$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/C2E1583EECFA11EFA881E216C4F9AE02.roa File: C2E1583EECFA11EFA881E216C4F9AE02.roa (raw, json) Hash identifier: ZtssBrk5mGxn05SMndIJVGX0dnbxSXKZ14Gt5jpgS38= Subject key identifier: 7E:9C:AC:4F:86:05:E0:C1:23:6E:19:AE:50:71:6F:FF:83:C0:2C:0C Certificate issuer: /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Certificate serial: CB Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/C2E1583EECFA11EFA881E216C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:58:56 +0000 ROA not before: Mon 26 May 2025 06:59:07 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135310 IP address blocks: 163.61.106.0/23 maxlen: 24 2401:ee60::/32 maxlen: 32 2401:ee60::/34 maxlen: 34 2401:ee60:1000::/48 maxlen: 48 2401:ee60:1001::/48 maxlen: 48 2401:ee60:1002::/48 maxlen: 48 2401:ee60:1003::/48 maxlen: 48 2401:ee60:1004::/48 maxlen: 48 2401:ee60:1005::/48 maxlen: 48 2401:ee60:1006::/48 maxlen: 48 2401:ee60:1007::/48 maxlen: 48 2401:ee60:1008::/48 maxlen: 48 2401:ee60:1009::/48 maxlen: 48 2401:ee60:100a::/48 maxlen: 48 2401:ee60:100b::/48 maxlen: 48 2401:ee60:100c::/48 maxlen: 48 2401:ee60:100d::/48 maxlen: 48 2401:ee60:4000::/34 maxlen: 34 2401:ee60:8000::/34 maxlen: 34 2401:ee60:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Validity Not Before: May 26 06:59:07 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3e3b0-ed9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1f:5d:a1:8b:41:b9:93:6c:72:d2:a6:81:90: 2a:96:82:44:08:a4:29:a9:ab:1c:98:8b:96:0c:d7: c5:d3:b5:cf:bf:0b:1f:c3:60:1d:e0:e0:ba:27:7d: 90:93:3e:c3:fc:10:86:1a:27:cb:ec:d1:99:f5:05: 7e:ab:16:f8:4d:3d:a8:88:36:28:23:05:21:4f:24: 58:11:12:9e:6b:00:b7:fd:e3:af:f2:52:f2:9a:e8: f3:fd:8a:29:2d:a1:a3:c2:05:c4:36:ed:03:40:d9: 9a:1a:a9:57:ae:79:c6:f5:97:10:23:da:47:2a:8a: 08:44:2c:fc:6e:d3:e8:8f:a7:df:03:39:66:a5:8f: 6c:7e:9e:57:c9:37:e7:99:3f:0e:43:f0:d9:25:9f: b0:30:69:a0:68:9c:d6:9e:ab:2f:de:9a:7e:a9:4e: af:ce:18:35:a6:ff:d0:2c:ed:7e:9a:ae:39:00:37: 42:a1:f5:99:0a:fa:c5:53:7a:59:5e:4e:60:b9:11: 58:0b:72:8a:8c:8d:56:ee:cf:8f:c9:36:11:b5:72: 7b:7a:f7:fa:62:bf:be:b8:31:24:66:e2:3e:bc:ba: dc:59:d6:b9:eb:31:98:a0:12:15:7e:c9:17:14:79: fa:3a:c4:b7:dc:a8:05:6f:79:69:a5:18:f6:ca:c4: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:AC:4F:86:05:E0:C1:23:6E:19:AE:50:71:6F:FF:83:C0:2C:0C X509v3 Authority Key Identifier: keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/C2E1583EECFA11EFA881E216C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.61.106.0/23 