$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/7DD523E4B5BF11F1A1B9E4684011F970.roa File: 7DD523E4B5BF11F1A1B9E4684011F970.roa (raw, json) Hash identifier: L1m2ffpqPMktKVGkY3T5QGh4DiZWf4Ev3yNkbzcxIK8= Subject key identifier: AC:56:19:3B:8A:83:9B:32:AE:D3:BA:FE:58:91:A7:92:A2:F8:72:B0 Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Certificate serial: 77 Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/7DD523E4B5BF11F1A1B9E4684011F970.roa Signing time: Wed 30 Sep 2026 16:29:21 +0000 ROA not before: Wed 30 Sep 2026 16:29:21 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 131275 IP address blocks: 151.123.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 16:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Validity Not Before: Sep 30 16:29:21 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd38e1-ec41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:9a:6c:90:27:bf:7e:49:c4:58:bb:5e:a5: 81:96:ce:0f:1e:d8:bd:be:e1:fd:84:5d:19:8e:f5: 21:41:67:80:b3:e6:2a:55:a4:72:58:5d:5d:cd:d8: 06:91:4e:f3:e4:c4:e8:8d:0e:5d:00:e1:4c:df:49: c6:4c:1b:cc:db:6b:a6:ea:7b:80:53:4e:de:e9:a1: 04:a7:c7:25:6e:86:16:c0:d4:97:04:df:a5:94:97: 69:38:15:31:c1:08:7e:3e:c5:f2:b4:56:f1:87:8d: e3:92:52:b0:45:3c:dc:35:a5:6a:3f:a0:ef:24:91: 2e:43:a0:ba:e8:7e:cf:a3:42:0c:c9:54:02:fa:cd: 8c:59:94:8f:1a:9b:e4:00:9d:9f:fe:df:5a:2d:be: 0a:49:b0:c4:fd:4e:87:7f:14:0d:e2:d0:e6:41:2e: d7:a3:41:e4:99:cf:72:e1:e6:46:07:e7:8c:89:26: 52:4b:c7:48:aa:08:35:d9:c6:3b:b8:b5:1c:f3:10: b0:3e:13:9c:16:1c:49:a7:11:54:ee:12:fd:8c:06: 9e:ba:39:39:0e:4a:0a:73:17:91:d2:35:7b:4b:4a: 83:a1:7e:32:7f:e5:ab:4f:34:bb:c6:48:42:b9:ef: 17:37:97:e7:7b:9a:02:2a:37:20:cd:fa:12:4c:ab: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:56:19:3B:8A:83:9B:32:AE:D3:BA:FE:58:91:A7:92:A2:F8:72:B0 X509v3 Authority Key Identifier: keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/7DD523E4B5BF11F1A1B9E4684011F970.roa sbgp-ipAddrBlock: critical IPv4: 151.123.236.0/24 Signature Algorithm: sha256WithRSAEncryption 38:4f:f8:a9:53:b4:9a:db:23:32:0d:4c:66:67:ef:86:50:40: 32:0f:11:c1:59:04:1f:86:00:8f:c2:37:25:dd:73:00:69:c8: c4:58:f9:20:5b:b5:cc:d1:79:86:19:d7:be:eb:b8:8f:36:ee: 3b:63:49:a9:c3:d7:ad:c8:78:5b:b0:70:9b:94:8e:eb:59:d2: 1d:aa:fe:6e:b0:f3:19:2c:7f:49:03:00:69:70:df:2d:f9:17: 95:1e:e1:35:8e:60:20:2b:09:1f:80:d0:91:94:b9:6f:84:51: 61:81:32:5d:2e:df:17:28:b6:57:00:54:db:b1:3f:d3:4f:5c: c7:41:7b:0f:bc:40:9c:aa:eb:45:f3:88:cf:ba:a6:8b:39:cc: 59:58:f5:be:b0:7e:ef:60:11:dc:3f:87:79:47:18:08:e4:e9: 67:2e:f9:66:07:84:3a:d6:2c:62:c7:93:d9:5e:74:da:9c:d6: d2:5d:10:2d:b5:22:4d:9d:81:a2:85:29:fc:50:dc:dc:38:8a: c3:71:05:ce:0e:c1:ce:bc:36:ba:93:b7:67:f1:6c:db:58:06: 41:eb:bb:eb:4b:ef:41:06:04:4f:fc:39:7d:f2:39:72:56:4d: ab:1b:fc:33:00:f1:47:85:6c:a4:f2:1d:d3:86:4e:c4:9e:1a: b3:95:f7:e6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTg0QTExMC8GA1UEBRMoNjM3RDU2QTc1QkI5NUJDNUM5RTZCMDg5RDkzNENCNUUy RkJEOTYyRDAeFw0yNjA5MzAxNjI5MjFaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYmQzOGUxLWVjNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdb5pskCe/fknEWLtepYGWzg8e2L2+4f2EXRmO9SFBZ4Cz5ipVpHJYXV3N2AaR TvPkxOiNDl0A4UzfScZMG8zba6bqe4BTTt7poQSnxyVuhhbA1JcE36WUl2k4FTHB CH4+xfK0VvGHjeOSUrBFPNw1pWo/oO8kkS5DoLrofs+jQgzJVAL6zYxZlI8am+QA nZ/+31otvgpJsMT9Tod/FA3i0OZBLtejQeSZz3Lh5kYH54yJJlJLx0iqCDXZxju4 tRzzELA+E5wWHEmnEVTuEv2MBp66OTkOSgpzF5HSNXtLSoOhfjJ/5atPNLvGSEK5 7xc3l+d7mgIqNyDN+hJMq0+TAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUrFYZO4qD mzKu07r+WJGnkqL4crAwHwYDVR0jBBgwFoAUY31Wp1u5W8XJ5rCJ2TTLXi+9li0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBODRBLzc3QUM3QkQyMzRG NzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWTMxV3AxdTVXOFhKNXJDSjJUVExYaS05bGkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTg0QS83N0FDN0JEMjM0RjcxMUYxQkI3MzZDQTc3Q0VFNTI4RS83REQ1MjNFNEI1 QkYxMUYxQTFCOUU0Njg0MDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACXe+wwDQYJKoZIhvcNAQELBQADggEBADhP+KlTtJrbIzINTGZn74ZQ QDIPEcFZBB+GAI/CNyXdcwBpyMRY+SBbtczReYYZ177ruI827jtjSanD163IeFuw cJuUjutZ0h2q/m6w8xksf0kDAGlw3y35F5Ue4TWOYCArCR+A0JGUuW+EUWGBMl0u 3xcotlcAVNuxP9NPXMdBew+8QJyq60XziM+6pos5zFlY9b6wfu9gEdw/h3lHGAjk 6Wcu+WYHhDrWLGLHk9ledNqc1tJdEC21Ik2dgaKFKfxQ3Nw4isNxBc4Owc68NrqT t2fxbNtYBkHru+tL70EGBE/8OX3yOXJWTasb/DMA8UeFbKTyHdOGTsSeGrOV9+Y= -----END CERTIFICATE-----Generated at Tue Oct 6 12:30:15 2026 by rpki-client