$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CC5C527A0AA611EE84B0053DC4F9AE02.roa File: CC5C527A0AA611EE84B0053DC4F9AE02.roa (raw, json) Hash identifier: GpcirUxFNDgOCvfv98bIfM13cs2RLLwYzoAIDg7bed4= Subject key identifier: 5E:1F:08:AB:9B:4B:B7:AE:44:5E:2E:BA:41:26:20:E3:EC:B4:B6:85 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 061C Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CC5C527A0AA611EE84B0053DC4F9AE02.roa Signing time: Wed 16 Sep 2026 23:45:00 +0000 ROA not before: Wed 16 Sep 2026 23:45:00 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 14618 IP address blocks: 103.172.141.0/24 maxlen: 24 2407:d4c0:1000::/40 maxlen: 40 2407:d4c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1564 (0x61c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Sep 16 23:45:00 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aab29fc-1042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:06:f6:26:1a:f4:81:17:ed:b8:3a:9f:1d: 04:1e:47:b4:56:2d:aa:a5:c7:64:53:8e:e6:64:dd: 21:30:35:2a:b0:2e:70:9c:95:bf:63:ec:ee:6f:70: 18:2d:09:21:38:71:91:f2:b7:cf:27:26:06:05:d0: c1:da:d5:55:e0:4b:34:ec:f2:c3:cd:56:08:9e:06: 8c:69:c0:0b:c9:a5:35:b6:57:de:6b:96:1a:6a:bc: fc:4b:fe:08:2c:cf:ee:ca:3a:51:67:40:c6:35:97: 03:34:61:d7:67:5a:67:ca:b3:12:74:62:7a:bd:6d: c7:ea:bb:0d:26:7c:74:e7:7f:31:8c:fe:4f:c0:47: 9c:a7:46:26:7d:01:d3:fe:53:f6:44:d8:13:f5:f0: be:74:68:5c:76:09:44:7e:15:33:c3:dc:ee:4c:d6: 74:af:63:09:71:d3:59:df:8d:15:83:0c:29:aa:93: 46:03:04:c9:9f:06:d0:dd:54:68:0f:d1:5c:ed:53: 8d:59:9c:99:88:5c:a1:75:40:67:99:6c:aa:c5:51: dc:eb:f8:58:21:3a:b7:59:56:1a:e8:f5:fa:71:01: 99:05:76:69:9e:a1:b1:f8:50:25:f3:fa:93:f7:ce: 43:35:2a:b7:c9:8b:1b:f5:8f:64:d7:6d:3e:6e:d0: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:08:AB:9B:4B:B7:AE:44:5E:2E:BA:41:26:20:E3:EC:B4:B6:85 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CC5C527A0AA611EE84B0053DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.141.0/24 IPv6: 2407:d4c0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 79:43:e8:28:9b:37:2c:3e:dc:2a:db:cf:34:c4:69:e6:ae:b1: a6:2b:f0:d4:f5:05:09:85:ec:37:39:81:0f:c5:84:46:c5:53: 8e:39:45:82:1d:fb:66:a7:90:45:14:9e:6c:98:11:24:e9:a3: 97:5e:b8:90:7a:a1:0a:2a:58:66:f3:e9:28:9d:fd:17:ef:14: 07:26:c7:ae:21:e7:af:42:99:6f:bd:15:76:dc:fa:9b:5c:7d: cb:53:fa:e5:a9:61:6c:6c:03:6f:c1:e3:a5:74:e8:90:71:d2: 43:1e:d9:70:1b:cb:5b:05:8d:7f:6e:0d:1a:8e:18:37:3d:08: ef:ed:87:ec:f8:c5:6c:93:ae:f7:03:fc:48:80:22:d2:71:8c: 2a:a0:b8:3f:26:ae:51:a9:55:92:7a:0b:2d:cf:26:f8:a8:86: db:b2:fc:ee:41:0b:a3:70:29:cb:15:3b:0e:0d:a2:4f:56:fd: 3b:80:72:15:d0:f9:6f:e1:ba:0c:b4:80:d9:61:9b:c6:46:80: fa:6b:f4:a4:be:3c:4c:ec:38:12:d3:15:10:3c:6b:1d:0f:f8: f2:c2:b8:28:36:82:9a:04:d2:ef:3b:c5:d6:53:b2:ce:2b:29: fa:a3:95:3f:b7:75:af:73:2d:7d:2e:4d:62:25:db:66:76:d6: 3e:69:ca:0f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjYwOTE2MjM0NTAwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFiMjlmYy0xMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSAG9iYa9IEX7bg6nx0EHke0Vi2qpcdkU47mZN0hMDUqsC5wnJW/Y+zub3AY LQkhOHGR8rfPJyYGBdDB2tVV4Es07PLDzVYIngaMacALyaU1tlfea5Yaarz8S/4I LM/uyjpRZ0DGNZcDNGHXZ1pnyrMSdGJ6vW3H6rsNJnx0538xjP5PwEecp0YmfQHT /lP2RNgT9fC+dGhcdglEfhUzw9zuTNZ0r2MJcdNZ340VgwwpqpNGAwTJnwbQ3VRo D9Fc7VONWZyZiFyhdUBnmWyqxVHc6/hYITq3WVYa6PX6cQGZBXZpnqGx+FAl8/qT 985DNSq3yYsb9Y9k120+btCTmwIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFF4fCKub S7euRF4uukEmIOPstLaFMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDMTUvQUM5QzZCNTAwQTQ0MTFFQzk0Nzk3RTUzQzRGOUFFMDIvQ0M1QzUyN0Ew QUE2MTFFRTg0QjAwNTNEQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQAZ6yNMA4EAgACMAgDBgAkB9TAEDANBgkqhkiG9w0BAQsFAAOCAQEA eUPoKJs3LD7cKtvPNMRp5q6xpivw1PUFCYXsNzmBD8WERsVTjjlFgh37ZqeQRRSe bJgRJOmjl164kHqhCipYZvPpKJ39F+8UBybHriHnr0KZb70Vdtz6m1x9y1P65alh bGwDb8HjpXTokHHSQx7ZcBvLWwWNf24NGo4YNz0I7+2H7PjFbJOu9wP8SIAi0nGM KqC4PyauUalVknoLLc8m+KiG27L87kELo3ApyxU7Dg2iT1b9O4ByFdD5b+G6DLSA 2WGbxkaA+mv0pL48TOw4EtMVEDxrHQ/48sK4KDaCmgTS7zvF1lOyzisp+qOVP7d1 r3MtfS5NYiXbZnbWPmnKDw== -----END CERTIFICATE-----Generated at Sun Sep 20 20:04:57 2026 by rpki-client