$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/BFC0298670DC11EF8B65D95AC4F9AE02.roa File: BFC0298670DC11EF8B65D95AC4F9AE02.roa (raw, json) Hash identifier: kzX0teoGqCYcrXmXpjad2Lv+QKDn7uXbylM76fvPiSQ= Subject key identifier: FA:8E:EC:CB:D1:B5:94:00:B8:01:79:9F:E2:54:0B:D8:F2:99:86:65 Certificate issuer: /CN=A9171D16/serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2 Certificate serial: 019F Authority key identifier: 70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/BFC0298670DC11EF8B65D95AC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:06:55 +0000 ROA not before: Sat 17 Jan 2026 03:23:17 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 152299 IP address blocks: 157.10.38.0/24 maxlen: 24 157.10.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16, serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2 Validity Not Before: Jan 17 03:23:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a439ef-77a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:b6:fc:5c:3c:41:8e:83:b8:0e:b3:6e:21: 93:00:6c:5e:c0:e5:02:7d:e7:f3:3e:9d:f5:13:ae: d7:23:1a:22:10:4b:2a:9a:d1:6f:44:c2:8d:53:88: d0:02:51:76:b0:a7:15:f7:ff:69:6a:c0:62:ee:d7: fe:3b:73:e2:b8:aa:24:d6:ac:bb:00:19:9b:4e:20: 77:47:f3:7f:67:f5:48:28:b1:ab:88:2f:c4:80:67: c0:1e:28:39:83:32:b2:6a:7b:6c:d5:50:f0:43:22: f1:eb:13:3e:82:b8:c0:69:77:46:a8:54:d1:7c:39: 66:17:0a:42:aa:32:dd:d3:b0:0f:44:56:f3:cd:4a: 3b:69:cb:70:a6:9c:f2:ad:64:c6:f9:ba:63:82:d2: f3:bf:28:b3:0e:90:03:b1:61:1f:93:ca:a1:c6:9a: ce:0a:a7:83:c6:12:00:af:15:66:70:1c:6f:fa:81: 59:43:92:81:e7:63:90:bc:34:d6:e6:de:dd:b1:80: 84:36:c6:61:93:af:17:06:0e:77:4c:43:45:11:58: ac:1a:4d:93:ec:50:7d:9b:ff:c9:db:95:0c:49:cb: 8a:e6:36:c0:19:cd:dd:da:2e:35:e5:f1:ca:43:f1: 6a:39:e4:93:5e:cf:fb:02:44:24:7d:b8:a8:04:6f: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8E:EC:CB:D1:B5:94:00:B8:01:79:9F:E2:54:0B:D8:F2:99:86:65 X509v3 Authority Key Identifier: keyid:70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/BFC0298670DC11EF8B65D95AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.38.0/23 Signature Algorithm: sha256WithRSAEncryption 51:96:62:6e:f7:1a:12:dd:a3:6d:e6:d4:96:b1:68:32:4b:a4: a3:e2:2b:a4:78:11:c8:d7:29:08:73:bc:28:5c:0b:9e:cb:e0: a1:17:9d:01:c5:14:5e:0e:70:87:cb:3b:13:e9:bc:5b:18:8e: e3:fc:a2:dd:f9:2c:3e:58:e7:5c:fc:86:71:0e:33:be:d8:43: 7b:33:78:dc:37:1c:dc:31:ab:73:ab:d4:de:23:70:a4:09:bc: ff:e8:8b:c1:48:2f:2a:fe:fd:81:3e:ad:71:2c:96:0e:ef:01: 3c:f0:2b:65:34:fd:6f:dd:da:8f:96:42:d5:96:4e:91:5b:eb: 0a:e0:86:6c:f0:7e:2a:8b:12:79:bb:47:bf:af:30:f5:f3:0c: 66:6d:61:68:86:60:8c:5d:bc:5b:31:7d:81:7e:1b:4f:0b:66: 0f:a4:3d:d3:49:57:cf:54:6f:83:12:ee:e7:64:6c:dd:27:80: 22:56:25:63:d6:63:d8:31:9d:f7:c4:f6:af:c5:c6:fc:75:ad: e5:9f:9f:33:d5:7f:33:39:9f:a1:4e:ae:e3:08:71:c7:26:10: a1:82:9c:5e:4e:df:8f:73:0a:c4:bf:48:bd:37:1f:84:7e:49: 85:06:88:b9:8f:b3:7c:f0:a9:7b:bc:48:36:aa:9c:47:da:5a: 99:ed:c8:18 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMTYxMTAvBgNVBAUTKDcwOEYxRTA3MTMzODU1QzgwNzRFRUQ1RjhDODNCNDQ2 NkE2MDdBQzIwHhcNMjYwMTE3MDMyMzE3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzllZi03N2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEi2/Fw8QY6DuA6zbiGTAGxewOUCfefzPp31E67XIxoiEEsqmtFvRMKNU4jQ AlF2sKcV9/9pasBi7tf+O3PiuKok1qy7ABmbTiB3R/N/Z/VIKLGriC/EgGfAHig5 gzKyants1VDwQyLx6xM+grjAaXdGqFTRfDlmFwpCqjLd07APRFbzzUo7actwppzy rWTG+bpjgtLzvyizDpADsWEfk8qhxprOCqeDxhIArxVmcBxv+oFZQ5KB52OQvDTW 5t7dsYCENsZhk68XBg53TENFEVisGk2T7FB9m//J25UMScuK5jbAGc3d2i415fHK Q/FqOeSTXs/7AkQkfbioBG9eqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPqO7MvR tZQAuAF5n+JUC9jymYZlMB8GA1UdIwQYMBaAFHCPHgcTOFXIB07tX4yDtEZqYHrC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQxNi82NTZEMTdBOEFF OUMxMUVFOTExQUZCNjNDNEY5QUUwMi9jSThlQnhNNFZjZ0hUdTFmaklPMFJtcGdl c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NJOGVCeE00VmNnSFR1MWZqSU8wUm1wZ2VzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFEMTYvNjU2RDE3QThBRTlDMTFFRTkxMUFGQjYzQzRGOUFFMDIvQkZDMDI5ODY3 MERDMTFFRjhCNjVEOTVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQomMA0GCSqGSIb3DQEBCwUAA4IBAQBRlmJu9xoS3aNt5tSWsWgy S6Sj4iukeBHI1ykIc7woXAuey+ChF50BxRReDnCHyzsT6bxbGI7j/KLd+Sw+WOdc /IZxDjO+2EN7M3jcNxzcMatzq9TeI3CkCbz/6IvBSC8q/v2BPq1xLJYO7wE88Ctl NP1v3dqPlkLVlk6RW+sK4IZs8H4qixJ5u0e/rzD18wxmbWFohmCMXbxbMX2BfhtP C2YPpD3TSVfPVG+DEu7nZGzdJ4AiViVj1mPYMZ33xPavxcb8da3ln58z1X8zOZ+h Tq7jCHHHJhChgpxeTt+PcwrEv0i9Nx+EfkmFBoi5j7N88Kl7vEg2qpxH2lqZ7cgY -----END CERTIFICATE-----Generated at Mon Mar 2 09:20:06 2026 by rpki-client