$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa File: E0CDA376596E11F0B19AF24BC4F9AE02.roa (raw, json) Hash identifier: WP9+5Ms1ChWYZyb/nmIxHwJL09xTjBwNcIuk6ZDgaos= Subject key identifier: A3:22:E7:77:5D:1C:02:16:BE:D1:C8:21:B5:F3:43:4F:96:CB:67:64 Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: 016E Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:59:13 +0000 ROA not before: Fri 17 Oct 2025 09:07:24 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 213802 IP address blocks: 43.255.52.0/24 maxlen: 24 43.255.53.0/24 maxlen: 24 43.255.54.0/24 maxlen: 24 43.255.55.0/24 maxlen: 24 2401:bbe0:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Oct 17 09:07:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47e71-a77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:ea:f8:08:f6:bd:e4:7d:15:7a:50:cb:2d: b7:09:1b:9a:6e:e6:98:52:8e:15:5e:fc:d6:c5:bb: 78:54:01:e9:b6:13:9e:f8:89:8a:d4:8f:09:14:a1: e9:e8:3d:64:6c:87:b5:4c:23:e2:ee:27:28:d8:f6: d6:bd:fc:c3:3d:72:48:c6:0a:08:60:7a:c9:62:43: 9b:6c:52:68:11:03:68:3f:8b:13:fe:5f:e3:34:f4: 57:09:22:d4:0b:de:31:22:e4:c5:07:35:52:f9:6c: 4e:1f:29:19:46:c2:09:5f:b4:32:00:68:ba:ec:b3: 23:be:b7:28:84:4f:e3:4e:8c:47:63:a8:00:ce:a9: dc:15:02:d4:6d:66:fd:b7:a7:7e:54:19:a8:5e:4b: 99:0e:80:0a:6a:99:51:30:66:43:7f:d7:c3:3f:06: c0:ab:08:d6:dd:a4:67:72:ff:89:7b:20:55:42:f5: d6:73:a8:5b:c8:a4:1c:eb:c7:ee:0e:fd:be:53:64: 0a:fc:e8:5a:7b:d2:35:f0:3f:58:9e:49:cc:2a:3b: a3:4d:0b:1b:95:5a:6e:f5:4f:13:16:4c:cb:b1:0c: 64:f1:1f:82:e6:17:de:b3:e1:de:f5:f8:30:7f:4b: d5:25:78:f9:7f:63:bd:62:33:a9:6f:50:37:b1:88: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:22:E7:77:5D:1C:02:16:BE:D1:C8:21:B5:F3:43:4F:96:CB:67:64 X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.52.0/22 IPv6: 2401:bbe0:400::/40 Signature Algorithm: sha256WithRSAEncryption 8d:8d:63:be:9a:90:ad:22:7b:9c:f9:80:bb:c3:77:7f:5a:a0: 4b:e3:74:be:86:9f:2d:3b:49:2c:e6:c4:70:59:73:ae:2c:85: b0:7e:38:42:55:72:9e:7b:96:6f:67:94:8b:ca:9e:41:46:10: cf:2a:45:1d:94:3a:30:72:d8:3f:8c:20:72:f3:b7:c5:7e:0f: 1b:46:5e:84:66:be:93:3a:d2:06:85:f8:31:80:a4:e1:66:55: 1e:1e:95:a6:0c:e4:aa:51:9c:e5:7b:21:47:b2:06:12:ba:4e: fd:f5:5f:0a:4b:25:47:c7:ba:a7:8e:40:e1:04:d6:fb:12:18: bb:c0:2a:17:67:19:70:e8:80:de:5d:30:86:62:4e:70:5a:f0: 4b:99:ab:0d:5a:aa:41:bf:ba:25:cb:49:42:af:1e:29:43:64: ed:10:0a:fe:c7:4f:39:d3:60:82:ff:90:d1:23:05:05:ef:d1: 77:46:b0:48:79:10:80:1b:37:db:c5:43:e8:92:ad:36:34:b2: f1:30:8f:fe:b2:b5:f5:a6:3f:dd:b8:21:40:11:6f:e0:6e:fd: 9a:69:26:53:d5:a5:4a:32:f3:32:aa:da:24:19:ba:40:6a:8a: fb:91:b0:79:6f:c8:a8:da:60:4d:c3:e4:d9:46:39:74:61:94: 10:22:ed:54 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjUxMDE3MDkwNzI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2U3MS1hNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0crq+Aj2veR9FXpQyy23CRuabuaYUo4VXvzWxbt4VAHpthOe+ImK1I8JFKHp 6D1kbIe1TCPi7ico2PbWvfzDPXJIxgoIYHrJYkObbFJoEQNoP4sT/l/jNPRXCSLU C94xIuTFBzVS+WxOHykZRsIJX7QyAGi67LMjvrcohE/jToxHY6gAzqncFQLUbWb9 t6d+VBmoXkuZDoAKaplRMGZDf9fDPwbAqwjW3aRncv+JeyBVQvXWc6hbyKQc68fu Dv2+U2QK/Ohae9I18D9YnknMKjujTQsblVpu9U8TFkzLsQxk8R+C5hfes+He9fgw f0vVJXj5f2O9YjOpb1A3sYh66wIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFKMi53dd HAIWvtHIIbXzQ0+Wy2dkMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZDOEYvRkEwRTA1QTQ2QjVBMTFFRkJDOTk5MjVDQzRGOUFFMDIvRTBDREEzNzY1 OTZFMTFGMEIxOUFGMjRCQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQCK/80MA4EAgACMAgDBgAkAbvgBDANBgkqhkiG9w0BAQsFAAOCAQEA jY1jvpqQrSJ7nPmAu8N3f1qgS+N0voafLTtJLObEcFlzriyFsH44QlVynnuWb2eU i8qeQUYQzypFHZQ6MHLYP4wgcvO3xX4PG0ZehGa+kzrSBoX4MYCk4WZVHh6Vpgzk qlGc5XshR7IGErpO/fVfCkslR8e6p45A4QTW+xIYu8AqF2cZcOiA3l0whmJOcFrw S5mrDVqqQb+6JctJQq8eKUNk7RAK/sdPOdNggv+Q0SMFBe/Rd0awSHkQgBs328VD 6JKtNjSy8TCP/rK19aY/3bghQBFv4G79mmkmU9WlSjLzMqraJBm6QGqK+5GweW/I qNpgTcPk2UY5dGGUECLtVA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:58 2026 by rpki-client