$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa File: C552F48EC80011EAAD578B77C4F9AE02.roa (raw, json) Hash identifier: TeKcCxaqap3oJm98F7GJVG2ccZm/R5/8IqqVguRB94s= Subject key identifier: 02:DF:DC:92:D0:31:00:ED:BF:EC:B6:F6:F6:66:CA:EF:DE:FE:EF:54 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 359D Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:21:04 +0000 ROA not before: Wed 31 Dec 2025 15:10:28 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 131322 IP address blocks: 61.4.64.0/20 maxlen: 20 61.4.64.0/24 maxlen: 24 61.4.65.0/24 maxlen: 24 61.4.66.0/24 maxlen: 24 61.4.67.0/24 maxlen: 24 61.4.68.0/24 maxlen: 24 61.4.69.0/24 maxlen: 24 61.4.70.0/24 maxlen: 24 61.4.71.0/24 maxlen: 24 61.4.73.0/24 maxlen: 24 61.4.74.0/24 maxlen: 24 61.4.75.0/24 maxlen: 24 61.4.76.0/24 maxlen: 24 61.4.77.0/24 maxlen: 24 61.4.78.0/24 maxlen: 24 61.4.79.0/24 maxlen: 24 122.248.96.0/19 maxlen: 19 122.248.107.0/24 maxlen: 24 122.248.108.0/24 maxlen: 24 122.248.109.0/24 maxlen: 24 122.248.110.0/24 maxlen: 24 122.248.111.0/24 maxlen: 24 122.248.117.0/24 maxlen: 24 203.81.160.0/20 maxlen: 20 203.81.166.0/24 maxlen: 24 203.81.167.0/24 maxlen: 24 203.81.170.0/24 maxlen: 24 2406:ea00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13725 (0x359d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Dec 31 15:10:28 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a46770-7e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:02:75:12:8d:e0:00:2f:78:9a:47:32:4b: 98:1e:f4:68:bb:c6:a8:1a:d9:df:c6:fe:3c:76:a3: 6b:c7:db:d6:73:ef:fd:a9:e2:bd:81:40:be:95:b0: 17:25:3c:b1:94:fa:9b:87:d7:b7:86:68:2c:08:0d: 42:9f:6c:e4:bd:92:6a:b2:1d:47:ce:3e:a1:eb:a4: 49:e2:81:45:de:85:01:dc:66:5d:7c:ba:8f:29:f8: 31:b4:17:97:62:9f:58:54:2a:f2:a7:c9:ae:f4:a3: e7:6b:1d:3c:1f:06:a7:e3:e2:2c:a6:51:fc:3b:1b: f5:3d:d3:e1:e8:1b:00:79:66:bf:4f:6d:76:60:e3: 40:7e:1a:ef:11:29:4a:18:47:3e:ae:c9:2c:2a:19: 53:4a:e3:10:5d:a7:47:f8:fb:75:36:62:08:31:97: 1e:cb:bd:38:63:fd:3e:ee:bf:b8:1f:3e:e7:c3:15: e5:9c:96:bb:8a:98:b9:b9:59:e1:54:02:07:23:1c: 4a:36:a0:23:6e:e0:6c:c4:ad:4f:39:7f:73:92:bd: 49:1b:4e:29:21:26:2a:a6:d7:b7:91:14:0f:19:f3: ea:bd:a8:96:ec:af:4a:f8:1c:d3:09:4d:01:60:2d: 10:e2:ba:cd:1b:fb:73:05:11:02:48:d4:de:96:8f: 