$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/61F0DC84D5E211F1BFFBCC60FB65CEF9.roa File: 61F0DC84D5E211F1BFFBCC60FB65CEF9.roa (raw, json) Hash identifier: RkDDe2Z6ByZ4kl5yOWESyfb0Zq2EcacXPKxf/Ah1xaY= Subject key identifier: 43:21:01:D8:27:34:5E:00:DF:6D:F8:42:70:62:B2:D3:E2:8B:28:F3 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 08F8 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/61F0DC84D5E211F1BFFBCC60FB65CEF9.roa Signing time: Mon 02 Nov 2026 21:39:34 +0000 ROA not before: Mon 02 Nov 2026 21:39:34 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 211392 IP address blocks: 43.225.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 21:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Nov 2 21:39:34 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ae90315-f29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:76:01:91:f1:fd:0a:a5:22:ff:30:af:23: 7c:8d:88:87:0f:d5:a0:5f:c1:64:18:70:91:a6:99: 91:45:9d:c2:07:59:83:80:33:e6:97:4d:c8:1e:0f: 05:32:5e:7a:f6:03:12:f4:1b:f2:77:65:78:02:fa: 1c:80:e8:67:8a:02:73:23:d7:a1:ff:09:48:15:f6: 74:c0:33:2f:51:93:33:b1:fa:51:81:15:8a:19:af: 98:2c:c7:95:b0:22:e8:af:6f:ef:d7:fd:e2:4f:ff: be:80:9c:01:5f:05:84:7b:42:e9:f6:c6:0a:c2:20: 5a:95:2f:b6:d0:41:07:e7:8c:ed:72:07:85:0d:7a: 38:61:37:b9:ab:63:79:70:71:29:b2:a1:15:ef:a8: 6c:6e:cc:75:a8:cb:81:bf:1c:67:a1:73:2b:74:37: a9:ca:21:98:a7:89:75:f7:87:a5:29:35:a6:10:92: 31:5b:74:ee:ca:84:78:d8:e1:c5:ee:33:3b:a3:c1: b4:b6:8e:4f:59:d1:35:ab:21:10:a8:9a:a1:47:7a: 2e:9b:df:d6:50:b9:4e:e3:1b:47:c1:f5:e4:01:6b: d2:2c:20:d1:96:8c:61:66:0b:10:62:95:c0:3f:b3: 79:92:b0:9c:c6:39:3e:5b:e7:f8:4f:6e:f1:a8:f0: 3e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:21:01:D8:27:34:5E:00:DF:6D:F8:42:70:62:B2:D3:E2:8B:28:F3 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/61F0DC84D5E211F1BFFBCC60FB65CEF9.roa sbgp-ipAddrBlock: critical IPv4: 43.225.56.0/22 Signature Algorithm: sha256WithRSAEncryption 84:46:ab:3f:3d:33:02:97:5f:ea:06:80:13:6a:c0:19:11:cf: 55:ab:f0:43:20:97:34:8f:08:01:74:9f:e2:88:34:d3:70:e7: 84:54:03:55:0b:ee:d4:0c:52:eb:0f:18:ce:55:8a:ee:fe:c1: c3:fb:be:b2:33:0b:c9:24:f0:91:e4:96:0e:04:06:06:79:5a: 36:75:12:b6:68:ee:fa:3e:c8:c6:d6:44:be:a8:2c:1c:aa:c9: 68:78:a3:b6:d5:6b:d6:3e:b2:50:43:c9:74:13:7f:65:88:aa: 7e:87:74:24:60:e1:b2:0a:24:9e:a4:ce:37:34:73:e7:0d:08: 7d:79:4a:a9:c6:a4:ad:9a:21:60:63:10:8d:6f:3f:a1:b9:a1: 00:f4:d4:57:fc:76:22:1f:7e:e3:e2:fe:48:ee:a5:f6:ad:e2: b8:3c:cf:1f:57:c1:64:54:bf:90:10:f0:c8:e5:f1:72:5c:99: f8:01:b7:82:ed:d7:b3:85:39:6d:02:84:7e:a7:25:bf:3e:88: 91:7c:64:45:e6:d7:56:85:95:8f:92:dd:66:af:34:34:75:08: 51:b7:11:21:f0:03:18:12:87:74:c1:e8:c5:71:60:54:55:76: 35:e6:fe:12:2b:0e:98:cf:83:9c:ab:19:00:1c:a9:de:67:2b: 4b:10:60:e0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjYxMTAyMjEzOTM0WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU5MDMxNS1mMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzct2AZHx/QqlIv8wryN8jYiHD9WgX8FkGHCRppmRRZ3CB1mDgDPml03IHg8F Ml569gMS9Bvyd2V4AvocgOhnigJzI9eh/wlIFfZ0wDMvUZMzsfpRgRWKGa+YLMeV sCLor2/v1/3iT/++gJwBXwWEe0Lp9sYKwiBalS+20EEH54ztcgeFDXo4YTe5q2N5 cHEpsqEV76hsbsx1qMuBvxxnoXMrdDepyiGYp4l194elKTWmEJIxW3TuyoR42OHF 7jM7o8G0to5PWdE1qyEQqJqhR3oum9/WULlO4xtHwfXkAWvSLCDRloxhZgsQYpXA P7N5krCcxjk+W+f4T27xqPA+FQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEMhAdgn NF4A3234QnBistPiiyjzMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGMTgvQTM4NDI5MUMwQUEwMTFFQjg3MzMzODgyQzRGOUFFMDIvNjFGMERDODRE NUUyMTFGMUJGRkJDQzYwRkI2NUNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK+E4MA0GCSqGSIb3DQEBCwUAA4IBAQCERqs/PTMCl1/qBoATasAZ Ec9Vq/BDIJc0jwgBdJ/iiDTTcOeEVANVC+7UDFLrDxjOVYru/sHD+76yMwvJJPCR 5JYOBAYGeVo2dRK2aO76PsjG1kS+qCwcqsloeKO21WvWPrJQQ8l0E39liKp+h3Qk YOGyCiSepM43NHPnDQh9eUqpxqStmiFgYxCNbz+huaEA9NRX/HYiH37j4v5I7qX2 reK4PM8fV8FkVL+QEPDI5fFyXJn4AbeC7dezhTltAoR+pyW/PoiRfGRF5tdWhZWP kt1mrzQ0dQhRtxEh8AMYEod0wejFcWBUVXY15v4SKw6Yz4OcqxkAHKneZytLEGDg -----END CERTIFICATE-----Generated at Wed Nov 4 20:25:00 2026 by rpki-client