$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa File: 1B2129BEA89C11EFB7509755C4F9AE02.roa (raw, json) Hash identifier: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY= Subject key identifier: CD:04:0B:C1:11:59:60:C8:C1:38:52:84:0B:F1:2C:50:92:63:B5:7C Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 0482 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa Signing time: Mon 25 May 2026 01:34:46 +0000 ROA not before: Mon 25 May 2026 01:34:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134972 IP address blocks: 43.243.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 00:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 25 01:34:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a13a736-68d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f1:0d:1b:b4:ea:49:fb:fc:67:f3:5f:08:e0: f0:0d:22:91:99:ed:10:81:fb:eb:5f:d0:b8:0e:3c: ab:41:43:6d:62:34:13:b0:83:d8:14:c6:9b:af:dd: 5c:60:6e:fb:45:12:ea:8c:b8:1b:fd:72:51:6b:71: e0:be:35:8e:9e:be:f6:3f:87:5a:ae:85:c3:7b:c9: 12:2c:35:08:5b:da:9c:9a:37:2f:54:3f:f0:7d:6e: 8f:1a:3a:49:77:b6:87:29:5f:49:ee:5f:65:ce:9f: c8:12:5c:cf:d7:27:dd:83:98:ee:cb:7b:dc:18:c4: ee:0e:72:cc:d8:60:96:91:b7:5c:ec:9f:40:44:3b: 8e:2e:7b:32:64:57:07:06:53:33:ee:9e:43:07:08: 4d:78:4f:d0:9e:d3:65:84:a7:c4:1c:56:5c:a4:4a: b5:36:67:3e:92:db:bf:dd:bf:62:c7:1c:df:ba:14: 4a:ec:4f:5c:de:ee:98:1e:64:d1:ef:5a:43:a7:fe: ab:09:84:13:32:6a:f2:ad:58:96:ae:17:64:1d:11: 51:cf:3e:a4:b9:72:22:4d:42:11:0b:cf:74:09:9b: c0:b9:a6:75:4a:0c:ca:59:64:40:f1:13:86:cf:2a: 91:b5:98:6c:39:4f:1b:fb:3f:f6:c8:d5:99:5e:dc: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:04:0B:C1:11:59:60:C8:C1:38:52:84:0B:F1:2C:50:92:63:B5:7C X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.192.0/24 Signature Algorithm: sha256WithRSAEncryption c4:09:49:d6:d6:51:41:0a:97:7e:0f:6c:98:b8:89:7c:bc:3f: 9f:1f:0e:11:55:54:08:21:7a:c3:01:46:75:cd:09:92:a7:63: ea:40:09:1a:da:1e:db:2a:78:75:3b:ae:25:04:ac:66:d6:46: 1a:6a:54:ca:9d:d2:e1:21:ab:f4:9f:98:b0:6b:f4:f1:e5:c6: c6:39:3c:83:44:ea:22:ef:43:75:68:fe:51:1a:69:b3:7e:f8: fe:18:f7:dc:87:9c:a9:73:c6:c6:d0:c6:7c:4e:13:06:90:f5: a4:81:ed:34:c2:a3:42:19:06:3b:2b:3f:74:7f:ac:c6:6d:d8: 89:b1:54:6f:a6:2a:80:96:8d:88:2b:1f:b2:7f:40:05:40:09: 8f:b6:fa:44:e3:34:88:bf:43:31:e9:e4:5a:c1:64:2c:be:53: e1:51:c9:c1:7a:03:56:27:70:26:cd:a6:07:ea:aa:d7:10:b4: 70:3e:88:6e:d9:95:9b:5e:dc:8f:b7:39:0c:b0:19:ad:94:d8: af:c7:d5:c4:b5:10:1f:de:a1:1e:0b:c3:b4:4a:f6:e5:24:79: 58:33:9a:b4:55:0a:de:32:95:c5:4a:07:4d:7f:e1:98:f8:89: d6:4e:82:d0:8e:e2:87:7f:b6:bf:33:43:a2:d8:ff:2b:b9:e1: 86:f6:f5:0a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjYwNTI1MDEzNDQ2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEzYTczNi02OGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/ENG7TqSfv8Z/NfCODwDSKRme0QgfvrX9C4DjyrQUNtYjQTsIPYFMabr91c YG77RRLqjLgb/XJRa3HgvjWOnr72P4daroXDe8kSLDUIW9qcmjcvVD/wfW6PGjpJ d7aHKV9J7l9lzp/IElzP1yfdg5juy3vcGMTuDnLM2GCWkbdc7J9ARDuOLnsyZFcH BlMz7p5DBwhNeE/QntNlhKfEHFZcpEq1Nmc+ktu/3b9ixxzfuhRK7E9c3u6YHmTR 71pDp/6rCYQTMmryrViWrhdkHRFRzz6kuXIiTUIRC890CZvAuaZ1SgzKWWRA8ROG zyqRtZhsOU8b+z/2yNWZXtyEAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM0EC8ER WWDIwThShAvxLFCSY7V8MB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvMUIyMTI5QkVB ODlDMTFFRkI3NTA5NzU1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK/PAMA0GCSqGSIb3DQEBCwUAA4IBAQDECUnW1lFBCpd+D2yYuIl8 vD+fHw4RVVQIIXrDAUZ1zQmSp2PqQAka2h7bKnh1O64lBKxm1kYaalTKndLhIav0 n5iwa/Tx5cbGOTyDROoi70N1aP5RGmmzfvj+GPfch5ypc8bG0MZ8ThMGkPWkge00 wqNCGQY7Kz90f6zGbdiJsVRvpiqAlo2IKx+yf0AFQAmPtvpE4zSIv0Mx6eRawWQs vlPhUcnBegNWJ3AmzaYH6qrXELRwPohu2ZWbXtyPtzkMsBmtlNivx9XEtRAf3qEe C8O0SvblJHlYM5q0VQreMpXFSgdNf+GY+InWToLQjuKHf7a/M0Oi2P8rueGG9vUK -----END CERTIFICATE-----Generated at Tue Jun 9 10:41:12 2026 by rpki-client