$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa File: E0CDA376596E11F0B19AF24BC4F9AE02.roa (raw, json) Hash identifier: BPa91Mlpk3lcdY3K9hP1gSDR+Vs/nkUIDuAiMhAUMOQ= Subject key identifier: A6:13:E8:90:5E:F7:E0:45:8D:FA:E3:01:3F:EE:EA:74:3E:43:F1:57 Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: F4 Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa Signing time: Tue 19 Aug 2025 06:44:33 +0000 ROA not before: Tue 19 Aug 2025 06:44:33 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 213802 IP address blocks: 43.255.52.0/24 maxlen: 24 43.255.53.0/24 maxlen: 24 43.255.54.0/24 maxlen: 24 43.255.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Aug 19 06:44:33 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68a41d50-d385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:d7:58:90:79:ff:52:6b:a7:c1:5b:bc:0f: f5:26:04:45:8b:39:a4:1d:93:f9:ef:fb:ed:0d:01: a6:75:c6:e9:97:88:ef:8f:01:1b:b9:84:b7:83:59: c9:f9:26:94:62:0a:91:41:11:1a:b7:26:dd:95:c4: 3b:3b:1d:41:95:bb:a6:77:19:fd:7d:dc:73:d5:8c: a0:4f:6e:a0:88:6e:ae:66:a9:b0:4c:60:59:8a:ba: 87:ba:2e:79:ca:6a:c8:25:69:47:7a:28:bd:e7:c1: 23:cd:6a:fc:a4:70:9d:f6:9f:af:8a:09:db:47:0b: 7e:0f:96:d1:ed:87:d6:70:08:3b:20:40:fc:ff:fb: 70:51:91:c8:34:9b:4e:5c:65:64:6a:81:e6:a6:2d: 49:e3:d1:8b:8c:9d:80:63:55:ca:2c:ac:ec:7a:4b: c9:d9:64:04:33:d6:9d:06:b3:30:70:29:f1:8f:9c: 97:1f:eb:52:10:28:6a:6a:7f:90:a9:67:f1:b8:dc: ed:a1:17:59:e2:47:e2:9b:6c:64:ac:db:72:e4:46: 0c:64:90:39:9d:c2:75:ee:74:98:48:a8:2f:cb:3c: 4f:d3:00:01:94:64:71:3d:98:6f:f7:2d:41:a5:75: bb:fe:0d:65:6a:a4:87:f9:9e:0a:01:2b:20:00:53: 2e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:13:E8:90:5E:F7:E0:45:8D:FA:E3:01:3F:EE:EA:74:3E:43:F1:57 X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/E0CDA376596E11F0B19AF24BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.52.0/22 Signature Algorithm: sha256WithRSAEncryption 63:93:99:df:f8:77:1e:7e:aa:c2:ef:fa:2a:12:42:5d:63:db: db:44:20:0f:59:66:39:b2:d8:81:de:9d:01:59:c5:c5:b7:09: c1:94:65:85:43:f6:01:7a:d7:fc:77:84:9f:36:87:c3:53:6d: 25:76:e1:ef:54:28:d1:ee:5d:48:ef:02:ae:ef:55:3e:df:1c: ae:2d:1c:97:e6:93:75:d3:9e:69:61:bd:b7:e0:b2:28:41:4b: f5:83:1e:e0:b9:40:28:58:be:4e:81:b5:1e:77:a9:b5:df:01: 41:b6:fd:64:47:fb:18:d5:e9:bd:b3:81:6f:70:d9:1c:ad:8a: 03:99:49:ac:c3:12:f6:6c:37:53:d6:c7:6c:fe:35:e0:e0:0f: cc:d7:62:7a:44:4f:72:f0:25:bb:53:3c:01:7e:7a:9c:6c:84: c7:44:b7:e0:61:b4:ad:78:a1:30:91:23:63:cd:46:1f:d1:8b: f5:16:17:0c:13:f9:79:0f:33:33:38:40:3e:43:6f:01:08:88: 5b:41:a0:5b:81:c3:7a:69:0a:52:02:0a:2f:a2:98:19:ec:5d: 60:b7:55:e3:28:5c:52:09:ce:b6:eb:0d:4d:05:39:22:06:af: 48:31:bf:c4:e1:07:82:94:e6:b9:ce:ae:ef:2f:ee:c1:21:97: 57:71:41:c3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjUwODE5MDY0NDMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE0MWQ1MC1kMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAXXWJB5/1Jrp8FbvA/1JgRFizmkHZP57/vtDQGmdcbpl4jvjwEbuYS3g1nJ +SaUYgqRQREatybdlcQ7Ox1Blbumdxn9fdxz1YygT26giG6uZqmwTGBZirqHui55 ymrIJWlHeii958EjzWr8pHCd9p+vignbRwt+D5bR7YfWcAg7IED8//twUZHINJtO XGVkaoHmpi1J49GLjJ2AY1XKLKzsekvJ2WQEM9adBrMwcCnxj5yXH+tSEChqan+Q qWfxuNztoRdZ4kfim2xkrNty5EYMZJA5ncJ17nSYSKgvyzxP0wABlGRxPZhv9y1B pXW7/g1laqSH+Z4KASsgAFMuSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKYT6JBe 9+BFjfrjAT/u6nQ+Q/FXMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZDOEYvRkEwRTA1QTQ2QjVBMTFFRkJDOTk5MjVDQzRGOUFFMDIvRTBDREEzNzY1 OTZFMTFGMEIxOUFGMjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr/zQwDQYJKoZIhvcNAQELBQADggEBAGOTmd/4dx5+qsLv +ioSQl1j29tEIA9ZZjmy2IHenQFZxcW3CcGUZYVD9gF61/x3hJ82h8NTbSV24e9U KNHuXUjvAq7vVT7fHK4tHJfmk3XTnmlhvbfgsihBS/WDHuC5QChYvk6BtR53qbXf AUG2/WRH+xjV6b2zgW9w2RytigOZSazDEvZsN1PWx2z+NeDgD8zXYnpET3LwJbtT PAF+epxshMdEt+BhtK14oTCRI2PNRh/Ri/UWFwwT+XkPMzM4QD5DbwEIiFtBoFuB w3ppClICCi+imBnsXWC3VeMoXFIJzrbrDU0FOSIGr0gxv8ThB4KU5rnOru8v7sEh l1dxQcM= -----END CERTIFICATE-----Generated at Sun Aug 24 03:09:31 2025 by rpki-client