$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/7DB6FBF61E8711F0BF32D50BC4F9AE02.roa File: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (raw, json) Hash identifier: mrc+cxs94exImU0Ktd+W0zTUefZVbMzpj2efZtfe1u4= Subject key identifier: BF:8C:CE:2F:A5:A4:92:BF:F8:ED:DB:2E:86:EA:BC:AB:0B:80:13:2B Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0366 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/7DB6FBF61E8711F0BF32D50BC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:37:17 +0000 ROA not before: Mon 21 Apr 2025 08:29:32 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 4907 IP address blocks: 43.248.172.0/24 maxlen: 24 43.248.173.0/24 maxlen: 24 43.248.174.0/24 maxlen: 24 43.248.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 870 (0x366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Apr 21 08:29:32 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4794d-32a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:69:eb:c3:e8:f6:9c:38:23:6f:96:d7:3a: 02:ed:b4:92:4a:77:78:d4:d3:d3:74:93:b1:6f:ec: e7:f0:50:ce:9a:ea:ab:3e:f2:41:f9:95:5c:cc:4f: e7:3c:ce:19:ad:9a:59:89:23:04:d7:65:63:1f:e6: eb:27:58:4f:37:b6:15:5a:ed:43:c1:fb:0b:98:b6: fa:f9:06:20:5f:03:a8:33:5b:26:3b:46:44:78:ac: b2:54:7b:0f:1c:31:13:6e:ff:6d:a2:37:de:5e:58: a0:21:01:2b:1c:04:40:5a:4a:73:47:87:fd:d2:70: 4c:ff:86:49:bb:10:97:66:1e:f8:8d:a4:8d:f5:d4: 6f:16:56:dc:80:61:fa:0a:71:38:9d:c5:de:b3:9a: 3d:91:89:ee:c4:14:0f:93:32:a8:2f:51:b5:c7:44: dd:b2:56:22:84:50:18:f4:5e:1b:8e:d3:c7:43:bd: 82:0a:fe:0c:11:67:5b:00:e6:21:9d:65:56:22:29: 44:a4:7d:7c:0a:0a:bb:da:87:29:b3:5e:9f:00:9a: 2a:ca:e9:3b:31:78:3b:85:72:e5:80:f7:7b:7e:a7: 56:9f:23:d2:ec:d5:12:c2:36:58:95:9c:3e:a7:77: b7:db:b4:56:c7:50:25:da:7b:48:cb:e2:03:9d:d5: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8C:CE:2F:A5:A4:92:BF:F8:ED:DB:2E:86:EA:BC:AB:0B:80:13:2B X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/7DB6FBF61E8711F0BF32D50BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.172.0/22 Signature Algorithm: sha256WithRSAEncryption bf:a8:08:31:d7:49:10:e9:80:48:91:a2:19:b6:ed:86:e9:59: fd:d6:18:d6:33:1d:a2:23:e5:3d:3e:d0:81:90:08:30:e7:23: cd:f0:31:f4:5f:0f:2c:90:59:f0:63:a6:dd:3e:1a:33:c4:0a: 3f:64:ca:f9:26:83:b2:8a:66:38:20:ed:36:96:06:61:ee:1b: 69:e3:b7:57:e0:fe:00:4a:a1:8d:d7:fb:ba:34:d6:f2:58:94: a7:34:eb:82:c5:10:07:91:80:94:3c:18:07:ec:57:9a:1c:96: 6c:91:9d:85:fd:72:63:a4:7f:37:a9:6a:0f:aa:ab:a4:61:b7: a4:4a:44:41:ae:7f:21:66:67:54:cf:4b:e5:c1:f5:f9:2e:26: 6c:9d:72:46:72:d2:09:4e:38:b1:5b:11:a9:f6:4b:f9:8f:e8: a4:37:5e:90:f0:9d:7c:6d:2a:eb:9b:69:05:1f:04:f5:2f:68: ea:59:4a:99:14:0a:b6:e2:30:50:51:62:5d:da:bc:d5:4e:cc: 0f:73:37:ee:45:c3:9f:86:01:1d:ff:39:36:c9:8a:59:38:52: 4d:b4:42:1f:00:64:be:e1:8e:4b:0d:04:4d:02:12:bc:d3:e9: 16:85:7c:04:91:e6:54:41:8b:e2:38:a7:69:af:18:cf:2c:c9: 76:22:61:1a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNDIxMDgyOTMyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzk0ZC0zMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7Vp68Po9pw4I2+W1zoC7bSSSnd41NPTdJOxb+zn8FDOmuqrPvJB+ZVczE/n PM4ZrZpZiSME12VjH+brJ1hPN7YVWu1DwfsLmLb6+QYgXwOoM1smO0ZEeKyyVHsP HDETbv9tojfeXligIQErHARAWkpzR4f90nBM/4ZJuxCXZh74jaSN9dRvFlbcgGH6 CnE4ncXes5o9kYnuxBQPkzKoL1G1x0TdslYihFAY9F4bjtPHQ72CCv4MEWdbAOYh nWVWIilEpH18Cgq72ocps16fAJoqyuk7MXg7hXLlgPd7fqdWnyPS7NUSwjZYlZw+ p3e327RWx1Al2ntIy+IDndWEkwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL+Mzi+l pJK/+O3bLobqvKsLgBMrMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvN0RCNkZCRjYx RTg3MTFGMEJGMzJENTBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/isMA0GCSqGSIb3DQEBCwUAA4IBAQC/qAgx10kQ6YBIkaIZtu2G 6Vn91hjWMx2iI+U9PtCBkAgw5yPN8DH0Xw8skFnwY6bdPhozxAo/ZMr5JoOyimY4 IO02lgZh7htp47dX4P4ASqGN1/u6NNbyWJSnNOuCxRAHkYCUPBgH7FeaHJZskZ2F /XJjpH83qWoPqqukYbekSkRBrn8hZmdUz0vlwfX5LiZsnXJGctIJTjixWxGp9kv5 j+ikN16Q8J18bSrrm2kFHwT1L2jqWUqZFAq24jBQUWJd2rzVTswPczfuRcOfhgEd /zk2yYpZOFJNtEIfAGS+4Y5LDQRNAhK80+kWhXwEkeZUQYviOKdprxjPLMl2ImEa -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:42 2026 by rpki-client