$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa File: C552F48EC80011EAAD578B77C4F9AE02.roa (raw, json) Hash identifier: djq3jcNv2IgImD/jJLxf2QEHt2Ixwwxzxo/g0EZ2JvI= Subject key identifier: AA:7C:0C:8F:4E:DF:A9:01:81:E2:CD:AF:9F:59:62:E1:BA:F2:A8:9A Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 35E6 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa Signing time: Thu 02 Jul 2026 15:10:38 +0000 ROA not before: Thu 02 Jul 2026 15:10:38 +0000 ROA not after: Sun 01 Nov 2026 00:00:00 +0000 asID: 131322 IP address blocks: 61.4.64.0/20 maxlen: 20 61.4.64.0/24 maxlen: 24 61.4.65.0/24 maxlen: 24 61.4.66.0/24 maxlen: 24 61.4.67.0/24 maxlen: 24 61.4.68.0/24 maxlen: 24 61.4.69.0/24 maxlen: 24 61.4.70.0/24 maxlen: 24 61.4.71.0/24 maxlen: 24 61.4.73.0/24 maxlen: 24 61.4.74.0/24 maxlen: 24 61.4.75.0/24 maxlen: 24 61.4.76.0/24 maxlen: 24 61.4.77.0/24 maxlen: 24 61.4.78.0/24 maxlen: 24 61.4.79.0/24 maxlen: 24 122.248.96.0/19 maxlen: 19 122.248.107.0/24 maxlen: 24 122.248.108.0/24 maxlen: 24 122.248.109.0/24 maxlen: 24 122.248.110.0/24 maxlen: 24 122.248.111.0/24 maxlen: 24 122.248.117.0/24 maxlen: 24 203.81.160.0/20 maxlen: 20 203.81.166.0/24 maxlen: 24 203.81.167.0/24 maxlen: 24 203.81.170.0/24 maxlen: 24 2406:ea00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13798 (0x35e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Jul 2 15:10:38 2026 GMT Not After : Nov 1 00:00:00 2026 GMT Subject: CN=6a467f6e-020f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:9f:ab:f0:cf:6e:20:5a:dc:4c:76:3b:18: c0:a6:19:28:8a:13:f8:7e:59:70:02:a6:f3:d6:00: b9:e6:37:dd:e2:2e:9c:12:bd:7a:0d:09:09:45:1b: 14:4f:62:6f:31:f7:0b:3d:9d:24:f8:c4:00:54:09: 0c:75:6c:1f:d8:34:44:86:17:e2:a1:1f:96:49:ff: ea:f8:c9:05:59:95:8f:ca:4b:55:c6:d4:b5:e7:6a: 46:8f:0e:90:59:de:db:e3:a5:bf:93:f1:52:8d:a1: af:66:5e:3a:df:6c:f4:3b:c4:4f:9d:c6:d0:86:c9: 44:3d:af:3b:b2:7f:e5:93:b9:6e:05:45:ef:8f:c0: 55:73:2f:bd:1f:81:5f:62:9b:15:bd:c0:f2:a7:72: 65:eb:ff:51:20:38:9b:2d:49:de:8a:34:d1:e1:5f: c2:1d:99:65:c6:ec:6a:cf:d5:80:58:b1:18:1f:95: 38:8a:08:db:13:4e:66:7d:a7:bb:d3:4c:7f:c0:2b: ba:5c:4e:50:db:6f:a9:44:7e:f6:d2:9b:c5:37:86: e8:5e:ba:3c:61:e9:46:79:be:a0:9a:33:c2:da:41: 8d:3f:97:f4:76:cd:10:1c:5b:87:8f:3f:30:43:c0: 26:3e:98:fe:7c:f5:42:36:f3:e7:7d:92:5f:48:ca: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7C:0C:8F:4E:DF:A9:01:81:E2:CD:AF:9F:59:62:E1:BA:F2:A8:9A