9d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DF:DC:92:D0:31:00:ED:BF:EC:B6:F6:F6:66:CA:EF:DE:FE:EF:54 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.4.64.0/20 122.248.96.0/19 203.81.160.0/20 IPv6: 2406:ea00::/32 Signature Algorithm: sha256WithRSAEncryption 9b:7e:62:76:96:4f:23:71:3e:1d:3e:04:c0:0a:6c:c5:08:96: 48:db:51:6d:e0:ae:17:c5:8e:02:1c:b6:95:53:13:b3:fb:41: a1:42:6d:17:d9:30:21:1d:7d:13:bf:72:aa:b4:11:f7:f6:55: ec:59:a3:7b:eb:1e:f6:13:33:af:65:a1:d1:64:85:7e:c1:3e: f3:9b:0b:d7:f7:f7:2f:cf:b8:4f:44:92:b2:81:43:9d:fd:a7: 34:b6:ec:a8:b8:08:8a:db:68:6c:e6:3d:a0:e0:0c:7c:2a:f7: 40:07:f6:da:03:99:7b:9b:3b:ea:bc:8a:39:e6:f2:ac:bd:6f: ee:83:71:57:93:e0:69:bd:59:66:85:0b:85:4f:c8:b1:64:62: b9:77:72:d0:2b:e4:b7:58:36:0f:2e:d4:23:c4:16:a1:62:a5: 1c:e1:72:43:d5:d1:0f:5f:fe:2d:07:6d:f5:b1:50:71:a4:8d: 8a:49:41:48:c5:4b:d3:7a:08:a2:f3:fc:b1:c4:ef:14:cf:89: 70:be:f4:56:8b:9f:9d:2c:ab:4c:3f:42:04:f9:e7:ea:08:1e: c8:f8:d2:c0:11:73:c3:d4:91:98:22:d6:0b:5e:94:c3:9a:a4: 9a:ca:1a:14:02:b0:95:2c:c5:c3:1a:38:0a:fc:1a:59:34:85: 6f:07:99:d1 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjUxMjMxMTUxMDI4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njc3MC03ZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2oCdRKN4AAveJpHMkuYHvRou8aoGtnfxv48dqNrx9vWc+/9qeK9gUC+lbAX JTyxlPqbh9e3hmgsCA1Cn2zkvZJqsh1Hzj6h66RJ4oFF3oUB3GZdfLqPKfgxtBeX Yp9YVCryp8mu9KPnax08Hwan4+IsplH8Oxv1PdPh6BsAeWa/T212YONAfhrvESlK GEc+rsksKhlTSuMQXadH+Pt1NmIIMZcey704Y/0+7r+4Hz7nwxXlnJa7ipi5uVnh VAIHIxxKNqAjbuBsxK1POX9zkr1JG04pISYqpte3kRQPGfPqvaiW7K9K+BzTCU0B YC0Q4rrNG/tzBRECSNTelo+d1wIDAQABo4ICezCCAncwHQYDVR0OBBYEFALf3JLQ MQDtv+y29vZmyu/e/u9UMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI4NzgvNEM5OThBMzYxRDhBMTFFMjhBMUYyM0U0MDhCMDJDRDIvQzU1MkY0OEVD ODAwMTFFQUFENTc4Qjc3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQEPQRAAwQFevhgAwQEy1GgMA0EAgACMAcDBQAkBuoAMA0GCSqGSIb3 DQEBCwUAA4IBAQCbfmJ2lk8jcT4dPgTACmzFCJZI21Ft4K4XxY4CHLaVUxOz+0Gh Qm0X2TAhHX0Tv3KqtBH39lXsWaN76x72EzOvZaHRZIV+wT7zmwvX9/cvz7hPRJKy gUOd/ac0tuyouAiK22hs5j2g4Ax8KvdAB/baA5l7mzvqvIo55vKsvW/ug3FXk+Bp vVlmhQuFT8ixZGK5d3LQK+S3WDYPLtQjxBahYqUc4XJD1dEPX/4tB231sVBxpI2K SUFIxUvTegii8/yxxO8Uz4lwvvRWi5+dLKtMP0IE+efqCB7I+NLAEXPD1JGYItYL XpTDmqSayhoUArCVLMXDGjgK/BpZNIVvB5nR -----END CERTIFICATE-----Generated at Mon Mar 2 07:34:44 2026 by rpki-client