$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/332B4C6ABA7011F088893F1DC4F9AE02.roa File: 332B4C6ABA7011F088893F1DC4F9AE02.roa (raw, json) Hash identifier: 0Sm54IRiiNJRyYTIMOY3l4XXUfmKddVszLFvgn4oy1g= Subject key identifier: B2:EA:35:A3:78:49:E9:9D:65:59:85:E9:44:31:FD:BB:9E:35:DB:8D Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 0428 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/332B4C6ABA7011F088893F1DC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:04:06 +0000 ROA not before: Wed 17 Dec 2025 09:17:33 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 16839 IP address blocks: 167.208.0.0/16 maxlen: 16 167.208.0.0/22 maxlen: 24 167.208.4.0/22 maxlen: 22 167.208.4.0/24 maxlen: 24 167.208.5.0/24 maxlen: 24 167.208.6.0/24 maxlen: 24 167.208.7.0/24 maxlen: 24 167.208.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Dec 17 09:17:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47f96-4bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:75:8e:f9:e0:05:ac:73:67:d2:58:f8:00: 23:14:4f:48:34:38:2f:50:6a:47:93:b0:a7:68:c2: 0a:c7:5e:58:0b:a1:a9:39:0e:2d:0e:a8:f0:c1:0c: d4:56:7d:bd:80:d8:f0:d4:7d:7d:c9:eb:a3:47:80: 41:0c:58:e2:9d:f7:47:77:7d:18:e0:4f:39:ef:e9: d3:40:40:e7:6a:0b:7f:b3:55:f1:4b:60:75:f8:6e: a9:d8:5d:8d:98:b7:a0:bd:4e:b2:09:a3:1d:c7:ef: f6:4a:b0:0f:9a:16:a3:63:b5:a6:35:47:4f:33:5a: f0:30:12:9e:a5:e4:40:b7:23:a2:89:b4:00:ce:90: 3d:d9:44:74:53:95:c2:94:82:fe:e1:5c:25:e2:04: a0:3d:75:80:fd:24:45:e6:64:f9:ae:95:f6:ee:e4: a9:e0:43:9b:e6:77:bd:9c:a4:cc:b4:7e:05:ca:0d: 4f:b4:f2:23:c1:e8:22:3b:5b:7e:6b:ad:46:71:26: e3:e7:4f:8d:fc:f5:b4:de:48:1c:5b:aa:79:1a:5b: e6:09:b0:04:55:23:9f:52:02:5c:da:91:59:b4:12: d0:fa:2c:f2:ae:4b:1e:75:08:d5:33:9d:f3:47:36: 45:fd:5f:94:1f:eb:76:5b:17:14:51:50:bf:3c:bd: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EA:35:A3:78:49:E9:9D:65:59:85:E9:44:31:FD:BB:9E:35:DB:8D X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/332B4C6ABA7011F088893F1DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 167.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:e8:58:2e:7e:f3:9f:42:34:fb:74:ab:93:ed:a1:8e:98:11: 7e:a6:ae:f8:39:e6:40:2c:f5:83:49:64:52:63:d4:b7:58:fb: a6:6a:7c:d0:b2:e8:22:3e:cc:54:df:60:19:83:f7:37:a7:94: cf:c3:57:ee:38:d6:ea:25:0e:fb:53:b1:e8:5e:82:4b:35:50: a5:f2:61:e9:64:de:5f:e1:4a:b7:24:ff:1a:56:40:59:81:e0: 4a:b2:1f:9f:49:6f:7f:7c:86:93:d5:5c:24:57:7c:65:0a:41: 81:91:15:d9:ff:dd:dc:9f:24:ae:80:e8:4c:9a:21:a7:38:10: e3:0f:b1:ac:91:0d:2f:92:3b:89:f1:73:38:44:d4:37:18:89: 2b:ca:29:8d:d2:b0:0a:5f:ce:a3:3f:ce:37:a1:cd:c7:62:f7: 40:ca:4c:a7:7a:dc:96:a1:a6:95:b3:84:ea:31:82:55:68:fe: f5:7a:77:18:24:80:a5:c8:dc:5a:67:56:41:65:7c:7c:c1:5f: 33:04:7c:a7:69:e8:8f:48:df:e9:64:0a:54:18:29:3e:f3:3a: 28:28:72:8f:04:2b:4e:f5:7e:3c:cc:e7:39:2e:6f:ca:e8:60: e4:99:90:ef:80:ec:b8:31:5c:d6:00:3e:fe:0c:35:95:36:bc: fc:ee:0e:ad -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjUxMjE3MDkxNzMzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Y5Ni00YmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApax1jvngBaxzZ9JY+AAjFE9INDgvUGpHk7CnaMIKx15YC6GpOQ4tDqjwwQzU Vn29gNjw1H19yeujR4BBDFjinfdHd30Y4E857+nTQEDnagt/s1XxS2B1+G6p2F2N mLegvU6yCaMdx+/2SrAPmhajY7WmNUdPM1rwMBKepeRAtyOiibQAzpA92UR0U5XC lIL+4Vwl4gSgPXWA/SRF5mT5rpX27uSp4EOb5ne9nKTMtH4Fyg1PtPIjwegiO1t+ a61GcSbj50+N/PW03kgcW6p5GlvmCbAEVSOfUgJc2pFZtBLQ+izyrksedQjVM53z RzZF/V+UH+t2WxcUUVC/PL3LjQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFLLqNaN4 SemdZVmF6UQx/bueNduNMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5ODIvQ0YyMDVDNjBBQzEzMTFFQ0I3NzZCMjA5QzRGOUFFMDIvMzMyQjRDNkFC QTcwMTFGMDg4ODkzRjFEQzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAp9AwDQYJKoZIhvcNAQELBQADggEBAAnoWC5+859CNPt0q5PtoY6Y EX6mrvg55kAs9YNJZFJj1LdY+6ZqfNCy6CI+zFTfYBmD9zenlM/DV+441uolDvtT sehegks1UKXyYelk3l/hSrck/xpWQFmB4EqyH59Jb398hpPVXCRXfGUKQYGRFdn/ 3dyfJK6A6EyaIac4EOMPsayRDS+SO4nxczhE1DcYiSvKKY3SsApfzqM/zjehzcdi 90DKTKd63JahppWzhOoxglVo/vV6dxgkgKXI3FpnVkFlfHzBXzMEfKdp6I9I3+lk ClQYKT7zOigoco8EK071fjzM5zkub8roYOSZkO+A7LgxXNYAPv4MNZU2vPzuDq0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:51:11 2026 by rpki-client