$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa File: C552F48EC80011EAAD578B77C4F9AE02.roa (raw, json) Hash identifier: jXl+86vCs3KiG7eJ3MpATQjLUSqhs8yk2VzZe0i6DIs= Subject key identifier: BE:BF:CE:3E:D3:5A:5D:CE:0F:0F:58:45:85:CF:CC:E6:AC:EC:C2:98 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 35B2 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa Signing time: Tue 31 Mar 2026 15:10:43 +0000 ROA not before: Tue 31 Mar 2026 15:10:43 +0000 ROA not after: Sat 01 Aug 2026 00:00:00 +0000 asID: 131322 IP address blocks: 61.4.64.0/20 maxlen: 20 61.4.64.0/24 maxlen: 24 61.4.65.0/24 maxlen: 24 61.4.66.0/24 maxlen: 24 61.4.67.0/24 maxlen: 24 61.4.68.0/24 maxlen: 24 61.4.69.0/24 maxlen: 24 61.4.70.0/24 maxlen: 24 61.4.71.0/24 maxlen: 24 61.4.73.0/24 maxlen: 24 61.4.74.0/24 maxlen: 24 61.4.75.0/24 maxlen: 24 61.4.76.0/24 maxlen: 24 61.4.77.0/24 maxlen: 24 61.4.78.0/24 maxlen: 24 61.4.79.0/24 maxlen: 24 122.248.96.0/19 maxlen: 19 122.248.107.0/24 maxlen: 24 122.248.108.0/24 maxlen: 24 122.248.109.0/24 maxlen: 24 122.248.110.0/24 maxlen: 24 122.248.111.0/24 maxlen: 24 122.248.117.0/24 maxlen: 24 203.81.160.0/20 maxlen: 20 203.81.166.0/24 maxlen: 24 203.81.167.0/24 maxlen: 24 203.81.170.0/24 maxlen: 24 2406:ea00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13746 (0x35b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Mar 31 15:10:43 2026 GMT Not After : Aug 1 00:00:00 2026 GMT Subject: CN=69cbe3f3-5ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:b5:e3:e3:1d:50:a5:0b:3e:73:93:ec:be: 7d:a6:97:c0:9e:8e:05:c6:84:6e:71:5f:29:e7:57: c0:c7:81:d1:e4:47:bc:5f:dc:f2:71:ca:5b:a0:b9: 09:63:fb:ab:52:3f:97:35:5f:ca:13:88:66:1a:99: 10:5b:f2:a3:e1:58:39:c9:6c:3e:30:5d:dc:14:14: 91:66:e3:09:59:e3:03:bd:1c:ec:ac:bd:31:93:bc: 45:d7:71:c3:fe:c9:54:9b:a8:15:eb:88:5f:24:10: ad:3b:47:61:00:cb:1b:86:25:7b:27:5d:2c:d7:c2: a8:22:da:db:ca:bf:e1:28:16:fa:3f:f0:23:ee:ae: e8:cd:ac:cc:f7:f8:eb:7f:e5:dc:d2:c1:5b:53:b4: 81:e1:cf:ff:4f:11:cb:58:33:96:90:f1:55:83:00: c8:a5:c9:17:75:b2:e9:b7:a1:50:42:39:05:c2:79: d2:f2:5d:27:7b:dc:21:98:28:7a:07:d4:c5:91:de: 64:bd:9f:15:81:10:51:f8:e3:3e:a5:10:b7:f9:42: 13:99:88:1c:cb:c7:f6:e9:69:24:a0:90:5e:d7:33: 52:f4:78:c3:b1:ce:f9:32:f1:ed:52:85:bf:f8:07: 55:7c:d0:ba:e4:d3:63:2c:40:09:ec:58:e1:30:c9: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BF:CE:3E:D3:5A:5D:CE:0F:0F:58:45:85:CF:CC:E6:AC:EC:C2:98 