$ rpki-client -vvvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa File: F539311C7DA011F08A71610EC4F9AE02.roa (raw, json) Hash identifier: wgrpB9SX92YDBdJIwPeArJprB9RQm9qHXZp4EOmfNyI= Subject key identifier: 75:88:9D:A9:8A:C0:E7:47:73:87:0B:FE:5B:18:C1:12:A5:28:FB:9A Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 095A Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa Signing time: Mon 14 Sep 2026 20:41:25 +0000 ROA not before: Mon 14 Sep 2026 20:41:25 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134202 IP address blocks: 43.225.39.0/24 maxlen: 24 61.4.96.0/24 maxlen: 24 103.246.115.0/24 maxlen: 24 118.107.212.0/24 maxlen: 24 118.107.213.0/24 maxlen: 24 118.107.214.0/24 maxlen: 24 118.107.215.0/24 maxlen: 24 202.9.37.0/24 maxlen: 24 202.9.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Sep 14 20:41:25 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa85bf5-ab10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:39:70:51:f7:8b:9d:05:9a:16:9b:18:9f:f8: ff:cc:11:99:2c:16:da:3e:7e:f8:b5:0f:73:c4:09: 5a:57:b9:88:c9:ca:13:3b:d9:b1:0d:52:3a:03:ac: 62:84:05:18:90:af:3e:c4:0e:56:db:78:a0:59:7c: 17:fa:95:dd:a3:80:ee:64:e7:64:3f:08:cb:4b:23: 79:fe:d2:6a:6e:de:12:e1:65:45:7d:ca:6b:5a:f0: 30:47:55:0b:ee:97:53:b7:90:27:c4:ae:20:87:d7: d7:19:3d:58:65:22:c2:87:cd:38:2b:30:57:fd:f1: f4:fc:7b:35:6d:18:80:0c:c0:e7:ce:13:31:04:07: 23:7d:dc:e0:5e:f7:fc:d2:4c:b8:0a:ce:c9:25:04: 97:3b:d7:33:89:57:6c:59:4c:33:7f:c5:cf:43:be: 80:3f:1f:46:19:96:a9:19:dd:a6:dc:fe:3c:17:eb: 21:8a:11:fd:7b:e5:de:1d:f5:b8:a4:24:4d:ab:37: af:47:d8:b4:4e:f0:5e:6a:dd:b8:dc:30:48:b8:dd: 90:b6:c2:56:94:0a:7f:42:0a:a0:a6:d6:89:8d:2e: 7b:83:f0:6a:b7:ee:41:3b:8c:f7:39:4a:32:0a:cc: c5:a3:1b:50:15:f5:66:41:2d:ca:83:eb:c9:7b:7d: 0e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:88:9D:A9:8A:C0:E7:47:73:87:0B:FE:5B:18:C1:12:A5:28:FB:9A X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.39.0/24 61.4.96.0/24 103.246.115.0/24 118.107.212.0/22 202.9.37.0-202.9.38.255 Signature Algorithm: sha256WithRSAEncryption 88:15:e7:2b:3c:c5:4b:31:8a:d8:0a:69:5a:8d:52:09:40:5a: dc:4c:16:5a:6c:e9:25:41:a5:9f:43:ca:a7:a9:56:31:68:33: e9:de:71:88:e2:1a:39:39:0d:22:e9:2e:5a:f7:d3:4a:99:c4: cb:68:1b:15:ba:f3:9c:74:ea:81:4e:b6:01:db:cc:bb:29:ac: 0a:08:30:43:73:05:2d:c5:40:5e:bd:98:ee:ee:71:cb:ba:34: 3b:04:ce:c0:13:c8:3b:9d:1b:c4:e1:d1:7e:d9:20:33:2c:b7: 6f:0e:e0:73:3f:9b:c4:be:72:ff:0b:91:bb:8a:d4:c6:86:63: 56:92:4c:13:10:8a:92:cf:b2:d6:75:9f:27:d1:61:72:af:a8: 7e:2a:59:11:bf:b7:5d:6f:25:0e:aa:17:97:9d:6c:89:34:9d: 6b:d4:0e:87:65:96:1b:b2:fc:d1:40:41:c8:af:9e:b9:ec:c4: 18:b0:2c:c1:98:29:3b:a1:be:f7:26:7f:43:31:39:b2:9b:88: c5:75:8c:38:ab:8f:5f:fe:d1:d8:c1:71:cc:5a:51:4b:62:65: 40:b6:e0:8f:2e:c9:f5:d1:11:5c:e2:e6:af:ad:b8:fe:06:92: ca:92:05:69:e8:24:4b:36:77:33:6d:e0:17:f3:76:61:53:15: 12:de:d2:92 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjYwOTE0MjA0MTI1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4NWJmNS1hYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojlwUfeLnQWaFpsYn/j/zBGZLBbaPn74tQ9zxAlaV7mIycoTO9mxDVI6A6xi hAUYkK8+xA5W23igWXwX+pXdo4DuZOdkPwjLSyN5/tJqbt4S4WVFfcprWvAwR1UL 7pdTt5AnxK4gh9fXGT1YZSLCh804KzBX/fH0/Hs1bRiADMDnzhMxBAcjfdzgXvf8 0ky4Cs7JJQSXO9cziVdsWUwzf8XPQ76APx9GGZapGd2m3P48F+shihH9e+XeHfW4 pCRNqzevR9i0TvBeat243DBIuN2QtsJWlAp/QgqgptaJjS57g/Bqt+5BO4z3OUoy CszFoxtQFfVmQS3Kg+vJe30OwQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFHWInamK wOdHc4cL/lsYwRKlKPuaMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvRjUzOTMxMUM3 REEwMTFGMDhBNzE2MTBFQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQAK+EnAwQAPQRgAwQAZ/ZzAwQCdmvUMAwDBADKCSUDBADKCSYwDQYJ KoZIhvcNAQELBQADggEBAIgV5ys8xUsxitgKaVqNUglAWtxMFlps6SVBpZ9Dyqep VjFoM+necYjiGjk5DSLpLlr300qZxMtoGxW685x06oFOtgHbzLsprAoIMENzBS3F QF69mO7uccu6NDsEzsATyDudG8Th0X7ZIDMst28O4HM/m8S+cv8LkbuK1MaGY1aS TBMQipLPstZ1nyfRYXKvqH4qWRG/t11vJQ6qF5edbIk0nWvUDodllhuy/NFAQciv nrnsxBiwLMGYKTuhvvcmf0MxObKbiMV1jDirj1/+0djBccxaUUtiZUC24I8uyfXR EVzi5q+tuP4GksqSBWnoJEs2dzNt4BfzdmFTFRLe0pI= -----END CERTIFICATE-----Generated at Tue Sep 22 03:09:48 2026 by rpki-client