$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/7CB87E5C4D7311F1852BB4CA95833773.roa File: 7CB87E5C4D7311F1852BB4CA95833773.roa (raw, json) Hash identifier: hoCybrzoSzK0pPp/mDaka6SuNPu39gXIxqV7vxnQLWg= Subject key identifier: CE:58:6F:D3:DE:A6:5F:E4:D8:88:0B:77:DC:AA:DC:1E:8D:BD:0E:74 Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 0466 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/7CB87E5C4D7311F1852BB4CA95833773.roa Signing time: Mon 11 May 2026 19:56:23 +0000 ROA not before: Mon 11 May 2026 19:56:23 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 16839 IP address blocks: 167.208.0.0/16 maxlen: 16 167.208.0.0/22 maxlen: 24 167.208.4.0/22 maxlen: 22 167.208.4.0/24 maxlen: 24 167.208.5.0/24 maxlen: 24 167.208.6.0/24 maxlen: 24 167.208.7.0/24 maxlen: 24 167.208.8.0/22 maxlen: 24 167.208.12.0/22 maxlen: 22 167.208.12.0/24 maxlen: 24 167.208.13.0/24 maxlen: 24 167.208.14.0/24 maxlen: 24 167.208.15.0/24 maxlen: 24 167.208.16.0/22 maxlen: 22 167.208.16.0/24 maxlen: 24 167.208.17.0/24 maxlen: 24 167.208.18.0/24 maxlen: 24 167.208.19.0/24 maxlen: 24 167.208.40.0/21 maxlen: 21 167.208.40.0/24 maxlen: 24 167.208.41.0/24 maxlen: 24 167.208.42.0/24 maxlen: 24 167.208.43.0/24 maxlen: 24 167.208.44.0/24 maxlen: 24 167.208.45.0/24 maxlen: 24 167.208.46.0/24 maxlen: 24 167.208.47.0/24 maxlen: 24 167.208.48.0/21 maxlen: 24 167.208.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1126 (0x466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: May 11 19:56:23 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a023467-9524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:3a:f6:4e:71:4c:c0:8d:ca:1e:41:42:6f: f9:b5:6f:30:92:5c:92:4f:2c:7a:13:e2:d4:40:87: 2c:ed:a1:a1:57:48:67:04:37:25:cd:40:96:d8:9b: 4c:a3:d4:b9:01:75:eb:f4:f8:5a:60:ee:42:6a:80: 48:d7:cc:cf:23:22:44:54:b8:74:4b:aa:a2:3b:e9: 84:65:1f:d6:3e:e4:cc:56:d3:e0:38:6a:f9:85:f9: 92:52:af:73:7f:4d:3f:57:ce:7c:59:08:ef:48:9a: 5b:b1:3a:64:5f:b7:26:7f:af:96:a4:a9:4c:5c:d6: 39:06:1d:e7:59:12:a0:68:af:0d:93:83:f9:79:46: 61:29:8b:9b:e4:15:64:39:02:ac:10:c6:e6:fa:95: 43:2e:48:79:4c:aa:36:77:6a:aa:cd:62:22:b0:e5: 01:b2:9b:04:4a:85:3e:29:ae:ce:ba:c1:87:90:a3: 21:83:0a:26:4f:15:91:cb:bb:61:d2:f5:8d:6d:bb: 33:6a:59:6b:69:9c:48:b9:c6:bc:e4:f0:c4:7c:ba: 0a:f7:fc:b7:30:a5:3c:f3:f5:2b:4b:49:1d:9a:21: 38:06:cc:e1:be:3f:0e:0c:64:d2:e5:ac:41:cc:39: 1d:c6:98:e7:51:eb:09:50:f7:30:ab:4d:54:db:f0: 0d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:58:6F:D3:DE:A6:5F:E4:D8:88:0B:77:DC:AA:DC:1E:8D:BD:0E:74 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/7CB87E5C4D7311F1852BB4CA95833773.roa sbgp-ipAddrBlock: critical IPv4: 167.