$ rpki-client -vvvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/B6C42C027E7111ECA6454787C4F9AE02.roa File: B6C42C027E7111ECA6454787C4F9AE02.roa (raw, json) Hash identifier: s5t3nBsHxduiqzrsbiUZU1vBJBYLm9M4BNp5Uh+xDCI= Subject key identifier: AE:88:72:54:0C:C7:03:E8:17:AF:D5:64:EB:1C:43:9D:CE:9A:39:98 Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 2718 Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/B6C42C027E7111ECA6454787C4F9AE02.roa Signing time: Thu 10 Sep 2026 16:23:16 +0000 ROA not before: Thu 10 Sep 2026 16:23:15 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 58752 IP address blocks: 43.245.232.0/22 maxlen: 24 103.31.176.0/23 maxlen: 24 2407:1500::/32 maxlen: 32 2407:1500:1::/48 maxlen: 48 2407:1500:2::/48 maxlen: 48 2407:1500:3::/48 maxlen: 48 2407:1500:4::/48 maxlen: 48 2407:1500:10::/48 maxlen: 48 2407:1500:20::/48 maxlen: 48 2407:1500:21::/48 maxlen: 48 2407:1500:22::/48 maxlen: 48 2407:1500:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 15:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10008 (0x2718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Sep 10 16:23:15 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa2d973-d23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:23:66:3a:49:6d:54:a4:bf:e5:42:70:f9:0b: 47:f3:5c:52:18:5c:be:46:8a:f1:7a:0c:1e:33:6d: 9f:9f:42:7a:f8:4a:7b:6a:8e:49:fb:4f:a3:56:49: 0f:2e:2e:a6:06:3e:db:b7:36:c4:8b:c6:b2:78:00: 0a:22:c0:48:75:a1:0c:81:b9:6f:72:16:22:1e:6b: 88:9a:61:c1:b3:36:09:20:5d:94:91:ce:a4:80:f9: 78:a1:33:71:88:e6:26:be:a2:e5:1d:4f:96:a0:c7: 1d:85:d5:3f:d4:09:6a:a0:35:0c:9f:6c:c1:e5:1b: e2:9b:f6:26:16:af:a7:36:e1:6f:7f:7d:10:2a:30: 57:09:0d:7d:55:9a:ea:4d:e8:37:93:31:50:76:70: 8c:e5:42:e3:6d:35:18:5d:3f:2f:3c:89:a1:62:b8: ff:2f:d5:8f:96:10:e8:ea:ed:2c:49:fd:2d:26:6b: d7:fa:aa:fd:f8:46:24:c7:cf:cb:e9:08:90:d6:03: fe:92:63:b9:e5:5c:c9:0e:88:25:98:b0:f6:b7:10: d6:f3:3b:59:96:06:de:58:f0:91:f6:3f:29:12:3c: d0:22:9e:54:66:b0:98:aa:64:21:df:61:e0:d0:1f: a2:5b:43:e0:65:c1:8c:91:af:b3:c1:78:f2:14:ef: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:88:72:54:0C:C7:03:E8:17:AF:D5:64:EB:1C:43:9D:CE:9A:39:98 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/B6C42C027E7111ECA6454787C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.232.0/22 103.31.176.0/23 IPv6: 2407:1500::/32 Signature Algorithm: sha256WithRSAEncryption 18:6d:54:d8:61:2d:ed:ac:86:3a:8d:8f:ee:a3:d4:5f:25:ec: 83:97:a2:20:eb:42:4d:b8:33:01:00:cd:ca:dc:81:89:6c:dc: c2:d8:c3:2b:48:64:2c:a9:f1:f2:46:7c:fe:8e:3a:07:7b:83: 28:dd:b5:2c:d5:ba:2c:ac:ea:3e:0a:35:ca:05:c0:5d:5a:d8: c8:a6:83:51:e0:fe:d3:5f:2b:49:e3:36:36:4e:fa:7a:ee:94: d4:94:92:e8:be:46:bf:42:22:fd:d8:54:f2:52:65:65:44:46: cd:11:83:76:86:74:04:c6:85:2a:2a:36:f6:bf:1c:43:0f:93: db:f3:75:ca:9e:38:a4:9d:a2:fa:2d:74:81:8a:a5:0b:d9:ec: 82:e1:53:18:90:72:d9:6f:78:0e:4b:6e:21:50:e9:88:8d:b9: 3b:de:0a:26:21:1b:19:0a:ae:45:83:02:28:8f:d3:3a:3b:32: 54:c5:3a:4d:e7:f9:3c:4b:34:e8:64:88:5b:14:1d:f7:12:cd: 93:54:22:9e:b9:8b:e4:e0:3a:b2:a3:04:48:dc:3a:ef:1b:de: 92:3b:e5:9f:e2:ba:ea:2b:80:c7:13:cb:8b:03:81:de:3b:8b: 22:ea:2e:81:df:41:39:73:10:5a:4d:4e:d5:a5:31:b3:9e:da: 15:8e:fd:56 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICJxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjYwOTEwMTYyMzE1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEyZDk3My1kMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8iNmOkltVKS/5UJw+QtH81xSGFy+RorxegweM22fn0J6+Ep7ao5J+0+jVkkP Li6mBj7btzbEi8ayeAAKIsBIdaEMgblvchYiHmuImmHBszYJIF2Ukc6kgPl4oTNx iOYmvqLlHU+WoMcdhdU/1AlqoDUMn2zB5Rvim/YmFq+nNuFvf30QKjBXCQ19VZrq Teg3kzFQdnCM5ULjbTUYXT8vPImhYrj/L9WPlhDo6u0sSf0tJmvX+qr9+EYkx8/L 6QiQ1gP+kmO55VzJDoglmLD2txDW8ztZlgbeWPCR9j8pEjzQIp5UZrCYqmQh32Hg 0B+iW0PgZcGMka+zwXjyFO9o3wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFK6IclQM xwPoF6/VZOscQ53OmjmYMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc1NEYvMkFEMTZGMzAxQTRBMTFFNTkyMDlFRDcyQzRGOUFFMDIvQjZDNDJDMDI3 RTcxMTFFQ0E2NDU0Nzg3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/XoAwQBZx+wMA0EAgACMAcDBQAkBxUAMA0GCSqGSIb3DQEBCwUA A4IBAQAYbVTYYS3trIY6jY/uo9RfJeyDl6Ig60JNuDMBAM3K3IGJbNzC2MMrSGQs qfHyRnz+jjoHe4Mo3bUs1bosrOo+CjXKBcBdWtjIpoNR4P7TXytJ4zY2Tvp67pTU lJLovka/QiL92FTyUmVlREbNEYN2hnQExoUqKjb2vxxDD5Pb83XKnjiknaL6LXSB iqUL2eyC4VMYkHLZb3gOS24hUOmIjbk73gomIRsZCq5FgwIoj9M6OzJUxTpN5/k8 SzToZIhbFB33Es2TVCKeuYvk4DqyowRI3DrvG96SO+Wf4rrqK4DHE8uLA4HeO4si 6i6B30E5cxBaTU7VpTGzntoVjv1W -----END CERTIFICATE-----Generated at Tue Sep 29 11:36:42 2026 by rpki-client