$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa File: 1B2129BEA89C11EFB7509755C4F9AE02.roa (raw, json) Hash identifier: a0RqWFhlleo0IJ3svANvJek4iA+KU/t4gkcKeF2xAQk= Subject key identifier: 24:3C:E0:A5:89:FA:70:E7:BC:D4:AD:39:75:9C:60:D2:3A:E2:77:6F Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 0448 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:04:20 +0000 ROA not before: Wed 07 May 2025 01:38:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134972 IP address blocks: 43.243.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Mar 2026 00:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 7 01:38:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a47fa4-1b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:2f:17:2a:df:f8:32:7c:bd:37:d6:99:06: 06:91:b6:c2:fa:e2:6b:5f:02:e0:8c:3c:be:4a:24: 95:47:b2:1d:8e:fb:91:bd:84:b9:35:44:a2:f5:a3: 8e:5e:45:09:46:fb:a8:bc:65:58:79:4a:6e:94:b6: cc:b4:63:9f:d8:2c:5c:44:62:a2:d9:0d:7b:fb:ca: 63:d1:99:28:62:64:a5:bb:b7:56:ec:62:98:bc:98: 1e:88:db:41:dc:54:1e:68:eb:4f:e3:2e:6e:06:10: 3e:b0:23:44:69:eb:bd:63:28:d2:04:3c:a6:4a:b8: 14:df:a5:45:48:8c:97:58:d9:a3:61:70:c7:13:73: 62:72:e7:4d:57:44:c0:e6:9e:bd:f9:04:e3:41:d5: 78:6b:e1:ed:5b:07:85:98:57:4a:e6:9e:b2:26:03: 5e:9d:ad:fd:86:fb:c2:a8:3a:c0:45:a1:d4:40:52: 73:1f:5e:f6:38:0d:c5:6c:e2:3d:ec:db:eb:7f:47: 48:ea:30:50:35:4d:eb:af:f4:f0:e1:aa:20:fa:6a: a1:61:13:8e:d9:c3:dd:d7:1b:d5:f8:97:2e:e4:60: 48:6c:b2:5e:a7:86:53:67:8a:3b:97:30:b9:3a:17: a9:34:31:70:8f:2e:b9:3b:46:e1:83:dd:19:aa:9f: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3C:E0:A5:89:FA:70:E7:BC:D4:AD:39:75:9C:60:D2:3A:E2:77:6F X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.192.0/24 Signature Algorithm: sha256WithRSAEncryption 65:77:27:e5:1d:ad:80:29:da:fa:38:c9:70:da:15:21:03:a5: 44:59:53:65:4d:84:2d:27:bb:96:7a:56:91:f5:f4:ef:6d:04: 1f:4c:98:ef:a8:11:78:c4:00:bc:45:f4:07:79:21:95:e1:0f: 05:b2:0f:e6:c6:a0:fb:17:9b:25:81:97:57:dd:96:26:6a:a1: c8:db:80:5b:30:be:ff:1d:f2:ac:eb:8e:f8:77:26:01:28:93: 24:7c:07:f8:18:7f:40:7e:9a:b9:a5:35:75:c9:84:ad:af:c4: 79:5f:c9:29:43:0d:4c:22:7c:19:38:a0:dd:2e:b4:f2:b4:2e: f8:8a:3a:02:e7:f0:f2:5f:f6:26:aa:f9:da:b9:1f:cb:e1:2e: 9d:5d:d1:05:40:51:05:56:33:78:a1:5b:01:5e:10:49:10:45: 4a:e3:9f:41:f3:44:fe:e8:ff:aa:a4:45:80:59:3c:7b:ba:91: 4d:58:84:2a:90:67:5a:46:1d:06:46:d7:51:6c:e9:8d:8c:ef: 0a:a4:4e:06:b8:2b:e1:7c:e4:c3:9c:3b:b1:42:08:a0:2d:f6: 0f:94:2f:e1:0c:9e:22:a5:9d:3a:d0:af:c2:3d:03:7c:b0:51: 7c:a0:6a:a8:b3:dc:6c:5e:fd:03:44:e2:ca:8f:fb:d8:ce:c7: 98:4b:39:b6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNTA3MDEzODE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2ZhNC0xYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOYvFyrf+DJ8vTfWmQYGkbbC+uJrXwLgjDy+SiSVR7IdjvuRvYS5NUSi9aOO XkUJRvuovGVYeUpulLbMtGOf2CxcRGKi2Q17+8pj0ZkoYmSlu7dW7GKYvJgeiNtB 3FQeaOtP4y5uBhA+sCNEaeu9YyjSBDymSrgU36VFSIyXWNmjYXDHE3NicudNV0TA 5p69+QTjQdV4a+HtWweFmFdK5p6yJgNena39hvvCqDrARaHUQFJzH172OA3FbOI9 7Nvrf0dI6jBQNU3rr/Tw4aog+mqhYROO2cPd1xvV+Jcu5GBIbLJep4ZTZ4o7lzC5 OhepNDFwjy65O0bhg90Zqp/R9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCQ84KWJ +nDnvNStOXWcYNI64ndvMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvMUIyMTI5QkVB ODlDMTFFRkI3NTA5NzU1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK/PAMA0GCSqGSIb3DQEBCwUAA4IBAQBldyflHa2AKdr6OMlw2hUh A6VEWVNlTYQtJ7uWelaR9fTvbQQfTJjvqBF4xAC8RfQHeSGV4Q8Fsg/mxqD7F5sl gZdX3ZYmaqHI24BbML7/HfKs6474dyYBKJMkfAf4GH9Afpq5pTV1yYStr8R5X8kp Qw1MInwZOKDdLrTytC74ijoC5/DyX/YmqvnauR/L4S6dXdEFQFEFVjN4oVsBXhBJ EEVK459B80T+6P+qpEWAWTx7upFNWIQqkGdaRh0GRtdRbOmNjO8KpE4GuCvhfOTD nDuxQgigLfYPlC/hDJ4ipZ060K/CPQN8sFF8oGqos9xsXv0DROLKj/vYzseYSzm2 -----END CERTIFICATE-----Generated at Tue Mar 10 06:36:44 2026 by rpki-client