$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/72C9BE36950211EFAC892C5EC4F9AE02.roa File: 72C9BE36950211EFAC892C5EC4F9AE02.roa (raw, json) Hash identifier: v0jF8WeFZftcu6PScRsBenWIvu93y5DuxgFE9ecCGBw= Subject key identifier: 3B:91:C8:BA:4D:CB:15:B3:57:04:73:76:46:97:2E:83:37:DF:EA:15 Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0C9A Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/72C9BE36950211EFAC892C5EC4F9AE02.roa Signing time: Thu 16 Jul 2026 22:23:05 +0000 ROA not before: Thu 16 Jul 2026 22:23:05 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 18004 IP address blocks: 43.152.164.0/24 maxlen: 24 43.152.165.0/24 maxlen: 24 43.175.123.0/24 maxlen: 24 43.175.198.0/24 maxlen: 24 43.175.199.0/24 maxlen: 24 43.175.200.0/24 maxlen: 24 43.175.201.0/24 maxlen: 24 240d:c010:11b::/48 maxlen: 48 240d:c010:13e::/48 maxlen: 48 240d:c010:13f::/48 maxlen: 48 240d:c010:140::/48 maxlen: 48 240d:c010:141::/48 maxlen: 48 240d:c010:151::/48 maxlen: 48 240d:c010:152::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Jul 16 22:23:05 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a5959c8-1e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:c8:11:68:8b:12:a9:09:03:02:fd:18:c8: bc:ed:1c:bf:37:67:36:66:d1:46:63:02:37:bc:46: 99:e5:4f:ae:c3:19:b5:f4:c1:ff:14:c0:f3:75:a0: c8:c4:81:41:56:06:1c:08:65:2b:1c:de:46:e9:47: 64:ab:ee:c7:eb:d4:ae:dd:be:30:c4:eb:2a:69:5b: 21:a2:50:d0:f8:ea:02:af:17:69:51:90:68:82:bf: bd:43:12:46:5e:f0:bb:fb:59:c3:99:39:79:0a:ee: d1:0d:c9:79:9f:27:4a:1d:b4:7c:48:c2:9e:82:f8: 45:b1:3b:40:ac:9e:9b:8a:61:32:6f:a7:84:a3:5c: 16:e1:66:39:2a:b2:a2:ad:ab:be:db:23:74:ca:ce: 9f:d5:20:1c:8e:f1:0c:08:3d:ee:d9:7d:58:4c:f1: c7:a5:41:93:48:22:3c:10:71:05:8a:a8:87:6a:31: 82:6f:25:a6:b8:be:5b:34:ae:24:cd:cb:9f:b5:3a: 3c:12:0d:69:68:53:46:31:45:a4:0a:87:53:2e:2e: 19:26:c4:f2:08:51:53:d7:81:25:86:8d:f4:f3:c4: e7:3e:93:dc:2d:d7:13:07:80:6e:68:1d:39:43:f4: ee:ba:99:b3:57:b6:b0:9a:b5:c6:25:ad:39:3a:48: 2c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:91:C8:BA:4D:CB:15:B3:57:04:73:76:46:97:2E:83:37:DF:EA:15 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/72C9BE36950211EFAC892C5EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.152.164.0/23 43.175.123.0/24 43.175.198.0-43.175.201.255 IPv6: 240d:c010:11b::/48 240d:c010:13e::-240d:c010:141:ffff:ffff:ffff:ffff:ffff 240d:c010:151::-240d:c010:152:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 85:a2:c9:4a:49:aa:cc:53:b8:36:bc:8d:49:71:27:fb:6c:66: 9c:ed:c9:d5:d2:81:9b:82:63:f5:c0:05:cb:22:9b:a7:45:3c: de:66:cf:64:87:63:6c:65:3b:a5:6b:43:04:80:44:cf:3e:cb: 4a:33:43:58:b1:1d:65:c5:67:db:1d:93:30:26:e7:0a:19:23: ea:70:4f:68:e0:94:3e:20:07:e1:48:b3:b8:a8:c5:bf:00:9a: a7:b2:06:cb:fd:5b:da:32:e3:de:85:1d:32:98:05:70:9b:13: 85:e2:76:09:ab:33:ad:05:e2:74:09:33:25:9f:00:86:5d:db: 40:6e:73:bc:44:da:0a:d9:ce:11:35:4e:fe:9b:ec:53:ff:e7: 1d:3e:1a:1e:75:5e:04:d5:54:dc:13:13:09:77:41:22:44:98: cd:bb:97:a7:f6:0e:fc:3d:5e:1e:b0:9e:60:20:4b:df:cb:91: 3a:42:06:93:de:dc:75:e1:33:c8:99:3b:c6:17:7e:07:42:3e: 87:fc:84:13:b7:58:1a:a2:44:a1:22:bf:a4:d5:44:0f:62:29: fa:35:63:30:69:ac:cb:25:46:96:b8:0d:33:c1:14:cd:5a:f6: c3:d3:ef:05:68:9c:ce:47:13:74:92:63:01:77:dc:ca:b8:25: 53:8b:8a:9b -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYwNzE2MjIyMzA1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU5NTljOC0xZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3vIEWiLEqkJAwL9GMi87Ry/N2c2ZtFGYwI3vEaZ5U+uwxm19MH/FMDzdaDI xIFBVgYcCGUrHN5G6Udkq+7H69Su3b4wxOsqaVsholDQ+OoCrxdpUZBogr+9QxJG XvC7+1nDmTl5Cu7RDcl5nydKHbR8SMKegvhFsTtArJ6bimEyb6eEo1wW4WY5KrKi rau+2yN0ys6f1SAcjvEMCD3u2X1YTPHHpUGTSCI8EHEFiqiHajGCbyWmuL5bNK4k zcuftTo8Eg1paFNGMUWkCodTLi4ZJsTyCFFT14Elho3088TnPpPcLdcTB4BuaB05 Q/TuupmzV7awmrXGJa05OkgsxQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDuRyLpN yxWzVwRzdkaXLoM33+oVMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvNzJDOUJFMzY5 NTAyMTFFRkFDODkyQzVFQzRGOUFFMDIucm9hMGwGCCsGAQUFBwEHAQH/BF0wWzAg BAIAATAaAwQBK5ikAwQAK697MAwDBAErr8YDBAErr8gwNwQCAAIwMQMHACQNwBAB GzASAwcBJA3AEAE+AwcBJA3AEAFAMBIDBwAkDcAQAVEDBwAkDcAQAVIwDQYJKoZI hvcNAQELBQADggEBAIWiyUpJqsxTuDa8jUlxJ/tsZpztydXSgZuCY/XABcsim6dF PN5mz2SHY2xlO6VrQwSARM8+y0ozQ1ixHWXFZ9sdkzAm5woZI+pwT2jglD4gB+FI s7ioxb8AmqeyBsv9W9oy496FHTKYBXCbE4XidgmrM60F4nQJMyWfAIZd20Buc7xE 2grZzhE1Tv6b7FP/5x0+Gh51XgTVVNwTEwl3QSJEmM27l6f2Dvw9Xh6wnmAgS9/L kTpCBpPe3HXhM8iZO8YXfgdCPof8hBO3WBqiRKEiv6TVRA9iKfo1YzBprMslRpa4 DTPBFM1a9sPT7wVonM5HE3SSYwF33Mq4JVOLips= -----END CERTIFICATE-----Generated at Fri Jul 24 05:40:32 2026 by rpki-client