$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/2DAB7B74BE4211EE970F4140C4F9AE02.roa File: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (raw, json) Hash identifier: b9XqOa9Ho+avZxDvDMO6N3hEMkVQIb3B3KdXGA4iZxw= Subject key identifier: DA:74:FA:5B:41:F0:C9:F2:C4:3F:16:9B:CE:62:A4:C8:D0:C0:78:2E Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 0206 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/2DAB7B74BE4211EE970F4140C4F9AE02.roa Signing time: Thu 27 Aug 2026 22:41:50 +0000 ROA not before: Thu 27 Aug 2026 22:41:50 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 45442 IP address blocks: 164.75.8.0/24 maxlen: 24 164.75.34.24/29 maxlen: 29 164.75.34.32/29 maxlen: 29 164.75.64.0/20 maxlen: 20 164.75.96.0/20 maxlen: 20 164.75.112.0/20 maxlen: 20 164.75.128.0/24 maxlen: 24 164.75.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 03:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Aug 27 22:41:50 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a90bd2e-64c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:46:7e:cd:12:8c:6f:75:41:ef:02:29:40: 9c:8f:d8:5f:02:1b:ae:ee:ef:2d:72:e5:9b:9c:11: 54:10:18:8b:2a:86:f8:f0:b5:ae:9e:e7:90:f4:14: 3f:2b:20:35:b6:8f:d0:b1:5b:87:46:6f:59:5d:9a: 71:8b:8c:e3:06:49:73:71:d8:08:5a:a3:8e:14:8d: 41:b5:47:b1:8d:e6:a7:6e:8b:df:be:4a:1e:6f:ad: f4:24:ac:cf:6e:3d:92:5f:cb:5a:d1:9b:2d:f1:4d: 93:1e:0d:48:a2:6a:5b:35:6f:69:47:e4:cc:66:e7: bf:3e:0d:32:15:cb:12:10:94:ac:7c:23:fe:61:19: f4:5a:2a:d8:45:4e:61:fa:e9:28:8c:15:a6:5b:6b: 85:31:a4:11:b2:33:a6:c6:b4:36:4d:5a:f2:eb:df: 73:2d:e5:db:5f:dc:25:f3:59:7c:8b:1c:51:34:9f: 24:02:5f:c1:da:75:88:c9:f9:c2:d0:32:be:9a:79: 06:e6:08:5f:27:47:8b:4c:24:53:0b:60:b8:64:c5: e3:e8:3b:01:0f:a7:8e:ed:a2:e3:21:ee:da:b1:bf: 6e:ff:2a:cb:f6:60:82:b4:c2:46:6c:9c:3a:dd:e6: ee:6a:c1:f3:1f:c8:09:41:4b:05:51:1b:1a:70:57: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:74:FA:5B:41:F0:C9:F2:C4:3F:16:9B:CE:62:A4:C8:D0:C0:78:2E X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/2DAB7B74BE4211EE970F4140C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 164.75.8.0/24 164.75.34.24-164.75.34.39 164.75.64.0/20 164.75.96.0-164.75.128.255 164.75.143.0/24 Signature Algorithm: sha256WithRSAEncryption 14:80:ab:9e:96:43:09:10:6d:d2:5b:85:5b:96:e9:2a:9a:25: 7d:d3:68:53:2b:00:97:f3:8d:81:18:de:90:3a:53:e6:11:2a: d3:0a:11:23:3d:20:a9:f2:6c:93:25:00:2b:89:eb:e0:1a:69: da:32:30:da:c4:6b:0a:0d:6f:45:99:24:e2:97:b5:e5:81:60: 87:1d:41:ee:0a:2a:cf:73:57:e0:49:9d:08:c4:13:74:4f:67: 02:2d:2b:bd:40:83:6b:4d:ce:fe:0a:ab:46:a9:84:dd:41:10: af:25:7b:25:13:fb:4a:e2:bc:44:c4:3e:db:82:13:8f:ad:2c: 2a:07:93:6a:dc:30:a2:ac:67:e0:8f:3d:15:1d:00:72:0c:a2: d8:8d:50:51:52:ca:70:f8:52:20:98:50:83:ec:17:63:23:2e: 6a:32:8a:02:52:0e:a5:66:b9:32:b3:f2:b6:e8:77:2d:df:05: ea:05:b3:66:dc:c6:0a:15:76:a2:4e:6d:d0:82:24:8a:f1:ab: 61:40:8c:7c:b9:03:f7:ce:10:26:9b:68:d9:75:4a:b2:e4:ff: 51:7b:85:90:67:d3:57:c2:c8:e1:cc:ff:43:40:51:e3:98:17: e9:4b:37:bd:3d:72:49:ba:1e:6f:f8:47:79:2f:ee:bb:0e:08: f7:38:19:c2 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjYwODI3MjI0MTUwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkwYmQyZS02NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQJGfs0SjG91Qe8CKUCcj9hfAhuu7u8tcuWbnBFUEBiLKob48LWunueQ9BQ/ KyA1to/QsVuHRm9ZXZpxi4zjBklzcdgIWqOOFI1BtUexjeanbovfvkoeb630JKzP bj2SX8ta0Zst8U2THg1IompbNW9pR+TMZue/Pg0yFcsSEJSsfCP+YRn0WirYRU5h +ukojBWmW2uFMaQRsjOmxrQ2TVry699zLeXbX9wl81l8ixxRNJ8kAl/B2nWIyfnC 0DK+mnkG5ghfJ0eLTCRTC2C4ZMXj6DsBD6eO7aLjIe7asb9u/yrL9mCCtMJGbJw6 3ebuasHzH8gJQUsFURsacFfDBQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFNp0+ltB 8MnyxD8Wm85ipMjQwHguMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJCRDMvRTgwRjEzN0NCOTkyMTFFRUFCOUYxRDE5QzRGOUFFMDIvMkRBQjdCNzRC RTQyMTFFRTk3MEY0MTQwQzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQApEsIMA4DBQOkSyIYAwUDpEsiIAMEBKRLQDAMAwQFpEtgAwQApEuA AwQApEuPMA0GCSqGSIb3DQEBCwUAA4IBAQAUgKuelkMJEG3SW4VblukqmiV902hT KwCX842BGN6QOlPmESrTChEjPSCp8myTJQArievgGmnaMjDaxGsKDW9FmSTil7Xl gWCHHUHuCirPc1fgSZ0IxBN0T2cCLSu9QINrTc7+CqtGqYTdQRCvJXslE/tK4rxE xD7bghOPrSwqB5Nq3DCirGfgjz0VHQByDKLYjVBRUspw+FIgmFCD7BdjIy5qMooC Ug6lZrkys/K26Hct3wXqBbNm3MYKFXaiTm3QgiSK8athQIx8uQP3zhAmm2jZdUqy 5P9Re4WQZ9NXwsjhzP9DQFHjmBfpSze9PXJJuh5v+Ed5L+67Dgj3OBnC -----END CERTIFICATE-----Generated at Sat Sep 5 04:53:13 2026 by rpki-client