$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/817FDF1EB46511EF86BEAC6BC4F9AE02.roa File: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (raw, json) Hash identifier: X9jpiXNF6OhTo/yBL+rWyn/9IGUFR3BsO1wY0JKMT4I= Subject key identifier: A1:A0:00:56:8F:27:43:15:FA:AE:F9:0C:57:3B:DF:8A:B9:E6:68:0E Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Certificate serial: 0146 Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/817FDF1EB46511EF86BEAC6BC4F9AE02.roa Signing time: Sat 01 Aug 2026 07:55:42 +0000 ROA not before: Sat 01 Aug 2026 07:55:42 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139020 IP address blocks: 160.250.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 06:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Validity Not Before: Aug 1 07:55:42 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a6da67d-4516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:02:49:49:dc:cb:80:a5:26:37:64:35:7c:12: e0:e2:81:d2:79:46:dd:61:52:7f:db:40:78:78:06: 12:42:2e:2d:73:9f:d2:e3:8b:da:36:81:c7:af:82: 63:5a:12:03:b8:2e:a0:74:46:9b:a7:73:eb:a5:2d: d9:6c:47:a4:19:b0:7b:73:48:92:79:bf:34:11:2e: 6a:28:a7:ed:81:ca:44:c6:08:c5:01:83:ab:71:16: 0c:64:f2:8f:8b:66:15:e2:74:b5:dd:17:74:7d:a3: a2:b4:71:b8:8f:ee:1b:0c:1f:c4:a5:f8:69:ed:e7: f1:99:f1:01:1f:92:35:86:5d:73:f4:78:0d:8e:a4: 32:c3:78:c4:0e:a3:60:f1:30:85:f6:bb:63:85:e6: cb:aa:70:ba:3a:ab:66:bf:fc:b8:06:99:4f:8f:94: ce:ca:a8:1d:55:e0:8b:4b:aa:10:3f:ad:40:fb:f0: 08:fb:8d:06:03:76:5b:52:17:cf:ca:12:f9:e8:d0: 36:f0:a7:5c:b8:2c:26:10:a6:13:73:e8:4b:39:ea: d9:fd:69:47:80:e7:02:80:9f:55:5c:67:6f:f7:27: 00:f4:89:06:40:28:b8:d7:41:e8:d6:d5:f1:40:19: 6c:5c:0b:cc:17:69:ea:1f:87:4c:f0:5c:78:09:f3: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A0:00:56:8F:27:43:15:FA:AE:F9:0C:57:3B:DF:8A:B9:E6:68:0E X509v3 Authority Key Identifier: keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/817FDF1EB46511EF86BEAC6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.250.138.0/23 Signature Algorithm: sha256WithRSAEncryption a0:76:fb:ed:ec:18:23:ea:e7:ee:6c:27:a0:b5:8b:36:37:3c: 8c:20:38:4c:9c:77:aa:89:89:34:4e:b5:77:4d:78:f7:41:98: 17:e9:1c:82:63:7d:5d:62:60:18:e3:37:42:aa:f6:1b:fe:0d: a9:68:64:3e:1c:b4:a9:4c:8f:70:6a:5b:10:3b:d9:20:39:ab: 6c:39:cc:d1:d1:31:e8:3e:78:c4:e8:02:38:ff:17:1d:f5:26: ea:2a:8f:06:bf:58:2a:93:61:1c:6d:fb:55:ca:31:f2:60:9c: c0:3c:7e:5d:fa:de:91:c6:e7:c9:9f:df:8f:b8:ca:d6:7f:c7: 76:c0:e6:18:cc:1e:16:3a:10:15:07:c1:93:de:9e:6b:7f:3a: 46:7b:5b:21:50:2b:61:a3:a4:3a:86:47:8e:30:12:77:d6:bc: 35:40:af:73:18:52:ca:97:83:94:c1:a2:7f:c7:23:bd:50:19: 7e:9f:39:89:a6:88:bf:0c:fd:8c:6b:7e:e8:1f:79:16:b8:ec: 60:c2:69:6c:e2:b3:33:62:48:29:fd:9a:b4:16:6a:ce:58:c1: e8:f6:2a:79:8d:25:92:1c:8e:be:8d:71:78:2d:26:a6:1f:05: 70:26:1f:21:22:f1:68:d4:c8:7e:ff:b6:ad:bf:40:61:a6:34: 83:19:c7:27 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDQwMkQxRDBCRDkxRjQzODAyQzdBMEQ3MDczNjE4OEJF QkEwQTA4MTIwHhcNMjYwODAxMDc1NTQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZkYTY3ZC00NTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/QJJSdzLgKUmN2Q1fBLg4oHSeUbdYVJ/20B4eAYSQi4tc5/S44vaNoHHr4Jj WhIDuC6gdEabp3PrpS3ZbEekGbB7c0iSeb80ES5qKKftgcpExgjFAYOrcRYMZPKP i2YV4nS13Rd0faOitHG4j+4bDB/Epfhp7efxmfEBH5I1hl1z9HgNjqQyw3jEDqNg 8TCF9rtjhebLqnC6Oqtmv/y4BplPj5TOyqgdVeCLS6oQP61A+/AI+40GA3ZbUhfP yhL56NA28KdcuCwmEKYTc+hLOerZ/WlHgOcCgJ9VXGdv9ycA9IkGQCi410Ho1tXx QBlsXAvMF2nqH4dM8Fx4CfPG1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKGgAFaP J0MV+q75DFc734q55mgOMB8GA1UdIwQYMBaAFEAtHQvZH0OALHoNcHNhiL66CggS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8xQzk0NkFGMkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9RQzBkQzlrZlE0QXNlZzF3YzJHSXZyb0tD QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FDMGRDOWtmUTRBc2VnMXdjMkdJdnJvS0NCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0ZBQ0IvMUM5NDZBRjJCNDY1MTFFRjlCRkJBQTY3QzRGOUFFMDIvODE3RkRGMUVC NDY1MTFFRjg2QkVBQzZCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoPqKMA0GCSqGSIb3DQEBCwUAA4IBAQCgdvvt7Bgj6ufubCegtYs2 NzyMIDhMnHeqiYk0TrV3TXj3QZgX6RyCY31dYmAY4zdCqvYb/g2paGQ+HLSpTI9w alsQO9kgOatsOczR0THoPnjE6AI4/xcd9SbqKo8Gv1gqk2EcbftVyjHyYJzAPH5d +t6RxufJn9+PuMrWf8d2wOYYzB4WOhAVB8GT3p5rfzpGe1shUCtho6Q6hkeOMBJ3 1rw1QK9zGFLKl4OUwaJ/xyO9UBl+nzmJpoi/DP2Ma37oH3kWuOxgwmls4rMzYkgp /Zq0FmrOWMHo9ip5jSWSHI6+jXF4LSamHwVwJh8hIvFo1Mh+/7atv0BhpjSDGccn -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:11 2026 by rpki-client