$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/2DAB7B74BE4211EE970F4140C4F9AE02.roa File: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (raw, json) Hash identifier: QKv7DuW7py1p1eN4Lvl//mFlbdahxq73NkUDVPwAcGE= Subject key identifier: 5F:67:5D:60:D6:C8:29:E5:AB:19:7D:EB:48:9B:0F:75:43:F8:A7:27 Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 01C5 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/2DAB7B74BE4211EE970F4140C4F9AE02.roa Signing time: Sun 03 May 2026 04:36:18 +0000 ROA not before: Sun 03 May 2026 04:36:18 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 45442 IP address blocks: 164.75.64.0/20 maxlen: 20 164.75.96.0/20 maxlen: 20 164.75.112.0/20 maxlen: 20 164.75.128.0/24 maxlen: 24 164.75.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: May 3 04:36:18 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69f6d0c2-ed5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:e3:36:c1:53:45:07:ae:42:ec:fb:c1:1a: 8e:87:60:65:a2:3e:11:72:78:f2:8f:82:07:27:a5: db:f2:e4:37:47:e8:cd:3e:81:a1:67:13:f1:65:11: 2d:69:9c:4a:a7:04:b1:08:30:aa:be:6a:d5:0c:c0: 9d:77:aa:04:b1:3b:41:0d:c8:52:88:95:c0:5f:6c: 7e:08:1c:ed:a3:2e:bd:70:4f:ec:0a:d5:bf:e6:34: 15:2a:97:d2:83:a7:4e:ec:7d:2a:dd:45:27:97:1a: 08:d4:4c:d1:a7:9f:10:c4:b0:77:3f:68:13:b7:15: 90:ab:a2:e8:69:d6:d5:1f:52:bb:0d:74:84:08:7a: 7f:69:0c:49:4a:74:23:e6:ea:f2:3c:8b:c2:d9:2c: 0f:9b:5b:2a:de:3a:70:96:ad:ed:f7:ec:c2:d9:94: 82:ae:c1:cb:ca:42:bf:4d:60:2e:ca:14:09:35:9c: 26:ff:37:5d:d6:1e:75:4b:46:fe:83:4e:ea:df:72: eb:14:08:04:19:d8:f2:6f:a2:d6:d8:3c:74:fa:9e: 95:49:e1:23:3e:b6:56:97:73:17:6d:8d:e3:02:c3: 73:4a:bd:6f:5b:a4:07:24:33:71:b1:8b:28:ae:5b: df:7d:5d:ed:7c:19:f9:49:d9:b5:52:60:b3:62:bf: 4b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:67:5D:60:D6:C8:29:E5:AB:19:7D:EB:48:9B:0F:75:43:F8:A7:27 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/2DAB7B74BE4211EE970F4140C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 164.75.64.0/20 164.75.96.0-164.75.128.255 164.75.143.0/24 Signature Algorithm: sha256WithRSAEncryption 29:b5:f0:90:6e:a6:28:57:5c:99:96:76:f0:49:58:62:40:da: 01:f1:2c:e4:11:52:8d:fc:11:e2:eb:7b:55:a9:fa:9a:b2:e6: f1:0e:85:dc:51:09:a8:c3:7d:2f:4e:ee:df:1e:4d:14:4f:2e: a8:b9:36:76:80:01:8d:53:a6:b2:eb:a4:34:0b:e1:1b:fc:34: 8c:c9:78:09:00:d6:bd:dc:51:83:08:06:dd:83:9c:21:66:12: da:bb:31:f4:21:1b:7d:5e:00:d4:97:97:c5:70:0f:45:79:04: 55:6a:1c:a8:83:c8:dd:71:d6:d6:f3:76:92:34:03:34:41:99: 9f:48:bc:98:b6:1d:97:4b:b3:d7:d5:21:29:d7:e2:4a:c8:08: 32:14:f6:3c:8c:76:28:77:f3:fb:7f:e5:42:d3:87:4a:a0:25: fc:66:f9:3b:3f:b9:a2:2f:48:0c:1d:4c:b2:9c:cc:11:44:f8: 58:68:04:75:72:c5:6f:7f:4b:d9:a3:2e:f1:2c:aa:7e:03:a9: 3f:13:31:b7:e1:c8:52:e9:8e:af:56:4c:f9:5b:04:a9:09:b7: e3:9d:f4:17:9d:5d:2b:84:89:c1:25:80:69:f5:c7:20:10:d2: 14:ab:a2:69:9e:a3:e7:6b:26:fb:ae:57:bc:e6:78:f8:ff:92: 75:25:f2:63 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjYwNTAzMDQzNjE4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY2ZDBjMi1lZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0LjNsFTRQeuQuz7wRqOh2Bloj4Rcnjyj4IHJ6Xb8uQ3R+jNPoGhZxPxZREt aZxKpwSxCDCqvmrVDMCdd6oEsTtBDchSiJXAX2x+CBztoy69cE/sCtW/5jQVKpfS g6dO7H0q3UUnlxoI1EzRp58QxLB3P2gTtxWQq6LoadbVH1K7DXSECHp/aQxJSnQj 5uryPIvC2SwPm1sq3jpwlq3t9+zC2ZSCrsHLykK/TWAuyhQJNZwm/zdd1h51S0b+ g07q33LrFAgEGdjyb6LW2Dx0+p6VSeEjPrZWl3MXbY3jAsNzSr1vW6QHJDNxsYso rlvffV3tfBn5Sdm1UmCzYr9LKwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFF9nXWDW yCnlqxl960ibD3VD+KcnMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJCRDMvRTgwRjEzN0NCOTkyMTFFRUFCOUYxRDE5QzRGOUFFMDIvMkRBQjdCNzRC RTQyMTFFRTk3MEY0MTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQEpEtAMAwDBAWkS2ADBACkS4ADBACkS48wDQYJKoZIhvcNAQELBQAD ggEBACm18JBupihXXJmWdvBJWGJA2gHxLOQRUo38EeLre1Wp+pqy5vEOhdxRCajD fS9O7t8eTRRPLqi5NnaAAY1TprLrpDQL4Rv8NIzJeAkA1r3cUYMIBt2DnCFmEtq7 MfQhG31eANSXl8VwD0V5BFVqHKiDyN1x1tbzdpI0AzRBmZ9IvJi2HZdLs9fVISnX 4krICDIU9jyMdih38/t/5ULTh0qgJfxm+Ts/uaIvSAwdTLKczBFE+FhoBHVyxW9/ S9mjLvEsqn4DqT8TMbfhyFLpjq9WTPlbBKkJt+Od9BedXSuEicElgGn1xyAQ0hSr ommeo+drJvuuV7zmePj/knUl8mM= -----END CERTIFICATE-----Generated at Wed May 13 13:52:40 2026 by rpki-client