$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/A8CF90D807E711F1BD5B02F0213D8C67.roa File: A8CF90D807E711F1BD5B02F0213D8C67.roa (raw, json) Hash identifier: hV/y2S97hrz2Q67W/IE/R1j506bwev+zG5Z7LB9xvfE= Subject key identifier: CB:12:75:6E:F0:DF:89:E4:DF:0F:6E:1F:30:AF:85:35:E3:F8:A7:AE Certificate issuer: /CN=A9141B4C/serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4 Certificate serial: 1A Authority key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/A8CF90D807E711F1BD5B02F0213D8C67.roa Signing time: Wed 18 Mar 2026 10:46:10 +0000 ROA not before: Wed 18 Mar 2026 10:46:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154499 IP address blocks: 198.17.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4 Validity Not Before: Mar 18 10:46:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69ba8272-bab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:23:43:86:55:f6:84:5d:90:e3:06:c6:66: 5a:bb:19:73:c5:ee:f6:cd:c6:5d:db:8f:ff:ee:a4: b0:33:b2:0f:c0:db:d5:ae:34:d2:c1:09:5a:4c:39: d9:49:d3:06:6c:cd:66:ae:7c:cc:d9:22:47:3a:43: b0:0a:fd:7f:70:05:d5:b1:54:c0:6d:c4:09:f5:2d: a4:0e:60:8b:52:8f:03:cb:d0:3d:bd:5f:9f:b2:6b: 64:81:d5:c1:00:ad:19:f2:69:20:1d:de:a6:01:26: 7f:1b:e7:ec:75:69:e2:d0:49:ee:f0:7f:bd:6c:09: cf:09:e4:f3:89:7b:cd:e5:95:02:7a:72:9c:9a:1a: c8:dc:9a:81:fb:76:aa:b8:71:6e:20:bd:81:7a:40: 51:2a:f2:66:76:6f:4c:c1:2a:4c:cd:91:53:e4:d2: e5:22:27:ec:00:8f:9d:17:5e:05:71:31:7f:f3:3c: a0:17:3f:db:3e:48:ef:d9:f8:02:f1:df:26:6c:51: 17:62:5d:5e:95:fd:68:00:96:9a:a6:8d:81:b0:62: 64:e8:61:86:cc:da:67:52:10:3d:a2:0a:e9:71:45: 35:ad:67:fc:c3:b8:b0:b6:79:69:49:fa:32:2e:43: 5c:cf:81:e3:91:85:f7:49:58:9f:66:f9:76:82:d1: 2b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:12:75:6E:F0:DF:89:E4:DF:0F:6E:1F:30:AF:85:35:E3:F8:A7:AE X509v3 Authority Key Identifier: keyid:FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/A8CF90D807E711F1BD5B02F0213D8C67.roa sbgp-ipAddrBlock: critical IPv4: 198.17.7.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:3f:f7:7c:d7:36:a1:33:43:57:5a:d6:32:70:a3:4c:1d:7f: 7f:69:1c:25:53:73:d9:eb:fa:1a:70:17:a4:f0:b3:f8:d3:db: 4c:0f:5d:7c:42:3e:ad:fe:45:ec:e4:19:7c:58:90:48:c9:82: 1b:67:c7:a6:3f:15:7f:c8:f2:fe:ba:57:22:52:e0:14:f0:6f: c1:a7:9f:98:f2:d2:4d:9e:72:fc:1e:cb:b3:d2:a8:96:7e:a5: 6f:a9:6e:0b:87:bd:b2:0c:db:b2:a1:ad:13:7a:04:af:64:f9: 70:bf:78:b2:56:6f:82:2c:c8:3a:44:29:ab:5d:a5:a1:dd:b4: 7a:1f:5a:76:b6:d3:e0:69:39:13:e7:53:b0:f5:e9:3a:7a:6c: 10:79:ef:6a:8d:34:9a:89:e9:ff:45:67:69:e5:e6:02:aa:84: 9e:48:82:a0:16:2c:8a:c6:c8:d8:ba:ab:5f:56:ed:53:a8:a2: aa:06:77:6b:f7:97:04:92:83:5f:ef:b9:bd:79:19:f9:e1:0a: 51:4b:d9:4f:17:bc:99:fd:89:07:34:c6:ff:c0:dc:d3:e7:b3: 64:81:46:89:57:b4:f1:04:a4:4c:38:0b:3d:59:0a:45:b6:ba: 2e:5f:3f:5e:70:87:37:fb:5c:98:2e:c6:75:bf:ec:f9:c8:03: 35:9d:6c:22 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUI0QzExMC8GA1UEBRMoRkJCQjZGMzhGNjcwM0QwMkQ3MjZFREU0NjIzOUIzQkVE OEExRjFFNDAeFw0yNjAzMTgxMDQ2MTBaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YmE4MjcyLWJhYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTdCNDhlX2hF2Q4wbGZlq7GXPF7vbNxl3bj//upLAzsg/A29WuNNLBCVpMOdlJ 0wZszWaufMzZIkc6Q7AK/X9wBdWxVMBtxAn1LaQOYItSjwPL0D29X5+ya2SB1cEA rRnyaSAd3qYBJn8b5+x1aeLQSe7wf71sCc8J5POJe83llQJ6cpyaGsjcmoH7dqq4 cW4gvYF6QFEq8mZ2b0zBKkzNkVPk0uUiJ+wAj50XXgVxMX/zPKAXP9s+SO/Z+ALx 3yZsURdiXV6V/WgAlpqmjYGwYmToYYbM2mdSED2iCulxRTWtZ/zDuLC2eWlJ+jIu Q1zPgeORhfdJWJ9m+XaC0Su5AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUyxJ1bvDf ieTfD24fMK+FNeP4p64wHwYDVR0jBBgwFoAU+7tvOPZwPQLXJu3kYjmzvtih8eQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQjRDL0EwQjU3OUIyMDdF MjExRjE4QzU2MjU2OTIxM0Q4QzY3Ly03dHZPUFp3UFFMWEp1M2tZam16dnRpaDhl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLTd0dk9QWndQUUxYSnUza1lqbXp2dGloOGVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUI0Qy9BMEI1NzlCMjA3RTIxMUYxOEM1NjI1NjkyMTNEOEM2Ny9BOENGOTBEODA3 RTcxMUYxQkQ1QjAyRjAyMTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADGEQcwDQYJKoZIhvcNAQELBQADggEBAFw/93zXNqEzQ1da1jJwo0wd f39pHCVTc9nr+hpwF6Tws/jT20wPXXxCPq3+RezkGXxYkEjJghtnx6Y/FX/I8v66 VyJS4BTwb8Gnn5jy0k2ecvwey7PSqJZ+pW+pbguHvbIM27KhrRN6BK9k+XC/eLJW b4IsyDpEKatdpaHdtHofWna20+BpORPnU7D16Tp6bBB572qNNJqJ6f9FZ2nl5gKq hJ5IgqAWLIrGyNi6q19W7VOooqoGd2v3lwSSg1/vub15GfnhClFL2U8XvJn9iQc0 xv/A3NPns2SBRolXtPEEpEw4Cz1ZCkW2ui5fP15whzf7XJguxnW/7PnIAzWdbCI= -----END CERTIFICATE-----Generated at Thu Mar 26 20:58:09 2026 by rpki-client