$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/A3F5B386915C11F1B31E34186B11F970.roa File: A3F5B386915C11F1B31E34186B11F970.roa (raw, json) Hash identifier: ZUF0HTnqvtt1SvtzMivVLP03khbxNjJ+Nf1N85kohao= Subject key identifier: B6:C1:F7:38:7C:7C:61:AB:89:54:1F:B5:F9:0C:F5:DA:D3:1B:59:41 Certificate issuer: /CN=A917BAC9/serialNumber=E172ED20986CA28ED49247B254C4CF956E6D005F Certificate serial: 02 Authority key identifier: E1:72:ED:20:98:6C:A2:8E:D4:92:47:B2:54:C4:CF:95:6E:6D:00:5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/A3F5B386915C11F1B31E34186B11F970.roa Signing time: Thu 06 Aug 2026 06:04:10 +0000 ROA not before: Thu 06 Aug 2026 06:04:10 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 154811 IP address blocks: 160.236.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC9, serialNumber=E172ED20986CA28ED49247B254C4CF956E6D005F Validity Not Before: Aug 6 06:04:10 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a7423da-a468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:48:55:f3:20:6e:cd:80:16:f5:88:1f:92: 68:db:1d:7e:3e:9c:aa:c3:4c:85:cb:0c:25:2a:83: cb:4a:fd:d8:be:7c:64:57:68:e2:3a:91:d6:30:32: 7f:ef:6c:d6:5c:c9:96:ad:be:c1:f7:c6:5c:8c:1b: be:4e:33:dc:a5:e0:23:70:13:30:b6:76:4c:24:ac: c1:c3:aa:5d:dc:40:68:a8:67:24:c0:65:d8:75:76: d3:a7:56:b8:48:51:12:87:96:f8:09:a7:9d:c4:ad: 7e:40:54:d8:59:79:ca:db:86:73:59:8c:2f:f6:51: 36:f2:5a:cb:7d:f2:f4:d6:e4:fe:37:5a:14:4b:df: 39:0e:d6:2d:a3:d5:10:86:c2:0f:6c:0b:67:f5:10: 69:86:81:d2:0b:d0:eb:8b:8a:7f:4c:0c:9e:4b:35: 9d:3a:b1:16:2f:b5:d8:fd:66:cf:26:e6:79:24:75: 45:ff:4b:fe:c3:f5:08:89:d1:51:0f:44:a4:0e:6b: 91:8a:1b:ac:f7:21:3e:a1:0f:a6:69:72:a1:c7:0d: 86:cd:f9:e0:2b:15:ee:7e:c5:51:8b:b6:5f:94:12: 34:a6:ed:13:c8:09:08:81:5a:73:47:fa:13:02:c3: 2e:8f:0a:24:77:42:80:90:c9:9b:3d:85:67:b3:5a: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C1:F7:38:7C:7C:61:AB:89:54:1F:B5:F9:0C:F5:DA:D3:1B:59:41 X509v3 Authority Key Identifier: keyid:E1:72:ED:20:98:6C:A2:8E:D4:92:47:B2:54:C4:CF:95:6E:6D:00:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/4XLtIJhsoo7UkkeyVMTPlW5tAF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4XLtIJhsoo7UkkeyVMTPlW5tAF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC9/84CF6956915811F199D77F456A11F970/A3F5B386915C11F1B31E34186B11F970.roa sbgp-ipAddrBlock: critical IPv4: 160.236.237.0/24 Signature Algorithm: sha256WithRSAEncryption