$ rpki-client -vvvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa File: C2D9F4BCD24311EF92066413C4F9AE02.roa (raw, json) Hash identifier: hrw2WQsBuE/4epVSU2TjtW5jvF11HCxafhc1edL96Wk= Subject key identifier: E8:1F:23:68:97:05:54:A1:AF:9A:8F:0E:FC:73:20:BD:02:FF:FB:69 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 095C Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa Signing time: Mon 14 Sep 2026 20:41:29 +0000 ROA not before: Mon 14 Sep 2026 20:41:29 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 147040 IP address blocks: 61.4.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2396 (0x95c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Sep 14 20:41:29 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa85bf8-ba17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:cd:0d:46:dc:b8:98:59:4e:d7:de:ce:f6: 44:83:93:ce:b4:2e:8c:7e:a4:73:e6:6a:07:ca:a6: 7b:79:b4:fe:8b:4b:21:51:03:e9:01:da:3e:af:c6: 3f:dd:f3:27:49:0e:b0:be:a1:8e:b3:e1:34:02:e3: 5a:7e:88:92:48:04:9c:46:f0:ec:c5:0b:95:46:a9: 86:76:31:41:90:89:9b:c6:fa:4b:7e:bd:08:58:52: c9:db:85:df:72:1e:56:a4:c8:61:f7:dd:3a:bd:28: 1d:a7:df:a8:78:fc:d2:c5:0c:d0:e1:32:29:08:9a: b7:1e:15:94:26:9b:fa:61:79:ee:cb:eb:7c:f1:d9: c9:4d:c9:7f:3e:c2:26:32:00:98:11:80:78:32:d1: 33:1a:69:4b:64:7f:7b:05:ba:09:29:0c:72:f3:0c: 4c:92:a9:e3:7f:9a:ca:1d:af:eb:fe:d5:fa:0f:2f: 47:2a:d0:88:09:16:01:6f:6d:dd:f9:82:64:6e:b3: 09:05:bc:15:96:5c:8f:d7:93:a9:d7:93:1a:ae:c0: 5d:3b:d5:25:f6:18:68:6c:d2:49:63:2f:dc:aa:e0: 0d:b3:a0:d2:c4:f9:38:eb:6a:5a:0f:df:b1:f9:f7: af:f2:08:3d:38:87:cb:c7:d6:47:bd:e4:a9:24:c8: 6f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1F:23:68:97:05:54:A1:AF:9A:8F:0E:FC:73:20:BD:02:FF:FB:69 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.4.108.0/24 Signature Algorithm: sha256WithRSAEncryption 21:c8:0c:4d:9d:24:45:7c:97:fb:5a:24:0d:3b:13:3f:ce:98: 45:e2:ab:fb:96:84:0f:bd:00:1d:30:8a:55:e5:27:fe:f5:e8: 20:5b:74:3c:1f:ad:0b:cf:b5:c9:a9:20:b8:ed:63:d0:de:dd: fa:c3:cc:dd:f8:39:b7:87:a1:e5:0d:b0:dd:a4:1c:f8:70:cc: ba:73:04:b1:97:2a:65:85:c5:a5:dd:37:d4:15:61:c6:d6:41: 5c:34:0e:5c:30:7f:59:92:be:8b:c3:d4:3a:c6:f1:76:68:f9: 39:06:e3:b6:90:6a:b4:93:cf:4f:fc:2f:ba:2b:5f:42:b8:1f: 3a:41:42:52:7f:0c:92:31:84:9f:0b:4f:4f:83:85:6d:03:fc: 7c:6b:cc:67:1e:d0:c3:d2:d3:13:6a:62:5d:3b:5b:cb:4b:6a: a3:89:eb:84:a9:37:e6:2f:d2:a3:b4:ef:54:f2:0f:12:99:03: 9e:1f:6e:33:63:59:21:18:56:e9:c2:6b:84:b7:af:28:11:bc: 8f:ec:d1:b8:8d:1b:45:f2:54:b4:57:33:d6:47:b5:1b:dd:e8: 60:f9:f8:1f:68:df:78:6e:f3:bc:c1:e1:9e:2a:a9:f8:9a:66: 34:19:c8:fb:42:9d:06:11:b0:a4:3f:4a:e7:84:dd:23:e3:b8: 43:c1:28:c1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjYwOTE0MjA0MTI5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4NWJmOC1iYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQXNDUbcuJhZTtfezvZEg5POtC6MfqRz5moHyqZ7ebT+i0shUQPpAdo+r8Y/ 3fMnSQ6wvqGOs+E0AuNafoiSSAScRvDsxQuVRqmGdjFBkImbxvpLfr0IWFLJ24Xf ch5WpMhh9906vSgdp9+oePzSxQzQ4TIpCJq3HhWUJpv6YXnuy+t88dnJTcl/PsIm MgCYEYB4MtEzGmlLZH97BboJKQxy8wxMkqnjf5rKHa/r/tX6Dy9HKtCICRYBb23d +YJkbrMJBbwVllyP15Op15MarsBdO9Ul9hhobNJJYy/cquANs6DSxPk462paD9+x +fev8gg9OIfLx9ZHveSpJMhvcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOgfI2iX BVShr5qPDvxzIL0C//tpMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvQzJEOUY0QkNE MjQzMTFFRjkyMDY2NDEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAPQRsMA0GCSqGSIb3DQEBCwUAA4IBAQAhyAxNnSRFfJf7WiQNOxM/ zphF4qv7loQPvQAdMIpV5Sf+9eggW3Q8H60Lz7XJqSC47WPQ3t36w8zd+Dm3h6Hl DbDdpBz4cMy6cwSxlyplhcWl3TfUFWHG1kFcNA5cMH9Zkr6Lw9Q6xvF2aPk5BuO2 kGq0k89P/C+6K19CuB86QUJSfwySMYSfC09Pg4VtA/x8a8xnHtDD0tMTamJdO1vL S2qjieuEqTfmL9KjtO9U8g8SmQOeH24zY1khGFbpwmuEt68oEbyP7NG4jRtF8lS0 VzPWR7Ub3ehg+fgfaN94bvO8weGeKqn4mmY0Gcj7Qp0GEbCkP0rnhN0j47hDwSjB -----END CERTIFICATE-----Generated at Thu Sep 24 20:40:01 2026 by rpki-client