$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/020CCB128E9011EEB7C5651BC4F9AE02.roa File: 020CCB128E9011EEB7C5651BC4F9AE02.roa (raw, json) Hash identifier: UCp6rrqiqQr0+NrkScEIOxBhtPkUO8ePaR/RWaljIG4= Subject key identifier: 2F:4F:D8:43:00:89:5A:E6:41:83:F0:7A:26:68:3D:1A:32:B4:7C:8F Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 01C0 Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/020CCB128E9011EEB7C5651BC4F9AE02.roa Signing time: Wed 11 Mar 2026 10:31:08 +0000 ROA not before: Wed 11 Mar 2026 10:31:08 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137967 IP address blocks: 36.50.10.0/23 maxlen: 23 36.50.10.0/24 maxlen: 24 36.50.11.0/24 maxlen: 24 2401:52e0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: Mar 11 10:31:08 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69b1446c-089c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:38:df:1a:d2:84:e8:8e:0a:99:2a:f3:73: 59:ea:2d:af:54:81:36:0e:32:4a:7d:37:33:b0:fc: 91:30:ea:27:b5:2b:d5:8c:0b:30:d5:e1:64:86:0c: ad:af:27:8f:42:b9:bd:82:2b:96:eb:79:8b:78:8e: d9:65:a1:34:a6:b5:f1:e4:19:69:3c:db:7a:f6:c2: 0c:3d:1d:c7:9b:55:f0:72:28:e6:4e:3c:be:c9:4f: a8:53:03:c8:1c:66:c0:a6:bd:ee:12:09:8d:78:1e: 7e:96:7a:51:49:a3:e3:77:25:07:0c:c3:f4:a9:51: b0:a0:a9:a9:e6:f0:75:ff:e1:4a:6f:be:03:44:6b: 81:ce:3f:01:65:1a:ad:b1:22:57:f0:0b:ff:f1:90: c2:b8:a6:15:41:1a:6a:74:dc:bb:e1:69:cd:42:6b: e1:14:17:74:64:10:7a:47:f0:30:2c:39:ef:17:6e: e2:f0:64:20:25:ed:c7:fc:c8:40:e6:14:24:7c:ab: da:9b:4c:ca:d6:b2:32:42:93:54:fb:d0:48:4a:6e: b4:06:f2:b7:e2:ae:ba:ea:b7:a4:24:a0:d8:eb:09: e7:15:95:0d:b5:6c:99:4b:19:9c:a5:ab:3f:da:6c: 72:15:4a:84:9f:61:92:2d:48:73:5a:95:34:47:06: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4F:D8:43:00:89:5A:E6:41:83:F0:7A:26:68:3D:1A:32:B4:7C:8F X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/020CCB128E9011EEB7C5651BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.10.0/23 IPv6: 2401:52e0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:7d:3b:e4:70:30:71:cd:0f:70:0b:8c:90:f3:91:4a:ee:e8: 45:22:8b:64:d8:42:7a:c1:59:3a:b9:18:71:1d:e5:d3:37:c9: cb:e2:cf:80:5b:ba:71:6e:84:94:47:35:a2:ce:04:78:ac:f9: 11:6b:c4:1d:95:4b:7f:82:be:c0:1f:6f:ff:b9:53:ee:e7:b5: d6:42:85:f7:8d:6a:6c:35:d0:dc:de:05:68:bd:8f:d4:ac:74: 22:6e:72:c4:72:9b:02:aa:49:56:fa:b4:e9:69:22:df:57:6b: 8c:fd:1a:1f:9c:b1:e4:08:4b:c9:18:75:f9:86:a9:6d:b3:aa: 34:98:8b:66:13:7d:48:7e:90:31:eb:57:fa:6e:c7:03:63:3a: 63:ad:c1:d6:d1:e6:db:c6:d9:7b:af:33:ae:03:d3:98:1c:1d: 32:a8:35:13:cc:0e:b2:25:1a:fc:41:51:0f:9a:a5:8d:ba:23: 1a:33:40:8f:1e:91:91:0b:e0:74:0a:db:98:33:95:80:c9:cf: be:2f:00:9f:34:92:55:e6:f8:f9:eb:5a:01:d0:50:4c:8d:c9: d7:05:c5:20:7d:a3:11:0d:31:0b:38:1c:85:6f:f1:13:25:69: cb:8e:95:d7:9a:5d:a6:ad:69:fa:f9:8a:3f:fa:2c:03:57:85: fc:2a:13:fc -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjYwMzExMTAzMTA4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIxNDQ2Yy0wODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvF443xrShOiOCpkq83NZ6i2vVIE2DjJKfTczsPyRMOontSvVjAsw1eFkhgyt ryePQrm9giuW63mLeI7ZZaE0prXx5BlpPNt69sIMPR3Hm1XwcijmTjy+yU+oUwPI HGbApr3uEgmNeB5+lnpRSaPjdyUHDMP0qVGwoKmp5vB1/+FKb74DRGuBzj8BZRqt sSJX8Av/8ZDCuKYVQRpqdNy74WnNQmvhFBd0ZBB6R/AwLDnvF27i8GQgJe3H/MhA 5hQkfKvam0zK1rIyQpNU+9BISm60BvK34q666rekJKDY6wnnFZUNtWyZSxmcpas/ 2mxyFUqEn2GSLUhzWpU0RwaBfQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFC9P2EMA iVrmQYPweiZoPRoytHyPMB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUE3QzIvN0FCODUwODg4RTg5MTFFRUE2QTVFMzU3QzRGOUFFMDIvMDIwQ0NCMTI4 RTkwMTFFRUI3QzU2NTFCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBJDIKMA0EAgACMAcDBQAkAVLgMA0GCSqGSIb3DQEBCwUAA4IBAQB+ fTvkcDBxzQ9wC4yQ85FK7uhFIotk2EJ6wVk6uRhxHeXTN8nL4s+AW7pxboSURzWi zgR4rPkRa8QdlUt/gr7AH2//uVPu57XWQoX3jWpsNdDc3gVovY/UrHQibnLEcpsC qklW+rTpaSLfV2uM/RofnLHkCEvJGHX5hqlts6o0mItmE31IfpAx61f6bscDYzpj rcHW0ebbxtl7rzOuA9OYHB0yqDUTzA6yJRr8QVEPmqWNuiMaM0CPHpGRC+B0CtuY M5WAyc++LwCfNJJV5vj561oB0FBMjcnXBcUgfaMRDTELOByFb/ETJWnLjpXXml2m rWn6+Yo/+iwDV4X8KhP8 -----END CERTIFICATE-----Generated at Thu Mar 26 12:20:18 2026 by rpki-client