$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa File: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (raw, json) Hash identifier: qTVWaderqtgmeERdTaRyOlJrOlJ96wy4uZtKdMBbwhk= Subject key identifier: 37:BF:16:74:41:FC:D8:FF:54:37:FB:79:7D:B8:D3:88:D9:95:59:41 Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Certificate serial: 0275 Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa Signing time: Sat 03 Oct 2026 03:51:48 +0000 ROA not before: Sat 03 Oct 2026 03:51:48 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 134090 IP address blocks: 45.249.116.0/22 maxlen: 24 103.51.112.0/22 maxlen: 24 103.85.36.0/22 maxlen: 24 103.95.112.0/22 maxlen: 24 103.106.88.0/22 maxlen: 24 113.29.240.0/22 maxlen: 23 123.253.188.0/22 maxlen: 24 124.158.96.0/22 maxlen: 23 175.111.176.0/22 maxlen: 23 202.128.112.0/20 maxlen: 20 202.128.112.0/21 maxlen: 24 202.128.120.0/21 maxlen: 24 202.179.128.0/22 maxlen: 24 2400:a840::/31 maxlen: 34 2400:a842::/31 maxlen: 34 2400:a844::/30 maxlen: 30 2400:a844::/31 maxlen: 34 2400:a846::/31 maxlen: 34 2400:a848::/31 maxlen: 34 2400:a84a::/31 maxlen: 34 2400:a84c::/31 maxlen: 34 2400:a84e::/31 maxlen: 34 2402:2c80::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Validity Not Before: Oct 3 03:51:48 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac07bd4-efbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:48:99:a7:ba:d1:ba:4b:7e:e7:d1:fe:db:74: a1:60:1d:b3:21:e4:77:9a:8a:3d:f9:6b:f0:fd:4e: 0b:eb:10:5b:2b:0d:ba:c8:15:4c:f5:a8:2c:67:f3: 7c:4a:87:1a:3b:72:5b:46:0e:9c:27:d5:f5:58:47: 05:97:6f:6f:57:d3:c7:f3:91:39:6a:a9:66:c1:d7: 22:4a:23:fa:f6:9d:81:58:56:cb:a3:2f:cc:a0:2a: 37:ed:25:9f:ff:75:98:fc:1b:37:47:bf:d1:fe:e7: 6a:9b:49:ca:2a:fb:65:d5:72:42:82:5f:ae:b1:0a: 74:cf:13:82:ad:af:3a:b6:7a:fa:af:e9:b5:5e:9a: 2b:1e:73:24:38:b7:78:5d:d5:60:5f:1a:a5:fb:7d: b6:38:70:a3:e2:23:b1:9a:0a:ed:22:be:8c:9c:69: 31:2d:da:79:13:02:88:49:69:4a:52:c6:33:ce:fa: f3:c1:17:c1:9e:0d:54:90:c1:d0:8c:45:49:d6:90: a7:ba:89:77:db:4e:2a:8b:14:32:b8:40:3a:35:b3: 66:ef:6f:60:96:6a:d7:02:6f:8c:f5:01:e1:db:6b: b5:9a:f7:64:6d:d3:f3:23:28:43:17:63:ce:8a:3f: 44:34:0c:ad:7f:00:69:4b:32:a9:12:89:7f:17:31: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BF:16:74:41:FC:D8:FF:54:37:FB:79:7D:B8:D3:88:D9:95:59:41 X509v3 Authority Key Identifier: keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.249.116.0/22 103.51.112.0/22 103.85.36.0/22 