$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/9EDDEBC029D311F184F1669A97833773.roa File: 9EDDEBC029D311F184F1669A97833773.roa (raw, json) Hash identifier: ZwI19PPZAFVOy0THPHh7Bj9dofGXcFYZKYKf+dYn8Lk= Subject key identifier: CC:7A:D6:0A:46:C3:55:70:F8:1D:49:3B:1C:46:67:7C:77:D4:80:C1 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 17 Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/9EDDEBC029D311F184F1669A97833773.roa Signing time: Fri 27 Mar 2026 11:53:51 +0000 ROA not before: Fri 27 Mar 2026 11:53:50 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 18258 IP address blocks: 209.8.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 17:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 27 11:53:50 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69c66fce-b522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:7f:be:2a:16:4e:33:4e:94:8b:a5:96:f3: fb:26:62:0f:93:93:36:80:ad:85:3f:0d:fa:83:fc: 42:b9:5e:76:d7:53:88:60:d1:24:0a:42:d4:ee:8b: 0c:76:d8:ab:ab:05:95:f6:67:49:24:7c:3a:fc:63: 24:7a:04:96:3d:63:00:87:b8:d6:7a:97:d7:3c:35: 36:1d:be:0a:63:32:16:74:e8:fd:24:80:11:db:f4: 70:cd:5d:15:38:29:82:49:9e:bd:ad:c7:88:4e:90: d0:79:21:4a:37:54:7e:3a:cf:36:21:3b:e7:a4:55: 10:7c:84:70:17:ac:a5:c5:ae:a5:37:00:4f:47:3b: a3:ee:af:ad:1f:be:ca:99:b7:8b:5d:81:40:cd:02: 59:a1:53:a5:d3:35:00:d5:a3:60:5c:d9:b8:aa:ba: 47:6c:f4:f5:06:64:2e:6c:72:41:70:0b:5e:d0:24: 3c:94:1e:96:3c:a0:4c:bf:3f:ca:96:7c:59:a0:73: 6e:cc:a4:9f:99:87:b5:10:44:c4:d4:db:18:5d:ea: 9e:01:5a:cf:ce:1a:19:8d:16:1f:33:e8:ec:39:3c: 6e:7c:fe:8d:c1:4f:14:63:90:2e:5e:48:cc:88:a5: 2b:c8:aa:d9:11:e5:fb:e8:1e:46:f4:16:a3:4b:b7: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7A:D6:0A:46:C3:55:70:F8:1D:49:3B:1C:46:67:7C:77:D4:80:C1 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/9EDDEBC029D311F184F1669A97833773.roa sbgp-ipAddrBlock: critical IPv4: 209.8.176.0/24 Signature Algorithm: sha256WithRSAEncryption bc:a7:b1:cd:b7:1c:a1:0a:30:4c:cc:f1:52:29:06:6d:13:64: 97:fa:76:1d:f3:d2:78:ed:5e:d1:e9:6b:9a:75:4e:5a:21:35: 7d:4d:b3:65:22:f1:b5:ad:6a:18:6a:3a:34:a7:99:f7:57:2e: 9a:02:d4:c8:05:25:a0:87:86:1d:d6:5a:06:b0:bd:2f:14:f1: 1b:8f:cd:90:77:ed:c6:7a:bb:07:c1:7c:ef:7f:4d:bc:ce:7e: 9c:9c:80:9d:f3:d6:d0:7a:49:b9:e2:a5:4c:ba:f7:64:43:37: 9d:d0:92:7b:d6:95:ea:c6:eb:d0:35:30:90:a0:f5:97:8f:83: 7e:67:7e:9e:bb:c6:a3:a0:e4:41:3a:ec:7c:e6:8c:5f:d7:3c: 77:be:15:64:ee:53:65:af:9b:02:3f:68:a3:c0:0f:03:19:46: 88:96:1b:36:88:ed:68:57:98:18:80:9b:6e:ac:b2:82:d0:15: 22:fd:52:b6:44:11:e5:78:b7:3c:de:b5:1d:19:e5:c6:15:e1: 67:e0:c9:5b:38:f9:05:ee:6b:8a:8b:7c:9f:6c:5b:be:bf:50: d0:cd:d5:96:81:df:83:3c:d4:bd:b5:61:f2:56:29:88:05:e3: bf:4d:c1:8d:8c:a0:f0:36:cf:31:d7:07:6d:7a:4b:e4:81:6e: 2e:d1:83:cd -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky OTFFNjgzQTAeFw0yNjAzMjcxMTUzNTBaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzY2ZmNlLWI1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkdX++KhZOM06Ui6WW8/smYg+TkzaArYU/DfqD/EK5XnbXU4hg0SQKQtTuiwx2 2KurBZX2Z0kkfDr8YyR6BJY9YwCHuNZ6l9c8NTYdvgpjMhZ06P0kgBHb9HDNXRU4 KYJJnr2tx4hOkNB5IUo3VH46zzYhO+ekVRB8hHAXrKXFrqU3AE9HO6Pur60fvsqZ t4tdgUDNAlmhU6XTNQDVo2Bc2biqukds9PUGZC5sckFwC17QJDyUHpY8oEy/P8qW fFmgc27MpJ+Zh7UQRMTU2xhd6p4BWs/OGhmNFh8z6Ow5PG58/o3BTxRjkC5eSMyI pSvIqtkR5fvoHkb0FqNLt0+FAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUzHrWCkbD VXD4HUk7HEZnfHfUgMEwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0 NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS85RURERUJDMDI5 RDMxMUYxODRGMTY2OUE5NzgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADRCLAwDQYJKoZIhvcNAQELBQADggEBALynsc23HKEKMEzM8VIpBm0T ZJf6dh3z0njtXtHpa5p1TlohNX1Ns2Ui8bWtahhqOjSnmfdXLpoC1MgFJaCHhh3W WgawvS8U8RuPzZB37cZ6uwfBfO9/TbzOfpycgJ3z1tB6SbnipUy692RDN53QknvW lerG69A1MJCg9ZePg35nfp67xqOg5EE67HzmjF/XPHe+FWTuU2WvmwI/aKPADwMZ RoiWGzaI7WhXmBiAm26ssoLQFSL9UrZEEeV4tzzetR0Z5cYV4WfgyVs4+QXua4qL fJ9sW76/UNDN1ZaB34M81L21YfJWKYgF479NwY2MoPA2zzHXB216S+SBbi7Rg80= -----END CERTIFICATE-----Generated at Sat Mar 28 18:55:49 2026 by rpki-client