$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/72CC7E489B7011F1BE44BE903D11F970.roa File: 72CC7E489B7011F1BE44BE903D11F970.roa (raw, json) Hash identifier: 3I4v5qOzX+tYbITH7A5Ntx0nhzYCg2Bwe+pDTdKTk1M= Subject key identifier: 76:2A:32:0F:C5:10:7D:A3:72:2A:FB:81:B5:33:8D:BB:53:5A:35:41 Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 04B0 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/72CC7E489B7011F1BE44BE903D11F970.roa Signing time: Fri 18 Sep 2026 20:13:25 +0000 ROA not before: Fri 18 Sep 2026 20:13:25 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 16839 IP address blocks: 167.208.0.0/16 maxlen: 16 167.208.0.0/22 maxlen: 24 167.208.4.0/22 maxlen: 22 167.208.4.0/24 maxlen: 24 167.208.5.0/24 maxlen: 24 167.208.6.0/24 maxlen: 24 167.208.7.0/24 maxlen: 24 167.208.8.0/22 maxlen: 24 167.208.12.0/22 maxlen: 22 167.208.12.0/24 maxlen: 24 167.208.13.0/24 maxlen: 24 167.208.14.0/24 maxlen: 24 167.208.15.0/24 maxlen: 24 167.208.16.0/22 maxlen: 22 167.208.16.0/24 maxlen: 24 167.208.17.0/24 maxlen: 24 167.208.18.0/24 maxlen: 24 167.208.19.0/24 maxlen: 24 167.208.24.0/21 maxlen: 24 167.208.32.0/21 maxlen: 24 167.208.40.0/21 maxlen: 21 167.208.40.0/24 maxlen: 24 167.208.41.0/24 maxlen: 24 167.208.42.0/23 maxlen: 24 167.208.44.0/24 maxlen: 24 167.208.45.0/24 maxlen: 24 167.208.46.0/24 maxlen: 24 167.208.47.0/24 maxlen: 24 167.208.48.0/21 maxlen: 24 167.208.128.0/23 maxlen: 24 167.208.130.0/23 maxlen: 24 167.208.136.0/22 maxlen: 24 167.208.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Sep 18 20:13:25 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6aad9b65-62ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:96:f7:4c:81:bd:46:e2:d4:7c:72:da:3e: e9:69:d6:00:4a:f2:d5:42:d2:18:72:8a:13:c2:83: a6:73:c6:f5:93:48:eb:98:a9:39:48:67:f3:77:31: e0:61:f4:d2:87:fe:0e:f0:dc:c4:3f:c2:d4:32:48: 20:93:51:57:50:00:64:62:37:2e:0e:f2:5b:a1:e0: ec:70:72:b3:c7:0f:95:95:2a:38:16:85:c4:f8:03: 76:1b:a8:2c:c0:5a:9e:51:7e:18:fb:18:bf:dd:30: 52:78:41:25:ec:1b:14:4f:99:04:1c:66:5c:43:6d: cd:ca:8e:b8:ff:c7:2b:33:bd:e0:ea:97:42:5a:28: df:f6:61:e9:69:b5:60:00:e3:cd:2b:f7:41:07:e4: ea:9b:e6:98:e5:8c:18:20:c4:03:9c:47:ae:76:d0: 35:f6:92:96:1c:e4:0b:55:fa:2d:fd:23:6b:8c:1b: a2:0b:aa:9a:f8:d7:73:c9:46:70:57:45:8e:75:53: 38:a1:4c:83:31:42:aa:3c:0e:72:6f:17:31:0f:c5: 8e:52:bd:a4:83:4d:e4:1b:c4:91:69:be:92:a9:a5: 96:4a:a3:22:f3:a9:cd:b0:b9:0c:d3:ea:48:52:2b: cc:ef:86:03:96:11:0c:18:eb:a3:37:52:87:72:46: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2A:32:0F:C5:10:7D:A3:72:2A:FB:81:B5:33:8D:BB:53:5A:35:41 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/72CC7E489B7011F1BE44BE903D11F970.roa sbgp-ipAddrBlock: critical IPv4: 167.