$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/173F9AAC8C9811F0B7F99E73C4F9AE02.roa File: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (raw, json) Hash identifier: 2CLzGrfhQG/2tyHnpnUSdgFVCTpX5x8JNV+LDRDqVbk= Subject key identifier: 43:CC:B0:F0:9E:A7:F4:D2:C5:36:EA:2A:2A:A1:C4:C9:F6:AD:AF:B2 Certificate issuer: /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Certificate serial: B3 Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/173F9AAC8C9811F0B7F99E73C4F9AE02.roa Signing time: Mon 17 Aug 2026 07:56:21 +0000 ROA not before: Mon 17 Aug 2026 07:56:21 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 153954 IP address blocks: 165.99.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Validity Not Before: Aug 17 07:56:21 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a82bea5-3aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:86:dc:c3:8a:7e:41:49:4f:4a:85:04:1d:3f: 1c:0b:d5:9e:0d:51:19:f4:07:5d:61:38:ac:01:73: c0:ac:64:34:f5:cd:fe:8e:83:7b:b4:75:67:99:de: 06:6b:04:2b:c6:fe:a2:61:1e:be:a8:4d:c9:03:1c: 16:cd:5f:15:4a:7e:56:7a:55:2d:5a:53:24:2e:46: 23:04:cb:2b:61:ab:73:29:ed:c4:73:15:9f:ad:52: 89:59:dc:2b:ce:cd:f9:d4:c6:65:f0:b3:64:3e:67: 68:7e:38:80:a2:c3:55:20:09:f6:f9:8b:70:52:e3: 1d:26:02:99:19:24:99:78:55:29:2a:2a:9e:90:e8: 17:52:54:7d:d9:70:6e:b5:de:e1:dd:1f:65:be:11: 5b:7e:47:d4:a1:3a:96:b4:2e:ce:6d:7c:6a:b4:07: ae:d5:ee:15:cf:b2:7c:20:8b:2d:cb:e4:4b:6b:4c: 31:46:e0:2f:42:b9:c8:52:60:65:fe:4f:53:df:35: 77:97:eb:96:07:70:00:f6:cd:da:02:0e:d1:a5:a9: 41:0d:b3:b9:4b:97:6c:c3:40:6e:6d:ff:56:66:40: 0a:b5:a4:a8:a3:cf:8a:b0:73:49:80:e9:56:5a:a7: 88:e2:db:53:b9:6d:0f:a3:90:b1:b4:d8:90:b4:cc: 21:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CC:B0:F0:9E:A7:F4:D2:C5:36:EA:2A:2A:A1:C4:C9:F6:AD:AF:B2 X509v3 Authority Key Identifier: keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/173F9AAC8C9811F0B7F99E73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.220.0/23 Signature Algorithm: sha256WithRSAEncryption 99:22:d4:c6:aa:87:3b:7d:90:ba:94:61:4e:ab:98:52:43:b7: 5b:d6:23:a7:69:4d:db:2e:71:30:eb:16:e9:74:e9:7d:3b:47: 06:b3:27:9a:e1:7a:d5:c9:18:6e:11:d2:ed:06:9a:56:5b:0f: 91:20:c8:ac:31:41:74:92:45:ff:af:da:be:7a:ec:ce:dc:18: b5:2c:d9:00:ce:79:74:38:99:3e:1a:91:e6:2b:d6:be:ab:37: e5:4c:96:48:20:f1:a6:27:7b:40:36:1e:e3:4c:0c:86:0c:97: ac:26:c0:df:dd:cd:b3:0c:4d:ab:ea:fd:91:0f:24:60:f6:48: 65:48:02:f8:e3:89:8d:df:3a:e0:92:ca:5d:00:64:2a:ce:4f: e6:a8:0c:f8:af:d7:9e:05:95:03:7b:9b:a3:2b:1e:14:09:fe: 6c:af:26:d8:63:ea:48:d9:38:42:5b:2f:78:16:21:eb:6f:9c: e8:49:6d:a9:a5:0e:af:37:3a:59:5a:71:91:a0:90:73:44:1f: 90:14:dc:52:62:7a:1e:59:c7:52:54:0c:91:0f:53:f0:1f:12: bd:17:c4:31:b4:49:de:eb:5b:a8:c2:b5:a3:02:87:8e:82:bc: e5:1e:07:dd:6e:0d:47:49:a1:2f:c1:43:d0:ad:0d:a9:7b:e2: 9c:e4:95:11 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRTUxMTAvBgNVBAUTKDI3QTBBMkRERjM1QzE5N0Q0RkMyNjI5MEMyOTU3RDQ5 NjhDRjE1OEYwHhcNMjYwODE3MDc1NjIxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgyYmVhNS0zYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ibcw4p+QUlPSoUEHT8cC9WeDVEZ9AddYTisAXPArGQ09c3+joN7tHVnmd4G awQrxv6iYR6+qE3JAxwWzV8VSn5WelUtWlMkLkYjBMsrYatzKe3EcxWfrVKJWdwr zs351MZl8LNkPmdofjiAosNVIAn2+YtwUuMdJgKZGSSZeFUpKiqekOgXUlR92XBu td7h3R9lvhFbfkfUoTqWtC7ObXxqtAeu1e4Vz7J8IIsty+RLa0wxRuAvQrnIUmBl /k9T3zV3l+uWB3AA9s3aAg7RpalBDbO5S5dsw0Bubf9WZkAKtaSoo8+KsHNJgOlW WqeI4ttTuW0Po5CxtNiQtMwhnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEPMsPCe p/TSxTbqKiqhxMn2ra+yMB8GA1UdIwQYMBaAFCegot3zXBl9T8JikMKVfUlozxWP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJFNS9BNkM1NDBGNjhD OTcxMUYwQTAwOUQ1NzJDNEY5QUUwMi9KNkNpM2ZOY0dYMVB3bUtRd3BWOVNXalBG WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0o2Q2kzZk5jR1gxUHdtS1F3cFY5U1dqUEZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0EyRTUvQTZDNTQwRjY4Qzk3MTFGMEEwMDlENTcyQzRGOUFFMDIvMTczRjlBQUM4 Qzk4MTFGMEI3Rjk5RTczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWPcMA0GCSqGSIb3DQEBCwUAA4IBAQCZItTGqoc7fZC6lGFOq5hS Q7db1iOnaU3bLnEw6xbpdOl9O0cGsyea4XrVyRhuEdLtBppWWw+RIMisMUF0kkX/ r9q+euzO3Bi1LNkAznl0OJk+GpHmK9a+qzflTJZIIPGmJ3tANh7jTAyGDJesJsDf 3c2zDE2r6v2RDyRg9khlSAL444mN3zrgkspdAGQqzk/mqAz4r9eeBZUDe5ujKx4U Cf5srybYY+pI2ThCWy94FiHrb5zoSW2ppQ6vNzpZWnGRoJBzRB+QFNxSYnoeWcdS VAyRD1PwHxK9F8QxtEne61uowrWjAoeOgrzlHgfdbg1HSaEvwUPQrQ2pe+Kc5JUR -----END CERTIFICATE-----Generated at Tue Sep 22 09:02:48 2026 by rpki-client