X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/C552F48EC80011EAAD578B77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.4.64.0/20 122.248.96.0/19 203.81.160.0/20 IPv6: 2406:ea00::/32 Signature Algorithm: sha256WithRSAEncryption 97:1a:fa:a1:8f:6a:2e:ab:0b:b6:0d:f1:e1:c8:80:51:bd:c3: 14:36:dc:fb:a0:cf:03:bc:7a:da:ce:e1:bd:79:bc:2f:d4:a9: 57:80:73:ad:10:c9:e4:bb:10:6e:2c:5f:f9:1a:f1:10:1a:81: f2:b1:6f:f9:e4:26:02:0f:8e:db:d8:0a:b5:67:97:fe:d1:43: 22:0f:20:7d:14:eb:1b:61:55:ae:ec:42:3d:80:ac:aa:ce:81: 43:8e:52:d2:8d:ed:b3:e5:90:10:bd:05:d0:30:b5:f4:af:2f: 2f:7c:38:af:c8:49:81:9b:03:d1:3e:a4:54:3c:db:55:0f:8b: 32:64:1f:f5:b9:57:6a:74:df:71:06:c9:a6:a2:ba:b5:91:28: 5b:81:11:11:91:6d:66:24:c6:5b:f4:82:94:30:32:a5:41:b0: 4e:91:8f:a1:74:be:b7:a5:95:65:57:73:87:8b:ce:5a:31:01: 73:30:a0:b6:4a:02:99:09:80:e1:1f:b2:e7:b3:ab:50:74:e4: 47:5e:5b:52:91:d8:ab:4f:80:4f:6e:4c:90:a6:1b:8d:1b:06: a3:9e:ca:93:1f:82:82:3c:18:35:0e:1a:e9:2c:86:26:d5:64: ad:9a:38:e8:8e:b0:2c:36:d3:06:e7:cf:af:35:70:27:0a:ae: 63:dd:89:d8 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICNeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjYwNzAyMTUxMDM4WhcNMjYxMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ2N2Y2ZS0wMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukufq/DPbiBa3Ex2OxjAphkoihP4fllwAqbz1gC55jfd4i6cEr16DQkJRRsU T2JvMfcLPZ0k+MQAVAkMdWwf2DREhhfioR+WSf/q+MkFWZWPyktVxtS152pGjw6Q Wd7b46W/k/FSjaGvZl4632z0O8RPncbQhslEPa87sn/lk7luBUXvj8BVcy+9H4Ff YpsVvcDyp3Jl6/9RIDibLUneijTR4V/CHZllxuxqz9WAWLEYH5U4igjbE05mfae7 00x/wCu6XE5Q22+pRH720pvFN4boXro8YelGeb6gmjPC2kGNP5f0ds0QHFuHjz8w Q8AmPpj+fPVCNvPnfZJfSMo5HwIDAQABo4ICezCCAncwHQYDVR0OBBYEFKp8DI9O 36kBgeLNr59ZYuG68qiaMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI4NzgvNEM5OThBMzYxRDhBMTFFMjhBMUYyM0U0MDhCMDJDRDIvQzU1MkY0OEVD ODAwMTFFQUFENTc4Qjc3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQEPQRAAwQFevhgAwQEy1GgMA0EAgACMAcDBQAkBuoAMA0GCSqGSIb3 DQEBCwUAA4IBAQCXGvqhj2ouqwu2DfHhyIBRvcMUNtz7oM8DvHrazuG9ebwv1KlX gHOtEMnkuxBuLF/5GvEQGoHysW/55CYCD47b2Aq1Z5f+0UMiDyB9FOsbYVWu7EI9 gKyqzoFDjlLSje2z5ZAQvQXQMLX0ry8vfDivyEmBmwPRPqRUPNtVD4syZB/1uVdq dN9xBsmmorq1kShbgRERkW1mJMZb9IKUMDKlQbBOkY+hdL63pZVlV3OHi85aMQFz MKC2SgKZCYDhH7Lns6tQdORHXltSkdirT4BPbkyQphuNGwajnsqTH4KCPBg1Dhrp LIYm1WStmjjojrAsNtMG58+vNXAnCq5j3YnY -----END CERTIFICATE-----Generated at Fri Jul 24 06:06:29 2026 by rpki-client