$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/43704898CCD311F1BA19A6452F66CEF9.roa File: 43704898CCD311F1BA19A6452F66CEF9.roa (raw, json) Hash identifier: /aEFC6A3rrYexcihd6a6zPwzaVKMwQoXxDZid1ZKYTk= Subject key identifier: DA:03:C0:65:BC:CC:9D:E8:32:A9:E9:EC:EE:AC:F5:5C:72:9D:58:98 Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Certificate serial: 01DC Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/43704898CCD311F1BA19A6452F66CEF9.roa Signing time: Tue 03 Nov 2026 21:23:48 +0000 ROA not before: Tue 03 Nov 2026 21:23:48 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 834 IP address blocks: 163.8.33.0/24 maxlen: 24 163.8.36.0/24 maxlen: 24 163.8.195.0/24 maxlen: 24 163.8.205.0/24 maxlen: 24 163.8.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 03:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Validity Not Before: Nov 3 21:23:48 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6aea50e4-a952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:9f:51:51:87:0e:54:c7:77:3c:84:c3:bc: 85:73:87:99:08:e4:49:48:f6:29:89:5f:ed:1a:c8: 5b:75:4a:13:58:1e:d7:fc:9f:23:0e:3c:5e:a2:c4: 62:f1:4b:e8:0d:5b:4b:4c:8d:5f:6b:47:89:80:a8: a4:14:54:ce:e6:2b:0e:96:3d:9f:37:ab:b9:46:0e: 1e:1b:f5:e6:66:42:b3:1a:5d:93:52:46:28:0f:83: b3:d4:cf:81:c9:8f:2e:b5:75:b5:c1:9b:69:b9:8d: 69:c0:15:24:2d:cf:bf:36:37:81:7e:54:20:32:c7: cf:1c:55:3e:7e:70:aa:de:ae:fb:de:f1:76:b0:be: 82:91:19:73:fa:f3:a6:4b:fe:03:eb:b0:26:85:e7: e5:a5:94:3f:60:de:cc:23:19:a1:42:d0:f0:26:b9: c7:47:42:2d:ec:68:3c:80:35:ae:bf:d4:3a:4c:bd: d2:c3:ed:ea:02:21:fd:44:95:6a:13:73:98:86:f5: bc:28:70:f5:e6:4d:72:71:74:ab:59:38:69:a9:2b: bc:6f:57:be:8b:6c:01:8d:5c:15:31:e3:d9:ac:98: 82:2d:7e:51:a9:68:49:22:67:e6:06:8b:76:3c:ac: e0:54:5f:1e:e3:67:c5:91:ed:1a:a6:e0:99:63:b3: 80:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:03:C0:65:BC:CC:9D:E8:32:A9:E9:EC:EE:AC:F5:5C:72:9D:58:98 X509v3 Authority Key Identifier: keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/43704898CCD311F1BA19A6452F66CEF9.roa sbgp-ipAddrBlock: critical IPv4: 163.8.33.0/24 163.8.36.0/24 163.8.195.0/24 163.8.205.0/24 163.8.220.0/24 Signature Algorithm: sha256WithRSAEncryption 19:21:bb:24:a1:4f:67:53:2c:08:44:c3:06:49:13:2c:ea:cb: ff:b8:ea:f5:4f:e0:98:a6:c8:0a:8b:b5:22:a4:71:a4:45:f3: f9:35:79:16:70:93:1a:06:d8:86:7b:c9:8f:b5:c5:eb:a9:dd: 4d:e7:08:cb:70:53:77:9a:e7:4c:80:be:ca:fe:d1:55:83:ee: 54:d2:58:92:87:b3:ef:40:97:93:df:37:40:eb:12:0e:a3:ea: fd:47:39:6d:a3:87:f5:84:9c:41:ec:ca:8b:24:ef:df:ee:46: 5f:ec:e5:20:39:4d:69:af:ed:3a:4f:26:98:80:7e:83:e2:b4: bc:0c:86:fb:88:d4:b1:34:95:0e:ff:13:dc:5f:a2:1d:6c:1b: 34:fc:1b:74:48:e4:44:dd:bd:5d:2d:55:b9:e5:a5:26:23:8f: 22:f4:90:bb:17:63:19:48:ea:db:43:c8:aa:96:5f:d8:8c:ca: af:d5:7d:81:0e:f4:6e:19:38:92:58:0d:2e:32:e9:e1:5d:4c: 26:8b:41:71:7d:0f:cf:fb:dc:23:76:19:d2:29:cf:02:82:da: a2:40:46:08:de:33:44:61:ea:0f:69:16:d5:9a:51:1c:5c:39: 94:69:80:47:aa:3b:bf:f9:3c:61:ae:75:e8:4b:47:91:23:e9: f8:3f:b1:dc -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC QTQxMkI2M0QwHhcNMjYxMTAzMjEyMzQ4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YWVhNTBlNC1hOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqW6fUVGHDlTHdzyEw7yFc4eZCORJSPYpiV/tGshbdUoTWB7X/J8jDjxeosRi 8UvoDVtLTI1fa0eJgKikFFTO5isOlj2fN6u5Rg4eG/XmZkKzGl2TUkYoD4Oz1M+B yY8utXW1wZtpuY1pwBUkLc+/NjeBflQgMsfPHFU+fnCq3q773vF2sL6CkRlz+vOm S/4D67AmheflpZQ/YN7MIxmhQtDwJrnHR0It7Gg8gDWuv9Q6TL3Sw+3qAiH9RJVq E3OYhvW8KHD15k1ycXSrWThpqSu8b1e+i2wBjVwVMePZrJiCLX5RqWhJImfmBot2 PKzgVF8e42fFke0apuCZY7OAwQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFNoDwGW8 zJ3oMqnp7O6s9VxynViYMB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0 ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJCNDYvMDg4NzAxQjhBQkI0MTFGMEFCRjIwOTQwQzRGOUFFMDIvNDM3MDQ4OThD Q0QzMTFGMUJBMTlBNjQ1MkY2NkNFRjkucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAowghAwQAowgkAwQAowjDAwQAowjNAwQAowjcMA0GCSqGSIb3DQEB CwUAA4IBAQAZIbskoU9nUywIRMMGSRMs6sv/uOr1T+CYpsgKi7UipHGkRfP5NXkW cJMaBtiGe8mPtcXrqd1N5wjLcFN3mudMgL7K/tFVg+5U0liSh7PvQJeT3zdA6xIO o+r9Rzlto4f1hJxB7MqLJO/f7kZf7OUgOU1pr+06TyaYgH6D4rS8DIb7iNSxNJUO /xPcX6IdbBs0/Bt0SORE3b1dLVW55aUmI48i9JC7F2MZSOrbQ8iqll/YjMqv1X2B DvRuGTiSWA0uMunhXUwmi0FxfQ/P+9wjdhnSKc8CgtqiQEYI3jNEYeoPaRbVmlEc XDmUaYBHqju/+TxhrnXoS0eRI+n4P7Hc -----END CERTIFICATE-----Generated at Sun Nov 15 04:22:52 2026 by rpki-client