$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/817FDF1EB46511EF86BEAC6BC4F9AE02.roa File: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (raw, json) Hash identifier: V9uLs/UPnwnmzkafwxkP85mnXAZceqiwbgfkXel2Nag= Subject key identifier: 12:E3:56:A1:C6:60:A7:3E:45:FE:83:7B:63:E2:F5:B0:92:F5:2F:D9 Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Certificate serial: F6 Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/817FDF1EB46511EF86BEAC6BC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:48:18 +0000 ROA not before: Tue 09 Sep 2025 06:43:17 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139020 IP address blocks: 160.250.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 06:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Validity Not Before: Sep 9 06:43:17 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a5a332-aa0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:c1:18:07:e1:71:3b:a8:b3:ef:89:e2:fe: 67:bc:f8:5f:c8:9b:5c:ff:e3:37:fb:e4:69:af:a9: 25:91:d2:e6:61:4c:a2:a0:31:ee:62:37:3a:42:4e: 88:89:fe:23:12:2c:f1:eb:e0:ca:1f:96:93:b5:09: 9f:e4:fe:c3:a0:af:b1:d2:42:58:96:79:f7:50:37: 4f:8e:93:4f:3e:08:62:09:34:ba:fb:65:11:91:2b: de:76:b2:1a:84:11:6a:3e:39:68:02:f3:d7:6f:4e: fc:03:ab:eb:1b:eb:a7:02:2f:9f:af:28:33:57:79: 1d:ca:cf:a8:35:bc:0f:f1:b0:17:88:56:ef:8d:76: 70:5d:ba:7b:f8:1f:b0:a9:f3:c2:4b:e5:65:c1:82: 9b:1a:84:3b:59:71:a7:84:19:e5:97:a2:87:ee:d9: 42:11:00:51:57:05:bf:05:81:79:73:3a:4b:cb:be: 0b:4c:bf:f6:5f:2a:84:53:ea:40:70:0a:68:57:5e: 56:c1:07:d1:e1:f0:b9:e9:a4:15:4f:74:68:7b:5c: 3e:92:f9:83:40:d9:62:5b:bf:a6:ba:62:6a:47:2b: 7e:d4:33:20:e5:66:41:fc:6a:48:3e:3d:bc:c6:2a: 99:60:60:70:df:f9:e7:72:a8:59:3f:8a:8d:13:60: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E3:56:A1:C6:60:A7:3E:45:FE:83:7B:63:E2:F5:B0:92:F5:2F:D9 X509v3 Authority Key Identifier: keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/817FDF1EB46511EF86BEAC6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.250.138.0/23 Signature Algorithm: sha256WithRSAEncryption 84:6c:cc:18:02:a5:b5:ea:2d:43:76:36:44:75:a1:12:95:10: 0f:27:0c:e6:62:cc:ed:84:32:fa:cc:39:21:9c:9e:4f:97:2c: 2f:13:c3:41:cd:53:14:cb:7f:6c:fe:40:e7:0c:8d:0c:5e:7a: 1b:a0:3f:02:2a:ac:84:4c:12:f8:fe:54:88:32:a6:74:6e:ca: fd:da:97:7f:51:ea:d9:97:71:c8:63:69:da:09:3a:5c:47:6b: f9:48:0a:ee:5c:df:e4:fa:db:dc:7e:e8:44:00:0d:70:68:95: c3:0c:dd:db:dc:06:53:4f:7c:b0:a1:e8:67:c8:85:af:b1:46: 5e:7a:32:17:ed:cd:64:4e:3e:12:bd:fd:f3:60:0e:b5:a6:bd: 45:1a:5f:a7:8a:36:53:6a:de:f2:c7:32:e1:4a:85:98:bf:69: 22:19:e4:e2:97:91:eb:d5:0d:dd:91:59:5e:47:3b:b5:d9:d5: 16:74:30:5d:1c:4f:03:5f:71:36:27:f8:f7:a5:e5:73:b9:25: 20:03:01:52:99:79:e7:d4:fe:59:76:9c:5f:44:50:ca:53:9d: 7e:32:b7:25:b3:bd:6a:32:54:43:e9:a1:ff:c7:08:da:16:85: 34:6e:ba:83:d1:be:31:2f:6a:b3:81:9a:ed:0b:8e:0e:de:bf: d4:cf:ef:3f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDQwMkQxRDBCRDkxRjQzODAyQzdBMEQ3MDczNjE4OEJF QkEwQTA4MTIwHhcNMjUwOTA5MDY0MzE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTMzMi1hYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3TBGAfhcTuos++J4v5nvPhfyJtc/+M3++Rpr6klkdLmYUyioDHuYjc6Qk6I if4jEizx6+DKH5aTtQmf5P7DoK+x0kJYlnn3UDdPjpNPPghiCTS6+2URkSvedrIa hBFqPjloAvPXb078A6vrG+unAi+frygzV3kdys+oNbwP8bAXiFbvjXZwXbp7+B+w qfPCS+VlwYKbGoQ7WXGnhBnll6KH7tlCEQBRVwW/BYF5czpLy74LTL/2XyqEU+pA cApoV15WwQfR4fC56aQVT3Roe1w+kvmDQNliW7+mumJqRyt+1DMg5WZB/GpIPj28 xiqZYGBw3/nncqhZP4qNE2D24QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBLjVqHG YKc+Rf6De2Pi9bCS9S/ZMB8GA1UdIwQYMBaAFEAtHQvZH0OALHoNcHNhiL66CggS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8xQzk0NkFGMkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9RQzBkQzlrZlE0QXNlZzF3YzJHSXZyb0tD QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FDMGRDOWtmUTRBc2VnMXdjMkdJdnJvS0NCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0ZBQ0IvMUM5NDZBRjJCNDY1MTFFRjlCRkJBQTY3QzRGOUFFMDIvODE3RkRGMUVC NDY1MTFFRjg2QkVBQzZCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoPqKMA0GCSqGSIb3DQEBCwUAA4IBAQCEbMwYAqW16i1DdjZEdaES lRAPJwzmYszthDL6zDkhnJ5PlywvE8NBzVMUy39s/kDnDI0MXnoboD8CKqyETBL4 /lSIMqZ0bsr92pd/UerZl3HIY2naCTpcR2v5SAruXN/k+tvcfuhEAA1waJXDDN3b 3AZTT3ywoehnyIWvsUZeejIX7c1kTj4Svf3zYA61pr1FGl+nijZTat7yxzLhSoWY v2kiGeTil5Hr1Q3dkVleRzu12dUWdDBdHE8DX3E2J/j3peVzuSUgAwFSmXnn1P5Z dpxfRFDKU51+Mrcls71qMlRD6aH/xwjaFoU0brqD0b4xL2qzgZrtC44O3r/Uz+8/ -----END CERTIFICATE-----Generated at Wed Mar 4 10:09:13 2026 by rpki-client