$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/B0D3DA64107B11F097717C77C4F9AE02.roa File: B0D3DA64107B11F097717C77C4F9AE02.roa (raw, json) Hash identifier: mEy+llrDZmoEuUOLAWuhQCn0Dbof8crn8d0I/7NAFgw= Subject key identifier: 55:3B:93:BD:07:8A:25:E1:74:0F:24:49:56:F8:56:C5:74:6C:04:FA Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: 01C3 Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/B0D3DA64107B11F097717C77C4F9AE02.roa Signing time: Mon 03 Aug 2026 06:54:59 +0000 ROA not before: Mon 03 Aug 2026 06:54:59 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 149296 IP address blocks: 43.255.52.0/24 maxlen: 24 43.255.53.0/24 maxlen: 24 43.255.54.0/24 maxlen: 24 43.255.55.0/24 maxlen: 24 103.129.52.0/22 maxlen: 22 103.129.54.0/23 maxlen: 23 103.129.54.0/24 maxlen: 24 103.129.55.0/24 maxlen: 24 2401:bbe0:200::/40 maxlen: 40 2401:bbe0:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Aug 3 06:54:59 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a703b43-21bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:69:ff:58:37:68:77:fd:99:a4:f2:e7:2e:b9: a5:e8:58:d5:e6:c8:9a:03:59:5c:25:bf:6d:8f:02: 8f:3d:93:64:ad:80:43:e5:88:c0:6f:32:c5:b4:e5: 8a:b9:bf:bb:d7:d9:d2:15:f9:aa:a6:01:9e:ba:dd: 69:b8:7e:f6:1b:9f:8c:10:f3:39:c5:ef:74:52:4b: b4:94:ba:5d:4f:c2:f0:0d:3f:ab:06:1e:62:c2:ce: e3:39:4a:98:7f:33:c1:13:0a:ad:5c:1d:60:6a:5b: 04:4c:4b:a9:2e:c2:12:fd:45:d6:7e:e1:00:f5:74: c9:79:79:39:ff:8c:b9:26:5a:de:0f:d7:f9:29:52: aa:84:f6:d1:1d:58:31:5b:33:06:ab:1b:91:fb:0d: 5b:f1:01:da:c4:ee:6a:ce:7a:28:be:39:02:76:a9: 5d:c8:62:94:fe:41:a4:b7:24:a7:2b:67:d8:3c:f0: 51:70:7b:6e:7d:4b:6f:81:79:c4:af:e6:14:15:c0: ae:95:98:dc:bf:d6:f3:e0:23:11:a2:28:63:d6:7e: 4e:a7:f5:84:c8:fa:c1:33:81:71:e8:c8:f8:67:a3: 96:8d:fc:8d:ad:57:e8:da:b5:01:29:a1:d5:4e:46: 3b:fd:7d:d5:2e:6d:3a:33:db:9d:40:0a:0f:8e:c3: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3B:93:BD:07:8A:25:E1:74:0F:24:49:56:F8:56:C5:74:6C:04:FA X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/B0D3DA64107B11F097717C77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.52.0/22 103.129.52.0/22 IPv6: 2401:bbe0:200::/40 2401:bbe0:500::/40 Signature Algorithm: sha256WithRSAEncryption 4d:e9:a2:ed:ee:54:6e:91:9c:a9:69:25:fe:f6:ed:39:c3:c2: 52:90:52:ed:c5:11:88:3a:23:8b:a2:01:b5:9c:9c:6d:87:7b: a5:71:1e:e5:be:eb:58:4e:0e:48:3c:64:27:2a:76:9d:25:44: c3:8b:f8:2a:4c:0a:ad:58:a6:e0:17:43:04:5a:52:5c:09:13: 5f:ae:19:23:d6:60:40:ca:f0:22:cc:1e:a3:d8:b9:31:1f:1d: 8b:e8:92:b8:df:32:82:51:27:c8:64:34:fd:9e:8f:23:a7:30: da:25:1c:b5:50:a2:75:cb:b8:4a:02:7c:cd:dc:f4:37:6c:47: 50:59:92:6d:e4:93:00:d8:a2:d6:e1:ec:cc:86:e9:b3:57:33: b6:c8:11:ce:ab:2e:7f:89:5d:a0:84:cc:e1:fd:d6:d7:d3:90: 71:6a:17:f4:5d:ae:56:2b:a7:92:c0:a9:79:6f:00:20:78:aa: 48:c9:6b:95:b0:92:49:f2:4b:42:c0:e4:45:3f:1f:31:f6:c1: 19:b3:75:5e:5c:73:65:85:72:09:4b:93:9a:98:41:62:40:4f: 9d:5d:56:fb:c2:9a:5c:dc:d3:ca:a1:05:33:55:b0:06:90:7a: 84:26:7d:4e:41:f6:e4:b3:7c:c7:6a:4e:03:8a:75:98:7b:38: 8f:d5:b5:83 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjYwODAzMDY1NDU5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcwM2I0My0yMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2n/WDdod/2ZpPLnLrml6FjV5siaA1lcJb9tjwKPPZNkrYBD5YjAbzLFtOWK ub+719nSFfmqpgGeut1puH72G5+MEPM5xe90Uku0lLpdT8LwDT+rBh5iws7jOUqY fzPBEwqtXB1galsETEupLsIS/UXWfuEA9XTJeXk5/4y5JlreD9f5KVKqhPbRHVgx WzMGqxuR+w1b8QHaxO5qznoovjkCdqldyGKU/kGktySnK2fYPPBRcHtufUtvgXnE r+YUFcCulZjcv9bz4CMRoihj1n5Op/WEyPrBM4Fx6Mj4Z6OWjfyNrVfo2rUBKaHV TkY7/X3VLm06M9udQAoPjsPmmwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFU7k70H iiXhdA8kSVb4VsV0bAT6MB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZDOEYvRkEwRTA1QTQ2QjVBMTFFRkJDOTk5MjVDQzRGOUFFMDIvQjBEM0RBNjQx MDdCMTFGMDk3NzE3Qzc3QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQCK/80AwQCZ4E0MBYEAgACMBADBgAkAbvgAgMGACQBu+AFMA0GCSqG SIb3DQEBCwUAA4IBAQBN6aLt7lRukZypaSX+9u05w8JSkFLtxRGIOiOLogG1nJxt h3ulcR7lvutYTg5IPGQnKnadJUTDi/gqTAqtWKbgF0MEWlJcCRNfrhkj1mBAyvAi zB6j2LkxHx2L6JK43zKCUSfIZDT9no8jpzDaJRy1UKJ1y7hKAnzN3PQ3bEdQWZJt 5JMA2KLW4ezMhumzVzO2yBHOqy5/iV2ghMzh/dbX05Bxahf0Xa5WK6eSwKl5bwAg eKpIyWuVsJJJ8ktCwORFPx8x9sEZs3VeXHNlhXIJS5OamEFiQE+dXVb7wppc3NPK oQUzVbAGkHqEJn1OQfbks3zHak4DinWYeziP1bWD -----END CERTIFICATE-----Generated at Sat Aug 15 09:43:28 2026 by rpki-client