$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa File: 8D052914404911F0A4BD357BC4F9AE02.roa (raw, json) Hash identifier: HDAJrdViuU7kZQtbBcD9tgS1zcOCf1eCW5LDFit/g6Y= Subject key identifier: 7A:4B:C6:5D:35:86:51:43:57:38:D3:1B:DB:FA:DF:C5:5D:AF:5D:1C Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Certificate serial: 8E Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:28:15 +0000 ROA not before: Tue 03 Jun 2025 07:08:29 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151062 IP address blocks: 165.99.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Validity Not Before: Jun 3 07:08:29 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3f89f-9900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:3a:9a:6b:ec:1e:d4:e7:46:50:0b:3d:f8: 0b:4d:28:fc:b8:99:cd:bd:44:08:e7:99:fa:fa:f5: 77:57:f2:9b:4c:cc:18:cd:c9:88:64:dc:70:70:70: b0:02:e3:02:56:b3:42:db:a9:74:b1:75:79:28:ea: bb:93:c2:0e:ec:89:96:6c:d6:bc:1e:ca:40:4f:24: 2e:5a:a1:18:1b:82:21:e3:47:05:e6:33:85:e3:75: ef:de:41:8f:97:21:b8:f6:ba:ab:d5:e6:e2:ae:c7: e1:51:b7:de:8c:47:be:be:3c:c4:5d:56:2d:43:4a: 35:5f:64:0d:28:18:ed:7a:e8:82:46:96:a1:59:56: 0f:71:a0:57:55:b1:b3:6e:32:4f:21:c5:88:11:2f: 62:b3:af:f1:db:56:e6:ef:81:f1:5f:d6:09:97:bd: 48:20:bd:86:c5:48:fb:b3:e1:3d:2e:13:dd:cc:03: b2:f4:36:43:f8:44:e6:19:45:6d:8b:bd:08:cf:0c: 3a:ad:9b:78:91:b1:a5:d0:68:0c:65:73:00:e5:ae: 3d:11:50:f8:27:c9:e1:59:8b:28:55:e6:23:6c:09: d0:0c:00:ee:c3:69:29:f9:a3:17:72:01:55:56:c5: df:ff:d6:67:1a:a7:10:57:fd:59:fa:9a:a3:f6:52: ee:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4B:C6:5D:35:86:51:43:57:38:D3:1B:DB:FA:DF:C5:5D:AF:5D:1C X509v3 Authority Key Identifier: keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.188.0/24 Signature Algorithm: sha256WithRSAEncryption a5:b4:ec:32:db:84:3a:f9:2d:e8:e1:88:74:f5:53:9a:55:e5: 77:24:aa:48:3f:cb:f2:a9:7b:77:23:e0:c3:49:52:37:52:bd: c0:a6:b3:0e:21:39:2b:f2:4f:99:71:a4:f0:92:78:db:eb:70: 73:7e:4e:b9:65:bf:70:19:6a:92:46:96:86:a1:01:19:6b:35: 0e:87:4e:19:23:80:6d:db:e5:1a:01:35:5c:34:66:81:92:91: 52:ee:c7:e5:7f:84:dd:4c:e8:cd:42:4d:35:c3:f6:f0:41:bb: 9e:05:de:90:85:b5:2e:69:93:a4:c6:77:1e:5a:f0:85:af:ee: 57:87:20:dd:4c:c4:86:10:4c:92:d9:47:d3:e9:f3:44:fd:bb: a6:0f:2c:c3:b5:26:f4:b2:15:e3:48:8c:54:73:49:38:3e:50: 6a:6c:9b:ef:54:bb:c8:9a:80:83:64:a1:6b:e2:bc:82:a5:38: e6:d9:67:d4:ff:de:7c:13:25:f6:8e:1e:ca:ea:ee:0b:e5:bf: f0:9b:e0:ef:cb:ad:a5:f1:50:a0:d9:a3:d4:8c:29:03:c0:10: b2:0b:58:4f:f6:97:3a:c3:9e:e8:94:de:59:29:ed:b9:9a:8a: 7f:f5:e6:34:a6:39:69:e0:6c:31:46:fe:24:cf:e1:f3:41:57: e3:f6:52:27 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDN0ExMTAvBgNVBAUTKEE1OEFEQUNFRjlEMjQ1NTNBNTU2NDZCNUE2RUJDQ0VB QjE5RjJGQkMwHhcNMjUwNjAzMDcwODI5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjg5Zi05OTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9U6mmvsHtTnRlALPfgLTSj8uJnNvUQI55n6+vV3V/KbTMwYzcmIZNxwcHCw AuMCVrNC26l0sXV5KOq7k8IO7ImWbNa8HspATyQuWqEYG4Ih40cF5jOF43Xv3kGP lyG49rqr1ebirsfhUbfejEe+vjzEXVYtQ0o1X2QNKBjteuiCRpahWVYPcaBXVbGz bjJPIcWIES9is6/x21bm74HxX9YJl71IIL2GxUj7s+E9LhPdzAOy9DZD+ETmGUVt i70Izww6rZt4kbGl0GgMZXMA5a49EVD4J8nhWYsoVeYjbAnQDADuw2kp+aMXcgFV VsXf/9ZnGqcQV/1Z+pqj9lLuDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHpLxl01 hlFDVzjTG9v638Vdr10cMB8GA1UdIwQYMBaAFKWK2s750kVTpVZGtabrzOqxny+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM3QS80NEYxNEFGQzQw NDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZuU1JWT2xWa2ExcHV2TTZyR2ZM N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDN0EvNDRGMTRBRkM0MDQ2MTFGMDlCRjBEODRGQzRGOUFFMDIvOEQwNTI5MTQ0 MDQ5MTFGMEE0QkQzNTdCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApWO8MA0GCSqGSIb3DQEBCwUAA4IBAQCltOwy24Q6+S3o4Yh09VOa VeV3JKpIP8vyqXt3I+DDSVI3Ur3AprMOITkr8k+ZcaTwknjb63Bzfk65Zb9wGWqS RpaGoQEZazUOh04ZI4Bt2+UaATVcNGaBkpFS7sflf4TdTOjNQk01w/bwQbueBd6Q hbUuaZOkxnceWvCFr+5XhyDdTMSGEEyS2UfT6fNE/bumDyzDtSb0shXjSIxUc0k4 PlBqbJvvVLvImoCDZKFr4ryCpTjm2WfU/958EyX2jh7K6u4L5b/wm+Dvy62l8VCg 2aPUjCkDwBCyC1hP9pc6w57olN5ZKe25mop/9eY0pjlp4GwxRv4kz+HzQVfj9lIn -----END CERTIFICATE-----Generated at Mon Mar 2 06:17:52 2026 by rpki-client