$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa File: C552F48EC80011EAAD578B77C4F9AE02.roa (raw, json) Hash identifier: 3ziif94TVOuFGgAnIdAdmSRlr4qbjJdcHwPBQ/YLZfg= Subject key identifier: 5F:8D:B6:EB:ED:70:93:2B:A6:14:D1:85:44:89:8F:51:84:5B:1C:EE Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 3619 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:14:40 +0000 ROA not before: Fri 02 Oct 2026 15:14:40 +0000 ROA not after: Mon 01 Feb 2027 00:00:00 +0000 asID: 131322 IP address blocks: 61.4.64.0/20 maxlen: 20 61.4.64.0/24 maxlen: 24 61.4.65.0/24 maxlen: 24 61.4.66.0/24 maxlen: 24 61.4.67.0/24 maxlen: 24 61.4.68.0/24 maxlen: 24 61.4.69.0/24 maxlen: 24 61.4.70.0/24 maxlen: 24 61.4.71.0/24 maxlen: 24 61.4.73.0/24 maxlen: 24 61.4.74.0/24 maxlen: 24 61.4.75.0/24 maxlen: 24 61.4.76.0/24 maxlen: 24 61.4.77.0/24 maxlen: 24 61.4.78.0/24 maxlen: 24 61.4.79.0/24 maxlen: 24 122.248.96.0/19 maxlen: 19 122.248.107.0/24 maxlen: 24 122.248.108.0/24 maxlen: 24 122.248.109.0/24 maxlen: 24 122.248.110.0/24 maxlen: 24 122.248.111.0/24 maxlen: 24 122.248.117.0/24 maxlen: 24 203.81.160.0/20 maxlen: 20 203.81.166.0/24 maxlen: 24 203.81.167.0/24 maxlen: 24 203.81.170.0/24 maxlen: 24 2406:ea00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 15:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13849 (0x3619) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Oct 2 15:14:40 2026 GMT Not After : Feb 1 00:00:00 2027 GMT Subject: CN=6abfca60-cd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:fb:fb:91:ae:d1:75:4c:71:bc:a9:00:fa: dc:87:94:18:55:9b:2f:a0:e6:53:cc:f5:7e:6f:b1: e0:65:0d:da:25:d8:bf:e8:a2:07:bf:62:5d:85:7f: 60:e1:b5:ea:1c:f4:14:ca:76:b9:30:e2:03:23:d4: 9d:d8:94:fc:45:be:3a:51:67:d4:9a:8f:eb:98:67: fa:f5:de:77:dc:3e:f6:e3:45:f0:af:4d:5d:0e:2d: 89:d8:9b:79:4d:56:f5:64:83:c4:a5:4f:62:af:44: c0:37:6c:e0:c3:69:5f:e3:c2:d9:fe:b3:62:c1:18: a5:a8:49:24:ad:f8:f8:11:01:8f:ff:82:90:df:d0: 22:1f:35:4a:f5:98:2a:08:60:11:26:f1:98:00:68: 00:7e:19:fd:7c:b9:f6:f3:73:8a:53:60:b1:9c:c6: fe:e1:fc:d3:c2:df:55:a1:82:75:b3:77:58:24:78: fb:16:39:8f:66:a3:cf:03:b2:cc:5f:8b:6e:57:f2: af:a1:2b:e3:99:0d:48:31:fb:3f:21:35:ba:76:f1: b9:96:7a:b6:d2:37:fd:97:b8:b8:91:8f:53:4c:9c: e0:d8:c5:f4:a3:f5:a6:85:56:5e:58:dd:c0:82:af: a0:db:b1:cb:a7:3b:07:74:34:69:66:53:58:4f:0a: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8D:B6:EB:ED:70:93:2B:A6:14:D1:85:44:89:8F:51:84:5B:1C:EE