$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/172F46B6B2AA11EFA6C7B35AC4F9AE02.roa File: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (raw, json) Hash identifier: LTUGxDOLtfZ0NesWYWcxebgzBLD93r6lK3fhIulzleY= Subject key identifier: A8:39:D4:43:9B:D0:E8:75:B8:03:01:60:41:05:C8:C8:E2:EB:CC:30 Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: 012D Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/172F46B6B2AA11EFA6C7B35AC4F9AE02.roa Signing time: Thu 11 Jun 2026 08:36:09 +0000 ROA not before: Thu 11 Jun 2026 08:36:09 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 153381 IP address blocks: 198.49.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 05:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: Jun 11 08:36:09 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a2a7378-2328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:7c:93:9b:83:3d:88:e9:7f:09:b3:de:eb: 40:3d:bb:b6:56:f7:a9:cb:1e:5a:e6:cb:dd:f6:46: 10:a5:f3:ee:8f:e6:da:d0:3f:69:51:e6:8c:f6:6f: 77:60:a3:07:b5:39:aa:f3:26:ef:c7:ce:ba:04:e8: 05:4e:fd:99:a7:3e:4d:07:e7:80:98:ac:fc:67:b8: ab:a4:75:5e:56:bf:a9:66:0e:a2:49:80:70:67:9e: 28:82:fc:db:94:07:c6:ec:41:2a:81:e2:75:8d:7b: 36:10:87:5a:78:2c:55:04:1c:f8:0b:bb:50:2d:4c: d9:37:43:4f:86:27:28:5b:0d:14:89:28:7d:65:c3: 44:47:6b:dc:e2:6c:8d:13:e1:12:33:f3:16:c3:45: 45:b2:18:2a:ab:63:06:2e:af:50:0b:94:8b:47:83: f3:0f:9b:0e:ad:7b:c6:54:49:38:85:b7:fe:d0:26: 84:c2:a6:a6:ef:0d:8c:00:cd:09:24:95:8d:24:9d: 3e:16:f7:37:2d:54:35:33:0d:2e:22:58:84:86:44: bc:63:27:5e:64:c2:61:2c:8e:d3:a6:ff:8d:cc:d8: 2d:ae:47:ab:f5:b1:5b:7b:a3:b7:e7:31:cc:90:c6: 56:ab:9d:fd:11:8a:eb:cf:d8:f8:c6:05:66:da:c0: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:39:D4:43:9B:D0:E8:75:B8:03:01:60:41:05:C8:C8:E2:EB:CC:30 X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/172F46B6B2AA11EFA6C7B35AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 198.49.32.0/21 Signature Algorithm: sha256WithRSAEncryption 84:cf:cc:34:7f:e9:f9:6d:b1:b5:77:7e:14:67:75:2d:e4:8b: 8e:dc:80:0f:f0:b4:59:a6:d0:ef:5e:c2:00:1f:c5:0e:c4:e6: 9d:b4:e8:86:e0:8c:be:63:8e:5d:e4:be:38:c0:db:87:2e:f7: 60:ad:b6:58:70:b6:5f:38:89:c6:0b:ba:de:66:03:ac:06:f3: fa:79:1f:71:55:42:61:3c:73:d4:56:97:96:4f:35:5b:b6:05: a8:97:79:da:7d:0a:b8:f2:75:0e:b7:a4:1d:50:2c:4d:c2:c3: b3:f6:56:f4:c4:d9:7d:ad:fa:39:fd:a9:3a:dd:8e:96:c4:8b: 4e:a0:9b:ed:a6:e3:35:54:49:ce:5e:0d:fe:32:4f:43:10:f3: 78:9b:5e:fa:56:1a:cb:34:87:ae:3d:3d:37:e4:a6:76:da:9b: 32:fa:f9:0b:ba:e3:6e:2a:61:43:59:b6:82:1e:5c:ec:1a:7c: ec:cf:a3:8a:ce:71:13:c4:dc:ad:85:05:3c:6b:de:9d:60:90: 58:bc:cf:30:60:7a:75:1e:52:40:47:ce:d4:a0:23:98:c0:62: f3:40:36:5c:ea:49:43:d8:53:65:9c:49:73:e6:16:b3:83:cd: 30:e0:5b:80:e1:83:bb:48:64:8b:30:9a:80:1f:50:62:d5:40: f7:ee:ea:8f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMzcxMTAvBgNVBAUTKDhBODBGRThBMEQyM0JDMzBDNjY0QTc3QUEwOEVEOTBF MTlCNTkxREMwHhcNMjYwNjExMDgzNjA5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJhNzM3OC0yMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdF8k5uDPYjpfwmz3utAPbu2Vvepyx5a5svd9kYQpfPuj+ba0D9pUeaM9m93 YKMHtTmq8ybvx866BOgFTv2Zpz5NB+eAmKz8Z7irpHVeVr+pZg6iSYBwZ54ogvzb lAfG7EEqgeJ1jXs2EIdaeCxVBBz4C7tQLUzZN0NPhicoWw0UiSh9ZcNER2vc4myN E+ESM/MWw0VFshgqq2MGLq9QC5SLR4PzD5sOrXvGVEk4hbf+0CaEwqam7w2MAM0J JJWNJJ0+Fvc3LVQ1Mw0uIliEhkS8YydeZMJhLI7Tpv+NzNgtrker9bFbe6O35zHM kMZWq539EYrrz9j4xgVm2sCzGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKg51EOb 0Oh1uAMBYEEFyMji68wwMB8GA1UdIwQYMBaAFIqA/ooNI7wwxmSneqCO2Q4ZtZHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIzNy81MzJBMkUwQUFC QkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZEREdaS2Q2b0k3WkRobTFr ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFCMzcvNTMyQTJFMEFBQkJDMTFFRkIzRDlDRTZFQzRGOUFFMDIvMTcyRjQ2QjZC MkFBMTFFRkE2QzdCMzVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDxjEgMA0GCSqGSIb3DQEBCwUAA4IBAQCEz8w0f+n5bbG1d34UZ3Ut 5IuO3IAP8LRZptDvXsIAH8UOxOadtOiG4Iy+Y45d5L44wNuHLvdgrbZYcLZfOInG C7reZgOsBvP6eR9xVUJhPHPUVpeWTzVbtgWol3nafQq48nUOt6QdUCxNwsOz9lb0 xNl9rfo5/ak63Y6WxItOoJvtpuM1VEnOXg3+Mk9DEPN4m176VhrLNIeuPT035KZ2 2psy+vkLuuNuKmFDWbaCHlzsGnzsz6OKznETxNythQU8a96dYJBYvM8wYHp1HlJA R87UoCOYwGLzQDZc6klD2FNlnElz5hazg80w4FuA4YO7SGSLMJqAH1Bi1UD37uqP -----END CERTIFICATE-----Generated at Sat Jun 13 16:00:01 2026 by rpki-client