$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A66886B4491F11F193C776FB9E833773.roa File: A66886B4491F11F193C776FB9E833773.roa (raw, json) Hash identifier: Ycn+FE5HM/5f1RTPrxJpH+gYNx/CEG+58zy0bkr5Quw= Subject key identifier: A3:51:75:34:39:A3:11:45:FC:FB:00:5A:12:40:43:5A:49:45:72:46 Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Certificate serial: 61 Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A66886B4491F11F193C776FB9E833773.roa Signing time: Fri 23 Oct 2026 03:46:37 +0000 ROA not before: Fri 23 Oct 2026 03:46:36 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 45753 IP address blocks: 111.68.0.0/21 maxlen: 21 111.68.0.0/24 maxlen: 24 111.68.1.0/24 maxlen: 24 111.68.2.0/24 maxlen: 24 111.68.3.0/24 maxlen: 24 111.68.4.0/24 maxlen: 24 111.68.5.0/24 maxlen: 24 111.68.6.0/24 maxlen: 24 111.68.7.0/24 maxlen: 24 111.68.8.0/21 maxlen: 21 111.68.8.0/22 maxlen: 22 111.68.8.0/24 maxlen: 24 111.68.9.0/24 maxlen: 24 111.68.10.0/24 maxlen: 24 111.68.11.0/24 maxlen: 24 111.68.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 08:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Validity Not Before: Oct 23 03:46:36 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6adad89c-7e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:6c:9a:f6:ff:71:20:fd:90:62:a0:8f:75: de:d8:63:eb:73:1a:a2:b1:12:5d:50:a6:2b:15:74: 14:41:29:ca:13:76:01:ae:04:68:af:e3:23:c1:a6: c0:9f:8c:f1:96:0d:cf:95:b4:98:c2:b1:05:a0:52: 6b:75:83:e3:08:40:f2:6c:9a:fc:29:d1:79:31:2c: 8b:47:de:07:bb:ae:18:7c:ce:69:e7:67:61:4b:e1: 13:46:e3:72:5a:8c:ab:61:cd:19:5c:31:4f:0b:35: 50:d8:3f:32:12:23:b9:58:77:04:91:30:77:1d:d4: 48:09:60:93:de:2a:4f:3e:19:38:75:8d:96:03:91: f9:ba:e2:f5:00:dd:58:21:5e:b8:58:13:8e:2e:b3: 4a:3f:9c:29:4b:08:1a:93:4c:63:31:2a:ec:ba:57: fe:1d:5e:ed:87:b0:e6:65:94:58:f7:f4:0e:d0:95: db:89:b5:ff:54:11:e5:ef:29:9c:e7:eb:2f:68:bf: 94:c8:cc:34:0d:6b:78:31:b6:6d:c0:26:90:57:dd: f0:70:e6:3e:94:49:d1:e0:48:42:f6:cb:82:4d:19: 76:3f:43:a6:3f:34:91:8a:8f:84:81:a7:e1:ac:ed: 82:94:1b:b1:08:84:66:0f:ba:ed:0a:a5:27:62:6d: ee:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:51:75:34:39:A3:11:45:FC:FB:00:5A:12:40:43:5A:49:45:72:46 X509v3 Authority Key Identifier: keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A66886B4491F11F193C776FB9E833773.roa sbgp-ipAddrBlock: critical IPv4: 111.68.0.