$ rpki-client -vvf rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/CBA514345AD611F0B344B779C4F9AE02.roa File: CBA514345AD611F0B344B779C4F9AE02.roa (raw, json) Hash identifier: qaqb32QMVSNEZ3f7TtmSpmBYJSl1ZcNm9kGHql238LQ= Subject key identifier: 55:6B:C6:43:19:6E:8C:97:CE:D6:F2:34:88:12:05:5F:EE:32:D0:29 Certificate issuer: /CN=A9176BDB/serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE Certificate serial: 03A7 Authority key identifier: 1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/CBA514345AD611F0B344B779C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:02:44 +0000 ROA not before: Fri 14 Nov 2025 23:45:43 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4768 IP address blocks: 167.179.196.0/24 maxlen: 24 167.179.197.0/24 maxlen: 24 167.179.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176BDB, serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE Validity Not Before: Nov 14 23:45:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a42ae4-2e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:1f:7e:4e:65:9a:ac:1b:c5:ca:59:30:33: 30:9e:79:66:d5:fd:f5:dc:93:ad:52:7f:bd:cf:da: 26:40:68:4c:bf:29:b6:c0:20:74:54:3e:fa:4b:24: ba:4e:66:2b:17:b4:e0:2a:b8:e1:31:d3:83:8a:e7: 99:e5:04:07:ae:1a:39:b1:16:ca:03:0b:6d:dd:21: c2:2e:d6:71:d8:74:93:26:21:0f:19:e7:0c:20:b5: 76:c9:9b:dd:a7:20:a2:26:5e:59:11:6f:40:cc:5b: af:aa:9a:14:6b:f6:4c:82:64:d4:ad:9e:4e:7f:9a: bc:e6:78:e9:44:fb:b1:d6:89:55:84:30:19:f6:56: 4a:ea:d7:27:3c:48:33:ce:09:80:2a:6e:ab:9a:37: ab:25:37:1c:2a:c0:42:0b:05:02:fb:67:18:17:3d: 63:fc:e5:c3:bb:29:0a:b7:57:b0:fe:36:5b:79:28: 92:4c:65:8d:d9:b4:50:d2:31:87:b7:20:2c:22:38: 10:cf:5d:e4:e0:16:59:45:2b:eb:4f:bc:ed:f1:29: 4d:49:18:b7:b1:af:d9:c0:ea:43:9c:1f:43:57:a9: d8:e6:b9:c8:9d:f8:50:03:ef:5a:1b:c9:8c:5a:d2: 81:2e:f0:12:a1:cb:26:e3:d9:3b:fa:74:57:aa:0b: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6B:C6:43:19:6E:8C:97:CE:D6:F2:34:88:12:05:5F:EE:32:D0:29 X509v3 Authority Key Identifier: keyid:1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/CBA514345AD611F0B344B779C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 167.179.196.0/23 167.179.208.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:c8:02:84:1c:80:26:05:93:45:aa:63:83:de:a2:4f:37:f2: d3:44:04:83:c8:29:87:aa:c7:54:5e:57:f6:82:90:63:31:01: aa:9c:b5:4b:1d:d0:82:e4:59:20:b5:c7:2f:e9:e9:1f:7d:a5: bc:af:2a:a4:42:af:0e:df:96:28:47:15:94:5d:99:a6:a1:b4: f0:39:04:1f:94:d5:d5:cb:05:63:c3:de:66:2a:a9:4d:a7:9d: f2:d4:11:99:0a:6c:1a:e7:43:90:ab:f6:f1:b9:a0:52:b0:99: ea:4b:d1:7b:1e:a1:d7:bd:65:65:1d:fe:0c:65:1f:f4:ab:5d: 99:4a:54:d4:12:d4:8c:8d:40:f9:83:69:e5:95:27:c1:09:ee: e5:c1:c0:d2:47:16:23:39:e7:97:fc:2f:38:71:1a:1f:be:64: 1f:65:32:86:c6:25:dd:1a:2a:41:d5:f5:02:72:9a:22:8c:a0: 94:a9:ac:6a:0d:94:c1:dc:6d:60:fd:94:7c:5e:27:ee:40:f4: ac:b7:e3:79:b3:17:6a:4a:a7:52:b2:f3:80:e6:a9:b1:b7:bf: 1c:77:98:a3:c4:4d:5b:59:9b:e8:f6:10:cb:31:3e:0d:be:8d: f6:c1:e4:3f:f2:a9:0d:85:68:7c:87:7a:e2:11:43:f9:af:c0: f9:a1:e6:3d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCREIxMTAvBgNVBAUTKDFENjFBQ0IwQzY3MkNCNEQ0MEVEM0U5NEQzQzA5QjIw Qzc0NTI1QUUwHhcNMjUxMTE0MjM0NTQzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmFlNC0yZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxoffk5lmqwbxcpZMDMwnnlm1f313JOtUn+9z9omQGhMvym2wCB0VD76SyS6 TmYrF7TgKrjhMdODiueZ5QQHrho5sRbKAwtt3SHCLtZx2HSTJiEPGecMILV2yZvd pyCiJl5ZEW9AzFuvqpoUa/ZMgmTUrZ5Of5q85njpRPux1olVhDAZ9lZK6tcnPEgz zgmAKm6rmjerJTccKsBCCwUC+2cYFz1j/OXDuykKt1ew/jZbeSiSTGWN2bRQ0jGH tyAsIjgQz13k4BZZRSvrT7zt8SlNSRi3sa/ZwOpDnB9DV6nY5rnInfhQA+9aG8mM WtKBLvASocsm49k7+nRXqguLQQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFVrxkMZ boyXztbyNIgSBV/uMtApMB8GA1UdIwQYMBaAFB1hrLDGcstNQO0+lNPAmyDHRSWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkJEQi82NTdFMEYzNEQ2 NEIxMUVDQUIyMEUzNkJDNEY5QUUwMi9IV0dzc01aeXkwMUE3VDZVMDhDYklNZEZK YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hXR3NzTVp5eTAxQTdUNlUwOENiSU1kRkphNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZCREIvNjU3RTBGMzRENjRCMTFFQ0FCMjBFMzZCQzRGOUFFMDIvQ0JBNTE0MzQ1 QUQ2MTFGMEIzNDRCNzc5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBp7PEAwQAp7PQMA0GCSqGSIb3DQEBCwUAA4IBAQBLyAKEHIAmBZNF qmOD3qJPN/LTRASDyCmHqsdUXlf2gpBjMQGqnLVLHdCC5Fkgtccv6ekffaW8ryqk Qq8O35YoRxWUXZmmobTwOQQflNXVywVjw95mKqlNp53y1BGZCmwa50OQq/bxuaBS sJnqS9F7HqHXvWVlHf4MZR/0q12ZSlTUEtSMjUD5g2nllSfBCe7lwcDSRxYjOeeX /C84cRofvmQfZTKGxiXdGipB1fUCcpoijKCUqaxqDZTB3G1g/ZR8XifuQPSst+N5 sxdqSqdSsvOA5qmxt78cd5ijxE1bWZvo9hDLMT4Nvo32weQ/8qkNhWh8h3riEUP5 r8D5oeY9 -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:44 2026 by rpki-client