$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/72E97B3A1BDB11F0B77B1344C4F9AE02.roa File: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (raw, json) Hash identifier: DlhDgTG7w84Ovj2w/3S1GtqzEGfOWk6+fiHNLhzsPdE= Subject key identifier: 1F:B0:3A:53:68:89:02:68:F6:CB:D6:9C:97:B1:ED:48:B6:5C:2D:5A Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 0237 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/72E97B3A1BDB11F0B77B1344C4F9AE02.roa Signing time: Thu 09 Jul 2026 06:31:54 +0000 ROA not before: Thu 09 Jul 2026 06:31:54 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 396982 IP address blocks: 167.103.171.0/24 maxlen: 24 167.103.172.0/24 maxlen: 24 167.103.173.0/24 maxlen: 24 167.103.174.0/24 maxlen: 24 167.103.175.0/24 maxlen: 24 167.103.176.0/24 maxlen: 24 167.103.177.0/24 maxlen: 24 167.103.178.0/24 maxlen: 24 167.103.179.0/24 maxlen: 24 167.103.180.0/24 maxlen: 24 167.103.181.0/24 maxlen: 24 167.103.182.0/24 maxlen: 24 167.103.183.0/24 maxlen: 24 167.103.184.0/24 maxlen: 24 167.103.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Jul 9 06:31:54 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4f405a-b607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:eb:40:58:f9:6f:82:27:ef:11:2b:15:6c: c5:89:36:02:de:5f:76:c9:dd:82:fa:98:43:9a:23: e5:2b:41:d5:7e:b1:b1:1c:f6:6a:49:06:6a:65:c7: 29:e8:fb:f0:57:04:ef:38:40:34:1a:ee:0e:4c:bc: 1e:24:c7:c8:57:6c:54:d0:ef:09:a7:fa:b7:66:dc: d3:63:3e:01:90:18:41:52:6e:ba:64:5f:a0:62:03: f0:c9:ed:6e:b6:f1:68:a8:1d:d8:ac:1b:c4:41:c0: db:88:52:6a:66:51:13:62:a0:82:b6:8d:91:f1:45: 5a:7b:18:d9:7e:f0:a8:a1:72:10:14:12:ce:b4:01: 08:af:2a:3e:92:d6:bb:c9:d9:97:14:42:32:d2:b6: d4:bd:55:50:44:63:57:ea:63:6a:64:69:13:38:fc: 70:a2:16:4f:19:14:9e:44:d9:1a:4d:c0:7f:85:a2: 5a:95:30:81:a8:cd:d3:98:b1:9f:d0:39:20:fe:e4: 65:1b:56:0a:d7:3b:40:bf:93:44:72:a7:ea:fb:f3: b3:69:a3:0f:72:9d:32:7d:32:11:0a:67:d6:7a:a0: 36:64:79:4c:85:00:0d:3f:89:c8:68:eb:95:28:76: 34:ad:62:f2:50:e7:f2:82:51:68:29:23:46:ca:4b: 67:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B0:3A:53:68:89:02:68:F6:CB:D6:9C:97:B1:ED:48:B6:5C:2D:5A X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/72E97B3A1BDB11F0B77B1344C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 167.103.171.0-167.103.184.255 167.103.236.0/24 Signature Algorithm: sha256WithRSAEncryption 04:5e:ab:b7:f8:8b:a0:fc:03:fa:9a:90:cf:df:82:38:af:a2: 23:62:84:12:1a:da:ce:64:53:67:57:08:e3:66:e0:63:98:3d: 13:26:a5:d9:0f:79:ec:68:b5:94:41:da:7a:ad:3c:86:be:6a: 85:f5:d5:7a:d3:39:8e:42:fc:a4:f9:11:23:bb:7d:3b:1c:cd: 25:2a:2d:56:c7:b8:f5:52:f1:a8:ca:9d:43:91:eb:60:c4:aa: fb:09:c7:3f:bb:8d:62:0e:e3:7c:df:52:d1:06:95:70:e4:11: fb:17:cc:fd:36:3a:45:cd:5a:43:0e:26:7a:db:78:5c:04:43: 40:13:a3:d3:e7:b2:97:a1:2d:41:9d:d1:0d:fa:a9:40:09:3c: 90:c7:d5:37:f9:e0:7f:b9:23:52:ba:5b:31:08:be:ef:be:1b: be:38:a9:65:ad:91:51:0c:60:1f:22:c2:f4:6b:79:9f:46:01: ba:94:95:16:f1:86:d7:38:b1:97:6d:f1:b7:a7:10:ee:ad:c6: 1f:25:de:27:e5:02:93:39:4b:a2:89:bd:78:52:c2:63:68:ae: 7c:84:f1:c5:71:1b:f2:71:72:1e:77:9a:5b:95:b8:0b:f3:62: 23:6e:2a:1d:75:c4:6c:96:d2:a2:af:f6:14:d3:bb:9c:62:50: 9a:d0:46:87 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjYwNzA5MDYzMTU0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmNDA1YS1iNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx/rQFj5b4In7xErFWzFiTYC3l92yd2C+phDmiPlK0HVfrGxHPZqSQZqZccp 6PvwVwTvOEA0Gu4OTLweJMfIV2xU0O8Jp/q3ZtzTYz4BkBhBUm66ZF+gYgPwye1u tvFoqB3YrBvEQcDbiFJqZlETYqCCto2R8UVaexjZfvCooXIQFBLOtAEIryo+kta7 ydmXFEIy0rbUvVVQRGNX6mNqZGkTOPxwohZPGRSeRNkaTcB/haJalTCBqM3TmLGf 0Dkg/uRlG1YK1ztAv5NEcqfq+/OzaaMPcp0yfTIRCmfWeqA2ZHlMhQANP4nIaOuV KHY0rWLyUOfyglFoKSNGyktnFQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFB+wOlNo iQJo9svWnJex7Ui2XC1aMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcxNjkvNjIzM0REM0VFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvNzJFOTdCM0Ex QkRCMTFGMEI3N0IxMzQ0QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBACnZ6sDBACnZ7gDBACnZ+wwDQYJKoZIhvcNAQELBQADggEBAARe q7f4i6D8A/qakM/fgjivoiNihBIa2s5kU2dXCONm4GOYPRMmpdkPeexotZRB2nqt PIa+aoX11XrTOY5C/KT5ESO7fTsczSUqLVbHuPVS8ajKnUOR62DEqvsJxz+7jWIO 43zfUtEGlXDkEfsXzP02OkXNWkMOJnrbeFwEQ0ATo9PnspehLUGd0Q36qUAJPJDH 1Tf54H+5I1K6WzEIvu++G744qWWtkVEMYB8iwvRreZ9GAbqUlRbxhtc4sZdt8ben EO6txh8l3iflApM5S6KJvXhSwmNornyE8cVxG/Jxch53mluVuAvzYiNuKh11xGyW 0qKv9hTTu5xiUJrQRoc= -----END CERTIFICATE-----Generated at Fri Jul 24 00:08:46 2026 by rpki-client