$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa File: 6553D6106C2B11EA87ED1160C4F9AE02.roa (raw, json) Hash identifier: Jn+xr+mIwTvl5NEMNXs7bNlAUEv6pI//+6h2YNu6ULc= Subject key identifier: AB:37:61:6A:8D:B6:23:40:3F:D8:81:56:B0:87:94:D2:3D:B7:DA:8E Certificate issuer: /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Certificate serial: 0B8F Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:58:51 +0000 ROA not before: Wed 22 Oct 2025 20:08:54 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38256 IP address blocks: 124.6.224.0/20 maxlen: 21 124.6.224.0/24 maxlen: 24 124.6.225.0/24 maxlen: 24 124.6.226.0/24 maxlen: 24 124.6.227.0/24 maxlen: 24 124.6.228.0/24 maxlen: 24 124.6.229.0/24 maxlen: 24 124.6.230.0/24 maxlen: 24 124.6.231.0/24 maxlen: 24 124.6.232.0/24 maxlen: 24 124.6.233.0/24 maxlen: 24 124.6.234.0/24 maxlen: 24 124.6.235.0/24 maxlen: 24 124.6.236.0/24 maxlen: 24 124.6.237.0/24 maxlen: 24 124.6.238.0/24 maxlen: 24 124.6.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2959 (0xb8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4CAD, serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Validity Not Before: Oct 22 20:08:54 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4461b-7adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:80:2c:09:ee:74:b1:be:38:dc:e0:61:83: dd:f2:b2:0e:18:5f:76:22:c3:29:3c:81:9d:bf:2d: b6:f7:39:59:c4:e9:57:5f:ff:ce:91:47:0a:c5:b1: eb:41:b4:30:23:d9:f3:19:bb:48:4a:a3:c5:7f:85: 19:15:c3:dd:9c:12:ba:3a:33:3b:24:90:f8:88:2e: 21:66:62:67:4d:29:66:92:02:6b:4e:b7:a8:65:db: 49:e4:af:0b:ce:37:5f:07:c4:f4:59:7e:88:80:a4: dc:41:41:57:fc:cb:d2:7d:d4:ad:84:6b:78:83:04: 05:12:7e:10:eb:28:4e:cc:de:3a:e0:e3:c6:9e:67: 3c:51:32:e4:ca:ae:39:ca:45:60:78:69:4f:9a:0c: b0:ec:5b:25:21:b3:0b:8d:58:1a:5c:c8:c0:09:7b: e3:ae:14:24:a9:65:fc:ea:34:a3:8f:83:2f:50:cb: 8d:2d:97:8d:32:30:26:c9:74:96:1e:72:b2:c3:7a: 8f:6c:77:7c:2b:79:bb:76:64:2b:14:e1:7e:8d:f5: 80:c8:cd:e0:03:3d:10:71:03:2b:8d:92:f3:b9:88: 7a:e8:49:11:0f:cb:ef:79:96:e3:e8:9e:3c:4c:8c: e4:ee:dd:57:ce:c0:b7:50:6b:04:17:b3:18:16:41: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:37:61:6A:8D:B6:23:40:3F:D8:81:56:B0:87:94:D2:3D:B7:DA:8E X509v3 Authority Key Identifier: keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 124.6.224.0/20 Signature Algorithm: sha256WithRSAEncryption 7e:5e:e4:07:27:cf:9b:c8:ca:3c:7a:22:1b:7c:f3:d3:fe:4b: e9:5e:5c:97:5c:a4:24:95:8c:2f:c7:17:ca:8f:2a:1b:a9:bf: a1:33:95:d8:a8:2c:3e:a8:17:37:25:97:06:53:4d:fe:64:ea: ed:80:5b:c4:d4:ec:b7:bd:32:1d:10:10:80:38:9a:6f:38:82: 89:be:4d:ab:10:88:c7:a2:bf:74:ea:f3:62:a3:dd:e4:ad:8d: 2f:9d:d6:76:c2:c2:79:e5:b7:4b:29:ff:93:3c:a0:4b:64:72: 85:f1:9a:32:4f:e6:a9:12:e3:81:2b:59:c5:70:63:02:ab:2d: 4c:77:62:2e:cf:79:be:1f:b5:cb:ba:d7:a5:c4:a0:3b:65:ab: 57:20:24:e8:fe:88:52:8b:a9:9c:e8:42:91:a2:9b:12:09:db: 2f:80:77:aa:38:5f:8f:d2:5a:a6:20:18:88:6d:bc:d7:4f:77: 54:31:8a:09:7a:d3:95:92:9d:1b:aa:cc:7a:5e:13:2b:8f:29: 85:94:28:6c:80:ca:8a:12:18:b7:d1:d7:00:75:07:46:80:54: c8:96:fc:17:13:f3:35:01:a0:b2:22:8f:ca:15:64:3e:e2:94: e6:d2:81:2a:ed:cd:9d:a0:ad:ef:e6:82:01:9d:5f:49:54:bf: 14:06:1a:40 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDQUQxMTAvBgNVBAUTKDAzQTNDODdBNEYyRDgyNTU5NDc2RjcxQ0ZBRUU1MjRG RjUxMTM1NzkwHhcNMjUxMDIyMjAwODU0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDYxYi03YWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjlKALAnudLG+ONzgYYPd8rIOGF92IsMpPIGdvy229zlZxOlXX//OkUcKxbHr QbQwI9nzGbtISqPFf4UZFcPdnBK6OjM7JJD4iC4hZmJnTSlmkgJrTreoZdtJ5K8L zjdfB8T0WX6IgKTcQUFX/MvSfdSthGt4gwQFEn4Q6yhOzN464OPGnmc8UTLkyq45 ykVgeGlPmgyw7FslIbMLjVgaXMjACXvjrhQkqWX86jSjj4MvUMuNLZeNMjAmyXSW HnKyw3qPbHd8K3m7dmQrFOF+jfWAyM3gAz0QcQMrjZLzuYh66EkRD8vveZbj6J48 TIzk7t1XzsC3UGsEF7MYFkH0LwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKs3YWqN tiNAP9iBVrCHlNI9t9qOMB8GA1UdIwQYMBaAFAOjyHpPLYJVlHb3HPruUk/1ETV5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNENBRC85RkQ5N0EwODQ1 QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGdsV1VkdmNjLXU1U1RfVVJO WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2UEllazh0Z2xXVWR2Y2MtdTVTVF9VUk5Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDQUQvOUZEOTdBMDg0NUMzMTFFQUJFRjVENDM5QzRGOUFFMDIvNjU1M0Q2MTA2 QzJCMTFFQTg3RUQxMTYwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEfAbgMA0GCSqGSIb3DQEBCwUAA4IBAQB+XuQHJ8+byMo8eiIbfPPT /kvpXlyXXKQklYwvxxfKjyobqb+hM5XYqCw+qBc3JZcGU03+ZOrtgFvE1Oy3vTId EBCAOJpvOIKJvk2rEIjHor906vNio93krY0vndZ2wsJ55bdLKf+TPKBLZHKF8Zoy T+apEuOBK1nFcGMCqy1Md2Iuz3m+H7XLutelxKA7ZatXICTo/ohSi6mc6EKRopsS CdsvgHeqOF+P0lqmIBiIbbzXT3dUMYoJetOVkp0bqsx6XhMrjymFlChsgMqKEhi3 0dcAdQdGgFTIlvwXE/M1AaCyIo/KFWQ+4pTm0oEq7c2doK3v5oIBnV9JVL8UBhpA -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:32 2026 by rpki-client