$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/7DB6FBF61E8711F0BF32D50BC4F9AE02.roa File: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (raw, json) Hash identifier: S96e2L/6aXmXiFJ00QZgjPrWRuJuyQ7qqjj+2N0NuLQ= Subject key identifier: FA:0D:8E:A2:8A:C8:8A:6E:CD:AF:EB:07:C8:1D:C4:86:24:CA:73:09 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0383 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/7DB6FBF61E8711F0BF32D50BC4F9AE02.roa Signing time: Fri 03 Apr 2026 01:33:15 +0000 ROA not before: Fri 03 Apr 2026 01:33:15 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 4907 IP address blocks: 43.248.172.0/24 maxlen: 24 43.248.173.0/24 maxlen: 24 43.248.174.0/24 maxlen: 24 43.248.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Apr 3 01:33:15 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cf18db-88d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:b1:b4:b2:40:a6:4a:9b:52:0f:3c:de:8c: 8b:ae:4b:6f:3e:df:a5:cc:10:c5:64:81:0f:42:26: b2:29:14:5a:b2:3b:35:d1:8b:5e:40:de:5a:56:6b: e9:57:26:7d:b3:c1:04:5c:78:5e:e2:ab:7a:27:ba: 12:65:38:ff:60:27:65:5f:40:c6:32:e3:b0:50:a2: ed:ce:da:1b:3e:3e:a1:3d:f7:b8:c2:3e:5f:57:bf: 32:0e:79:b5:f4:76:d9:be:91:97:21:9f:04:4d:a5: d0:f9:54:96:c0:99:a1:29:3f:16:a5:40:87:2e:f8: f4:b8:73:1d:d1:6e:11:c3:5d:72:a7:97:18:b7:cc: 48:2c:de:40:02:47:e7:ae:58:11:f9:6e:92:09:af: 6b:83:65:5b:6b:dc:bc:19:06:5f:e5:9c:c1:81:b4: c6:44:0e:b5:8b:bb:41:de:74:38:c2:84:e4:e6:ba: bf:65:90:91:b2:8f:39:3c:02:0d:9c:04:73:09:b6: b1:ee:30:81:20:81:73:31:a0:81:37:63:b2:cb:29: 1f:dd:af:cb:5d:96:0c:19:b3:4a:e4:cb:35:4d:59: 3f:cd:10:a3:e1:8e:e9:62:20:14:62:da:ea:83:79: 41:ee:d3:37:ee:8c:f6:e9:93:a6:8f:86:71:ae:51: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0D:8E:A2:8A:C8:8A:6E:CD:AF:EB:07:C8:1D:C4:86:24:CA:73:09 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/7DB6FBF61E8711F0BF32D50BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.172.0/22 Signature Algorithm: sha256WithRSAEncryption 13:6c:80:29:73:75:a7:12:a5:6f:d4:28:15:da:6c:87:a1:21: dc:3c:54:16:b2:43:fd:d4:09:c1:80:96:bd:cb:c9:8f:fa:ab: 2c:b7:9b:a2:36:21:35:a0:85:72:70:fb:29:a5:e8:f9:6f:0d: 69:0d:a3:30:87:08:73:d4:9c:3f:9d:33:3d:e4:30:c0:f6:4e: be:6c:a6:39:9e:4e:7b:15:56:38:7c:8a:cc:88:fc:d4:d3:20: 7b:fd:9c:69:48:d8:4c:d0:f0:e0:e4:56:16:52:47:d3:2c:c9: 23:01:11:0b:cc:d8:be:4b:c9:0d:67:af:60:36:93:b6:a1:3f: e6:2b:90:c0:fe:51:17:7d:53:9a:1a:48:da:fa:13:20:e5:69: 5a:49:c0:33:a9:30:71:41:51:85:f0:cb:16:4a:13:cf:dd:f6: 54:99:e8:85:c9:f8:08:40:cf:08:e5:30:ce:ca:48:7e:f7:00: c4:a8:81:90:41:4b:ed:31:f2:9a:3c:90:9a:a2:7e:5c:0b:40: b8:e8:e4:ee:26:d0:62:50:b6:19:0f:9f:5e:d6:55:2a:78:c1: 56:e1:ad:c9:d0:18:77:be:ee:1c:f1:f2:fe:71:2d:f3:0a:4b: 03:ec:16:98:a3:f1:bf:28:4d:12:f5:dc:f5:1b:8e:6f:29:24: b1:14:50:22 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwNDAzMDEzMzE1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNmMThkYi04OGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PyxtLJApkqbUg883oyLrktvPt+lzBDFZIEPQiayKRRasjs10YteQN5aVmvp VyZ9s8EEXHhe4qt6J7oSZTj/YCdlX0DGMuOwUKLtztobPj6hPfe4wj5fV78yDnm1 9HbZvpGXIZ8ETaXQ+VSWwJmhKT8WpUCHLvj0uHMd0W4Rw11yp5cYt8xILN5AAkfn rlgR+W6SCa9rg2Vba9y8GQZf5ZzBgbTGRA61i7tB3nQ4woTk5rq/ZZCRso85PAIN nARzCbax7jCBIIFzMaCBN2Oyyykf3a/LXZYMGbNK5Ms1TVk/zRCj4Y7pYiAUYtrq g3lB7tM37oz26ZOmj4ZxrlGq3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPoNjqKK yIpuza/rB8gdxIYkynMJMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvN0RCNkZCRjYx RTg3MTFGMEJGMzJENTBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/isMA0GCSqGSIb3DQEBCwUAA4IBAQATbIApc3WnEqVv1CgV2myH oSHcPFQWskP91AnBgJa9y8mP+qsst5uiNiE1oIVycPsppej5bw1pDaMwhwhz1Jw/ nTM95DDA9k6+bKY5nk57FVY4fIrMiPzU0yB7/ZxpSNhM0PDg5FYWUkfTLMkjAREL zNi+S8kNZ69gNpO2oT/mK5DA/lEXfVOaGkja+hMg5WlaScAzqTBxQVGF8MsWShPP 3fZUmeiFyfgIQM8I5TDOykh+9wDEqIGQQUvtMfKaPJCaon5cC0C46OTuJtBiULYZ D59e1lUqeMFW4a3J0Bh3vu4c8fL+cS3zCksD7BaYo/G/KE0S9dz1G45vKSSxFFAi -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:54 2026 by rpki-client