$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/F6C1C6C85F7611EFBFEE134FC4F9AE02.roa File: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (raw, json) Hash identifier: Z0MQnn6qOb174wCs47KETGp25JeTqEfueFTHZlB9rgo= Subject key identifier: F9:9B:9C:24:DB:42:A4:34:72:D5:22:6B:66:86:C0:31:E5:C4:E7:06 Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Certificate serial: 0BDE Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/F6C1C6C85F7611EFBFEE134FC4F9AE02.roa Signing time: Mon 02 Mar 2026 15:12:57 +0000 ROA not before: Wed 26 Nov 2025 00:53:15 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 10084 IP address blocks: 43.250.232.0/23 maxlen: 24 43.250.234.0/24 maxlen: 24 103.2.116.0/24 maxlen: 24 103.2.117.0/24 maxlen: 24 103.2.118.0/24 maxlen: 24 103.2.119.0/24 maxlen: 24 103.79.72.0/24 maxlen: 24 218.100.43.0/24 maxlen: 24 2402:9200::/32 maxlen: 32 2402:9200::/37 maxlen: 37 2402:9200::/45 maxlen: 45 2402:9200:8::/45 maxlen: 45 2402:9200:10::/45 maxlen: 45 2402:9200:18::/45 maxlen: 45 2402:9200:20::/45 maxlen: 45 2402:9200:28::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Validity Not Before: Nov 26 00:53:15 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5a8f9-9f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:1b:dc:ff:55:cf:d5:cd:ba:e4:21:8a:9a: 89:74:bb:0e:be:cb:f3:6b:20:c2:1a:1a:21:9a:30: 65:0b:15:b4:e6:0b:98:65:f6:35:b3:5b:bf:a2:c0: 30:af:75:10:44:c9:b0:74:a0:b6:54:1c:36:45:3e: df:c1:50:52:69:48:5c:4a:e2:7a:f8:1e:62:a8:06: c7:84:45:c7:2d:8a:a7:6d:8c:94:cc:26:ba:1d:92: 78:eb:fe:ed:ad:96:67:43:22:a6:61:2c:55:ee:ac: 4b:63:f1:d5:1a:f1:4d:b3:8e:b2:79:8b:62:eb:0c: da:ad:ce:09:32:51:9a:42:fb:fc:77:f4:37:81:ba: 51:e7:20:17:fd:e9:90:48:ec:90:cd:94:c2:e0:31: 64:8e:de:a9:3b:1d:ee:50:4c:eb:53:4d:6b:1c:84: 2f:08:77:bb:e1:3f:67:94:bd:ba:6f:0e:cb:88:65: dd:1d:a1:46:42:7c:86:45:b6:83:c5:29:75:2f:fc: e0:f9:4e:a3:c3:22:df:4d:a2:f3:1a:55:c2:52:ac: 89:56:33:30:a7:5a:8c:42:77:30:63:9d:9a:7b:5d: 60:5b:ec:cc:66:be:24:a1:9a:e0:50:f8:56:bb:7c: 1a:8c:fe:1d:fd:00:5b:10:13:9e:c5:6c:33:79:82: 95:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9B:9C:24:DB:42:A4:34:72:D5:22:6B:66:86:C0:31:E5:C4:E7:06 X509v3 Authority Key Identifier: keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/F6C1C6C85F7611EFBFEE134FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.250.232.0-43.250.234.255 103.2.116.0/22 103.79.72.0/24 218.100.43.0/24 IPv6: 2402:9200::/32 Signature Algorithm: sha256WithRSAEncryption 43:a6:36:81:65:54:68:c5:5e:3c:5e:eb:1c:20:a7:dd:00:f8: 81:0b:59:d3:8a:69:95:be:c8:7f:16:b4:74:a6:d7:82:bc:30: c4:e5:72:2c:4c:f6:a3:e0:6d:dc:3d:00:a3:6f:5c:86:e4:1f: cc:c1:b5:46:ed:48:65:b6:b3:43:30:a7:15:44:ce:5f:f5:9e: 6b:c5:6d:20:bb:be:57:66:6e:a2:e6:a4:6d:75:f3:3f:4e:1e: 22:c0:25:be:b2:f5:7e:76:6a:c0:dc:84:9b:52:46:2c:fa:96: a9:1a:9c:a6:42:b9:e9:2d:be:f0:eb:cb:84:fb:b3:ec:85:ce: 64:0a:70:5c:70:db:56:4f:8c:2c:ff:79:7c:5d:05:a4:3e:a3: 25:ae:ff:50:cd:f9:47:38:55:86:11:40:54:97:f1:b5:a1:01: 88:76:46:3b:11:dc:53:16:e4:cc:f2:b6:66:89:c9:e4:88:98: e1:99:d2:76:db:cc:98:91:9c:f5:50:b0:f8:b2:57:48:f7:80: 79:a4:3b:9e:b8:a6:6d:00:32:0e:af:48:16:3a:38:5a:b9:fe: ea:a0:63:86:dc:47:8e:cb:9c:b1:4d:36:cd:8a:00:a7:72:8a: 0b:16:46:36:1d:9e:f8:2f:63:59:53:c3:89:18:7f:3d:20:cb: b8:bc:13:71 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx RjI2NUQ0MTcwHhcNMjUxMTI2MDA1MzE1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YThmOS05Zjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttIb3P9Vz9XNuuQhipqJdLsOvsvzayDCGhohmjBlCxW05guYZfY1s1u/osAw r3UQRMmwdKC2VBw2RT7fwVBSaUhcSuJ6+B5iqAbHhEXHLYqnbYyUzCa6HZJ46/7t rZZnQyKmYSxV7qxLY/HVGvFNs46yeYti6wzarc4JMlGaQvv8d/Q3gbpR5yAX/emQ SOyQzZTC4DFkjt6pOx3uUEzrU01rHIQvCHe74T9nlL26bw7LiGXdHaFGQnyGRbaD xSl1L/zg+U6jwyLfTaLzGlXCUqyJVjMwp1qMQncwY52ae11gW+zMZr4koZrgUPhW u3wajP4d/QBbEBOexWwzeYKV2wIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFPmbnCTb QqQ0ctUia2aGwDHlxOcGMB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVGNTEvQTg4M0U4MUMzRDgyMTFFQTlGMjY3MzcwQzRGOUFFMDIvRjZDMUM2Qzg1 Rjc2MTFFRkJGRUUxMzRGQzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAm BAIAATAgMAwDBAMr+ugDBAAr+uoDBAJnAnQDBABnT0gDBADaZCswDQQCAAIwBwMF ACQCkgAwDQYJKoZIhvcNAQELBQADggEBAEOmNoFlVGjFXjxe6xwgp90A+IELWdOK aZW+yH8WtHSm14K8MMTlcixM9qPgbdw9AKNvXIbkH8zBtUbtSGW2s0MwpxVEzl/1 nmvFbSC7vldmbqLmpG118z9OHiLAJb6y9X52asDchJtSRiz6lqkanKZCuektvvDr y4T7s+yFzmQKcFxw21ZPjCz/eXxdBaQ+oyWu/1DN+Uc4VYYRQFSX8bWhAYh2RjsR 3FMW5MzytmaJyeSImOGZ0nbbzJiRnPVQsPiyV0j3gHmkO564pm0AMg6vSBY6OFq5 /uqgY4bcR47LnLFNNs2KAKdyigsWRjYdnvgvY1lTw4kYfz0gy7i8E3E= -----END CERTIFICATE-----Generated at Thu Mar 26 04:09:22 2026 by rpki-client