$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/332B4C6ABA7011F088893F1DC4F9AE02.roa File: 332B4C6ABA7011F088893F1DC4F9AE02.roa (raw, json) Hash identifier: +FHEaLHqCB2bNzjsCWbT64CuT76G0G4cWDqRO10f7Qs= Subject key identifier: 57:B2:CF:BD:77:85:1A:52:70:A3:D3:97:1D:16:F4:0A:3A:C2:CD:DB Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 0442 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/332B4C6ABA7011F088893F1DC4F9AE02.roa Signing time: Thu 16 Apr 2026 15:27:46 +0000 ROA not before: Thu 16 Apr 2026 15:27:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 16839 IP address blocks: 167.208.0.0/16 maxlen: 16 167.208.0.0/22 maxlen: 24 167.208.4.0/22 maxlen: 22 167.208.4.0/24 maxlen: 24 167.208.5.0/24 maxlen: 24 167.208.6.0/24 maxlen: 24 167.208.7.0/24 maxlen: 24 167.208.8.0/22 maxlen: 24 167.208.12.0/22 maxlen: 22 167.208.12.0/24 maxlen: 24 167.208.13.0/24 maxlen: 24 167.208.14.0/24 maxlen: 24 167.208.15.0/24 maxlen: 24 167.208.16.0/22 maxlen: 22 167.208.16.0/24 maxlen: 24 167.208.17.0/24 maxlen: 24 167.208.18.0/24 maxlen: 24 167.208.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Apr 16 15:27:46 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69e0fff2-e5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:27:46:19:0d:89:45:0e:a3:ba:66:eb:e1: 9e:32:f5:b2:90:57:ed:34:4d:ad:2d:6f:58:8d:56: 74:b4:31:13:75:04:98:a3:52:73:f2:1c:06:f9:22: 57:a0:05:a8:c4:d6:82:eb:d3:a2:13:33:5f:68:d2: 9b:ab:a0:50:3b:d2:c3:99:5d:47:8e:72:11:3a:28: 6f:d8:99:ce:de:70:17:58:18:2e:f7:94:eb:8c:55: 4a:fc:58:bc:b8:bd:dd:e6:2a:62:6e:7a:e9:b9:24: c4:6b:83:66:19:31:b0:80:0f:f3:8a:75:c1:08:2f: 87:12:25:91:c7:a8:9a:cf:6d:89:df:6f:76:06:47: ec:c8:83:4a:26:59:b9:8c:ab:3d:d0:a1:9d:89:b1: 92:68:06:d1:e4:f8:48:21:16:0d:6a:0f:3e:be:bf: b8:b8:f9:36:33:64:69:24:20:e8:8b:da:d0:61:24: ee:9d:ef:80:ca:4c:7e:83:e2:db:32:c6:da:14:08: ea:c9:12:79:e8:76:6e:33:bb:9b:76:7c:b1:08:23: 44:16:89:a5:bc:27:8a:35:41:ef:97:0c:83:ba:9b: 06:8c:a9:89:bc:b6:27:81:d5:22:d8:d5:bc:11:77: 3e:bf:24:4f:d3:9d:39:61:3d:4e:94:c7:aa:45:f1: 53:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:CF:BD:77:85:1A:52:70:A3:D3:97:1D:16:F4:0A:3A:C2:CD:DB X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/332B4C6ABA7011F088893F1DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 167.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 61:73:c2:fc:35:73:86:92:89:75:a3:17:b0:bc:74:64:7f:96: af:9c:f2:a2:57:a6:4e:8c:76:cc:d1:69:7c:d0:a9:ce:91:51: 6d:b0:5c:a7:a4:b4:0f:b6:13:ed:6b:21:4c:27:8e:67:b0:31: e9:0e:9b:79:88:77:ba:4b:c2:2f:3b:9c:14:f8:95:b5:ca:63: c4:96:2c:78:64:92:6b:c9:60:d9:93:4c:7f:c2:45:41:cb:b7: ed:2c:7b:ab:02:fe:cb:76:a9:44:85:0c:9d:70:9f:e5:c5:71: 66:2a:06:65:1a:54:ad:aa:d3:eb:29:af:a0:05:7b:78:89:89: d2:6f:f7:43:6d:f1:d9:cb:9c:4d:34:3b:0b:7a:4e:8e:a8:9f: 91:d1:a5:7c:7b:74:93:f2:76:d1:03:54:de:9f:90:91:78:66: b2:d1:2e:4e:ce:74:b6:50:de:07:ea:60:d3:a7:a1:7d:ab:79: 8e:e4:95:1b:94:46:52:ea:00:4c:ba:af:65:82:cb:16:f6:e1: 06:60:47:25:af:86:a1:5d:9c:db:76:3a:9a:18:2a:c1:3c:36: 67:58:3f:13:ec:d5:06:56:cd:49:85:14:b5:2b:06:e5:8b:5d: 5c:8b:f1:de:1a:e2:95:2f:22:d9:c9:a3:97:9e:6d:f0:46:34: 48:b8:a5:0c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjYwNDE2MTUyNzQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWUwZmZmMi1lNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oUnRhkNiUUOo7pm6+GeMvWykFftNE2tLW9YjVZ0tDETdQSYo1Jz8hwG+SJX oAWoxNaC69OiEzNfaNKbq6BQO9LDmV1HjnIROihv2JnO3nAXWBgu95TrjFVK/Fi8 uL3d5ipibnrpuSTEa4NmGTGwgA/zinXBCC+HEiWRx6iaz22J3292BkfsyINKJlm5 jKs90KGdibGSaAbR5PhIIRYNag8+vr+4uPk2M2RpJCDoi9rQYSTune+Aykx+g+Lb MsbaFAjqyRJ56HZuM7ubdnyxCCNEFomlvCeKNUHvlwyDupsGjKmJvLYngdUi2NW8 EXc+vyRP0505YT1OlMeqRfFTPwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFFeyz713 hRpScKPTlx0W9Ao6ws3bMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5ODIvQ0YyMDVDNjBBQzEzMTFFQ0I3NzZCMjA5QzRGOUFFMDIvMzMyQjRDNkFC QTcwMTFGMDg4ODkzRjFEQzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAp9AwDQYJKoZIhvcNAQELBQADggEBAGFzwvw1c4aSiXWjF7C8dGR/ lq+c8qJXpk6MdszRaXzQqc6RUW2wXKektA+2E+1rIUwnjmewMekOm3mId7pLwi87 nBT4lbXKY8SWLHhkkmvJYNmTTH/CRUHLt+0se6sC/st2qUSFDJ1wn+XFcWYqBmUa VK2q0+spr6AFe3iJidJv90Nt8dnLnE00Owt6To6on5HRpXx7dJPydtEDVN6fkJF4 ZrLRLk7OdLZQ3gfqYNOnoX2reY7klRuURlLqAEy6r2WCyxb24QZgRyWvhqFdnNt2 OpoYKsE8NmdYPxPs1QZWzUmFFLUrBuWLXVyL8d4a4pUvItnJo5eebfBGNEi4pQw= -----END CERTIFICATE-----Generated at Sat Apr 18 03:59:29 2026 by rpki-client