$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/C8171E8EC04D11F081466417C4F9AE02.roa File: C8171E8EC04D11F081466417C4F9AE02.roa (raw, json) Hash identifier: VcifrlmSYOvRfKqFSjhNzhMwktkDkcWMiCL1IwcQSPo= Subject key identifier: 53:64:BE:AE:E0:45:C2:21:CA:0C:CC:32:1A:1A:B7:A2:24:1E:08:33 Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 016A Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/C8171E8EC04D11F081466417C4F9AE02.roa Signing time: Fri 16 Oct 2026 08:19:40 +0000 ROA not before: Fri 16 Oct 2026 08:19:40 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 149014 IP address blocks: 43.231.187.0/24 maxlen: 24 2404:de80:0:26::/64 maxlen: 64 2404:de80:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 04:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Oct 16 08:19:40 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6ad1de1c-2143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a2:8c:09:36:21:29:44:ed:76:03:1b:13:97: f5:40:a6:f4:91:05:25:bc:33:12:bd:7a:2c:8d:7e: eb:a3:e3:2c:c4:ed:0f:b2:31:ce:67:35:2b:46:2d: 10:f2:b4:3e:50:6c:27:8b:1a:45:d4:29:e9:ea:31: 8b:ed:ff:c1:bc:6d:fb:e7:ac:f5:4a:11:ec:83:f4: b5:17:b0:87:68:34:51:9f:70:05:06:bd:43:59:b6: 21:66:a1:15:a8:49:fa:05:f0:a0:b6:1c:20:89:da: 23:4a:16:a8:27:60:37:b3:37:a9:1e:17:69:c5:27: 3c:e8:0f:07:3c:0c:cc:52:da:7e:df:85:1f:9c:e8: e1:ca:5e:bf:34:5a:05:4d:26:5f:d2:fb:2e:3a:17: 17:86:3f:de:09:18:ff:53:61:1c:07:65:93:68:fe: 79:4f:02:ea:0a:a5:b1:04:10:2a:2b:a0:da:2f:9b: 78:60:18:97:12:d8:4e:5b:a5:2e:53:aa:ec:13:db: 47:4e:ba:24:af:42:02:56:dc:e2:6f:bf:30:69:e5: 8b:45:1d:da:2c:47:cf:ad:d8:39:a8:c4:88:98:fd: f9:83:04:db:ee:5c:3e:aa:8d:35:e0:08:eb:d5:74: c0:e6:0b:29:68:f9:be:8f:8b:b8:88:d6:69:7a:14: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:64:BE:AE:E0:45:C2:21:CA:0C:CC:32:1A:1A:B7:A2:24:1E:08:33 X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/C8171E8EC04D11F081466417C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.187.0/24 IPv6: 2404:de80:0:26::/64 2404:de80:c00::/40 Signature Algorithm: sha256WithRSAEncryption 38:4f:b1:2c:b7:0a:1a:b0:fd:18:cb:7c:82:3b:a4:04:5a:e6: 2f:69:eb:97:1a:fb:8e:8f:82:2b:05:5f:4c:7a:4c:67:8d:da: 5e:d7:ab:00:82:7d:52:69:a4:fa:04:27:88:df:a6:72:0c:6b: 38:d1:41:24:3c:8d:02:29:46:44:30:92:9e:a5:26:9a:fa:6d: 3d:d0:94:45:0e:af:70:73:65:b5:5e:bb:4b:b1:e0:3f:da:b6: f1:86:26:3a:12:f7:e8:6f:7a:ed:93:da:8a:13:e1:66:50:69: 3e:93:23:0a:ec:9f:1e:40:f2:19:86:32:df:4e:29:06:52:e1: 96:75:eb:92:ad:a2:b1:6e:76:ea:ce:39:0f:3c:be:43:ae:98: df:bd:43:8b:79:a4:f4:93:2b:c2:4d:1b:08:99:8c:10:e4:0a: a0:78:f4:68:b4:45:7e:3d:ab:e9:80:75:a6:8d:36:71:60:fb: eb:e8:96:8c:53:c9:34:fd:85:84:03:f9:3d:30:89:b9:c0:22: 02:22:06:bb:98:e9:fa:0a:ad:df:05:b0:43:7e:b3:d0:85:aa: ae:af:dc:62:7b:37:8b:3d:cd:76:97:22:86:34:8e:40:1e:b2: de:6f:2c:6d:0d:02:25:b0:f4:0d:1b:01:13:7e:07:75:30:a9: 01:53:09:4f -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjYxMDE2MDgxOTQwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQxZGUxYy0yMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaKMCTYhKUTtdgMbE5f1QKb0kQUlvDMSvXosjX7ro+MsxO0PsjHOZzUrRi0Q 8rQ+UGwnixpF1Cnp6jGL7f/BvG3756z1ShHsg/S1F7CHaDRRn3AFBr1DWbYhZqEV qEn6BfCgthwgidojShaoJ2A3szepHhdpxSc86A8HPAzMUtp+34UfnOjhyl6/NFoF TSZf0vsuOhcXhj/eCRj/U2EcB2WTaP55TwLqCqWxBBAqK6DaL5t4YBiXEthOW6Uu U6rsE9tHTrokr0ICVtzib78waeWLRR3aLEfPrdg5qMSImP35gwTb7lw+qo014Ajr 1XTA5gspaPm+j4u4iNZpehQD6QIDAQABo4ICezCCAncwHQYDVR0OBBYEFFNkvq7g RcIhygzMMhoat6IkHggzMB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJGRTEvQzQ1NjEwMkUwOUYxMTFGMDhCNDRBMzI1QzRGOUFFMDIvQzgxNzFFOEVD MDREMTFGMDgxNDY2NDE3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAM BAIAATAGAwQAK+e7MBkEAgACMBMDCQAkBN6AAAAAJgMGACQE3oAMMA0GCSqGSIb3 DQEBCwUAA4IBAQA4T7EstwoasP0Yy3yCO6QEWuYvaeuXGvuOj4IrBV9Mekxnjdpe 16sAgn1SaaT6BCeI36ZyDGs40UEkPI0CKUZEMJKepSaa+m090JRFDq9wc2W1XrtL seA/2rbxhiY6Evfob3rtk9qKE+FmUGk+kyMK7J8eQPIZhjLfTikGUuGWdeuSraKx bnbqzjkPPL5DrpjfvUOLeaT0kyvCTRsImYwQ5AqgePRotEV+PavpgHWmjTZxYPvr 6JaMU8k0/YWEA/k9MIm5wCICIga7mOn6Cq3fBbBDfrPQhaqur9xiezeLPc12lyKG NI5AHrLebyxtDQIlsPQNGwETfgd1MKkBUwlP -----END CERTIFICATE-----Generated at Fri Oct 23 07:22:38 2026 by rpki-client