$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/2DED9FB21E9611F098931D57C4F9AE02.roa File: 2DED9FB21E9611F098931D57C4F9AE02.roa (raw, json) Hash identifier: FYMzyNcEn5qwGYhJASILxE4oZoESG/51dhB+oC1Em0M= Subject key identifier: 78:5F:4D:F6:61:C7:B2:DA:88:62:AE:83:2B:AD:A5:C5:C9:9D:B7:67 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0380 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/2DED9FB21E9611F098931D57C4F9AE02.roa Signing time: Fri 03 Apr 2026 01:33:09 +0000 ROA not before: Fri 03 Apr 2026 01:33:09 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 140224 IP address blocks: 43.248.173.0/24 maxlen: 24 43.248.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Apr 3 01:33:09 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cf18d5-3356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:13:5e:28:65:34:73:2a:35:aa:42:95:2e: f8:1c:d6:07:74:b1:88:fe:82:ef:94:70:ea:19:91: 00:64:80:26:b1:f5:18:8e:38:9e:62:3e:98:bf:a2: 80:16:dd:d8:c5:aa:53:be:37:4d:88:84:d6:f2:65: 3d:a9:35:52:58:46:b7:de:da:b2:9f:32:03:02:d8: 12:52:8d:26:6e:06:fc:23:e4:50:ad:5e:b2:85:0f: 00:d2:5e:3a:ba:75:68:44:45:04:55:71:c4:4c:16: 13:dc:50:60:45:8c:12:e9:20:7a:7e:73:d8:e1:d3: 51:f6:ca:64:c6:e2:c3:24:82:e2:e4:39:f3:74:cd: 77:d7:1a:ff:96:76:1f:ab:c4:8b:f9:8f:dc:72:fc: 85:33:ae:3f:8f:4a:8a:98:6f:94:6b:ec:8f:67:5a: b0:68:8e:ab:2a:6f:a3:8a:f5:eb:d8:1b:a8:0d:34: 06:69:f0:f5:13:c6:4b:1d:44:87:21:9c:0b:a0:f9: 31:05:9d:3b:09:29:1a:b7:60:01:ba:14:7d:76:9a: 8c:12:09:94:04:dd:c7:0e:cb:c9:56:b5:ac:56:b9: e6:f0:0b:85:ab:ed:54:d7:80:f8:d0:90:a5:a1:bb: fc:f2:5c:96:07:94:7e:df:06:5a:3b:c2:e1:f0:f0: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5F:4D:F6:61:C7:B2:DA:88:62:AE:83:2B:AD:A5:C5:C9:9D:B7:67 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/2DED9FB21E9611F098931D57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.173.0/24 43.248.175.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ec:7c:96:5c:a4:83:30:8e:15:5d:dc:37:28:98:86:45:f6: 4d:6e:47:58:05:f1:31:6e:03:69:ad:98:dc:a1:18:19:d8:28: d0:5d:a5:65:52:49:eb:96:6a:c6:3c:b9:1f:b7:7c:06:74:b5: 26:00:ac:93:c4:cb:3d:39:06:09:9c:cd:29:da:87:89:83:35: 7c:e7:df:c9:b8:1a:e7:ec:df:b7:b5:ea:05:85:b2:97:57:c8: bb:28:3b:58:9e:a8:c4:e2:28:1f:a0:92:db:01:cc:13:3a:18: 4d:6b:f5:06:0d:06:b2:3c:60:b4:a5:fd:9c:66:9e:1d:9c:b4: f3:b1:59:ba:b4:b4:8b:e5:dc:30:61:5c:46:75:c8:5a:ae:a6: a7:ed:e4:1b:b5:16:b0:03:22:40:29:bd:46:be:12:9c:c7:de: d0:43:19:99:b4:99:2b:95:51:cf:7b:9f:c3:ac:cb:db:6b:2e: 7f:fb:08:bc:88:a9:b6:2f:b9:97:d4:10:0b:ad:5a:45:04:bc: a2:6f:75:d9:c1:fb:e0:04:53:74:c3:88:f8:fa:76:fa:b2:c3: c5:0c:c1:84:ba:53:23:4e:d2:fb:48:20:aa:69:f9:9a:2e:f2: 7e:d5:b4:dd:99:60:e9:21:b0:49:ed:d5:52:0b:a3:db:97:18: 4d:92:10:47 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwNDAzMDEzMzA5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNmMThkNS0zMzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUYTXihlNHMqNapClS74HNYHdLGI/oLvlHDqGZEAZIAmsfUYjjieYj6Yv6KA Ft3YxapTvjdNiITW8mU9qTVSWEa33tqynzIDAtgSUo0mbgb8I+RQrV6yhQ8A0l46 unVoREUEVXHETBYT3FBgRYwS6SB6fnPY4dNR9spkxuLDJILi5DnzdM131xr/lnYf q8SL+Y/ccvyFM64/j0qKmG+Ua+yPZ1qwaI6rKm+jivXr2BuoDTQGafD1E8ZLHUSH IZwLoPkxBZ07CSkat2ABuhR9dpqMEgmUBN3HDsvJVrWsVrnm8AuFq+1U14D40JCl obv88lyWB5R+3wZaO8Lh8PDuhwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHhfTfZh x7LaiGKugyutpcXJnbdnMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvMkRFRDlGQjIx RTk2MTFGMDk4OTMxRDU3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK/itAwQAK/ivMA0GCSqGSIb3DQEBCwUAA4IBAQCc7HyWXKSDMI4V Xdw3KJiGRfZNbkdYBfExbgNprZjcoRgZ2CjQXaVlUknrlmrGPLkft3wGdLUmAKyT xMs9OQYJnM0p2oeJgzV859/JuBrn7N+3teoFhbKXV8i7KDtYnqjE4igfoJLbAcwT OhhNa/UGDQayPGC0pf2cZp4dnLTzsVm6tLSL5dwwYVxGdcharqan7eQbtRawAyJA Kb1GvhKcx97QQxmZtJkrlVHPe5/DrMvbay5/+wi8iKm2L7mX1BALrVpFBLyib3XZ wfvgBFN0w4j4+nb6ssPFDMGEulMjTtL7SCCqafmaLvJ+1bTdmWDpIbBJ7dVSC6Pb lxhNkhBH -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:37 2026 by rpki-client