$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/B8D03A32549F11F1A02DE194C4833773.roa File: B8D03A32549F11F1A02DE194C4833773.roa (raw, json) Hash identifier: LDw5iBbHQmTnPtE2VvuRn583vMFOYPnfK+mlWSFNPfw= Subject key identifier: 7A:FA:A8:A3:E3:6A:08:AA:B1:06:CD:28:BC:76:94:32:93:3E:D9:F9 Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Certificate serial: C3 Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/B8D03A32549F11F1A02DE194C4833773.roa Signing time: Wed 20 May 2026 23:00:41 +0000 ROA not before: Wed 20 May 2026 23:00:41 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 393559 IP address blocks: 163.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Validity Not Before: May 20 23:00:41 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a0e3d18-8aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:67:84:b1:1a:a3:57:43:2e:c9:0d:93:ac: 9e:c8:f5:bf:77:4b:ad:1e:23:9d:19:76:7e:6a:ad: 04:2a:e3:15:b1:ef:ce:da:5d:27:73:70:31:ae:8b: 14:c6:b6:7e:c9:46:e0:ac:24:cb:c6:78:2b:0f:65: 05:d5:71:11:ac:39:f1:a0:7c:a2:1c:33:03:a5:cf: 28:66:ae:3c:3d:50:04:02:8b:04:79:b1:c4:59:d5: 32:01:09:68:eb:6c:df:98:b1:36:2d:75:19:dc:df: 08:6f:87:bb:c7:26:4f:eb:69:a2:06:38:fa:f5:7a: ab:44:49:16:d5:da:81:20:13:49:94:2b:58:0a:2f: 11:a6:43:a9:4f:3a:16:17:4c:10:90:23:36:d8:a9: cb:6f:17:c6:42:67:18:6b:c3:e7:b5:a7:a5:2f:51: 19:5f:18:2b:32:1d:dd:75:1f:86:53:e2:89:4e:f5: cc:dd:c1:43:e1:01:28:48:62:69:d4:b2:68:62:3e: 23:50:71:8c:aa:c2:60:39:af:74:5d:a4:16:00:7c: 75:0e:72:6a:0e:41:dd:ee:a0:58:2d:af:d6:6a:42: ca:2a:f3:0e:ec:c9:8b:8d:18:fa:bf:e0:15:98:90: c5:69:a1:3c:6e:27:1f:8e:ce:a3:a2:50:c2:b4:fc: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FA:A8:A3:E3:6A:08:AA:B1:06:CD:28:BC:76:94:32:93:3E:D9:F9 X509v3 Authority Key Identifier: keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/B8D03A32549F11F1A02DE194C4833773.roa sbgp-ipAddrBlock: critical IPv4: 163.8.209.0/24 Signature Algorithm: sha256WithRSAEncryption ac:ab:72:6a:35:45:15:f3:44:fe:0d:0c:af:04:24:2b:08:5e: cf:cd:a4:99:75:c1:78:71:f6:43:d0:3c:41:b7:96:fb:07:20: 14:81:17:4c:63:fc:f5:7a:42:13:1c:1b:3b:03:49:a5:07:7e: 60:94:68:cc:01:01:7e:8f:22:70:35:49:9f:b1:10:69:10:e1: 60:01:b8:99:30:4f:11:3c:38:c3:23:75:26:a4:2c:33:00:71: c3:17:a5:2c:59:c8:f2:78:5a:b5:c8:be:7a:be:9d:46:68:f3: f5:c0:ad:0d:b0:1f:b9:2e:99:fc:4c:28:d6:4b:e1:a0:b1:61: 46:eb:bd:95:cf:fd:e4:d8:ae:a0:ab:b7:3b:4a:96:a1:21:17: ef:df:f5:0d:ae:af:ab:d8:cf:d6:e7:60:7c:e7:2e:46:18:20: de:23:10:a0:fe:88:fd:3b:3b:fb:f9:11:48:90:58:0d:f9:9c: 5a:c5:39:f8:ae:5d:0e:76:74:8c:cc:bf:b9:03:0a:5c:ad:a3: 3b:14:86:e8:cd:ba:a0:10:ff:3d:07:6f:f2:39:b1:31:8e:5f: ce:c8:74:69:be:90:d4:a3:aa:96:d9:2c:81:c2:cb:cb:e2:3f: 3a:18:d1:7e:ac:52:cb:c4:0e:4b:30:c9:37:7a:96:91:a8:90: 9f:20:1c:2b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC QTQxMkI2M0QwHhcNMjYwNTIwMjMwMDQxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTBlM2QxOC04YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLFnhLEao1dDLskNk6yeyPW/d0utHiOdGXZ+aq0EKuMVse/O2l0nc3AxrosU xrZ+yUbgrCTLxngrD2UF1XERrDnxoHyiHDMDpc8oZq48PVAEAosEebHEWdUyAQlo 62zfmLE2LXUZ3N8Ib4e7xyZP62miBjj69XqrREkW1dqBIBNJlCtYCi8RpkOpTzoW F0wQkCM22KnLbxfGQmcYa8PntaelL1EZXxgrMh3ddR+GU+KJTvXM3cFD4QEoSGJp 1LJoYj4jUHGMqsJgOa90XaQWAHx1DnJqDkHd7qBYLa/WakLKKvMO7MmLjRj6v+AV mJDFaaE8bicfjs6jolDCtPwKgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHr6qKPj agiqsQbNKLx2lDKTPtn5MB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0 ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJCNDYvMDg4NzAxQjhBQkI0MTFGMEFCRjIwOTQwQzRGOUFFMDIvQjhEMDNBMzI1 NDlGMTFGMUEwMkRFMTk0QzQ4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAowjRMA0GCSqGSIb3DQEBCwUAA4IBAQCsq3JqNUUV80T+DQyvBCQr CF7PzaSZdcF4cfZD0DxBt5b7ByAUgRdMY/z1ekITHBs7A0mlB35glGjMAQF+jyJw NUmfsRBpEOFgAbiZME8RPDjDI3UmpCwzAHHDF6UsWcjyeFq1yL56vp1GaPP1wK0N sB+5Lpn8TCjWS+GgsWFG672Vz/3k2K6gq7c7SpahIRfv3/UNrq+r2M/W52B85y5G GCDeIxCg/oj9Ozv7+RFIkFgN+ZxaxTn4rl0OdnSMzL+5AwpcraM7FIbozbqgEP89 B2/yObExjl/OyHRpvpDUo6qW2SyBwsvL4j86GNF+rFLLxA5LMMk3epaRqJCfIBwr -----END CERTIFICATE-----Generated at Mon May 25 04:12:19 2026 by rpki-client