$ rpki-client -vvvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/CD5356F2DA8B11F1B30618C22566CEF9.roa File: CD5356F2DA8B11F1B30618C22566CEF9.roa (raw, json) Hash identifier: Ubir2KdRTZF/w93UrI8sy3zqq8Tip4LIF3AQkYR1Rww= Subject key identifier: 4C:3D:56:9D:F5:23:4F:21:3A:D5:89:34:EB:E7:9D:70:8F:48:35:BC Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 097C Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/CD5356F2DA8B11F1B30618C22566CEF9.roa Signing time: Sat 07 Nov 2026 09:15:41 +0000 ROA not before: Sat 07 Nov 2026 09:15:40 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 40605 IP address blocks: 43.225.38.0/24 maxlen: 24 103.15.106.0/24 maxlen: 24 103.253.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2428 (0x97c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Nov 7 09:15:40 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aeeec3c-ea9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:55:f8:65:c6:43:2a:ec:e1:97:77:8e:9e: b5:a2:4e:b8:18:57:5b:d0:42:f5:bb:cb:91:76:22: f4:c4:d3:f4:a1:a7:83:08:49:ce:3e:e1:cc:63:b5: a7:1b:dd:57:b0:df:14:4d:06:42:f3:67:16:84:a0: 8e:1b:6b:28:f5:f8:40:14:03:44:2c:19:65:10:7b: c6:cf:33:6f:8b:1c:68:3a:12:22:81:57:12:5a:95: c9:be:e7:dc:e7:27:e7:63:12:f0:19:02:b9:66:f7: 90:6d:3c:75:e5:ed:d6:db:d7:9e:87:bc:cf:6e:38: e1:da:7a:c5:ab:75:0f:f7:00:94:ba:4b:c7:6c:a5: 0e:06:36:2e:c3:28:cd:dc:01:04:05:06:54:20:73: 24:be:55:de:a0:a5:f1:bb:b2:13:15:6c:aa:b9:78: f5:f0:50:8f:b2:d5:10:c8:32:29:7e:47:db:15:9c: d7:a9:35:e2:dc:96:d1:c1:96:ac:c3:b8:4c:3f:f7: f5:83:64:2c:0f:80:e2:69:61:f4:88:0f:d7:81:d3: 30:4f:80:03:da:ca:ac:01:5a:cb:89:62:91:58:5a: 15:e5:9a:de:c6:bc:b6:a9:bf:79:43:d2:aa:44:8d: c2:6b:5f:f1:06:1c:f5:8f:c7:65:0c:53:7c:f4:45: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3D:56:9D:F5:23:4F:21:3A:D5:89:34:EB:E7:9D:70:8F:48:35:BC X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/CD5356F2DA8B11F1B30618C22566CEF9.roa sbgp-ipAddrBlock: critical IPv4: 43.225.38.0/24 103.15.106.0/24 103.253.110.0/24 Signature Algorithm: sha256WithRSAEncryption 19:b5:90:cb:8e:7b:2c:56:d6:8f:c8:a1:32:5f:1b:6b:29:a5: 3a:3a:e7:bb:5b:0a:7d:5c:95:eb:84:0e:93:ad:2f:17:d0:92: 48:89:ea:3e:04:87:03:1b:2e:73:27:23:50:57:c9:c1:fc:c4: c8:b0:43:93:65:5a:bc:57:1f:5d:0a:f4:77:7b:3d:e5:2b:df: 9b:d6:7f:b7:fb:0a:9d:4b:30:2d:7e:25:c7:9e:db:ed:24:9d: 25:ef:57:c8:a9:9a:d0:2c:26:11:2f:0a:60:53:b3:36:3c:8d: b0:01:32:bb:72:cb:90:0e:e0:eb:82:47:13:62:62:62:6a:b4: 40:3c:62:37:da:57:da:b8:da:2e:8c:a7:f1:9b:31:00:fb:95: f4:ee:57:0d:63:9e:b2:86:b2:85:05:a2:8f:b8:89:8f:08:c1: 5d:63:18:88:6e:e5:7a:93:54:ab:df:fb:52:85:a6:fd:52:ff: 98:d5:05:0d:11:1a:95:11:83:be:7c:66:c2:2c:d2:f1:f7:93: b1:3f:eb:4f:f1:f3:0f:90:fc:62:33:1b:e4:6b:e5:8d:5b:83: 70:b4:5a:75:b2:d8:9c:65:11:f5:2b:9e:57:17:47:90:65:c3: 3a:e9:f8:41:b0:3d:11:60:99:25:2d:c8:ca:76:05:06:9d:1d: 58:0c:04:e6 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjYxMTA3MDkxNTQwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWVlZWMzYy1lYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKNV+GXGQyrs4Zd3jp61ok64GFdb0EL1u8uRdiL0xNP0oaeDCEnOPuHMY7Wn G91XsN8UTQZC82cWhKCOG2so9fhAFANELBllEHvGzzNvixxoOhIigVcSWpXJvufc 5yfnYxLwGQK5ZveQbTx15e3W29eeh7zPbjjh2nrFq3UP9wCUukvHbKUOBjYuwyjN 3AEEBQZUIHMkvlXeoKXxu7ITFWyquXj18FCPstUQyDIpfkfbFZzXqTXi3JbRwZas w7hMP/f1g2QsD4DiaWH0iA/XgdMwT4AD2sqsAVrLiWKRWFoV5Zrexry2qb95Q9Kq RI3Ca1/xBhz1j8dlDFN89EUAKwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEw9Vp31 I08hOtWJNOvnnXCPSDW8MB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvQ0Q1MzU2RjJE QThCMTFGMUIzMDYxOEMyMjU2NkNFRjkucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK+EmAwQAZw9qAwQAZ/1uMA0GCSqGSIb3DQEBCwUAA4IBAQAZtZDL jnssVtaPyKEyXxtrKaU6Oue7Wwp9XJXrhA6TrS8X0JJIieo+BIcDGy5zJyNQV8nB /MTIsEOTZVq8Vx9dCvR3ez3lK9+b1n+3+wqdSzAtfiXHntvtJJ0l71fIqZrQLCYR LwpgU7M2PI2wATK7csuQDuDrgkcTYmJiarRAPGI32lfauNoujKfxmzEA+5X07lcN Y56yhrKFBaKPuImPCMFdYxiIbuV6k1Sr3/tShab9Uv+Y1QUNERqVEYO+fGbCLNLx 95OxP+tP8fMPkPxiMxvka+WNW4NwtFp1sticZRH1K55XF0eQZcM66fhBsD0RYJkl LcjKdgUGnR1YDATm -----END CERTIFICATE-----Generated at Sun Nov 15 10:24:24 2026 by rpki-client