$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/2E5B28FC1E9611F098931D57C4F9AE02.roa File: 2E5B28FC1E9611F098931D57C4F9AE02.roa (raw, json) Hash identifier: PvFqtplY41UVVf2R0ennX4p3dtRWDb3fEF8YqwmTnCg= Subject key identifier: 6B:68:4E:E6:55:8F:52:49:AC:9E:F5:F9:D8:15:F5:03:BF:3B:7C:8F Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0368 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/2E5B28FC1E9611F098931D57C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:37:19 +0000 ROA not before: Mon 21 Apr 2025 09:51:22 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 18186 IP address blocks: 43.248.173.0/24 maxlen: 24 43.248.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Apr 21 09:51:22 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4794f-d0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:76:62:a8:f0:06:de:46:33:c4:51:82:b8: b1:3f:2c:5c:10:b2:50:bb:54:68:27:09:6f:0e:24: 84:2e:6a:5b:49:2f:ef:1a:0e:95:c9:61:80:0c:ea: 2f:6c:9e:f5:7b:67:9d:fa:6e:1b:9b:eb:3a:dc:c1: da:3d:be:87:0b:75:e3:af:e3:f8:18:3c:61:ab:2c: ec:0a:68:6e:f0:5d:ea:4d:42:e1:7c:fd:74:8b:21: 4f:a1:ba:15:4c:c0:b6:c4:bb:0e:1c:4d:67:f4:c6: 62:fa:c6:cc:db:93:02:c7:71:cf:38:52:8f:90:61: 84:39:44:51:72:51:da:ad:60:4c:e5:b8:60:5d:64: 7f:4f:3d:6f:14:42:07:d2:53:6e:5e:e0:d4:33:5e: f2:12:eb:05:a8:f2:85:83:3f:1c:50:b1:7c:25:68: 45:b5:ee:6d:72:30:59:32:35:1a:3a:cc:0d:b5:cb: a8:43:50:6f:31:6e:37:8c:25:f8:3e:53:ff:52:67: d8:56:29:12:7f:88:68:4e:ad:a4:88:05:7d:7e:1b: 61:75:2b:92:7a:86:d3:d3:dd:b5:15:a1:05:dc:27: f4:b7:55:7b:5d:6c:21:cf:41:5f:23:0b:ca:f6:44: fe:c7:e5:03:d0:76:a3:1a:7c:07:0b:83:fc:12:d3: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:68:4E:E6:55:8F:52:49:AC:9E:F5:F9:D8:15:F5:03:BF:3B:7C:8F X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/2E5B28FC1E9611F098931D57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.173.0/24 43.248.175.0/24 Signature Algorithm: sha256WithRSAEncryption 88:bc:f7:ee:81:77:d8:ff:3c:7f:1c:47:88:3b:e1:9b:5a:0b: dd:16:a4:79:34:21:70:73:05:6c:2f:97:43:f8:2c:d5:5a:83: 6e:16:24:3b:e0:48:af:21:82:8b:9f:86:34:00:8e:92:a6:19: 5a:3e:dc:58:01:f9:98:e4:94:fc:9d:87:44:04:c1:76:bc:e2: cf:d1:7e:c8:a6:d7:fe:97:7e:02:97:53:1d:a6:53:5a:b2:26: f8:ab:79:19:f4:76:c6:38:6f:f3:87:7b:f8:19:19:bd:0f:75: c8:da:1c:1f:ad:f3:97:1d:5c:13:f7:5d:39:e3:28:ef:74:d8: a9:8d:77:4a:55:16:54:1f:e6:13:73:56:31:3f:be:72:11:16: 5e:06:9f:1c:4d:a9:59:d1:cf:28:4f:56:32:07:6e:8d:5b:d9: 60:de:a3:b1:86:e2:cc:aa:9e:09:49:f0:20:72:c5:6a:8c:f4: dc:1b:64:d3:e1:d6:26:5d:27:c2:89:bc:a0:b2:87:9c:84:35: 16:22:62:b9:d5:fa:e6:15:bf:3f:79:a7:71:98:1f:52:78:8f: fd:c9:6c:c4:e8:87:fd:97:00:57:12:29:66:bf:63:b9:34:47: ea:63:17:01:5a:1a:66:04:12:35:df:76:c2:35:c6:d4:da:31: f5:dd:1d:46 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNDIxMDk1MTIyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzk0Zi1kMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnh2YqjwBt5GM8RRgrixPyxcELJQu1RoJwlvDiSELmpbSS/vGg6VyWGADOov bJ71e2ed+m4bm+s63MHaPb6HC3Xjr+P4GDxhqyzsCmhu8F3qTULhfP10iyFPoboV TMC2xLsOHE1n9MZi+sbM25MCx3HPOFKPkGGEOURRclHarWBM5bhgXWR/Tz1vFEIH 0lNuXuDUM17yEusFqPKFgz8cULF8JWhFte5tcjBZMjUaOswNtcuoQ1BvMW43jCX4 PlP/UmfYVikSf4hoTq2kiAV9fhthdSuSeobT0921FaEF3Cf0t1V7XWwhz0FfIwvK 9kT+x+UD0HajGnwHC4P8EtOr7QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGtoTuZV j1JJrJ71+dgV9QO/O3yPMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvMkU1QjI4RkMx RTk2MTFGMDk4OTMxRDU3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK/itAwQAK/ivMA0GCSqGSIb3DQEBCwUAA4IBAQCIvPfugXfY/zx/ HEeIO+GbWgvdFqR5NCFwcwVsL5dD+CzVWoNuFiQ74EivIYKLn4Y0AI6SphlaPtxY AfmY5JT8nYdEBMF2vOLP0X7Iptf+l34Cl1MdplNasib4q3kZ9HbGOG/zh3v4GRm9 D3XI2hwfrfOXHVwT91054yjvdNipjXdKVRZUH+YTc1YxP75yERZeBp8cTalZ0c8o T1YyB26NW9lg3qOxhuLMqp4JSfAgcsVqjPTcG2TT4dYmXSfCibygsoechDUWImK5 1frmFb8/eadxmB9SeI/9yWzE6If9lwBXEilmv2O5NEfqYxcBWhpmBBI133bCNcbU 2jH13R1G -----END CERTIFICATE-----Generated at Thu Mar 26 07:52:42 2026 by rpki-client