X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.4.64.0/20 122.248.96.0/19 203.81.160.0/20 IPv6: 2406:ea00::/32 Signature Algorithm: sha256WithRSAEncryption 06:dc:b9:54:69:3d:4e:b4:67:cf:c8:14:d7:30:c7:31:50:c0: 5e:a7:94:a2:16:db:ef:ea:d9:f7:37:f1:5d:de:a0:3e:c5:c5: 91:9a:9b:c9:c8:5d:ad:70:c8:8e:c7:f5:4e:56:dd:25:d7:0f: bc:88:e4:1e:3d:10:a2:12:eb:0a:9c:b1:6e:e8:ad:3b:dd:4b: d9:3e:c6:67:ef:62:95:02:49:8e:6a:a6:70:57:47:12:2a:88: 3e:b9:f3:c4:e4:be:99:0b:09:22:1d:12:f7:10:83:aa:46:8f: c5:94:db:2f:84:9f:04:a3:99:cf:4e:1a:1c:c2:ce:5f:42:c3: cf:e4:e7:e8:a1:b8:98:4e:9d:0d:0f:01:f5:d7:04:a1:bb:e2: 50:0f:5e:f6:9f:b5:66:9d:ae:8f:86:af:7a:78:f5:0a:31:0d: 32:65:1c:db:e8:b7:50:99:d8:91:06:32:f0:21:c6:f9:6f:d8: 7b:33:b1:3f:fe:68:a9:af:d3:45:fd:a7:e2:dd:83:13:2c:cb: 3b:d8:60:21:b0:9b:c2:dd:13:60:ee:56:6a:e9:3e:d7:86:30: fe:f8:01:74:f9:a1:95:d5:99:06:7e:77:e3:af:28:01:ff:f5: f1:9c:ce:ed:e9:72:9b:17:99:35:5b:c9:76:92:25:ba:35:4b: 00:5c:cd:fd -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICNhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjYxMDAyMTUxNDQwWhcNMjcwMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2E2MC1jZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTv7+5Gu0XVMcbypAPrch5QYVZsvoOZTzPV+b7HgZQ3aJdi/6KIHv2JdhX9g 4bXqHPQUyna5MOIDI9Sd2JT8Rb46UWfUmo/rmGf69d533D7240Xwr01dDi2J2Jt5 TVb1ZIPEpU9ir0TAN2zgw2lf48LZ/rNiwRilqEkkrfj4EQGP/4KQ39AiHzVK9Zgq CGARJvGYAGgAfhn9fLn283OKU2CxnMb+4fzTwt9VoYJ1s3dYJHj7FjmPZqPPA7LM X4tuV/KvoSvjmQ1IMfs/ITW6dvG5lnq20jf9l7i4kY9TTJzg2MX0o/WmhVZeWN3A gq+g27HLpzsHdDRpZlNYTwry2wIDAQABo4ICezCCAncwHQYDVR0OBBYEFF+Ntuvt cJMrphTRhUSJj1GEWxzuMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI4NzgvNEM5OThBMzYxRDhBMTFFMjhBMUYyM0U0MDhCMDJDRDIvQzU1MkY0OEVD ODAwMTFFQUFENTc4Qjc3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQEPQRAAwQFevhgAwQEy1GgMA0EAgACMAcDBQAkBuoAMA0GCSqGSIb3 DQEBCwUAA4IBAQAG3LlUaT1OtGfPyBTXMMcxUMBep5SiFtvv6tn3N/Fd3qA+xcWR mpvJyF2tcMiOx/VOVt0l1w+8iOQePRCiEusKnLFu6K073UvZPsZn72KVAkmOaqZw V0cSKog+ufPE5L6ZCwkiHRL3EIOqRo/FlNsvhJ8Eo5nPThocws5fQsPP5OfoobiY Tp0NDwH11wShu+JQD172n7Vmna6Phq96ePUKMQ0yZRzb6LdQmdiRBjLwIcb5b9h7 M7E//mipr9NF/afi3YMTLMs72GAhsJvC3RNg7lZq6T7XhjD++AF0+aGV1ZkGfnfj rygB//XxnM7t6XKbF5k1W8l2kiW6NUsAXM39 -----END CERTIFICATE-----Generated at Sun Oct 4 05:37:35 2026 by rpki-client