$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/4A27AA70305B11F08E81A33BC4F9AE02.roa File: 4A27AA70305B11F08E81A33BC4F9AE02.roa (raw, json) Hash identifier: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM= Subject key identifier: F3:8C:17:31:7B:9A:0E:86:6F:90:E6:87:5D:6D:9C:CD:CC:98:15:E1 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 03A7 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/4A27AA70305B11F08E81A33BC4F9AE02.roa Signing time: Wed 14 May 2025 00:35:09 +0000 ROA not before: Wed 14 May 2025 00:35:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32043 IP address blocks: 43.243.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 14 00:35:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6823e53d-d479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5b:fe:ed:d3:59:5f:67:76:65:21:1a:3f:fa: 85:04:f7:b1:33:13:91:13:23:30:bd:bd:9a:03:65: 11:48:f6:94:2e:ad:cc:a7:c9:e0:6f:cb:87:42:93: 39:57:97:06:3c:68:c6:8b:ef:62:c8:0c:c4:65:ea: 72:2f:9a:60:20:03:c7:65:3b:19:a5:e4:5c:ef:4d: 24:10:cb:47:32:68:a7:03:fe:68:e7:1a:4f:60:a3: 79:c9:a1:1d:b5:9e:69:a0:74:08:99:af:28:46:e6: 42:4f:7f:5b:b9:07:ad:d8:60:2b:ed:81:fa:5f:b1: ed:96:6e:fb:32:d6:e4:db:68:5f:8d:db:ae:ac:3b: e9:51:33:f5:87:d2:55:ea:4e:de:2d:37:f4:c8:93: 85:41:08:b6:1c:df:4d:bd:6b:62:88:7d:20:b5:c5: 7c:d4:51:f1:c3:a3:dd:53:c4:5b:d3:81:b9:f8:12: ac:71:0d:74:be:5f:28:49:4a:f2:a4:e7:72:b9:f3: 5d:6e:73:b2:1b:bb:e0:5e:a5:21:7b:a0:19:9a:b7: e1:8c:18:4f:e7:99:7a:65:11:fa:7f:bd:2b:12:ca: 93:10:14:21:a6:9e:88:3d:81:f8:74:54:83:47:5c: c4:fb:f0:92:99:60:44:b5:e6:5b:c2:21:5d:d9:e6: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8C:17:31:7B:9A:0E:86:6F:90:E6:87:5D:6D:9C:CD:CC:98:15:E1 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/4A27AA70305B11F08E81A33BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.194.0/24 Signature Algorithm: sha256WithRSAEncryption a9:ec:c5:ca:6f:e3:dd:0c:b0:b3:df:19:be:2e:76:60:f3:d0: 81:fe:35:b0:76:1e:11:78:47:bc:a8:42:53:d1:da:b2:a3:e5: ab:b9:3d:ab:34:42:3d:23:61:1b:d6:eb:7e:15:15:4e:30:c8: 64:fe:08:52:e5:23:1e:30:bd:ee:9b:c8:44:f9:a1:f0:ad:88: f3:76:19:23:ab:9b:13:ec:0f:2d:c5:1a:56:4c:a8:24:46:29: 14:f5:4d:71:23:50:15:01:9a:ef:9e:c7:79:db:c7:d2:b8:03: 17:c1:7c:96:45:9d:56:fd:06:7c:8c:ce:f2:f9:aa:a6:42:12: 7d:fc:bb:3d:0f:ec:89:d5:50:54:a2:bc:36:6f:75:c9:da:c1: 33:fe:cf:34:a9:9f:ac:ec:9d:54:19:c7:4d:c7:41:54:81:a5: ce:52:cf:28:af:54:7c:8a:93:3b:74:6b:bc:40:bc:1e:d5:6e: d7:25:d9:61:3f:11:dd:8c:31:71:0f:4e:64:0d:92:69:00:7e: c1:6e:71:bb:fc:29:3e:a4:ac:f2:2d:ae:1f:b4:62:99:e0:ca: 31:86:16:c0:84:96:df:99:0e:11:06:e4:93:94:24:bf:0d:b0: b8:5b:f6:81:d4:cc:5a:77:22:60:06:7b:66:c4:ca:ae:c2:d0: a8:68:6c:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNTE0MDAzNTA5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIzZTUzZC1kNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51v+7dNZX2d2ZSEaP/qFBPexMxOREyMwvb2aA2URSPaULq3Mp8ngb8uHQpM5 V5cGPGjGi+9iyAzEZepyL5pgIAPHZTsZpeRc700kEMtHMminA/5o5xpPYKN5yaEd tZ5poHQIma8oRuZCT39buQet2GAr7YH6X7Htlm77Mtbk22hfjduurDvpUTP1h9JV 6k7eLTf0yJOFQQi2HN9NvWtiiH0gtcV81FHxw6PdU8Rb04G5+BKscQ10vl8oSUry pOdyufNdbnOyG7vgXqUhe6AZmrfhjBhP55l6ZRH6f70rEsqTEBQhpp6IPYH4dFSD R1zE+/CSmWBEteZbwiFd2eYP2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPOMFzF7 mg6Gb5Dmh11tnM3MmBXhMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvNEEyN0FBNzAz MDVCMTFGMDhFODFBMzNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr88IwDQYJKoZIhvcNAQELBQADggEBAKnsxcpv490MsLPf Gb4udmDz0IH+NbB2HhF4R7yoQlPR2rKj5au5Pas0Qj0jYRvW634VFU4wyGT+CFLl Ix4wve6byET5ofCtiPN2GSOrmxPsDy3FGlZMqCRGKRT1TXEjUBUBmu+ex3nbx9K4 AxfBfJZFnVb9BnyMzvL5qqZCEn38uz0P7InVUFSivDZvdcnawTP+zzSpn6zsnVQZ x03HQVSBpc5SzyivVHyKkzt0a7xAvB7Vbtcl2WE/Ed2MMXEPTmQNkmkAfsFucbv8 KT6krPItrh+0YpngyjGGFsCElt+ZDhEG5JOUJL8NsLhb9oHUzFp3ImAGe2bEyq7C 0KhobMA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:28:24 2025 by rpki-client