$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa File: A6F2C5C2491F11F193C776FB9E833773.roa (raw, json) Hash identifier: cmk+Gug4kg1BYKpB4NDR2xmNKV9fmWEmzwFQtKpsx9M= Subject key identifier: 19:BB:00:B5:E0:B4:C1:3E:05:B4:6F:9B:57:9C:DE:E3:77:89:CF:C8 Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Certificate serial: 5F Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa Signing time: Fri 23 Oct 2026 03:45:49 +0000 ROA not before: Fri 23 Oct 2026 03:45:49 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 963 IP address blocks: 111.68.0.0/21 maxlen: 24 111.68.8.0/21 maxlen: 21 111.68.13.0/24 maxlen: 24 111.68.14.0/24 maxlen: 24 111.68.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC Validity Not Before: Oct 23 03:45:49 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6adad86c-df5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c8:d8:8b:cc:d3:5a:95:98:3e:57:1f:7b:b5: f2:fd:8e:6f:20:02:c2:0d:5b:dd:c1:c2:4c:91:9a: 38:57:ca:cf:70:da:0a:48:64:c4:de:70:b2:b3:2c: cc:1f:25:c8:b9:d2:e4:bb:0a:d4:57:f3:8a:a9:42: 25:a6:71:28:c4:aa:83:e4:46:e2:b0:da:bc:25:77: 8b:33:39:ad:cd:89:3f:47:d5:74:57:26:1c:fc:51: 26:f6:e3:74:43:b0:0d:25:29:9d:f9:1b:9d:20:bb: b6:a4:fd:b5:43:7f:9d:c2:2a:49:86:2d:29:01:7c: ee:ef:49:68:33:7f:ac:32:c8:1a:8a:c3:e4:17:46: 52:65:b5:d5:9d:0f:bb:c7:5d:e3:6d:db:6b:e2:1a: bc:36:2a:73:a8:5d:d1:e1:1d:af:a3:93:f3:66:c2: fb:98:aa:d0:d7:a8:78:32:1a:c3:4b:fc:c4:fc:d7: f5:f6:32:4c:a4:4b:52:3e:f4:02:a4:d0:fb:8d:83: b6:73:32:06:ca:73:69:9d:8b:74:5a:38:a0:89:48: 9c:6c:42:66:f3:a6:de:44:49:4b:fe:d4:f3:d7:6b: 63:ab:dc:c1:06:3b:91:83:2b:a2:0e:f8:c9:59:e5: 2b:8e:57:80:ef:ae:85:2f:d4:46:58:1c:90:34:06: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BB:00:B5:E0:B4:C1:3E:05:B4:6F:9B:57:9C:DE:E3:77:89:CF:C8 X509v3 Authority Key Identifier: keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa sbgp-ipAddrBlock: critical IPv4: 111.68.0.0/20 Signature Algorithm: sha256WithRSAEncryption 30:04:39:b8:da:d8:a7:4c:bd:73:f7:62:56:e3:b2:45:27:28: 65:6d:65:ef:f8:35:9b:ad:fb:7c:88:70:1c:f1:0a:00:9d:37: 61:91:dc:02:6c:ad:0c:8a:55:68:a8:6b:43:78:29:c0:f7:ad: f8:95:69:8d:20:1c:71:06:19:58:22:45:dd:31:7b:60:09:98: 4e:cd:0e:62:b0:fb:ca:9c:b5:71:03:e3:c1:ac:5b:56:38:bc: 4c:6c:cb:d9:64:ef:be:ac:03:71:19:4e:c1:4b:b7:bf:f5:77: f2:21:dc:3b:75:9b:fc:13:e2:06:5a:c0:fa:fa:64:7b:bd:34: 5a:f2:e8:dd:d5:1e:8f:90:fb:b8:a5:b7:18:17:34:c2:73:b5: 5f:a3:fb:f4:5a:af:f2:24:60:30:41:f9:f9:7b:e6:6c:c6:a0: ab:75:66:c2:7f:5a:a0:d2:c7:56:d9:38:2b:71:dd:9c:a6:40: a0:f9:4b:9a:05:d5:fd:dd:23:5a:2d:98:20:92:16:50:50:f9: f5:12:61:f5:d6:7e:35:bf:c4:fd:11:74:35:96:93:99:e0:3b: eb:f7:84:aa:66:b0:69:bb:9e:50:ea:25:73:c3:50:2f:9f:d2: 7f:6a:3f:cf:81:e4:ad:8c:1d:bb:1d:a0:b7:f0:01:87:97:14: c0:91:b0:ae -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REUwNjExMC8GA1UEBRMoNDY5MEMxMDZBRUI4M0M3NEQ3QkRGM0E0RTc5OTNDMDk4 MTJCQUNGQzAeFw0yNjEwMjMwMzQ1NDlaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZGFkODZjLWRmNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjyNiLzNNalZg+Vx97tfL9jm8gAsINW93BwkyRmjhXys9w2gpIZMTecLKzLMwf Jci50uS7CtRX84qpQiWmcSjEqoPkRuKw2rwld4szOa3NiT9H1XRXJhz8USb243RD sA0lKZ35G50gu7ak/bVDf53CKkmGLSkBfO7vSWgzf6wyyBqKw+QXRlJltdWdD7vH XeNt22viGrw2KnOoXdHhHa+jk/NmwvuYqtDXqHgyGsNL/MT81/X2MkykS1I+9AKk 0PuNg7ZzMgbKc2mdi3RaOKCJSJxsQmbzpt5ESUv+1PPXa2Or3MEGO5GDK6IO+MlZ 5SuOV4DvroUv1EZYHJA0BiIZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUGbsAteC0 wT4FtG+bV5ze43eJz8gwHwYDVR0jBBgwFoAURpDBBq64PHTXvfOk55k8CYErrPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERTA2LzY2OURCNTcyNDkx RjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhUWHZmT2s1NWs4Q1lFcnJQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnBEQkJxNjRQSFRYdmZPazU1azhDWUVyclB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REUwNi82NjlEQjU3MjQ5MUYxMUYxODM1OTMyQ0E5RTgzMzc3My9BNkYyQzVDMjQ5 MUYxMUYxOTNDNzc2RkI5RTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBARvRAAwDQYJKoZIhvcNAQELBQADggEBADAEObja2KdMvXP3YlbjskUn KGVtZe/4NZut+3yIcBzxCgCdN2GR3AJsrQyKVWioa0N4KcD3rfiVaY0gHHEGGVgi Rd0xe2AJmE7NDmKw+8qctXED48GsW1Y4vExsy9lk776sA3EZTsFLt7/1d/Ih3Dt1 m/wT4gZawPr6ZHu9NFry6N3VHo+Q+7iltxgXNMJztV+j+/Rar/IkYDBB+fl75mzG oKt1ZsJ/WqDSx1bZOCtx3ZymQKD5S5oF1f3dI1otmCCSFlBQ+fUSYfXWfjW/xP0R dDWWk5ngO+v3hKpmsGm7nlDqJXPDUC+f0n9qP8+B5K2MHbsdoLfwAYeXFMCRsK4= -----END CERTIFICATE-----Generated at Wed Oct 28 13:16:05 2026 by rpki-client