$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa File: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (raw, json) Hash identifier: cNiuneTPpAk/1Up/27Y7yEVc2t/NxzEM4qlSWeyAw6E= Subject key identifier: 8D:F4:8C:DC:5F:A2:4C:0E:9B:53:17:77:EB:0B:5E:E9:5B:87:06:81 Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: F7 Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:45:10 +0000 ROA not before: Tue 03 Feb 2026 06:28:25 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 4764 IP address blocks: 160.250.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 05:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Feb 3 06:28:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a5a276-9af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ad:e9:c4:5f:95:91:55:1e:17:ee:7c:6b:e7: 88:08:82:40:01:6c:70:53:d9:6f:82:58:5d:f6:4a: a9:7b:45:99:72:31:43:1d:ec:71:86:fe:b1:90:07: ca:90:12:5c:5f:29:19:19:10:5b:4b:17:33:45:62: d1:02:eb:6d:fb:90:84:a7:83:0a:b4:bf:f6:7b:93: 8b:01:38:58:46:b0:30:7c:3d:c9:7c:19:c4:23:76: 73:42:f9:0f:87:5a:d8:6f:4e:3e:08:7c:b6:26:cd: 52:dd:cd:be:cc:b3:9e:64:45:6b:4e:5e:3a:63:6a: 8e:80:27:c9:99:76:11:aa:15:9c:71:d4:4e:38:84: 4c:8e:6e:f4:10:cd:34:0f:48:5d:b1:f0:b7:84:02: cd:fd:b6:1b:ed:df:37:8f:8c:fb:9c:09:7b:24:49: 4d:b4:33:cc:a5:85:a8:2f:7a:62:94:36:16:21:25: 80:2b:9c:48:89:c7:99:83:db:33:54:51:98:66:41: 9a:4f:d5:0d:1a:d5:63:f0:35:2b:80:0d:22:17:1a: 81:70:40:26:e6:df:5a:40:a6:eb:07:e1:79:b1:b1: dd:79:13:12:7b:e8:1f:ea:c1:90:6c:5a:18:df:7f: 14:8f:e2:98:07:6b:3e:9f:d7:16:d7:df:61:6d:58: ca:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F4:8C:DC:5F:A2:4C:0E:9B:53:17:77:EB:0B:5E:E9:5B:87:06:81 X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.250.176.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:3b:ef:c3:4f:23:cd:2a:ac:80:8d:cf:65:56:29:38:d1:6c: c3:ef:e2:00:55:cf:5e:7e:d2:87:4c:6f:58:9b:83:63:5a:28: 08:21:8e:ec:63:aa:a9:71:84:cd:7e:b9:f9:52:3f:4a:4c:75: 9e:b0:b1:16:bc:75:50:e5:39:4c:0e:b4:76:c3:0d:49:25:9f: 4f:2e:4c:6a:bf:a2:f7:07:b6:00:78:98:ce:a8:9b:3f:cf:47: f6:ad:ec:d8:3f:cd:9d:26:6e:b1:99:56:92:82:21:1c:47:96: 8f:84:78:88:a9:90:58:1e:fc:4b:8e:92:58:aa:9e:9a:ba:b3: 9b:b1:b9:57:10:29:0d:4d:c6:be:1b:d3:b1:18:e6:73:04:d4: 94:7d:7e:b3:18:36:38:3b:46:39:39:3a:2e:4c:c8:25:95:df: fa:b4:1a:d2:20:3b:1c:4d:49:eb:9c:68:fc:78:c2:fd:fd:9e: 08:c2:65:fb:4a:85:0d:72:bc:da:fc:f5:34:46:cd:b8:96:30: 6b:ba:05:3a:ab:9b:2e:09:72:16:d0:66:c9:66:c3:1b:40:af: bd:d5:3a:99:4d:0f:3b:d8:1c:58:9e:40:73:42:36:44:c3:4f: 82:f2:8d:15:b8:ab:66:67:9e:7e:d2:bc:a5:b8:3c:49:7e:22: 25:2c:ed:8c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDlGNDkwNkMwRDRDQzk2NDVEOUJGRDkzMzY0QTIzQTVB MzNFRjU4REIwHhcNMjYwMjAzMDYyODI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTI3Ni05YWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1K3pxF+VkVUeF+58a+eICIJAAWxwU9lvglhd9kqpe0WZcjFDHexxhv6xkAfK kBJcXykZGRBbSxczRWLRAutt+5CEp4MKtL/2e5OLAThYRrAwfD3JfBnEI3ZzQvkP h1rYb04+CHy2Js1S3c2+zLOeZEVrTl46Y2qOgCfJmXYRqhWccdROOIRMjm70EM00 D0hdsfC3hALN/bYb7d83j4z7nAl7JElNtDPMpYWoL3pilDYWISWAK5xIiceZg9sz VFGYZkGaT9UNGtVj8DUrgA0iFxqBcEAm5t9aQKbrB+F5sbHdeRMSe+gf6sGQbFoY 338Uj+KYB2s+n9cW199hbVjKfQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI30jNxf okwOm1MXd+sLXulbhwaBMB8GA1UdIwQYMBaAFJ9JBsDUzJZF2b/ZM2SiOloz71jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82NzJEQjA0OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxrWFp2OWt6WktJNldqUHZX TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q5NTgvNjcyREIwNDhCMzlCMTFFRjgwRjY0MzVFQzRGOUFFMDIvMEFDOEJCNzRC NUUyMTFFRkJFRjRCQzVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoPqwMA0GCSqGSIb3DQEBCwUAA4IBAQBKO+/DTyPNKqyAjc9lVik4 0WzD7+IAVc9eftKHTG9Ym4NjWigIIY7sY6qpcYTNfrn5Uj9KTHWesLEWvHVQ5TlM DrR2ww1JJZ9PLkxqv6L3B7YAeJjOqJs/z0f2rezYP82dJm6xmVaSgiEcR5aPhHiI qZBYHvxLjpJYqp6aurObsblXECkNTca+G9OxGOZzBNSUfX6zGDY4O0Y5OTouTMgl ld/6tBrSIDscTUnrnGj8eML9/Z4IwmX7SoUNcrza/PU0Rs24ljBrugU6q5suCXIW 0GbJZsMbQK+91TqZTQ872BxYnkBzQjZEw0+C8o0VuKtmZ55+0ryluDxJfiIlLO2M -----END CERTIFICATE-----Generated at Sun Mar 8 00:04:34 2026 by rpki-client