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:c2:fc:c7:41:4c:b1:7d:f5:07:0d:69:e1:41:ba:89:5f:f1: c6:c0:a2:67:8b:9b:31:d9:7d:7c:01:58:22:cf:81:5a:63:13: f0:c4:b1:ef:99:98:4c:ab:58:d4:7e:bf:3e:d7:c2:e7:04:b7: 40:ef:d9:bb:43:a3:85:0b:65:05:40:ec:49:64:b5:bc:07:4d: a2:36:8e:15:29:4d:cb:22:27:6d:3c:6e:b2:c3:40:0b:c2:eb: 7e:bd:90:4e:34:7e:b0:16:69:5d:c9:0e:f7:ae:90:7b:83:2e: da:9b:fc:4a:c3:c0:d4:80:67:46:1f:f8:43:e2:ce:d6:b3:93: 9f:ba:03:4a:87:36:76:52:21:05:77:34:27:bc:65:d5:aa:3c: 8e:9d:82:94:06:05:84:52:3b:91:3d:fd:34:0b:19:a8:88:e7: 81:4f:cf:a6:61:f8:03:e1:71:f9:74:a7:52:6e:6e:76:3e:08: b2:96:6a:b1:f9:13:ed:3e:36:27:70:62:fa:8d:96:97:b1:ba: 57:13:ee:61:5e:47:48:30:24:0e:31:c7:74:b0:d8:7c:b1:f5: 0e:4c:b7:cb:22:42:5f:51:04:f9:3e:9e:39:8e:9f:65:23:99: f1:5c:e1:9c:9d:8d:72:0b:9a:25:f1:40:4c:55:71:46:e4:66: a9:f5:a4:0c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REUwNjExMC8GA1UEBRMoNDY5MEMxMDZBRUI4M0M3NEQ3QkRGM0E0RTc5OTNDMDk4 MTJCQUNGQzAeFw0yNjEwMjMwMzQ2MzZaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZGFkODljLTdlNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9Y2ya9v9xIP2QYqCPdd7YY+tzGqKxEl1QpisVdBRBKcoTdgGuBGiv4yPBpsCf jPGWDc+VtJjCsQWgUmt1g+MIQPJsmvwp0XkxLItH3ge7rhh8zmnnZ2FL4RNG43Ja jKthzRlcMU8LNVDYPzISI7lYdwSRMHcd1EgJYJPeKk8+GTh1jZYDkfm64vUA3Vgh XrhYE44us0o/nClLCBqTTGMxKuy6V/4dXu2HsOZllFj39A7QlduJtf9UEeXvKZzn 6y9ov5TIzDQNa3gxtm3AJpBX3fBw5j6USdHgSEL2y4JNGXY/Q6Y/NJGKj4SBp+Gs 7YKUG7EIhGYPuu0KpSdibe4JAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUo1F1NDmj EUX8+wBaEkBDWklFckYwHwYDVR0jBBgwFoAURpDBBq64PHTXvfOk55k8CYErrPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERTA2LzY2OURCNTcyNDkx RjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhUWHZmT2s1NWs4Q1lFcnJQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnBEQkJxNjRQSFRYdmZPazU1azhDWUVyclB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REUwNi82NjlEQjU3MjQ5MUYxMUYxODM1OTMyQ0E5RTgzMzc3My9BNjY4ODZCNDQ5 MUYxMUYxOTNDNzc2RkI5RTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBARvRAAwDQYJKoZIhvcNAQELBQADggEBACzC/MdBTLF99QcNaeFBuolf 8cbAomeLmzHZfXwBWCLPgVpjE/DEse+ZmEyrWNR+vz7XwucEt0Dv2btDo4ULZQVA 7ElktbwHTaI2jhUpTcsiJ208brLDQAvC6369kE40frAWaV3JDveukHuDLtqb/ErD wNSAZ0Yf+EPiztazk5+6A0qHNnZSIQV3NCe8ZdWqPI6dgpQGBYRSO5E9/TQLGaiI 54FPz6Zh+APhcfl0p1JubnY+CLKWarH5E+0+NidwYvqNlpexulcT7mFeR0gwJA4x x3Sw2Hyx9Q5Mt8siQl9RBPk+njmOn2UjmfFc4ZydjXILmiXxQExVcUbkZqn1pAw= -----END CERTIFICATE-----Generated at Mon Oct 26 23:59:02 2026 by rpki-client