103.95.112.0/22 103.106.88.0/22 113.29.240.0/22 123.253.188.0/22 124.158.96.0/22 175.111.176.0/22 202.128.112.0/20 202.179.128.0/22 IPv6: 2400:a840::/28 2402:2c80::/32 Signature Algorithm: sha256WithRSAEncryption cc:a8:29:86:b1:da:d1:b1:94:b2:1f:f2:df:71:52:bd:1c:9e: 80:77:05:02:0f:26:c2:44:1e:80:4d:45:17:a2:73:88:bf:fa: df:03:c3:6c:67:37:54:80:05:0a:1b:1e:34:ac:11:88:29:e2: 68:53:09:1c:92:8b:08:9c:03:80:3c:9c:87:7a:cd:a0:99:6e: 96:02:8b:1b:2f:13:35:07:fd:22:6f:2c:8c:49:8e:07:22:8a: 78:3f:9e:ea:00:fd:21:d7:dc:2f:25:8b:1e:a0:81:01:43:ce: 28:3b:1d:be:3f:b9:c4:d1:9f:21:03:30:43:90:c5:54:56:da: ff:72:5b:9b:8d:fa:cc:f8:80:65:93:18:22:61:8f:a0:19:bb: 18:4c:6c:17:fd:70:6c:6c:08:dc:fd:54:fd:af:b3:98:87:ef: cc:38:7c:0c:bd:82:08:92:77:04:78:bc:70:89:76:9c:11:67: 5e:46:74:68:c7:c9:34:94:ea:81:57:71:22:69:bc:03:ef:75: 0c:35:52:2d:fb:78:f7:f3:cd:90:27:b1:38:ac:db:17:0d:5f: 7b:f3:49:a1:09:f6:6d:47:fc:a7:5b:58:75:3f:a2:dc:5a:ce: 94:7f:19:f4:a2:2f:c6:f9:dd:f7:f6:cc:f8:f2:b8:af:51:33: 95:fb:bb:63 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2 RDY3NzU4MDkwHhcNMjYxMDAzMDM1MTQ4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMwN2JkNC1lZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+kiZp7rRukt+59H+23ShYB2zIeR3moo9+Wvw/U4L6xBbKw26yBVM9agsZ/N8 SocaO3JbRg6cJ9X1WEcFl29vV9PH85E5aqlmwdciSiP69p2BWFbLoy/MoCo37SWf /3WY/Bs3R7/R/udqm0nKKvtl1XJCgl+usQp0zxOCra86tnr6r+m1XporHnMkOLd4 XdVgXxql+322OHCj4iOxmgrtIr6MnGkxLdp5EwKISWlKUsYzzvrzwRfBng1UkMHQ jEVJ1pCnuol3204qixQyuEA6NbNm729glmrXAm+M9QHh22u1mvdkbdPzIyhDF2PO ij9ENAytfwBpSzKpEol/FzEnjwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFDe/FnRB /Nj/VDf7eX2404jZlVlBMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRDMEQvQUQyNTg4OTA1NzU0MTFFRTk0MENEOTU0QzRGOUFFMDIvRjZGQUVDNUND QjA0MTFFRUFCMDVGOTNDQzRGOUFFMDIucm9hMHEGCCsGAQUFBwEHAQH/BGIwYDBI BAIAATBCAwQCLfl0AwQCZzNwAwQCZ1UkAwQCZ19wAwQCZ2pYAwQCcR3wAwQCe/28 AwQCfJ5gAwQCr2+wAwQEyoBwAwQCyrOAMBQEAgACMA4DBQQkAKhAAwUAJAIsgDAN BgkqhkiG9w0BAQsFAAOCAQEAzKgphrHa0bGUsh/y33FSvRyegHcFAg8mwkQegE1F F6JziL/63wPDbGc3VIAFChseNKwRiCniaFMJHJKLCJwDgDych3rNoJlulgKLGy8T NQf9Im8sjEmOByKKeD+e6gD9IdfcLyWLHqCBAUPOKDsdvj+5xNGfIQMwQ5DFVFba /3Jbm436zPiAZZMYImGPoBm7GExsF/1wbGwI3P1U/a+zmIfvzDh8DL2CCJJ3BHi8 cIl2nBFnXkZ0aMfJNJTqgVdxImm8A+91DDVSLft49/PNkCexOKzbFw1fe/NJoQn2 bUf8p1tYdT+i3FrOlH8Z9KIvxvnd9/bM+PK4r1Ezlfu7Yw== -----END CERTIFICATE-----Generated at Mon Oct 26 00:37:32 2026 by rpki-client