$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/2E834C9C719311F08B21BD17C4F9AE02.roa File: 2E834C9C719311F08B21BD17C4F9AE02.roa (raw, json) Hash identifier: S2srypxp7sEj5mgpvV1lWNa9dizgL57pVNGYl/RcGuM= Subject key identifier: 32:1D:51:DC:73:4E:85:86:DF:73:45:DA:24:5D:8F:48:B2:FF:07:50 Certificate issuer: /CN=A9172C46/serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A Certificate serial: 0A Authority key identifier: F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/2E834C9C719311F08B21BD17C4F9AE02.roa Signing time: Tue 05 Aug 2025 08:31:08 +0000 ROA not before: Tue 05 Aug 2025 08:31:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136181 IP address blocks: 163.223.176.0/24 maxlen: 24 163.223.177.0/24 maxlen: 24 2001:9600:2::/48 maxlen: 48 2001:9600:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C46, serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A Validity Not Before: Aug 5 08:31:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6891c14c-c5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:33:70:71:b6:ac:f3:ef:c9:32:6f:7b:0f: 37:d7:33:d8:d8:18:f2:d9:0d:3c:d0:ae:6e:92:5d: 47:f0:35:0f:68:74:e5:f2:68:7a:f6:28:52:4b:05: 4e:1d:4d:26:c4:2e:2e:c8:ec:e9:08:3d:01:80:b3: 60:3f:93:bf:8c:2b:3a:e1:22:76:23:b7:be:fa:68: 5f:5a:89:62:d3:3b:b2:27:de:a8:01:aa:07:d2:a0: 31:e6:4b:1c:e6:68:59:72:42:23:43:fa:4d:cb:0e: f6:33:2b:5f:1e:82:84:0a:26:5a:0e:20:89:21:2e: 0e:cd:af:05:a5:17:4a:32:6b:1e:3c:dc:34:60:e0: 2d:f8:b7:7f:1e:0c:b8:e6:55:3c:f1:ea:cd:d9:c8: 86:8f:3a:d7:a8:2e:62:c1:fc:6d:fe:94:bd:c3:ff: 5b:e1:c9:31:89:28:dd:2d:bc:3f:47:32:28:7e:36: 78:b6:a5:78:cb:40:c2:c1:86:07:d9:4d:43:9a:e0: 6f:0d:91:fa:5e:58:a1:0e:9c:1e:e3:57:f9:81:e2: 54:94:d7:2a:db:2c:bb:68:3a:85:26:70:26:a5:b1: 89:56:56:15:c8:86:a0:cc:e3:02:f9:61:51:84:64: 9e:05:90:b9:16:fb:df:f7:17:b8:64:4b:ca:49:2c: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1D:51:DC:73:4E:85:86:DF:73:45:DA:24:5D:8F:48:B2:FF:07:50 X509v3 Authority Key Identifier: keyid:F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/2E834C9C719311F08B21BD17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.176.0/23 IPv6: 2001:9600:2::/47 Signature Algorithm: sha256WithRSAEncryption bb:53:38:09:0d:38:73:72:cd:8d:73:19:eb:e6:dc:d5:74:c8: 2b:b4:02:3e:39:16:b0:25:72:6b:0b:75:9a:35:3a:e2:0e:01: 5c:3b:47:82:8b:ff:47:30:7b:87:64:14:7f:ea:85:88:3d:14: e1:2e:eb:0c:bf:7f:d2:8e:1a:e1:96:0d:2c:f4:8a:9d:5e:36: 8e:03:30:4c:f6:5e:46:44:2f:26:00:b6:02:f8:ce:c0:79:c1: e3:de:4a:3c:ab:24:90:36:ee:14:82:a1:d9:54:bb:1e:fc:46: d7:b4:33:7d:f9:32:d1:3a:08:69:4c:ff:a9:bb:94:f4:d6:3f: 75:69:b5:97:ac:28:dd:2c:96:25:69:e1:6c:98:b1:a1:9d:3c: e1:aa:32:fe:b1:dc:6d:10:51:82:9c:d7:16:fb:d3:a3:3d:8c: 74:a6:47:92:48:22:c7:9c:6c:fb:41:d3:40:dc:db:dd:32:21: ce:1e:9f:29:14:fd:44:ee:61:7f:e2:f0:dd:dd:32:3d:a0:5c: 79:32:53:1f:d8:0b:cb:74:cd:9b:d2:b1:79:fd:a1:b4:d2:90: ca:bb:8f:3a:74:05:74:38:8a:f0:e7:4e:24:11:be:17:22:14: 97:0d:62:6c:1e:01:de:7e:24:09:96:d3:fd:06:13:c0:67:d6: 2f:a2:a9:11 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkM0NjExMC8GA1UEBRMoRjAzREZEM0IxNjA2NDU0Q0ExQkE4NjkwM0U3OUFEQTcw NTBCQTE2QTAeFw0yNTA4MDUwODMxMDhaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OTFjMTRjLWM1YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBkTNwcbas8+/JMm97DzfXM9jYGPLZDTzQrm6SXUfwNQ9odOXyaHr2KFJLBU4d TSbELi7I7OkIPQGAs2A/k7+MKzrhInYjt776aF9aiWLTO7In3qgBqgfSoDHmSxzm aFlyQiND+k3LDvYzK18egoQKJloOIIkhLg7NrwWlF0oyax483DRg4C34t38eDLjm VTzx6s3ZyIaPOteoLmLB/G3+lL3D/1vhyTGJKN0tvD9HMih+Nni2pXjLQMLBhgfZ TUOa4G8NkfpeWKEOnB7jV/mB4lSU1yrbLLtoOoUmcCalsYlWVhXIhqDM4wL5YVGE ZJ4FkLkW+9/3F7hkS8pJLN4pAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUMh1R3HNO hYbfc0XaJF2PSLL/B1AwHwYDVR0jBBgwFoAU8D39OxYGRUyhuoaQPnmtpwULoWow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQzQ2LzkwMDM4OUZFNzEw RDExRjA4MDgzNDUyRkM0RjlBRTAyLzhEMzlPeFlHUlV5aHVvYVFQbm10cHdVTG9X by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEQzOU94WUdSVXlodW9hUVBubXRwd1VMb1dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM0Ni85MDAzODlGRTcxMEQxMUYwODA4MzQ1MkZDNEY5QUUwMi8yRTgzNEM5Qzcx OTMxMUYwOEIyMUJEMTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaPfsDAPBAIAAjAJAwcBIAGWAAACMA0GCSqGSIb3DQEBCwUA A4IBAQC7UzgJDThzcs2Ncxnr5tzVdMgrtAI+ORawJXJrC3WaNTriDgFcO0eCi/9H MHuHZBR/6oWIPRThLusMv3/Sjhrhlg0s9IqdXjaOAzBM9l5GRC8mALYC+M7AecHj 3ko8qySQNu4UgqHZVLse/EbXtDN9+TLROghpTP+pu5T01j91abWXrCjdLJYlaeFs mLGhnTzhqjL+sdxtEFGCnNcW+9OjPYx0pkeSSCLHnGz7QdNA3NvdMiHOHp8pFP1E 7mF/4vDd3TI9oFx5MlMf2AvLdM2b0rF5/aG00pDKu486dAV0OIrw504kEb4XIhSX DWJsHgHefiQJltP9BhPAZ9YvoqkR -----END CERTIFICATE-----Generated at Sun Aug 24 05:04:36 2025 by rpki-client