$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/A716CA94954611EC9B320352C4F9AE02.roa File: A716CA94954611EC9B320352C4F9AE02.roa (raw, json) Hash identifier: ckSaIaBp0C2tnzfJNrPjglmyLfVPcguaEhWoRdz8O68= Subject key identifier: D5:3E:99:3B:1A:B6:88:A0:ED:9F:A1:42:96:3E:DF:F5:E6:A4:A9:FF Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 083A Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/A716CA94954611EC9B320352C4F9AE02.roa Signing time: Wed 26 Aug 2026 22:43:56 +0000 ROA not before: Wed 26 Aug 2026 22:43:56 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 17762 IP address blocks: 14.96.1.0/24 maxlen: 24 14.96.2.0/23 maxlen: 24 14.96.70.0/23 maxlen: 24 14.96.192.0/21 maxlen: 24 14.96.200.0/22 maxlen: 24 14.96.204.0/22 maxlen: 24 14.96.208.0/22 maxlen: 24 14.96.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 22:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2106 (0x83a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Aug 26 22:43:56 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8f6c2c-0470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:ff:29:fb:5c:d0:9f:bf:49:14:dc:96:c4: d6:04:5e:72:69:d7:bb:65:2a:3e:ee:f4:9c:00:7c: 51:2b:4e:68:25:c2:72:d4:97:47:65:f2:d0:29:63: 20:f0:56:2e:76:ed:0f:a9:0e:b4:48:6a:93:40:5e: a5:91:ec:4d:0e:41:4d:8d:82:94:8e:11:9d:63:d7: 70:d1:b6:40:0d:ea:63:97:34:a1:d3:af:49:02:11: b6:29:f0:a1:94:90:67:ae:f3:5e:87:8c:6a:82:a6: e6:62:ba:c8:53:d3:e2:6e:07:e7:25:31:d3:b2:d0: 23:c0:17:70:87:78:24:2e:03:68:51:21:9d:62:54: 3d:e2:63:50:fd:12:30:2a:a1:9f:ce:8e:a4:93:cb: 9b:88:9d:61:b1:e1:ff:cc:5e:f6:7b:1b:8b:23:b5: c3:c9:d6:8a:65:d5:ea:d8:bb:db:c9:c8:2c:98:ba: bb:d0:a5:ed:83:ab:ab:92:11:5a:8f:e0:93:69:43: 8f:56:76:92:b3:fe:8f:c7:42:38:c6:62:80:49:6c: e0:d2:33:39:78:eb:e4:90:1f:ae:aa:78:ce:be:df: 2b:2e:73:7d:90:da:76:5c:41:f7:fe:42:e8:1d:f9: 06:40:51:4d:25:dd:f5:b2:a3:1e:dc:b2:7c:d3:37: 11:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3E:99:3B:1A:B6:88:A0:ED:9F:A1:42:96:3E:DF:F5:E6:A4:A9:FF X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/A716CA94954611EC9B320352C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.96.1.0-14.96.3.255 14.96.70.0/23 14.96.192.0-14.96.215.255 Signature Algorithm: sha256WithRSAEncryption 21:c5:b2:ef:e6:37:e6:bd:33:d6:81:f5:89:5d:c5:23:93:6b: a4:80:99:47:ee:42:bc:50:cf:b6:27:c6:b7:b0:80:8d:6c:6d: 9d:02:03:bf:60:09:80:16:37:c0:b7:bb:1d:cc:6a:7a:41:0b: bd:a7:19:7c:3a:49:83:b8:f7:58:13:17:4e:98:39:74:ee:f3: eb:99:2d:27:91:b8:bc:68:ec:7c:59:63:db:73:18:bf:0e:95: 22:da:5b:7e:34:98:d6:16:85:d3:0f:fd:80:a1:fe:4d:d5:03: 99:3f:c2:b2:09:8a:73:7a:7c:7f:5d:13:38:14:50:ea:f0:c1: ec:14:e1:a2:10:a4:d0:bf:e3:7f:36:09:7e:12:1e:dd:98:1e: e0:3a:e5:7d:33:dc:93:d8:0f:7a:ed:54:b4:db:63:ff:aa:9e: 89:a9:8b:08:c6:6d:11:6f:e6:e3:2f:87:a9:c9:0d:35:32:fa: a6:a6:a7:df:95:61:08:68:d1:2b:c7:39:f0:45:01:0c:39:39: 3a:d2:b4:d6:8c:db:ed:68:b2:40:85:31:a7:1b:45:32:e3:33: bc:17:d3:47:48:b5:4e:58:62:91:8b:3f:f9:8a:67:e7:08:66: 85:d2:19:6e:f9:39:98:02:a0:ef:33:c9:7f:23:d6:26:99:b0: 80:15:2a:4d -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICCDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjYwODI2MjI0MzU2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmNmMyYy0wNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bL/Kftc0J+/SRTclsTWBF5yade7ZSo+7vScAHxRK05oJcJy1JdHZfLQKWMg 8FYudu0PqQ60SGqTQF6lkexNDkFNjYKUjhGdY9dw0bZADepjlzSh069JAhG2KfCh lJBnrvNeh4xqgqbmYrrIU9PibgfnJTHTstAjwBdwh3gkLgNoUSGdYlQ94mNQ/RIw KqGfzo6kk8ubiJ1hseH/zF72exuLI7XDydaKZdXq2LvbycgsmLq70KXtg6urkhFa j+CTaUOPVnaSs/6Px0I4xmKASWzg0jM5eOvkkB+uqnjOvt8rLnN9kNp2XEH3/kLo HfkGQFFNJd31sqMe3LJ80zcRMwIDAQABo4ICfDCCAngwHQYDVR0OBBYEFNU+mTsa toig7Z+hQpY+3/XmpKn/MB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RFQTQvQTI0MjZCNjA5ODI5MTFFQkI3ODgyMDgxQzRGOUFFMDIvQTcxNkNBOTQ5 NTQ2MTFFQzlCMzIwMzUyQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAo BAIAATAiMAwDBAAOYAEDBAIOYAADBAEOYEYwDAMEBg5gwAMEAw5g0DANBgkqhkiG 9w0BAQsFAAOCAQEAIcWy7+Y35r0z1oH1iV3FI5NrpICZR+5CvFDPtifGt7CAjWxt nQIDv2AJgBY3wLe7HcxqekELvacZfDpJg7j3WBMXTpg5dO7z65ktJ5G4vGjsfFlj 23MYvw6VItpbfjSY1haF0w/9gKH+TdUDmT/CsgmKc3p8f10TOBRQ6vDB7BThohCk 0L/jfzYJfhIe3Zge4DrlfTPck9gPeu1UtNtj/6qeiamLCMZtEW/m4y+HqckNNTL6 pqan35VhCGjRK8c58EUBDDk5OtK01ozb7WiyQIUxpxtFMuMzvBfTR0i1TlhikYs/ +Ypn5whmhdIZbvk5mAKg7zPJfyPWJpmwgBUqTQ== -----END CERTIFICATE-----Generated at Tue Sep 1 04:01:57 2026 by rpki-client