ba:54:e2:aa:32:42:5b:f5:1e:09:c6:08:fa:7a:ff:8a:ca:62: 91:dd:02:43:7a:3c:84:90:42:15:bb:0f:1d:cf:da:4e:d3:c9: 4c:8c:e1:77:11:6c:b8:a3:f9:4c:50:cd:31:72:1e:3c:ad:4a: 88:fc:c5:a1:09:ec:62:f3:61:12:13:5c:10:90:db:0d:e0:fd: c6:17:8c:75:c5:65:f2:6d:55:da:32:6e:21:59:12:2d:ee:6f: a6:3f:f2:4e:61:00:44:6a:af:a6:b1:ba:9b:25:71:15:f2:74: 66:d9:cb:0c:6c:5f:64:2c:86:ad:64:93:d8:43:1c:c0:da:f9: fa:a2:a5:ee:f9:d3:46:2b:b2:79:17:96:b4:06:4a:74:91:a7: 60:ea:0e:a6:ab:c4:72:43:4c:be:9c:3d:c9:d6:dc:42:b7:b6: f2:4f:f3:30:f1:b0:f8:44:71:c6:de:50:da:85:66:91:89:ac: 64:f9:93:61:e9:ac:ab:44:50:6d:1f:9b:a2:03:7e:08:b3:91: b5:2c:24:05:ee:d0:f1:75:f2:5f:bd:95:2a:ad:c5:f3:77:9a: ae:ae:c1:ad:cd:5a:9f:2d:7d:3f:58:d6:66:0b:1b:05:08:3e: c3:2e:98:dd:7d:3e:f0:e4:0f:46:bd:7a:e3:31:c5:02:ae:87: f5:32:14:3a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkFDOTExMC8GA1UEBRMoRTE3MkVEMjA5ODZDQTI4RUQ0OTI0N0IyNTRDNENGOTU2 RTZEMDA1RjAeFw0yNjA4MDYwNjA0MTBaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNzQyM2RhLWE0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqpEhV8yBuzYAW9YgfkmjbHX4+nKrDTIXLDCUqg8tK/di+fGRXaOI6kdYwMn/v bNZcyZatvsH3xlyMG75OM9yl4CNwEzC2dkwkrMHDql3cQGioZyTAZdh1dtOnVrhI URKHlvgJp53ErX5AVNhZecrbhnNZjC/2UTbyWst98vTW5P43WhRL3zkO1i2j1RCG wg9sC2f1EGmGgdIL0OuLin9MDJ5LNZ06sRYvtdj9Zs8m5nkkdUX/S/7D9QiJ0VEP RKQOa5GKG6z3IT6hD6ZpcqHHDYbN+eArFe5+xVGLtl+UEjSm7RPICQiBWnNH+hMC wy6PCiR3QoCQyZs9hWezWidLAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUtsH3OHx8 YauJVB+1+Qz12tMbWUEwHwYDVR0jBBgwFoAU4XLtIJhsoo7UkkeyVMTPlW5tAF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQUM5Lzg0Q0Y2OTU2OTE1 ODExRjE5OUQ3N0Y0NTZBMTFGOTcwLzRYTHRJSmhzb283VWtrZXlWTVRQbFc1dEFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNFhMdElKaHNvbzdVa2tleVZNVFBsVzV0QUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDOS84NENGNjk1NjkxNTgxMUYxOTlENzdGNDU2QTExRjk3MC9BM0Y1QjM4Njkx NUMxMUYxQjMxRTM0MTg2QjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACg7O0wDQYJKoZIhvcNAQELBQADggEBALpU4qoyQlv1HgnGCPp6/4rK YpHdAkN6PISQQhW7Dx3P2k7TyUyM4XcRbLij+UxQzTFyHjytSoj8xaEJ7GLzYRIT XBCQ2w3g/cYXjHXFZfJtVdoybiFZEi3ub6Y/8k5hAERqr6axupslcRXydGbZywxs X2Qshq1kk9hDHMDa+fqipe7500YrsnkXlrQGSnSRp2DqDqarxHJDTL6cPcnW3EK3 tvJP8zDxsPhEccbeUNqFZpGJrGT5k2HprKtEUG0fm6IDfgizkbUsJAXu0PF18l+9 lSqtxfN3mq6uwa3NWp8tfT9Y1mYLGwUIPsMumN19PvDkD0a9euMxxQKuh/UyFDo= -----END CERTIFICATE-----Generated at Wed Aug 19 15:11:37 2026 by rpki-client