:c1:2b:d2:c8:e8:73:df:d2:8b:bd: ab:16:34:aa:f6:65:91:37:41:7e:52:43:e2:15:45:54:74:27: 9d:c4:6e:90:ff:1c:a3:46:e9:dc:36:c8:3a:46:2b:e9:cb:40: 0c:7b:be:85:df:11:c2:c0:6f:02:c4:9b:71:30:0f:61:0a:dc: 43:8b:0a:33:25:17:f3:b5:eb:80:44:46:43:1b:17:11:4a:21: 6e:66:33:46:1b:f7:25:0f:95:95:83:f7:24:38:62:68:01:36: 18:32:e1:1b:77:4d:c4:8a:61:5b:f2:b8:e6:af:92:c0:a6:0f: 74:f4:df:a7:1c:54:59:5c:46:4c:81:04:80:7c:f9:86:b1:e4: 40:58:1e:8f:94:57:f3:cc:c3:e5:77:05:cb:28:ed:9a:18:43: 07:9e:c3:ea:2b:ed:cf:fc:ce:dd:bb:2a:b7:52:2a:e4:e6:f5: b7:14:c7:00:9d:22:77:4f:3c:f3:3e:32:9c:af:07:42:d1:9e: b5:79:cb:d2:3c:6c:0f:29:de:ca:d3:2c:2a:92:16:4f:04:7c: aa:2f:06:a3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICJrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjYwMzA5MDk1NTI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFlOTkwZi0yZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5k5gtqXZ595VB5JvtFajDRBWAEP9V6NsaqRmrqPQToXNlJOXhH9Vyr+nG95r qtjjKGrHMh49AfTvx9sHeaC2a4EnaDs4myckSLy0eEoR6d/iYLlXXNYOw9gM3Na0 YGigBj/i6aIm7s6fywXc1SBcFlg0y6oAlGzqHG2/6qesI1PVtKk7qFYjwKqz/Tmc ktThuMsL+oUuu8mK7vfGxnPYCiOra8Emh7nSzB99NE2ribA1XALsdoGBYfjeXUwm b+fEvK3E98MhX0s+hf4fzIxuGpBb+/NiyoHBercDG+o2IHkAKThyd/nG6ZD+fMYP ehoDr34Kj5spFkMdaw/XnLrBPQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJSfkA6X e+UHZpkVmMqj6m42LWcxMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc1NEYvMkFEMTZGMzAxQTRBMTFFNTkyMDlFRDcyQzRGOUFFMDIvQjZDNDJDMDI3 RTcxMTFFQ0E2NDU0Nzg3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/XoAwQBZx+wMA0EAgACMAcDBQAkBxUAMA0GCSqGSIb3DQEBCwUA A4IBAQBF3pqVhR2MQjk2+LFdBA6Qhva40KyOs+ihBYJQE8bd/q5Knhhy7b1GVzX4 wsEr0sjoc9/Si72rFjSq9mWRN0F+UkPiFUVUdCedxG6Q/xyjRuncNsg6Rivpy0AM e76F3xHCwG8CxJtxMA9hCtxDiwozJRfzteuAREZDGxcRSiFuZjNGG/clD5WVg/ck OGJoATYYMuEbd03EimFb8rjmr5LApg909N+nHFRZXEZMgQSAfPmGseRAWB6PlFfz zMPldwXLKO2aGEMHnsPqK+3P/M7duyq3Uirk5vW3FMcAnSJ3TzzzPjKcrwdC0Z61 ecvSPGwPKd7K0ywqkhZPBHyqLwaj -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:23 2026 by rpki-client