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 14:37:e0:d6:da:1b:37:6d:24:98:26:63:80:f3:0f:af:ac:2c: 8b:91:cf:52:75:fc:ea:8f:7d:1d:0d:a0:fb:53:af:39:8e:2a: a9:2e:51:2a:cf:84:c7:6a:ef:ae:36:c6:b4:bf:e2:0a:83:59: 41:a8:39:d3:22:b2:d2:fb:e1:b1:e6:4d:f4:fd:2a:af:99:a5: c1:77:55:94:4c:69:49:00:dc:a5:80:a2:ef:2b:30:a9:ce:b0: 9b:f0:7b:bf:19:7b:e4:15:21:29:60:b0:8e:b3:92:7e:bc:4c: 14:38:6c:bc:3c:fa:aa:9d:64:f6:c7:f5:bd:2b:06:a1:b1:cc: ca:49:a7:58:17:17:98:d4:6e:b7:50:12:b4:55:dd:3c:6c:9b: 34:9c:23:2d:b2:cc:85:1b:dd:8a:66:3f:12:4b:e4:88:29:f6: d3:4f:dc:a4:aa:c7:49:ea:20:72:25:89:99:fc:26:e2:38:39: 60:03:1c:eb:bc:86:60:d6:1c:bb:21:bb:da:31:61:21:c8:cf: 66:f9:7c:97:2a:8e:c8:f8:80:f9:8d:e8:43:1e:a2:2c:52:78: fc:1a:8d:a9:ca:17:aa:4f:99:eb:04:f1:26:15:d6:c1:09:4b: 14:8f:f6:d9:31:90:96:c2:db:1b:78:10:59:bd:63:3e:34:b3: 22:30:71:54 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjYwOTE4MjAxMzI1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFkOWI2NS02MmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoCW90yBvUbi1Hxy2j7padYASvLVQtIYcooTwoOmc8b1k0jrmKk5SGfzdzHg YfTSh/4O8NzEP8LUMkggk1FXUABkYjcuDvJboeDscHKzxw+VlSo4FoXE+AN2G6gs wFqeUX4Y+xi/3TBSeEEl7BsUT5kEHGZcQ23Nyo64/8crM73g6pdCWijf9mHpabVg AOPNK/dBB+Tqm+aY5YwYIMQDnEeudtA19pKWHOQLVfot/SNrjBuiC6qa+NdzyUZw V0WOdVM4oUyDMUKqPA5ybxcxD8WOUr2kg03kG8SRab6SqaWWSqMi86nNsLkM0+pI UivM74YDlhEMGOujN1KHckZPUwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFHYqMg/F EH2jcir7gbUzjbtTWjVBMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5ODIvQ0YyMDVDNjBBQzEzMTFFQ0I3NzZCMjA5QzRGOUFFMDIvNzJDQzdFNDg5 QjcwMTFGMUJFNDRCRTkwM0QxMUY5NzAucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAp9AwDQYJKoZIhvcNAQELBQADggEBABQ34NbaGzdtJJgmY4DzD6+s LIuRz1J1/OqPfR0NoPtTrzmOKqkuUSrPhMdq7642xrS/4gqDWUGoOdMistL74bHm TfT9Kq+ZpcF3VZRMaUkA3KWAou8rMKnOsJvwe78Ze+QVISlgsI6zkn68TBQ4bLw8 +qqdZPbH9b0rBqGxzMpJp1gXF5jUbrdQErRV3TxsmzScIy2yzIUb3YpmPxJL5Igp 9tNP3KSqx0nqIHIliZn8JuI4OWADHOu8hmDWHLshu9oxYSHIz2b5fJcqjsj4gPmN 6EMeoixSePwajanKF6pPmesE8SYV1sEJSxSP9tkxkJbC2xt4EFm9Yz40syIwcVQ= -----END CERTIFICATE-----Generated at Tue Sep 22 03:27:05 2026 by rpki-client