$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa File: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (raw, json) Hash identifier: cgC2ydMTGIHogqUutqNvoyHdmfwEliEqE+1X5oBYTDA= Subject key identifier: 57:97:12:BE:0A:CA:DC:99:86:34:49:5E:53:02:EE:ED:AC:BB:7E:BE Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Certificate serial: 0204 Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:00:31 +0000 ROA not before: Fri 31 Oct 2025 03:47:50 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134090 IP address blocks: 45.249.116.0/22 maxlen: 24 103.51.112.0/22 maxlen: 24 103.85.36.0/22 maxlen: 24 103.95.112.0/22 maxlen: 24 103.106.88.0/22 maxlen: 24 113.29.240.0/22 maxlen: 23 123.253.188.0/22 maxlen: 24 124.158.96.0/22 maxlen: 23 175.111.176.0/22 maxlen: 23 202.128.112.0/20 maxlen: 20 202.128.112.0/21 maxlen: 24 202.128.120.0/21 maxlen: 24 202.179.128.0/22 maxlen: 24 2400:a840::/31 maxlen: 34 2400:a842::/31 maxlen: 34 2400:a844::/30 maxlen: 30 2400:a844::/31 maxlen: 34 2400:a846::/31 maxlen: 34 2400:a848::/31 maxlen: 34 2400:a84a::/31 maxlen: 34 2400:a84c::/31 maxlen: 34 2400:a84e::/31 maxlen: 34 2402:2c80::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Validity Not Before: Oct 31 03:47:50 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a41c4f-37ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:cd:ff:05:f5:2a:1b:46:6d:a4:2e:fc:af: 8e:ab:27:2e:f7:89:b6:cf:f4:dc:d8:84:28:69:34: 6b:5a:3a:0f:77:7b:58:95:00:43:7b:96:29:34:73: 7b:d3:4c:a1:95:09:80:00:29:e5:1e:58:c0:2a:64: cb:78:34:77:71:18:56:e5:3f:72:9b:f0:16:4f:22: cc:62:38:49:b2:e8:6f:21:b4:08:89:a9:45:a2:83: 3b:36:a7:3f:3f:d0:37:81:ec:22:fe:7f:71:b0:9d: 20:d2:1e:25:a1:c1:f2:9f:28:31:ff:e2:05:9c:f4: 78:4a:64:99:5a:99:51:cb:b6:37:8b:53:f7:87:d0: bb:18:49:e7:63:03:0f:d2:79:a5:8c:a0:27:de:e8: e2:66:2a:7c:a3:14:ae:d4:1f:6c:1d:08:aa:89:65: f4:e8:e2:d3:04:7a:97:f7:c4:6a:55:0d:59:5a:0a: 2c:4a:e6:9e:a2:be:ee:49:ba:56:fc:84:9c:0c:99: 83:c1:3b:02:8e:7e:4f:9c:d5:3e:c5:e0:58:80:4b: 3a:54:ad:b3:53:04:78:0e:ff:ed:d6:03:5f:39:56: 37:cd:65:46:1c:29:79:00:8f:62:60:71:2b:87:f3: 6b:83:c4:bc:a4:85:76:3d:4e:3e:41:ef:d0:42:64: bf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:97:12:BE:0A:CA:DC:99:86:34:49:5E:53:02:EE:ED:AC:BB:7E:BE X509v3 Authority Key Identifier: keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.249.116.0/22 103.51.112.0/22 103.85.36.0/22 103.95.112.0/22 