$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa File: C2D9F4BCD24311EF92066413C4F9AE02.roa (raw, json) Hash identifier: ytUICka7R3sUiUv+nGbD8m7xL4LEtJjOERqtgUBd29c= Subject key identifier: 78:F4:A3:03:08:E3:6F:67:D5:8D:16:61:B6:98:40:01:9B:A0:85:96 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 0849 Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa Signing time: Thu 04 Sep 2025 21:31:57 +0000 ROA not before: Thu 04 Sep 2025 21:31:57 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 147040 IP address blocks: 61.4.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Sep 4 21:31:57 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68ba054c-2fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:9b:74:28:bb:f0:7b:d7:d3:cb:50:6d:b1: 79:68:03:e7:eb:b4:d3:d5:75:b6:de:44:4a:3c:c7: be:c0:22:26:a5:fa:49:ac:bf:85:14:86:a0:88:02: 5f:4e:44:41:56:f9:b4:30:32:bb:8d:ab:fc:b5:5e: 40:ba:73:2c:e3:54:74:85:93:8c:6b:2b:56:59:9e: 11:e4:ff:dc:25:a2:35:11:6f:5e:4e:ec:43:4e:09: 6f:54:35:57:88:85:1e:c0:8d:11:be:5a:77:3d:b0: b7:f8:bb:54:c6:46:f6:c8:56:be:35:83:62:49:04: aa:a8:dd:c8:a1:eb:31:d7:4b:4f:f0:09:54:aa:97: 04:4a:87:85:88:63:31:00:18:21:99:79:9c:bf:a0: 1e:67:a2:93:ff:2b:f1:07:fe:3e:d4:d4:e0:d1:fa: e0:36:e4:e3:b1:83:f8:ae:59:48:0e:e0:9e:23:40: 91:3e:a8:7e:b6:49:fb:98:1e:8e:2a:d6:af:c4:bb: 49:ef:a7:f5:c0:57:c3:5c:c1:d8:be:89:b7:3c:f0: d8:5d:f1:bd:d6:c1:ce:31:67:ef:08:ba:6c:d7:3b: 0b:5b:d9:99:a4:ee:ba:74:7b:30:e3:4a:c4:65:14: a2:46:9c:b1:bb:c2:f8:7d:01:6f:71:b4:07:61:2e: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F4:A3:03:08:E3:6F:67:D5:8D:16:61:B6:98:40:01:9B:A0:85:96 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.4.108.0/24 Signature Algorithm: sha256WithRSAEncryption 75:2d:ad:6b:f7:1d:86:66:00:c3:e6:25:f6:13:ce:f2:ef:5b: 25:bf:3d:c5:37:41:a3:4a:29:f5:a3:1b:e3:33:c4:e4:c2:03: 71:33:7c:6f:31:a8:8e:ef:48:21:56:77:20:88:90:39:1f:f2: 22:ed:06:3f:89:d6:b0:72:60:84:a3:ed:18:6b:13:15:50:b5: 38:1b:3f:c6:02:0d:2c:2b:c1:48:3b:c9:45:af:72:b3:90:56: c8:d3:25:ec:c9:ba:94:7d:71:01:fd:c2:4f:52:89:be:d0:25: fe:37:10:18:2f:a0:26:ee:b3:40:8a:06:05:97:80:8d:2c:62: cf:68:e9:c4:bc:4f:b7:61:da:e9:4e:c6:b3:09:ff:b7:b9:e0: d8:8a:3a:79:8b:85:09:06:8f:7c:24:9f:43:e4:48:c8:cb:48: b9:80:4c:fe:0d:d4:6e:7a:f3:c5:12:c1:8a:c9:9e:ff:a0:49: 13:fd:0f:9f:74:54:61:72:02:6d:07:cc:41:8d:54:63:22:76: 9f:81:6e:ff:d9:65:8d:00:14:71:30:30:68:82:63:70:7d:1e: b6:d0:c0:3f:5a:0e:bc:48:52:ae:64:ea:fc:17:44:6c:f8:ea: f5:75:15:e6:ec:f3:54:96:bc:f7:2c:b5:05:28:10:b3:a5:92: b6:b5:f6:52 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUwOTA0MjEzMTU3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJhMDU0Yy0yZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqmbdCi78HvX08tQbbF5aAPn67TT1XW23kRKPMe+wCImpfpJrL+FFIagiAJf TkRBVvm0MDK7jav8tV5AunMs41R0hZOMaytWWZ4R5P/cJaI1EW9eTuxDTglvVDVX iIUewI0Rvlp3PbC3+LtUxkb2yFa+NYNiSQSqqN3Ioesx10tP8AlUqpcESoeFiGMx ABghmXmcv6AeZ6KT/yvxB/4+1NTg0frgNuTjsYP4rllIDuCeI0CRPqh+tkn7mB6O KtavxLtJ76f1wFfDXMHYvom3PPDYXfG91sHOMWfvCLps1zsLW9mZpO66dHsw40rE ZRSiRpyxu8L4fQFvcbQHYS7Y/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHj0owMI 429n1Y0WYbaYQAGboIWWMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvQzJEOUY0QkNE MjQzMTFFRjkyMDY2NDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA9BGwwDQYJKoZIhvcNAQELBQADggEBAHUtrWv3HYZmAMPm JfYTzvLvWyW/PcU3QaNKKfWjG+MzxOTCA3EzfG8xqI7vSCFWdyCIkDkf8iLtBj+J 1rByYISj7RhrExVQtTgbP8YCDSwrwUg7yUWvcrOQVsjTJezJupR9cQH9wk9Sib7Q Jf43EBgvoCbus0CKBgWXgI0sYs9o6cS8T7dh2ulOxrMJ/7e54NiKOnmLhQkGj3wk n0PkSMjLSLmATP4N1G5688USwYrJnv+gSRP9D590VGFyAm0HzEGNVGMidp+Bbv/Z ZY0AFHEwMGiCY3B9HrbQwD9aDrxIUq5k6vwXRGz46vV1Febs81SWvPcstQUoELOl kra19lI= -----END CERTIFICATE-----Generated at Sun Sep 7 20:43:54 2025 by rpki-client