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.4.64.0/20 122.248.96.0/19 203.81.160.0/20 IPv6: 2406:ea00::/32 Signature Algorithm: sha256WithRSAEncryption b4:2e:b0:2c:96:7e:84:95:f4:1a:c5:5c:ca:4c:ad:aa:2f:b1: 25:bc:6f:5b:bb:f7:4f:f1:0e:9a:d6:91:d6:8b:dd:32:e7:f0: 81:0a:f7:6b:93:03:66:f6:47:b4:2d:38:92:8b:00:47:1f:45: ad:81:e3:83:26:5a:7a:de:67:e9:18:33:2c:4a:96:92:ef:19: d3:87:da:35:cb:b7:be:a4:69:e8:c1:12:d1:b7:b1:d2:25:9b: 65:0e:41:cc:b0:a7:13:99:51:79:fc:09:2b:f0:ff:ab:08:e7: c5:b3:55:c4:cd:60:1f:2e:74:f8:db:df:7e:69:2d:07:cf:f6: 3e:e1:a8:78:f1:de:28:de:55:ea:45:10:eb:c6:06:1e:e0:79: 64:b3:25:13:2a:0c:2b:24:88:55:47:ea:c6:58:41:01:e6:04: ee:30:93:23:f6:d3:31:9f:fa:87:b2:0e:32:c8:7d:98:49:1e: 01:fe:b2:ed:5f:5e:2a:66:84:a5:d0:ef:ef:49:28:80:bd:69: 45:da:49:c5:77:05:63:cf:32:2b:6b:59:55:42:e9:31:b0:ba: 1e:e8:96:3f:c4:fe:68:5f:73:93:69:a7:fd:d3:04:fa:96:e8: 87:b4:5e:a0:e6:c9:72:bc:75:58:c2:a9:a8:b7:27:1e:0a:cd: 23:dd:3d:8e -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICNbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjYwMzMxMTUxMDQzWhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiZTNmMy01YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBq14+MdUKULPnOT7L59ppfAno4FxoRucV8p51fAx4HR5Ee8X9zyccpboLkJ Y/urUj+XNV/KE4hmGpkQW/Kj4Vg5yWw+MF3cFBSRZuMJWeMDvRzsrL0xk7xF13HD /slUm6gV64hfJBCtO0dhAMsbhiV7J10s18KoItrbyr/hKBb6P/Aj7q7ozazM9/jr f+Xc0sFbU7SB4c//TxHLWDOWkPFVgwDIpckXdbLpt6FQQjkFwnnS8l0ne9whmCh6 B9TFkd5kvZ8VgRBR+OM+pRC3+UITmYgcy8f26WkkoJBe1zNS9HjDsc75MvHtUoW/ +AdVfNC65NNjLEAJ7FjhMMkK6wIDAQABo4ICezCCAncwHQYDVR0OBBYEFL6/zj7T Wl3ODw9YRYXPzOas7MKYMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI4NzgvNEM5OThBMzYxRDhBMTFFMjhBMUYyM0U0MDhCMDJDRDIvQzU1MkY0OEVD ODAwMTFFQUFENTc4Qjc3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQEPQRAAwQFevhgAwQEy1GgMA0EAgACMAcDBQAkBuoAMA0GCSqGSIb3 DQEBCwUAA4IBAQC0LrAsln6ElfQaxVzKTK2qL7ElvG9bu/dP8Q6a1pHWi90y5/CB CvdrkwNm9ke0LTiSiwBHH0WtgeODJlp63mfpGDMsSpaS7xnTh9o1y7e+pGnowRLR t7HSJZtlDkHMsKcTmVF5/Akr8P+rCOfFs1XEzWAfLnT4299+aS0Hz/Y+4ah48d4o 3lXqRRDrxgYe4HlksyUTKgwrJIhVR+rGWEEB5gTuMJMj9tMxn/qHsg4yyH2YSR4B /rLtX14qZoSl0O/vSSiAvWlF2knFdwVjzzIra1lVQukxsLoe6JY/xP5oX3OTaaf9 0wT6luiHtF6g5slyvHVYwqmotyceCs0j3T2O -----END CERTIFICATE-----Generated at Fri Apr 17 15:56:15 2026 by rpki-client