103.106.88.0/22 113.29.240.0/22 123.253.188.0/22 124.158.96.0/22 175.111.176.0/22 202.128.112.0/20 202.179.128.0/22 IPv6: 2400:a840::/28 2402:2c80::/32 Signature Algorithm: sha256WithRSAEncryption 07:43:6a:9c:34:c5:e3:81:8b:f0:57:85:b5:69:49:ce:d4:3b: 72:54:85:66:39:49:64:23:73:a5:bc:30:59:96:03:89:61:a7: ee:3c:8f:70:c3:00:20:30:83:a9:34:9b:1b:37:10:d7:95:c1: 61:d5:b4:fd:1c:23:62:0e:48:3f:56:f5:62:66:5f:9a:99:81: 8d:6d:5b:b5:2c:55:7b:db:75:5d:8b:4e:00:28:51:0a:27:a9: 8d:c3:f2:15:08:b1:8f:52:42:3a:95:c4:26:31:8a:41:55:05: 11:67:d9:44:ad:06:8a:2d:53:82:78:53:56:25:3a:38:cd:84: c9:cf:2c:cd:65:3c:ec:3e:3a:f1:14:d9:44:3c:c6:2a:f1:f3: 8e:2c:17:9b:1e:f5:b1:a4:ee:35:4d:28:3d:99:22:f4:18:32: 87:25:4a:3e:31:f6:d0:19:f1:6a:15:6d:60:5b:e8:fa:20:59: b6:25:38:f8:07:08:74:a3:78:80:f7:f0:b0:c3:34:75:6a:b8: 25:4f:c4:3b:c5:81:14:65:1b:ca:5d:8d:8b:5a:1c:65:5c:90: 4b:30:9e:6b:2a:e3:d3:7c:4d:a2:9c:49:b5:e0:53:fb:02:a0: 79:7d:ee:08:8a:61:ef:ea:01:68:89:12:90:b8:a9:fd:05:87: ff:1a:fd:6b -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2 RDY3NzU4MDkwHhcNMjUxMDMxMDM0NzUwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWM0Zi0zN2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgnN/wX1KhtGbaQu/K+Oqycu94m2z/Tc2IQoaTRrWjoPd3tYlQBDe5YpNHN7 00yhlQmAACnlHljAKmTLeDR3cRhW5T9ym/AWTyLMYjhJsuhvIbQIialFooM7Nqc/ P9A3gewi/n9xsJ0g0h4locHynygx/+IFnPR4SmSZWplRy7Y3i1P3h9C7GEnnYwMP 0nmljKAn3ujiZip8oxSu1B9sHQiqiWX06OLTBHqX98RqVQ1ZWgosSuaeor7uSbpW /IScDJmDwTsCjn5PnNU+xeBYgEs6VK2zUwR4Dv/t1gNfOVY3zWVGHCl5AI9iYHEr h/Nrg8S8pIV2PU4+Qe/QQmS/pQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFFeXEr4K ytyZhjRJXlMC7u2su36+MB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRDMEQvQUQyNTg4OTA1NzU0MTFFRTk0MENEOTU0QzRGOUFFMDIvRjZGQUVDNUND QjA0MTFFRUFCMDVGOTNDQzRGOUFFMDIucm9hMHEGCCsGAQUFBwEHAQH/BGIwYDBI BAIAATBCAwQCLfl0AwQCZzNwAwQCZ1UkAwQCZ19wAwQCZ2pYAwQCcR3wAwQCe/28 AwQCfJ5gAwQCr2+wAwQEyoBwAwQCyrOAMBQEAgACMA4DBQQkAKhAAwUAJAIsgDAN BgkqhkiG9w0BAQsFAAOCAQEAB0NqnDTF44GL8FeFtWlJztQ7clSFZjlJZCNzpbww WZYDiWGn7jyPcMMAIDCDqTSbGzcQ15XBYdW0/RwjYg5IP1b1YmZfmpmBjW1btSxV e9t1XYtOAChRCiepjcPyFQixj1JCOpXEJjGKQVUFEWfZRK0Gii1TgnhTViU6OM2E yc8szWU87D468RTZRDzGKvHzjiwXmx71saTuNU0oPZki9BgyhyVKPjH20BnxahVt YFvo+iBZtiU4+AcIdKN4gPfwsMM0dWq4JU/EO8WBFGUbyl2Ni1ocZVyQSzCeayrj 03xNopxJteBT+wKgeX3uCIph7+oBaIkSkLip/QWH/xr9aw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:34 2026 by rpki-client