$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa File: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (raw, json) Hash identifier: nGthEdjYKJHJu7le3S4RX3B4sUQB36MpvRzE6GlXDjE= Subject key identifier: C7:A6:13:CB:60:CE:A2:5B:A8:96:F4:90:23:1C:E0:C7:8F:8E:03:17 Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Certificate serial: 01A8 Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:40:57 +0000 ROA not before: Sun 01 Mar 2026 05:24:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152193 IP address blocks: 36.50.250.0/23 maxlen: 23 36.50.250.0/24 maxlen: 24 36.50.251.0/24 maxlen: 24 2401:5f60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Validity Not Before: Mar 1 05:24:33 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3df79-4f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:19:5f:26:a6:6a:d4:b1:98:f9:ed:b8:23: 47:7f:31:27:e2:7d:11:39:4b:69:f1:57:ae:60:7b: 83:10:4a:0a:96:03:b7:3e:24:55:11:08:95:cb:2f: 46:80:68:b7:d0:44:fe:d3:e5:99:17:34:9b:0b:98: 0d:d8:54:c9:96:7a:ef:c7:4f:e1:0e:36:01:81:2c: f3:e8:40:b0:d7:6f:ce:21:ec:b4:94:60:23:e4:8a: 99:31:b7:92:97:3d:fc:08:6a:3f:fd:66:46:07:07: fc:cd:89:e6:86:fb:fb:2e:e6:99:98:40:37:4a:c0: eb:85:91:ce:38:77:cc:64:a3:08:1e:38:2f:7d:4a: d9:24:42:4d:03:15:d9:a5:b6:72:de:4d:44:53:95: bd:f2:db:c3:5e:a8:49:7a:8d:de:69:ec:6a:11:51: 78:97:30:20:3b:a0:ec:99:f4:5e:53:90:3e:bc:5b: 16:c9:5d:87:5d:4e:c7:16:70:50:44:e8:0e:6d:e9: 1f:03:7c:7b:21:9b:e3:70:6f:f4:5d:63:53:2d:c8: 70:4e:93:32:0a:83:7e:85:84:10:f1:e2:48:94:7d: aa:51:88:08:ff:4a:b9:dd:f3:f7:35:b0:06:29:f8: 72:b9:60:14:a2:5f:fc:65:21:e8:63:85:12:fa:46: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A6:13:CB:60:CE:A2:5B:A8:96:F4:90:23:1C:E0:C7:8F:8E:03:17 X509v3 Authority Key Identifier: keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.250.0/23 IPv6: 2401:5f60::/32 Signature Algorithm: sha256WithRSAEncryption 7a:5c:34:a8:24:70:04:bb:a5:f9:d0:1a:b7:43:62:94:4e:08: 82:83:0c:71:a3:06:a5:d8:10:3f:0d:39:4a:f9:46:e1:bf:ac: d2:07:dd:97:d0:2d:20:0a:df:2a:16:52:27:ad:06:af:cb:bb: b7:41:ce:79:91:7a:e8:5e:93:9a:e7:c2:bf:1e:49:1c:e7:3f: 6e:a5:1d:17:c5:b4:a0:e0:29:b1:51:95:e5:e2:94:8d:4e:1f: a4:38:e9:b2:2e:d9:51:f7:db:b9:cf:df:03:c0:75:4e:49:c2: e1:6e:c3:1c:e6:c4:18:1d:a9:c1:a0:6b:ca:97:e7:70:3a:b4: f3:00:21:b4:ff:88:4d:52:f0:6d:b6:32:0d:2c:c5:0e:a3:5d: 16:88:74:7f:6e:92:9e:c0:9c:26:8e:37:b1:c9:0a:4d:a1:c5: 2a:36:bd:a0:51:71:4c:30:91:89:a3:c1:12:39:f3:c2:ca:58: 7f:99:73:51:d2:74:47:ba:65:14:35:5b:15:28:38:21:95:fe: 4a:5f:6e:a9:3d:93:14:d5:8e:df:ff:cf:e9:99:e1:86:c7:74: 67:77:ba:d9:cb:fc:61:5a:f7:b4:84:8f:d2:45:dd:58:b8:80: a2:5e:37:5c:f7:36:c7:d2:81:6d:36:9c:0a:3a:6c:5f:19:37: e3:1f:2f:8d -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxRUUxMTAvBgNVBAUTKDZCM0JFOEYzNENFQTY5NEIwRDY0QkNGODU3ODVEOTE3 NDQzNjk1RDQwHhcNMjYwMzAxMDUyNDMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGY3OS00ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmh8ZXyamatSxmPntuCNHfzEn4n0ROUtp8VeuYHuDEEoKlgO3PiRVEQiVyy9G gGi30ET+0+WZFzSbC5gN2FTJlnrvx0/hDjYBgSzz6ECw12/OIey0lGAj5IqZMbeS lz38CGo//WZGBwf8zYnmhvv7LuaZmEA3SsDrhZHOOHfMZKMIHjgvfUrZJEJNAxXZ pbZy3k1EU5W98tvDXqhJeo3eaexqEVF4lzAgO6DsmfReU5A+vFsWyV2HXU7HFnBQ ROgObekfA3x7IZvjcG/0XWNTLchwTpMyCoN+hYQQ8eJIlH2qUYgI/0q53fP3NbAG KfhyuWAUol/8ZSHoY4US+kadXwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMemE8tg zqJbqJb0kCMc4MePjgMXMB8GA1UdIwQYMBaAFGs76PNM6mlLDWS8+FeF2RdENpXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFFRS9ERTZBNjEzMEE1 NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFVc05aTHo0VjRYWkYwUTJs ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0IxRUUvREU2QTYxMzBBNTVEMTFFRUI4RTlDRTEwQzRGOUFFMDIvMEY3QTBDRDRD NzJFMTFFRUFBNkI0MjNCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBJDL6MA0EAgACMAcDBQAkAV9gMA0GCSqGSIb3DQEBCwUAA4IBAQB6 XDSoJHAEu6X50Bq3Q2KUTgiCgwxxowal2BA/DTlK+Ubhv6zSB92X0C0gCt8qFlIn rQavy7u3Qc55kXroXpOa58K/Hkkc5z9upR0XxbSg4CmxUZXl4pSNTh+kOOmyLtlR 99u5z98DwHVOScLhbsMc5sQYHanBoGvKl+dwOrTzACG0/4hNUvBttjINLMUOo10W iHR/bpKewJwmjjexyQpNocUqNr2gUXFMMJGJo8ESOfPCylh/mXNR0nRHumUUNVsV KDghlf5KX26pPZMU1Y7f/8/pmeGGx3Rnd7rZy/xhWve0hI/SRd1YuICiXjdc9zbH 0oFtNpwKOmxfGTfjHy+N -----END CERTIFICATE-----Generated at Sat Mar 28 15:14:49 2026 by rpki-client