$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/CFD2FAA62A2811EF8313971CC4F9AE02.roa File: CFD2FAA62A2811EF8313971CC4F9AE02.roa (raw, json) Hash identifier: 7pTLODEiwxdgiEvkl8qH82EnqbNP4jVD6G5IWDrN454= Subject key identifier: 42:DD:B4:E6:14:33:76:FC:73:03:EC:B4:FE:8C:95:6C:B9:6D:19:7A Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: 0149 Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/CFD2FAA62A2811EF8313971CC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:06:31 +0000 ROA not before: Sat 03 Jan 2026 04:23:03 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132583 IP address blocks: 36.50.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Jan 3 04:23:03 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41db7-8352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ad:31:b1:c1:7a:76:e1:58:9d:e2:86:e0:83: ca:af:cb:0a:81:b2:7e:58:ce:4b:67:2a:12:a9:a4: 86:a4:e5:a6:01:94:3f:4b:37:db:11:27:aa:d6:6b: b2:4b:0d:d8:1d:f8:70:9f:59:2f:85:c1:cd:1c:4f: 9d:3b:ee:c0:2c:45:e5:59:49:1e:93:8f:45:fb:46: 6d:48:f3:2c:52:b3:03:08:fc:f3:c7:80:74:fa:00: 0d:b9:95:6a:bc:90:72:5f:32:10:b2:44:83:e0:62: ff:a0:cb:90:ff:24:8d:90:93:78:bc:08:b2:af:e7: f4:c8:7d:a5:ab:76:95:40:a0:46:11:ec:21:fb:2b: 1a:f8:ed:35:7c:33:27:4f:1d:b4:3e:b3:7f:3b:84: 4e:99:c1:d2:32:0b:52:52:a7:8b:36:ee:db:09:5e: 01:8d:1d:40:d4:41:75:c4:35:33:d9:ae:3e:94:9a: cc:76:7f:59:3b:15:ce:b7:f9:3a:7b:db:2c:7b:1b: 75:df:a0:da:d1:a7:d8:d1:ba:7d:94:6e:8f:c6:92: 17:4d:4a:ee:9e:94:ef:81:55:c6:b7:ea:88:10:31: 39:e4:bb:65:1e:9f:be:f5:ce:ec:f7:75:2f:68:e9: 2b:78:da:9e:56:46:2e:5f:c9:a5:10:39:ee:5c:d7: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DD:B4:E6:14:33:76:FC:73:03:EC:B4:FE:8C:95:6C:B9:6D:19:7A X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/CFD2FAA62A2811EF8313971CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.206.0/23 Signature Algorithm: sha256WithRSAEncryption 44:2e:d7:7a:25:6a:75:a4:fa:7a:1d:e4:75:89:1b:d8:86:92: b4:2c:33:d1:02:12:2d:80:8e:b7:3b:af:fc:72:f9:a7:17:61: 1f:2e:b1:cd:9e:f5:33:d3:8b:9e:6f:74:38:24:df:27:fb:81: 0f:3b:3c:ed:58:72:42:89:ce:a0:c8:ee:37:82:14:9f:a2:a0: 18:10:12:91:c0:67:e2:05:fd:95:20:97:19:c5:b0:aa:dc:7d: 03:e0:6c:9f:05:fd:d3:39:48:27:a3:8c:62:b2:00:ab:4e:ad: 5a:09:95:76:5b:33:4f:a6:3b:4e:e4:36:a0:e7:52:d1:53:34: e2:25:2f:45:64:b5:c2:8c:57:28:04:93:87:39:9f:01:18:a5: 9a:c1:9f:f6:51:a5:6d:d8:c5:5e:20:75:fc:4f:76:2c:d6:4c: b5:1b:1c:4f:c1:28:07:78:46:db:35:61:0d:e0:b3:14:b9:4a: af:94:0e:3c:54:70:14:36:b1:6c:6b:77:19:3d:21:f3:3a:eb: 1a:37:f5:25:64:53:6a:4a:8c:ef:a0:09:06:dd:c5:a1:5f:85: f2:98:0d:ea:95:42:de:c7:95:f1:4d:e3:04:fc:f5:85:bd:4f: 4c:a2:7b:7f:76:00:a9:5e:25:55:0f:d7:72:a6:c0:bb:3f:98: 70:c4:10:e5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjYwMTAzMDQyMzAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWRiNy04MzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+K0xscF6duFYneKG4IPKr8sKgbJ+WM5LZyoSqaSGpOWmAZQ/SzfbESeq1muy Sw3YHfhwn1kvhcHNHE+dO+7ALEXlWUkek49F+0ZtSPMsUrMDCPzzx4B0+gANuZVq vJByXzIQskSD4GL/oMuQ/ySNkJN4vAiyr+f0yH2lq3aVQKBGEewh+ysa+O01fDMn Tx20PrN/O4ROmcHSMgtSUqeLNu7bCV4BjR1A1EF1xDUz2a4+lJrMdn9ZOxXOt/k6 e9ssext136Da0afY0bp9lG6PxpIXTUrunpTvgVXGt+qIEDE55LtlHp++9c7s93Uv aOkreNqeVkYuX8mlEDnuXNfOAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFELdtOYU M3b8cwPstP6MlWy5bRl6MB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk2RjkvRjk0OTQwMDgyQTFEMTFFRkE5RTFGOTg1QzRGOUFFMDIvQ0ZEMkZBQTYy QTI4MTFFRjgzMTM5NzFDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBJDLOMA0GCSqGSIb3DQEBCwUAA4IBAQBELtd6JWp1pPp6HeR1iRvY hpK0LDPRAhItgI63O6/8cvmnF2EfLrHNnvUz04ueb3Q4JN8n+4EPOzztWHJCic6g yO43ghSfoqAYEBKRwGfiBf2VIJcZxbCq3H0D4GyfBf3TOUgno4xisgCrTq1aCZV2 WzNPpjtO5Dag51LRUzTiJS9FZLXCjFcoBJOHOZ8BGKWawZ/2UaVt2MVeIHX8T3Ys 1ky1GxxPwSgHeEbbNWEN4LMUuUqvlA48VHAUNrFsa3cZPSHzOusaN/UlZFNqSozv oAkG3cWhX4XymA3qlULex5XxTeME/PWFvU9Mont/dgCpXiVVD9dypsC7P5hwxBDl -----END CERTIFICATE-----Generated at Fri Mar 27 03:59:12 2026 by rpki-client