$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/2DED9FB21E9611F098931D57C4F9AE02.roa File: 2DED9FB21E9611F098931D57C4F9AE02.roa (raw, json) Hash identifier: L30iK7dh2UBoLwZCcS09NDV2Ski8+Dnjm3U61xlQdMU= Subject key identifier: BF:B3:47:CB:6D:F0:83:39:BC:EA:E5:0C:5F:CB:AB:87:24:61:4C:01 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0367 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/2DED9FB21E9611F098931D57C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:37:18 +0000 ROA not before: Mon 21 Apr 2025 09:51:21 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140224 IP address blocks: 43.248.173.0/24 maxlen: 24 43.248.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Apr 21 09:51:21 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4794e-6f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:d4:ca:af:13:29:0b:db:7e:61:23:02:7e: be:09:ca:59:95:6d:c9:37:91:02:9f:d4:66:1f:bd: 73:e0:68:04:0a:1c:25:3f:3a:c3:e0:ea:56:a8:14: 67:03:09:d2:e4:81:6a:60:30:b4:97:f4:3b:0a:53: a5:28:94:d0:08:73:7a:cc:20:f6:db:16:13:b1:ae: be:09:db:65:cc:40:4d:df:98:e4:48:2d:17:23:9e: db:e1:fa:82:37:d1:75:7d:a7:eb:50:9c:47:05:ab: df:93:4e:b9:db:97:e9:79:c5:1f:c6:fb:c8:90:c1: 2f:15:10:95:4f:6f:66:60:e7:82:e1:77:7e:54:d8: e1:41:c2:b1:0b:4e:41:02:92:21:76:0b:1e:6d:4c: 6d:4c:25:fd:ca:ef:3a:5c:f4:33:16:d3:1d:1f:63: 6b:87:6d:e1:4c:00:b8:ae:68:30:75:e1:af:79:6b: dc:f0:25:db:63:73:ae:f2:9a:34:95:b8:9c:bc:e4: 18:01:d9:7d:d9:8c:78:07:c7:f4:b5:40:d5:ed:c0: 90:a6:6b:a8:47:ff:1d:15:32:20:e0:19:81:4e:b5: 01:49:c3:3d:38:aa:4e:5f:ef:47:8d:6e:3c:5d:72: 77:da:88:b5:81:dc:34:be:97:e4:36:ef:91:d1:e7: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B3:47:CB:6D:F0:83:39:BC:EA:E5:0C:5F:CB:AB:87:24:61:4C:01 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/2DED9FB21E9611F098931D57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.173.0/24 43.248.175.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:a8:1d:af:ed:9f:72:9f:20:3f:b8:97:ed:bd:3a:6b:97:74: 2a:85:0a:45:2b:d9:88:fd:56:70:4f:26:0a:85:90:c5:74:63: 7c:37:e5:ef:2c:bb:fb:10:37:b0:43:be:7d:23:5d:d9:b6:47: 4b:6c:9c:71:95:92:58:4d:ae:ab:85:2c:84:79:59:ef:8f:c5: 68:a9:68:02:42:5a:01:dc:a7:a8:34:6c:1e:52:09:1c:51:d2: ed:3a:95:63:f5:77:d0:d8:2b:1a:6f:df:0a:99:02:7c:27:fa: c2:89:c7:73:0c:39:69:2e:7d:80:1c:56:5a:17:cf:09:02:1d: e1:00:d7:ab:d5:25:22:ea:e0:92:1d:6e:21:4b:89:45:1e:e6: 02:62:cb:cf:46:3f:09:99:45:07:75:03:81:81:2a:92:bf:8a: e0:d8:d3:2b:a3:14:28:c5:56:2e:9c:2b:5a:b1:45:c9:fd:05: 07:36:65:d7:59:46:c8:22:d7:63:cc:d0:79:d2:d8:08:9c:4c: 24:40:62:72:e6:7d:c8:08:83:0f:4b:24:ef:87:f0:87:5d:36: 86:72:c7:b1:c1:9c:17:81:81:b7:4a:83:5b:44:b5:fc:ed:04: 1c:ba:c5:d5:c1:d1:42:e0:d7:e0:89:a6:77:55:e5:da:91:58: 17:f4:0b:1e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNDIxMDk1MTIxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzk0ZS02ZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDvUyq8TKQvbfmEjAn6+CcpZlW3JN5ECn9RmH71z4GgEChwlPzrD4OpWqBRn AwnS5IFqYDC0l/Q7ClOlKJTQCHN6zCD22xYTsa6+CdtlzEBN35jkSC0XI57b4fqC N9F1fafrUJxHBavfk06525fpecUfxvvIkMEvFRCVT29mYOeC4Xd+VNjhQcKxC05B ApIhdgsebUxtTCX9yu86XPQzFtMdH2Nrh23hTAC4rmgwdeGveWvc8CXbY3Ou8po0 lbicvOQYAdl92Yx4B8f0tUDV7cCQpmuoR/8dFTIg4BmBTrUBScM9OKpOX+9HjW48 XXJ32oi1gdw0vpfkNu+R0eegcQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFL+zR8tt 8IM5vOrlDF/Lq4ckYUwBMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvMkRFRDlGQjIx RTk2MTFGMDk4OTMxRDU3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK/itAwQAK/ivMA0GCSqGSIb3DQEBCwUAA4IBAQBuqB2v7Z9ynyA/ uJftvTprl3QqhQpFK9mI/VZwTyYKhZDFdGN8N+XvLLv7EDewQ759I13ZtkdLbJxx lZJYTa6rhSyEeVnvj8VoqWgCQloB3KeoNGweUgkcUdLtOpVj9XfQ2Csab98KmQJ8 J/rCicdzDDlpLn2AHFZaF88JAh3hANer1SUi6uCSHW4hS4lFHuYCYsvPRj8JmUUH dQOBgSqSv4rg2NMroxQoxVYunCtasUXJ/QUHNmXXWUbIItdjzNB50tgInEwkQGJy 5n3ICIMPSyTvh/CHXTaGcsexwZwXgYG3SoNbRLX87QQcusXVwdFC4NfgiaZ3VeXa kVgX9Ase -----END CERTIFICATE-----Generated at Mon Mar 2 07:42:40 2026 by rpki-client