$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116882/F065D97CCC2511F1BAA7195AFB65CEF9/F0320336D37D11F1B3C529F00066CEF9.roa File: F0320336D37D11F1B3C529F00066CEF9.roa (raw, json) Hash identifier: h7k3/cp0291MawnoyI9bZKN0Pbp6ov/yHeaioH9ewHs= Subject key identifier: 5F:29:18:02:A0:9E:2E:64:C5:91:66:06:22:A5:E4:20:75:24:16:C2 Certificate issuer: /CN=A9116882/serialNumber=AC6A2D86EE0D858137CE6C4D855CE4FAAA2DB894 Certificate serial: 07 Authority key identifier: AC:6A:2D:86:EE:0D:85:81:37:CE:6C:4D:85:5C:E4:FA:AA:2D:B8:94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rGothu4NhYE3zmxNhVzk-qotuJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116882/F065D97CCC2511F1BAA7195AFB65CEF9/F0320336D37D11F1B3C529F00066CEF9.roa Signing time: Thu 29 Oct 2026 09:48:48 +0000 ROA not before: Thu 29 Oct 2026 09:48:48 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 18292 IP address blocks: 168.217.7.0/24 maxlen: 24 168.217.8.0/24 maxlen: 24 168.217.72.0/22 maxlen: 22 168.217.72.0/24 maxlen: 24 168.217.80.0/24 maxlen: 24 168.217.113.0/24 maxlen: 24 168.217.114.0/24 maxlen: 24 168.217.180.0/24 maxlen: 24 168.217.200.0/22 maxlen: 22 168.217.200.0/24 maxlen: 24 168.217.244.0/23 maxlen: 23 168.217.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116882/F065D97CCC2511F1BAA7195AFB65CEF9/rGothu4NhYE3zmxNhVzk-qotuJQ.crl rsync://rpki.apnic.net/member_repository/A9116882/F065D97CCC2511F1BAA7195AFB65CEF9/rGothu4NhYE3zmxNhVzk-qotuJQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rGothu4NhYE3zmxNhVzk-qotuJQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 10:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116882, serialNumber=AC6A2D86EE0D858137CE6C4D855CE4FAAA2DB894 Validity Not Before: Oct 29 09:48:48 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6ae31680-6509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:39:78:9a:fd:c7:32:e3:22:74:b2:d4:96: d8:99:49:40:75:da:4f:e8:8d:88:bc:54:2f:3e:b2: ce:95:6a:55:b7:f3:39:8d:4d:e8:a2:2f:ae:16:01: ee:d6:35:e8:51:f8:b5:ee:ae:60:78:67:89:50:cb: ad:88:21:22:d0:34:c4:f5:16:81:20:d6:28:c6:f3: 37:af:e8:16:70:a6:c4:fd:2d:37:12:cf:67:40:3b: 12:3f:20:6d:d1:53:7a:1d:2b:9a:97:40:45:41:b8: 33:3b:a4:d3:48:78:33:43:98:39:7f:a3:cf:36:1f: 07:cd:a6:b2:2f:a4:55:33:65:69:2d:ef:6b:a1:16: e7:d1:f6:22:57:4e:ca:d9:f4:b4:21:9d:c3:61:ca: 2f:83:c8:f2:80:48:92:51:1f:cc:99:7d:19:dc:5e: 92:b4:43:e8:ee:f1:a1:d1:9c:20:05:66:ba:09:7e: ea:bd:5b:ff:5b:84:69:db:b4:88:c3:3b:8b:71:68: e4:78:98:34:1b:90:7e:c4:56:2c:b1:2b:09:fe:6f: 1c:8a:3a:32:5c:b5:89:8a:8f:7d:42:35:40:56:14: 57:1c:eb:07:f4:25:dc:fa:94:12:a9:f2:d3:b8:d3: 43:e4:e1:d0:e8:9a:57:c7:ae:8f:f7:05:0b:eb:30: c8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:29:18:02:A0:9E:2E:64:C5:91:66:06:22:A5:E4:20:75:24:16:C2 X509v3 Authority Key Identifier: