$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/7FB5CBF097DB11EE8E67BA41C4F9AE02.roa File: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (raw, json) Hash identifier: Vqca7Dlck5zECijiatjZli/eAV/OHF6vZWtbK8kCw4s= Subject key identifier: 5A:70:36:6D:CE:94:90:52:D1:D5:97:BC:16:00:6C:55:1D:B3:E3:37 Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Certificate serial: 015B Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/7FB5CBF097DB11EE8E67BA41C4F9AE02.roa Signing time: Thu 09 Oct 2025 05:03:47 +0000 ROA not before: Thu 09 Oct 2025 05:03:47 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152126 IP address blocks: 36.50.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC Validity Not Before: Oct 9 05:03:47 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=68e74233-cfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8d:38:a3:0f:01:ed:25:6a:08:44:41:86:f0: 42:69:ad:2d:46:01:ed:40:07:09:88:a2:72:cf:9e: 08:30:0a:58:d2:86:78:7d:de:ab:ef:0a:3e:19:1d: c2:94:84:0d:83:27:26:a9:78:c7:32:8a:23:35:9a: 5b:1a:68:a1:c6:8a:92:3d:f5:04:80:92:d2:9b:a7: 05:cf:5e:0c:46:6a:a4:a9:54:78:9f:96:26:86:64: 03:45:09:b6:86:ff:f5:a5:5a:a2:b3:5e:04:13:51: ee:0b:d9:fb:4f:9a:da:f2:16:31:2f:6c:ac:db:a8: df:f1:06:62:04:13:4f:df:fe:87:d4:88:ef:60:1e: 7d:d0:9d:41:0d:3f:2b:36:7a:22:0a:f1:03:00:b9: fd:75:c8:75:a0:a2:21:bd:2b:02:b1:83:cd:ae:cb: bd:00:d7:51:5e:44:0d:11:cc:5b:06:9f:df:97:da: 19:49:5e:26:87:2b:10:4a:b4:77:87:25:5c:da:86: e9:f8:a7:86:bb:cf:37:e9:af:e1:9c:8f:18:34:f2: 07:de:47:73:c1:c3:1b:d6:5f:5c:44:6a:69:41:4e: 4e:51:59:ca:22:81:5e:e2:26:44:55:f3:76:78:90: 7e:8b:44:cd:36:1f:bf:c5:77:0d:3f:1e:11:23:8c: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:70:36:6D:CE:94:90:52:D1:D5:97:BC:16:00:6C:55:1D:B3:E3:37 X509v3 Authority Key Identifier: keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/7FB5CBF097DB11EE8E67BA41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.20.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:f7:2f:1f:00:c4:f8:ba:61:2c:52:97:7e:f1:6c:79:b5:99: d1:49:65:90:7c:15:6c:76:59:a6:56:0f:88:07:c2:38:dd:3d: 70:14:3c:ea:cb:f1:72:40:19:d1:8a:a4:8d:1a:06:47:64:a7: bc:4c:0f:b8:46:f9:64:6a:18:76:5a:2d:5f:46:95:7b:f4:92: 52:48:74:d9:99:c5:5b:4d:b4:09:7f:3d:ae:c9:03:c2:60:73: 60:12:6b:b1:4a:fd:57:d9:08:0b:be:d2:2a:12:e8:a9:a8:bb: ce:fa:f5:17:c2:42:47:da:a0:e3:b9:c1:86:c4:ab:74:33:4d: e5:e5:f3:48:cc:4d:10:3b:5b:52:0c:30:1e:9b:13:2a:dc:a3: d4:4e:35:c3:76:37:16:dc:10:42:df:e0:a6:bd:da:e7:1e:df: 36:65:f7:8d:c8:de:2f:f8:cd:fa:34:af:30:df:c6:5c:9d:64: 83:64:3c:8b:3f:f6:16:49:42:39:32:40:9d:c9:60:fa:f4:14: 2f:6d:5a:95:69:ae:63:b5:9b:2c:51:78:6f:e8:e7:79:c8:c0: 14:05:6a:ea:88:0f:ea:e7:f2:11:70:d0:78:d3:89:7d:08:cf: 7f:a7:37:1e:b1:d6:27:9a:65:c3:a2:cf:72:84:12:3d:09:d1: 14:df:ac:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFREYxMTAvBgNVBAUTKDc3MjNEODU2RTUyMDgyMjRGMkJDODlBMzgwOTc3N0Y1 MjgzMzEyRkMwHhcNMjUxMDA5MDUwMzQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU3NDIzMy1jZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Y04ow8B7SVqCERBhvBCaa0tRgHtQAcJiKJyz54IMApY0oZ4fd6r7wo+GR3C lIQNgycmqXjHMoojNZpbGmihxoqSPfUEgJLSm6cFz14MRmqkqVR4n5YmhmQDRQm2 hv/1pVqis14EE1HuC9n7T5ra8hYxL2ys26jf8QZiBBNP3/6H1IjvYB590J1BDT8r NnoiCvEDALn9dch1oKIhvSsCsYPNrsu9ANdRXkQNEcxbBp/fl9oZSV4mhysQSrR3 hyVc2obp+KeGu8836a/hnI8YNPIH3kdzwcMb1l9cRGppQU5OUVnKIoFe4iZEVfN2 eJB+i0TNNh+/xXcNPx4RI4xwRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFpwNm3O lJBS0dWXvBYAbFUds+M3MB8GA1UdIwQYMBaAFHcj2FblIIIk8ryJo4CXd/UoMxL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VERi9EOEE3QzczNjk3 MjIxMUVFOTlBQzMzN0VDNEY5QUUwMi9keVBZVnVVZ2dpVHl2SW1qZ0pkMzlTZ3pF dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R5UFlWdVVnZ2lUeXZJbWpnSmQzOVNnekV2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjNFREYvRDhBN0M3MzY5NzIyMTFFRTk5QUMzMzdFQzRGOUFFMDIvN0ZCNUNCRjA5 N0RCMTFFRThFNjdCQTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAkMhQwDQYJKoZIhvcNAQELBQADggEBAC/3Lx8AxPi6YSxS l37xbHm1mdFJZZB8FWx2WaZWD4gHwjjdPXAUPOrL8XJAGdGKpI0aBkdkp7xMD7hG +WRqGHZaLV9GlXv0klJIdNmZxVtNtAl/Pa7JA8Jgc2ASa7FK/VfZCAu+0ioS6Kmo u8769RfCQkfaoOO5wYbEq3QzTeXl80jMTRA7W1IMMB6bEyrco9RONcN2NxbcEELf 4Ka92uce3zZl943I3i/4zfo0rzDfxlydZINkPIs/9hZJQjkyQJ3JYPr0FC9tWpVp rmO1myxReG/o53nIwBQFauqID+rn8hFw0HjTiX0Iz3+nNx6x1ieaZcOiz3KEEj0J 0RTfrAw= -----END CERTIFICATE-----Generated at Mon Oct 20 19:35:12 2025 by rpki-client