$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/4A27AA70305B11F08E81A33BC4F9AE02.roa File: 4A27AA70305B11F08E81A33BC4F9AE02.roa (raw, json) Hash identifier: 6gmB7e2/TTgQSWx3VnY7mRENxpPMfy8g2P+EnTlXmso= Subject key identifier: 58:E9:FB:4F:57:12:67:59:88:D6:0D:D5:42:8C:5D:6E:ED:C3:8B:79 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 044E Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/4A27AA70305B11F08E81A33BC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:04:25 +0000 ROA not before: Wed 14 May 2025 00:35:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32043 IP address blocks: 43.243.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 14 00:35:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a47fa9-2eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:38:10:bc:7e:3d:ba:d6:d7:14:7b:3c:ef: 18:b3:5d:20:6c:8d:f0:12:77:3f:3b:28:f6:26:59: f0:f2:a0:f8:87:2e:d8:50:f4:d2:1a:61:ae:b6:08: 83:a9:ca:86:ca:27:80:64:f8:95:c8:b0:8e:cd:a4: a1:4b:4d:02:a8:36:06:40:3e:e4:74:02:20:27:e3: 49:0a:26:70:5c:15:63:6e:7f:cc:03:81:2f:b0:81: 7a:da:dd:e0:88:c7:aa:69:dc:8e:3c:02:95:6f:17: 59:b9:b6:72:6a:b9:15:7f:95:c0:ac:34:c6:71:77: 24:b6:78:8a:dd:19:92:90:c7:b7:93:9a:7a:6c:53: 05:b0:15:ca:fd:63:8d:76:2e:73:a0:b0:7d:f2:a9: f6:ca:d3:75:b2:e5:3a:7d:68:18:ce:e7:bf:02:dd: 25:ba:db:40:8f:88:4b:5a:9d:1f:84:69:d8:e8:0d: 83:ae:9b:2a:ab:24:6a:b8:2b:f7:1f:40:1d:a6:29: ad:cf:58:99:56:9c:02:f7:27:aa:12:aa:43:81:79: 80:b2:e8:a2:49:8d:2c:36:6e:67:0d:5e:3d:ed:95: 6d:87:0c:19:2b:d8:f2:6d:f2:e5:20:32:97:22:79: 61:89:08:b6:09:e6:93:c9:62:08:97:6d:f2:fc:7a: fe:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E9:FB:4F:57:12:67:59:88:D6:0D:D5:42:8C:5D:6E:ED:C3:8B:79 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/4A27AA70305B11F08E81A33BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.194.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:85:e9:c7:9b:f6:79:23:b0:89:f7:d0:f8:dd:a0:e8:4f:16: cf:85:f4:60:b9:8d:49:4a:f7:df:7e:c6:17:61:5e:1c:ec:0f: b0:7b:76:33:45:6f:50:f2:87:91:aa:a8:33:f1:44:19:4e:fe: 21:16:b9:79:68:5b:4c:14:89:9b:ad:c3:50:5c:1b:a0:bb:a5: 1b:d9:2b:b1:3f:b3:29:fb:aa:d2:82:65:3c:1d:a2:f6:4e:eb: e1:b7:4b:60:97:72:f9:fb:ec:e2:a5:ab:38:d0:5b:8f:d9:2a: 28:80:4a:0b:ff:ca:92:68:39:7b:31:68:3e:04:05:ec:80:c7: 64:0c:75:d6:b9:6b:21:7f:3f:e6:2a:29:84:92:de:4f:63:55: e4:b0:6a:88:f4:d5:85:7a:b0:6d:fc:85:14:9a:4c:31:7f:cf: 8c:84:d9:3d:dd:1b:8b:68:36:87:ef:79:3e:65:db:e9:06:ca: 4e:71:19:61:e3:b2:7a:b2:49:6b:ec:8f:53:38:59:31:cf:44: 3e:ea:a0:ed:39:bb:ba:a5:65:b0:8e:7d:ba:f6:4c:94:69:c8: fa:0c:dc:7f:b8:3a:85:29:8a:55:13:e7:57:e9:7f:a6:44:21: 5e:e2:3a:20:c8:58:75:b5:40:45:59:d3:2c:d6:f9:5b:26:85: a7:06:44:39 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNTE0MDAzNTA5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2ZhOS0yZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14A4ELx+PbrW1xR7PO8Ys10gbI3wEnc/Oyj2Jlnw8qD4hy7YUPTSGmGutgiD qcqGyieAZPiVyLCOzaShS00CqDYGQD7kdAIgJ+NJCiZwXBVjbn/MA4EvsIF62t3g iMeqadyOPAKVbxdZubZyarkVf5XArDTGcXcktniK3RmSkMe3k5p6bFMFsBXK/WON di5zoLB98qn2ytN1suU6fWgYzue/At0luttAj4hLWp0fhGnY6A2DrpsqqyRquCv3 H0Adpimtz1iZVpwC9yeqEqpDgXmAsuiiSY0sNm5nDV497ZVthwwZK9jybfLlIDKX InlhiQi2CeaTyWIIl23y/Hr+dQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFjp+09X EmdZiNYN1UKMXW7tw4t5MB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvNEEyN0FBNzAz MDVCMTFGMDhFODFBMzNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK/PCMA0GCSqGSIb3DQEBCwUAA4IBAQCdhenHm/Z5I7CJ99D43aDo TxbPhfRguY1JSvfffsYXYV4c7A+we3YzRW9Q8oeRqqgz8UQZTv4hFrl5aFtMFImb rcNQXBugu6Ub2SuxP7Mp+6rSgmU8HaL2Tuvht0tgl3L5++zipas40FuP2SoogEoL /8qSaDl7MWg+BAXsgMdkDHXWuWshfz/mKimEkt5PY1XksGqI9NWFerBt/IUUmkwx f8+MhNk93RuLaDaH73k+ZdvpBspOcRlh47J6sklr7I9TOFkxz0Q+6qDtObu6pWWw jn269kyUacj6DNx/uDqFKYpVE+dX6X+mRCFe4jogyFh1tUBFWdMs1vlbJoWnBkQ5 -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:25 2026 by rpki-client