IPv6: 2401:ee60::/32 Signature Algorithm: sha256WithRSAEncryption 60:26:ae:6d:72:fc:f5:0f:54:a8:15:df:d3:19:fb:70:14:97: 7e:10:bd:c3:13:7e:7d:4c:d2:f7:55:4b:bf:1a:0e:58:8e:90: 5c:06:60:dc:fd:6b:4d:9b:b7:82:29:3a:83:8b:f3:48:32:ff: fd:4b:78:dd:38:c2:cd:07:28:4b:30:89:dd:d1:6b:b1:78:3b: f1:10:ac:ba:d3:54:7d:1a:8d:82:82:37:8e:1b:ff:0e:3f:51: 4a:85:7c:97:d5:d8:9a:ad:76:e7:d7:ae:ae:13:59:9f:25:6e: df:ea:7e:35:a7:7b:72:cd:3a:fa:20:80:e4:19:62:3a:29:7d: 22:de:f6:1f:5d:cf:0b:11:ff:34:e5:77:2e:af:d7:2e:97:f5: cb:47:c6:05:14:21:83:77:23:0d:b6:2d:66:63:97:03:46:6a: 86:81:00:c6:47:46:bc:7b:b6:ac:b8:d6:17:0e:3a:bc:74:e0: 93:4d:f7:c4:d0:8c:41:04:57:f8:b7:59:25:00:9b:1b:e7:b1: 8f:a0:70:ad:08:8a:26:c7:81:e0:75:73:4c:8b:5a:5c:e5:21: 9b:64:52:19:69:12:43:04:0c:b7:0f:f9:cc:14:58:08:34:76: b3:d7:4c:4f:86:64:4d:5b:2d:21:dc:69:7a:4b:1c:84:2b:a8: 00:7c:1f:31 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDNzIxMTAvBgNVBAUTKDM2MTZFMDFEQTMzMTdGMDlFRUNBOThFN0JDNzU0Q0JD OTkwRDdENjgwHhcNMjUwNTI2MDY1OTA3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTNiMC1lZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8x9doYtBuZNsctKmgZAqloJECKQpqascmIuWDNfF07XPvwsfw2Ad4OC6J32Q kz7D/BCGGifL7NGZ9QV+qxb4TT2oiDYoIwUhTyRYERKeawC3/eOv8lLymujz/Yop LaGjwgXENu0DQNmaGqlXrnnG9ZcQI9pHKooIRCz8btPoj6ffAzlmpY9sfp5XyTfn mT8OQ/DZJZ+wMGmgaJzWnqsv3pp+qU6vzhg1pv/QLO1+mq45ADdCofWZCvrFU3pZ Xk5guRFYC3KKjI1W7s+PyTYRtXJ7evf6Yr++uDEkZuI+vLrcWda56zGYoBIVfskX FHn6OsS33KgFb3lppRj2ysQPmwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFH6crE+G BeDBI24ZrlBxb/+DwCwMMB8GA1UdIwQYMBaAFDYW4B2jMX8J7sqY57x1TLyZDX1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkM3Mi85RDVCNTE1NkVD RjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3bnV5cGpudkhWTXZKa05m V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oYmdIYU14ZndudXlwam52SFZNdkprTmZXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDNzIvOUQ1QjUxNTZFQ0Y5MTFFRjkzQTJBMjEzQzRGOUFFMDIvQzJFMTU4M0VF Q0ZBMTFFRkE4ODFFMjE2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBoz1qMA0EAgACMAcDBQAkAe5gMA0GCSqGSIb3DQEBCwUAA4IBAQBg Jq5tcvz1D1SoFd/TGftwFJd+EL3DE359TNL3VUu/Gg5YjpBcBmDc/WtNm7eCKTqD i/NIMv/9S3jdOMLNByhLMInd0WuxeDvxEKy601R9Go2CgjeOG/8OP1FKhXyX1dia rXbn166uE1mfJW7f6n41p3tyzTr6IIDkGWI6KX0i3vYfXc8LEf805Xcur9cul/XL R8YFFCGDdyMNti1mY5cDRmqGgQDGR0a8e7asuNYXDjq8dOCTTffE0IxBBFf4t1kl AJsb57GPoHCtCIomx4HgdXNMi1pc5SGbZFIZaRJDBAy3D/nMFFgINHaz10xPhmRN Wy0h3Gl6SxyEK6gAfB8x -----END CERTIFICATE-----Generated at Mon Mar 2 04:44:26 2026 by rpki-client