$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa File: E0CDA376596E11F0B19AF24BC4F9AE02.roa (raw, json) Hash identifier: FJSeI7xu3Suas48K0kKSfoAbigbE/yhUfYxCE1a9B6A= Subject key identifier: 9C:91:70:33:93:4E:F1:71:40:B1:69:59:87:9E:8A:1B:E3:F1:60:B2 Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: 011B Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa Signing time: Fri 17 Oct 2025 09:07:25 +0000 ROA not before: Fri 17 Oct 2025 09:07:24 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 213802 IP address blocks: 43.255.52.0/24 maxlen: 24 43.255.53.0/24 maxlen: 24 43.255.54.0/24 maxlen: 24 43.255.55.0/24 maxlen: 24 2401:bbe0:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Oct 17 09:07:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f2074c-f683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:33:ca:b6:0d:8a:0f:97:cd:07:e3:89:97: c9:d2:43:31:44:81:5c:b4:07:a6:30:91:08:16:6d: e4:f1:cd:d7:ae:c7:24:98:83:ea:80:cf:02:1e:3b: 00:90:6c:55:1a:59:9e:49:90:ce:19:ad:eb:b3:d4: e4:1f:d5:e7:d4:43:47:de:b8:87:64:e1:df:69:b3: d9:19:5e:91:3a:79:83:82:dd:14:8f:5c:45:da:d3: c7:39:c9:f4:76:87:b5:e3:ea:28:33:6a:ac:56:ef: 89:dd:a7:65:f8:85:92:94:b5:21:7d:30:c1:3d:29: 49:31:ce:12:f0:0c:bf:dc:85:82:6b:69:18:9a:11: 5d:75:a9:92:9b:3f:92:22:60:5e:16:02:fd:24:11: ed:f0:94:db:90:3a:15:db:03:ab:dc:53:2a:31:41: 29:18:98:c3:5a:a0:14:f1:70:9d:51:99:90:9f:00: 2a:35:72:6b:7f:6f:f9:f5:03:37:06:a3:f4:3b:18: 86:1b:c4:51:ea:cc:94:14:94:1e:74:d8:ff:7d:d9: 18:f8:f9:d1:77:12:8c:74:ad:d8:6e:52:e2:99:f9: fd:7d:91:49:bd:a2:f2:f9:7f:e6:5b:82:b4:84:b8: 4e:cd:a7:9d:57:ef:b6:ce:90:59:76:c1:30:75:27: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:91:70:33:93:4E:F1:71:40:B1:69:59:87:9E:8A:1B:E3:F1:60:B2 X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.52.0/22 IPv6: 2401:bbe0:400::/40 Signature Algorithm: sha256WithRSAEncryption a8:34:a0:90:21:06:9a:42:b9:b9:a4:19:ce:1b:5d:04:2b:51: b3:eb:16:9c:58:4c:fa:3f:a6:c8:51:88:2b:db:73:ba:29:8a: 1f:f7:ea:0d:67:d8:1e:11:35:6c:44:18:81:79:94:eb:5e:11: 74:c9:19:ae:09:75:3e:c2:c1:8d:b8:59:23:70:75:c4:d0:4e: 0f:8c:c6:05:2f:12:de:cc:53:7a:8c:5e:81:90:e6:2a:fb:39: b2:a3:dc:e4:81:94:4d:93:a7:ce:25:1e:ec:e1:34:42:57:96: 92:b2:86:31:29:2f:70:15:45:bb:43:ec:d2:31:80:57:38:3f: 96:f7:21:f0:45:2b:23:6a:28:72:1e:c8:17:00:a7:2e:f1:ad: 9d:b1:94:fe:65:95:96:b1:3f:ea:c2:b0:b1:1b:92:30:a2:38: 4b:d1:0c:23:3b:3f:8e:ef:e9:1d:fe:fc:2d:3a:11:91:22:0a: 57:95:8b:de:ce:2b:78:99:a5:88:d3:7e:34:1d:e6:de:64:9e: c8:f9:8a:a8:19:61:6c:c8:59:cd:3d:4c:54:9c:c3:fa:9f:93: 27:3e:38:9a:77:a8:e6:ae:f1:2f:6c:f5:9a:af:c2:b3:f6:a3: 89:f5:8c:46:21:ec:fb:9d:56:c1:1d:4d:a1:12:d7:6d:1b:79: c3:e8:79:e4 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjUxMDE3MDkwNzI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYyMDc0Yy1mNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWMzyrYNig+XzQfjiZfJ0kMxRIFctAemMJEIFm3k8c3XrsckmIPqgM8CHjsA kGxVGlmeSZDOGa3rs9TkH9Xn1ENH3riHZOHfabPZGV6ROnmDgt0Uj1xF2tPHOcn0 doe14+ooM2qsVu+J3adl+IWSlLUhfTDBPSlJMc4S8Ay/3IWCa2kYmhFddamSmz+S ImBeFgL9JBHt8JTbkDoV2wOr3FMqMUEpGJjDWqAU8XCdUZmQnwAqNXJrf2/59QM3 BqP0OxiGG8RR6syUFJQedNj/fdkY+PnRdxKMdK3YblLimfn9fZFJvaLy+X/mW4K0 hLhOzaedV++2zpBZdsEwdSfSYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJyRcDOT TvFxQLFpWYeeihvj8WCyMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZDOEYvRkEwRTA1QTQ2QjVBMTFFRkJDOTk5MjVDQzRGOUFFMDIvRTBDREEzNzY1 OTZFMTFGMEIxOUFGMjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAIr/zQwDgQCAAIwCAMGACQBu+AEMA0GCSqGSIb3DQEBCwUA A4IBAQCoNKCQIQaaQrm5pBnOG10EK1Gz6xacWEz6P6bIUYgr23O6KYof9+oNZ9ge ETVsRBiBeZTrXhF0yRmuCXU+wsGNuFkjcHXE0E4PjMYFLxLezFN6jF6BkOYq+zmy o9zkgZRNk6fOJR7s4TRCV5aSsoYxKS9wFUW7Q+zSMYBXOD+W9yHwRSsjaihyHsgX AKcu8a2dsZT+ZZWWsT/qwrCxG5IwojhL0QwjOz+O7+kd/vwtOhGRIgpXlYvezit4 maWI0340HebeZJ7I+YqoGWFsyFnNPUxUnMP6n5MnPjiad6jmrvEvbPWar8Kz9qOJ 9YxGIez7nVbBHU2hEtdtG3nD6Hnk -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:31 2025 by rpki-client