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 35:1c:0c:f3:61:23:39:b4:0e:9f:1b:e2:7c:c8:2b:09:96:04: e1:81:9d:7b:f8:a7:f8:f9:5c:b8:1f:24:66:f4:a4:ab:30:89: b9:f2:d4:84:20:a3:36:a3:95:f9:52:11:ed:53:21:bf:f6:e7: 09:df:b5:c8:a6:6a:c1:0f:fe:1e:0e:66:c8:f2:bd:d5:79:1a: 41:3b:83:92:a9:89:d7:ba:7a:ac:48:cb:8d:97:32:24:36:f8: 45:0b:14:ca:5f:10:b7:26:be:af:3d:99:17:c2:78:41:42:85: 8f:4c:0b:87:4f:b6:a7:9d:76:18:ed:8d:4c:92:3c:8c:48:28: 42:b5:c3:50:0b:ed:69:b4:ce:9a:33:db:e7:c7:05:c7:10:c8: c3:04:9c:cf:54:5a:c8:3c:52:45:33:92:93:22:08:62:6e:9b: cf:76:b8:f3:cc:ff:9b:a5:e7:7b:d2:77:cb:8e:74:1d:a6:18: 18:cb:a9:bd:42:67:14:e4:a8:b3:10:c5:85:05:b4:8c:7f:f1: 19:ae:52:d3:e6:64:79:eb:07:9f:a6:f1:81:92:f8:e2:a3:70: b8:49:43:b4:2e:ed:d0:19:da:cb:1e:31:cb:6e:20:15:0e:13: 6c:85:c9:a7:56:35:5b:46:7a:14:f9:5e:dd:bf:17:d3:7d:42: 07:5d:01:9c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjYwNTExMTk1NjIzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTAyMzQ2Ny05NTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHs69k5xTMCNyh5BQm/5tW8wklySTyx6E+LUQIcs7aGhV0hnBDclzUCW2JtM o9S5AXXr9PhaYO5CaoBI18zPIyJEVLh0S6qiO+mEZR/WPuTMVtPgOGr5hfmSUq9z f00/V858WQjvSJpbsTpkX7cmf6+WpKlMXNY5Bh3nWRKgaK8Nk4P5eUZhKYub5BVk OQKsEMbm+pVDLkh5TKo2d2qqzWIisOUBspsESoU+Ka7OusGHkKMhgwomTxWRy7th 0vWNbbszallraZxIuca85PDEfLoK9/y3MKU88/UrS0kdmiE4Bszhvj8ODGTS5axB zDkdxpjnUesJUPcwq01U2/ANRQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFM5Yb9Pe pl/k2IgLd9yq3B6NvQ50MB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5ODIvQ0YyMDVDNjBBQzEzMTFFQ0I3NzZCMjA5QzRGOUFFMDIvN0NCODdFNUM0 RDczMTFGMTg1MkJCNENBOTU4MzM3NzMucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAp9AwDQYJKoZIhvcNAQELBQADggEBADUcDPNhIzm0Dp8b4nzIKwmW BOGBnXv4p/j5XLgfJGb0pKswibny1IQgozajlflSEe1TIb/25wnftcimasEP/h4O ZsjyvdV5GkE7g5Kpide6eqxIy42XMiQ2+EULFMpfELcmvq89mRfCeEFChY9MC4dP tqeddhjtjUySPIxIKEK1w1AL7Wm0zpoz2+fHBccQyMMEnM9UWsg8UkUzkpMiCGJu m892uPPM/5ul53vSd8uOdB2mGBjLqb1CZxTkqLMQxYUFtIx/8RmuUtPmZHnrB5+m 8YGS+OKjcLhJQ7Qu7dAZ2sseMctuIBUOE2yFyadWNVtGehT5Xt2/F9N9QgddAZw= -----END CERTIFICATE-----Generated at Wed May 13 05:43:07 2026 by rpki-client