keyid:AC:6A:2D:86:EE:0D:85:81:37:CE:6C:4D:85:5C:E4:FA:AA:2D:B8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116882/F065D97CCC2511F1BAA7195AFB65CEF9/rGothu4NhYE3zmxNhVzk-qotuJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rGothu4NhYE3zmxNhVzk-qotuJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116882/F065D97CCC2511F1BAA7195AFB65CEF9/F0320336D37D11F1B3C529F00066CEF9.roa sbgp-ipAddrBlock: critical IPv4: 168.217.7.0-168.217.8.255 168.217.72.0/22 168.217.80.0/24 168.217.113.0-168.217.114.255 168.217.180.0/24 168.217.200.0/22 168.217.244.0/23 Signature Algorithm: sha256WithRSAEncryption 12:1f:5d:c0:6b:81:ab:ce:9c:b2:ca:9e:08:d7:b1:7c:38:a7: 46:8b:c3:5c:c0:b1:00:a6:9b:1e:9c:cd:aa:36:62:85:17:db: bb:0f:48:a1:ca:7b:96:3d:10:ed:c3:55:d7:1c:5a:50:af:01: af:55:8a:d9:7a:a8:a2:aa:1b:ba:65:9b:1f:7a:3c:a5:7f:d0: 7b:f4:48:d9:9d:54:8b:e3:97:75:a9:1d:4b:27:a5:09:48:2e: a5:1a:d7:ee:8d:d5:db:72:de:3c:22:eb:70:12:94:9e:30:4b: 4c:3a:5c:a8:f2:f1:d4:08:54:d3:65:c2:2b:18:83:df:04:f1: 34:8b:c2:b0:4e:e2:e1:fb:01:60:2b:94:fd:01:63:4a:cd:55: 15:00:5f:e0:5a:57:8f:fe:76:c1:0b:48:18:12:7f:1c:c0:f7: 83:72:1f:46:91:28:86:a5:8b:18:f4:fb:1b:6a:49:a4:47:81: fa:ba:78:47:a1:35:1b:7a:79:0c:48:b4:ca:17:6d:47:5e:03: 77:04:4d:fa:41:e9:53:fe:73:bf:28:f3:11:ab:bc:56:69:90: 0d:81:ce:39:cd:d7:6a:d1:50:76:0b:5d:7b:03:48:18:45:48: 19:62:fb:4e:c8:d0:57:aa:7b:68:a3:50:b6:d4:ce:5f:60:b8: 95:80:7a:ed -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Njg4MjExMC8GA1UEBRMoQUM2QTJEODZFRTBEODU4MTM3Q0U2QzREODU1Q0U0RkFB QTJEQjg5NDAeFw0yNjEwMjkwOTQ4NDhaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZTMxNjgwLTY1MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgZzl4mv3HMuMidLLUltiZSUB12k/ojYi8VC8+ss6ValW38zmNTeiiL64WAe7W NehR+LXurmB4Z4lQy62IISLQNMT1FoEg1ijG8zev6BZwpsT9LTcSz2dAOxI/IG3R U3odK5qXQEVBuDM7pNNIeDNDmDl/o882HwfNprIvpFUzZWkt72uhFufR9iJXTsrZ 9LQhncNhyi+DyPKASJJRH8yZfRncXpK0Q+ju8aHRnCAFZroJfuq9W/9bhGnbtIjD O4txaOR4mDQbkH7EViyxKwn+bxyKOjJctYmKj31CNUBWFFcc6wf0Jdz6lBKp8tO4 00Pk4dDomlfHro/3BQvrMMhlAgMBAAGjggKUMIICkDAdBgNVHQ4EFgQUXykYAqCe LmTFkWYGIqXkIHUkFsIwHwYDVR0jBBgwFoAUrGothu4NhYE3zmxNhVzk+qotuJQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2ODgyL0YwNjVEOTdDQ0My NTExRjFCQUE3MTk1QUZCNjVDRUY5L3JHb3RodTROaFlFM3pteE5oVnprLXFvdHVK US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvckdvdGh1NE5oWUUzem14TmhWemstcW90dUpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njg4Mi9GMDY1RDk3Q0NDMjUxMUYxQkFBNzE5NUFGQjY1Q0VGOS9GMDMyMDMzNkQz N0QxMUYxQjNDNTI5RjAwMDY2Q0VGOS5yb2EwUwYIKwYBBQUHAQcBAf8ERDBCMEAE AgABMDowDAMEAKjZBwMEAKjZCAMEAqjZSAMEAKjZUDAMAwQAqNlxAwQAqNlyAwQA qNm0AwQCqNnIAwQBqNn0MA0GCSqGSIb3DQEBCwUAA4IBAQASH13Aa4Grzpyyyp4I 17F8OKdGi8NcwLEAppsenM2qNmKFF9u7D0ihynuWPRDtw1XXHFpQrwGvVYrZeqii qhu6ZZsfejylf9B79EjZnVSL45d1qR1LJ6UJSC6lGtfujdXbct48IutwEpSeMEtM Olyo8vHUCFTTZcIrGIPfBPE0i8KwTuLh+wFgK5T9AWNKzVUVAF/gWleP/nbBC0gY En8cwPeDch9GkSiGpYsY9PsbakmkR4H6unhHoTUbenkMSLTKF21HXgN3BE36QelT /nO/KPMRq7xWaZANgc45zddq0VB2C117A0gYRUgZYvtOyNBXqntoo1C21M5fYLiV gHrt -----END CERTIFICATE-----Generated at Thu Nov 5 17:44:55 2026 by rpki-client