$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/8F8A915C590C11F0AC0A3639C4F9AE02.roa File: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (raw, json) Hash identifier: HtaHQbR4Ww0fWPU3P7Hu/E8dYBtv4LHASdo5cN8a0Fc= Subject key identifier: B4:BE:64:E6:F2:23:6A:C1:04:CD:48:2D:95:E9:35:B7:AF:F9:10:9A Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Certificate serial: 97 Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/8F8A915C590C11F0AC0A3639C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:05:33 +0000 ROA not before: Fri 04 Jul 2025 19:24:53 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140919 IP address blocks: 165.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Validity Not Before: Jul 4 19:24:53 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3e53d-8153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:de:8a:73:7b:c3:d6:fa:d3:8d:ab:3e:c1: 8e:25:84:b0:12:b4:87:11:f3:7f:ed:2f:bb:90:17: 8d:69:77:11:9f:31:38:b7:c3:30:30:04:70:90:67: 7e:50:bc:26:f6:00:00:cb:a1:74:d6:54:90:3a:69: f4:01:9d:28:19:6b:79:4f:03:61:ea:49:dd:fb:99: f6:12:66:94:cc:80:d1:3f:ec:1f:e3:ca:66:e2:55: e7:7f:da:1a:a6:1f:5e:ce:91:47:75:be:94:c2:e7: bc:76:a0:27:a2:32:49:d4:6f:e4:04:1f:b9:4c:7b: 4e:8d:5e:e0:67:55:26:b0:a4:fb:fd:c2:ba:ea:09: 1b:1a:ed:f4:df:ce:64:ca:74:73:08:18:61:57:c0: d0:90:b8:48:01:36:b0:0c:3f:ec:46:f2:5f:15:69: 61:c2:b5:94:c0:81:a8:a9:db:43:f9:0e:5e:a1:65: 8b:80:d6:59:9f:ef:66:59:ae:5a:6b:d6:8d:ce:59: ae:fe:85:a6:a8:49:60:7b:85:23:a1:a8:8d:fb:50: 28:64:8e:b1:8f:48:70:22:d1:6d:1c:d2:b2:eb:5f: a1:11:5e:d8:d9:9f:f3:99:f7:e5:9d:6d:43:d0:ad: d0:4f:8c:cb:3e:08:ba:e3:e5:5d:31:25:1e:48:25: 01:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BE:64:E6:F2:23:6A:C1:04:CD:48:2D:95:E9:35:B7:AF:F9:10:9A X509v3 Authority Key Identifier: keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/8F8A915C590C11F0AC0A3639C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.38.0/23 Signature Algorithm: sha256WithRSAEncryption 09:fb:c4:c3:54:10:78:a7:e2:d8:a5:2c:b3:43:e9:e3:ec:0e: 5b:a4:1d:f4:c5:9c:00:56:66:36:93:43:1b:a3:ca:7c:7c:c8: ad:9a:1a:34:ad:4e:2e:c7:6d:6e:11:ca:09:30:4d:6b:d9:5a: 9a:98:5c:67:d0:eb:de:9e:f5:b4:09:d3:77:f4:5c:dd:93:e4: b1:0b:e4:20:25:4f:69:9c:9b:23:26:70:67:d0:22:3c:a5:16: 12:a2:6f:e8:db:c3:1d:66:d8:bd:56:fa:6a:33:33:5a:27:fb: 23:3c:62:e0:71:0f:53:ae:d5:d9:4e:c1:ca:c9:14:eb:a7:ce: b2:c4:8f:d1:87:a1:f5:b7:47:b4:8b:b4:c6:a2:72:f3:05:cd: 2b:76:26:8c:e4:38:40:ac:02:0f:9f:bd:91:32:a8:28:86:1d: 5f:ba:b0:16:6a:93:3b:da:84:ab:bd:04:37:1e:c8:d9:f9:06: 3c:bd:6d:03:99:98:0a:ae:6e:83:13:cd:66:26:06:5b:3f:c8: c3:0a:f2:0a:a0:8c:90:68:39:7e:2f:17:1c:ef:aa:bd:41:90: 2c:9b:68:fa:d3:32:af:08:5e:64:b2:de:c0:12:f3:23:f2:10: 50:1f:8a:23:6c:51:1a:4b:da:29:e4:37:af:08:ca:47:35:61: 94:b2:30:b9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0NTgxMTAvBgNVBAUTKDU0REU5OTk1MEI3RkM5NTgxRkU4QUM5NjFGMzdCNzg5 OEYzNUNEQzMwHhcNMjUwNzA0MTkyNDUzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTUzZC04MTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59zeinN7w9b6042rPsGOJYSwErSHEfN/7S+7kBeNaXcRnzE4t8MwMARwkGd+ ULwm9gAAy6F01lSQOmn0AZ0oGWt5TwNh6knd+5n2EmaUzIDRP+wf48pm4lXnf9oa ph9ezpFHdb6Uwue8dqAnojJJ1G/kBB+5THtOjV7gZ1UmsKT7/cK66gkbGu30385k ynRzCBhhV8DQkLhIATawDD/sRvJfFWlhwrWUwIGoqdtD+Q5eoWWLgNZZn+9mWa5a a9aNzlmu/oWmqElge4UjoaiN+1AoZI6xj0hwItFtHNKy61+hEV7Y2Z/zmfflnW1D 0K3QT4zLPgi64+VdMSUeSCUB4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLS+ZOby I2rBBM1ILZXpNbev+RCaMB8GA1UdIwQYMBaAFFTemZULf8lYH+islh83t4mPNc3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQ1OC8xRUM3MkYyMjMw RDgxMUYwQTdCRTJFNEZDNEY5QUUwMi9WTjZabFF0X3lWZ2Y2S3lXSHplM2lZODF6 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U0NTgvMUVDNzJGMjIzMEQ4MTFGMEE3QkUyRTRGQzRGOUFFMDIvOEY4QTkxNUM1 OTBDMTFGMEFDMEEzNjM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWMmMA0GCSqGSIb3DQEBCwUAA4IBAQAJ+8TDVBB4p+LYpSyzQ+nj 7A5bpB30xZwAVmY2k0Mbo8p8fMitmho0rU4ux21uEcoJME1r2VqamFxn0OvenvW0 CdN39Fzdk+SxC+QgJU9pnJsjJnBn0CI8pRYSom/o28MdZti9VvpqMzNaJ/sjPGLg cQ9TrtXZTsHKyRTrp86yxI/Rh6H1t0e0i7TGonLzBc0rdiaM5DhArAIPn72RMqgo hh1furAWapM72oSrvQQ3HsjZ+QY8vW0DmZgKrm6DE81mJgZbP8jDCvIKoIyQaDl+ Lxcc76q9QZAsm2j60zKvCF5kst7AEvMj8hBQH4ojbFEaS9op5DevCMpHNWGUsjC5 -----END CERTIFICATE-----Generated at Mon Mar 2 18:07:41 2026 by rpki-client