$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/D33618D2A59011F193111DFE6011F970.roa File: D33618D2A59011F193111DFE6011F970.roa (raw, json) Hash identifier: HrkKSxhRpAmy9I0iwuLSShrDvnrHJsSmxa97enwplS8= Subject key identifier: A6:06:E2:91:3E:5C:8F:23:C4:D8:12:22:2D:87:15:FF:0E:1B:CB:90 Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Certificate serial: 018D Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/D33618D2A59011F193111DFE6011F970.roa Signing time: Mon 31 Aug 2026 23:10:13 +0000 ROA not before: Mon 31 Aug 2026 23:10:13 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 63099 IP address blocks: 163.8.38.0/23 maxlen: 24 163.8.45.0/24 maxlen: 24 163.8.59.0/24 maxlen: 24 163.8.210.0/24 maxlen: 24 163.8.212.0/24 maxlen: 24 163.8.213.0/24 maxlen: 24 163.8.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Validity Not Before: Aug 31 23:10:13 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a9609d5-742e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:fc:7b:e7:7a:ec:e8:8c:d4:e6:98:67:cf: 2a:74:65:72:25:c5:2b:d6:a5:86:42:8d:3f:51:a0: 74:b1:c2:ec:32:fd:80:80:31:5d:fc:00:15:64:32: 08:11:48:5d:b5:be:eb:a2:12:e6:28:3c:64:5b:82: d2:09:53:e1:e7:95:87:9e:ed:13:4f:d6:28:0e:77: 4b:c4:08:c1:e4:94:26:de:d5:68:b5:ef:15:ee:3c: 9b:c9:aa:98:ea:62:b8:92:9f:e7:ec:9c:45:b7:23: 6c:12:39:79:e7:ad:f3:ba:4a:f4:3a:5a:68:36:c3: 3d:66:23:9d:fc:34:d8:90:df:fc:d9:b2:28:46:39: 19:b0:a8:7b:f9:e0:67:6b:be:c4:da:0f:b7:a5:43: 55:73:36:8f:61:60:d0:d5:fe:fe:7c:0b:55:11:11: 4b:fa:86:a0:5e:a3:b9:ad:11:76:b3:b1:8b:37:b7: 86:84:84:ab:d4:1a:38:52:4a:18:52:09:8b:70:02: d9:fb:35:c6:a2:a3:f3:5e:43:7a:13:10:14:45:cb: ea:5e:f4:48:c2:d1:c5:e5:2a:a8:d7:93:76:5e:4f: b9:71:b1:55:b0:e5:6d:eb:fb:b7:49:13:c2:f4:6a: 12:64:89:b4:57:56:ec:a6:a7:65:50:ae:b9:b8:3f: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:06:E2:91:3E:5C:8F:23:C4:D8:12:22:2D:87:15:FF:0E:1B:CB:90 X509v3 Authority Key Identifier: keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/D33618D2A59011F193111DFE6011F970.roa sbgp-ipAddrBlock: critical IPv4: 163.8.38.0/23 163.8.45.0/24 163.8.59.0/24 163.8.210.0/24 163.8.212.0-163.8.214.255 Signature Algorithm: sha256WithRSAEncryption b4:6b:d5:60:1d:da:5b:54:47:11:17:67:42:fa:a4:43:e7:49: 32:3a:44:0e:f8:e4:47:33:fc:bc:10:92:02:e8:9f:49:e3:20: 67:aa:5c:92:dc:0f:23:ec:30:e4:54:a0:33:64:bf:fb:eb:41: cb:89:be:3a:00:f4:33:08:0a:82:5f:01:09:10:6e:78:5a:be: 21:02:41:2b:88:92:33:56:74:2b:c0:02:a2:42:b1:5d:3d:ec: b0:b9:33:f9:0a:a2:b7:2b:d3:ba:ad:36:e8:83:e3:b3:46:ae: 44:8b:a3:f7:57:2d:38:ce:fd:4e:ec:99:be:47:cd:c7:bb:50: dd:df:d1:e9:6a:4b:33:49:dd:07:72:d4:9a:c7:3c:64:93:80: 26:bf:f2:46:fb:88:5f:30:c7:2f:a2:0c:dc:32:c6:a3:56:de: ef:fd:45:02:29:29:ba:db:5b:48:79:d8:f6:42:32:27:06:75: 6a:a5:cd:82:45:0c:b9:71:10:5a:f9:24:d7:ce:1a:df:5b:6c: 26:16:c4:97:f0:0b:23:80:e1:70:01:0f:e4:0f:bd:01:06:32: 8f:7d:21:69:60:8c:1f:ab:2b:98:ab:01:3c:57:ef:ba:2c:b2: 21:61:fd:bc:51:10:68:17:5c:77:fb:51:0a:bb:13:fe:ca:2f: bc:fa:1b:0e -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC QTQxMkI2M0QwHhcNMjYwODMxMjMxMDEzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTk2MDlkNS03NDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuv8e+d67OiM1OaYZ88qdGVyJcUr1qWGQo0/UaB0scLsMv2AgDFd/AAVZDII EUhdtb7rohLmKDxkW4LSCVPh55WHnu0TT9YoDndLxAjB5JQm3tVote8V7jybyaqY 6mK4kp/n7JxFtyNsEjl5563zukr0OlpoNsM9ZiOd/DTYkN/82bIoRjkZsKh7+eBn a77E2g+3pUNVczaPYWDQ1f7+fAtVERFL+oagXqO5rRF2s7GLN7eGhISr1Bo4UkoY UgmLcALZ+zXGoqPzXkN6ExAURcvqXvRIwtHF5Sqo15N2Xk+5cbFVsOVt6/u3SRPC 9GoSZIm0V1bspqdlUK65uD+qVwIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFKYG4pE+ XI8jxNgSIi2HFf8OG8uQMB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0 ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJCNDYvMDg4NzAxQjhBQkI0MTFGMEFCRjIwOTQwQzRGOUFFMDIvRDMzNjE4RDJB NTkwMTFGMTkzMTExREZFNjAxMUY5NzAucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQBowgmAwQAowgtAwQAowg7AwQAowjSMAwDBAKjCNQDBACjCNYwDQYJ KoZIhvcNAQELBQADggEBALRr1WAd2ltURxEXZ0L6pEPnSTI6RA745Ecz/LwQkgLo n0njIGeqXJLcDyPsMORUoDNkv/vrQcuJvjoA9DMICoJfAQkQbnhaviECQSuIkjNW dCvAAqJCsV097LC5M/kKorcr07qtNuiD47NGrkSLo/dXLTjO/U7smb5Hzce7UN3f 0elqSzNJ3Qdy1JrHPGSTgCa/8kb7iF8wxy+iDNwyxqNW3u/9RQIpKbrbW0h52PZC MicGdWqlzYJFDLlxEFr5JNfOGt9bbCYWxJfwCyOA4XABD+QPvQEGMo99IWlgjB+r K5irATxX77ossiFh/bxREGgXXHf7UQq7E/7KL7z6Gw4= -----END CERTIFICATE-----Generated at Sat Sep 19 08:40:59 2026 by rpki-client