$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/254F258E7ED011F083509E2BC4F9AE02.roa File: 254F258E7ED011F083509E2BC4F9AE02.roa (raw, json) Hash identifier: q70RPKxzbm6NVXCmryGNBnf7zGx3p9P/q7+H8CK0/2U= Subject key identifier: E3:02:94:82:B9:58:2A:41:18:06:32:D6:F3:FF:E5:75:BF:B6:96:52 Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Certificate serial: 8A Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/254F258E7ED011F083509E2BC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:53:30 +0000 ROA not before: Fri 22 Aug 2025 06:29:43 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153773 IP address blocks: 36.255.76.0/24 maxlen: 24 36.255.77.0/24 maxlen: 24 36.255.78.0/24 maxlen: 24 36.255.79.0/24 maxlen: 24 203.24.98.0/24 maxlen: 24 203.29.60.0/24 maxlen: 24 2401:fce0:10::/48 maxlen: 48 2401:fce0:11::/48 maxlen: 48 2401:fce0:20::/48 maxlen: 48 2401:fce0:21::/48 maxlen: 48 2401:fce0:30::/48 maxlen: 48 2401:fce0:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Validity Not Before: Aug 22 06:29:43 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a5a46a-a37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:45:0c:60:3c:5b:81:8c:55:17:f7:6f:1e: 79:90:ed:98:39:42:ed:d9:26:92:62:22:3b:9f:a6: f0:c2:3b:e9:fd:02:5d:9e:b0:f7:0b:91:1c:7b:5d: 68:8c:9e:42:eb:8d:9c:6f:f3:5e:23:5a:99:2c:56: e2:db:a5:4b:e8:4b:4e:47:e0:8c:00:6b:92:97:a9: 18:4e:43:e5:69:67:f2:57:9b:9e:78:b9:f0:d7:a1: 73:72:77:db:bd:6a:1c:6f:20:ab:54:8c:8e:af:13: ee:0c:05:a6:db:37:43:b3:03:6a:b9:82:58:06:f1: f8:bb:92:9f:7f:0f:12:02:c5:15:d4:36:4a:75:e6: aa:09:93:e4:6a:2c:27:43:f8:2d:9e:61:75:3c:c5: 0c:4a:b2:8b:51:b9:9b:44:59:48:d0:d4:08:14:ba: 6a:2e:45:c1:48:87:ff:64:21:8a:dc:19:69:b1:5c: 0f:f9:de:cd:a4:6b:16:21:b9:38:85:fa:bc:59:89: 96:eb:7a:87:76:b3:0c:09:32:89:92:00:1a:e4:a5: 7f:57:6b:19:79:2e:ab:22:43:51:15:ac:de:4c:bc: a1:11:1e:92:27:e3:68:2e:76:6d:a0:4b:75:07:22: 65:37:29:c5:d3:1a:b7:11:8d:57:35:2b:01:49:48: 88:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:02:94:82:B9:58:2A:41:18:06:32:D6:F3:FF:E5:75:BF:B6:96:52 X509v3 Authority Key Identifier: keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/254F258E7ED011F083509E2BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.76.0/22 203.24.98.0/24 203.29.60.0/24 IPv6: 2401:fce0:10::/47 2401:fce0:20::/47 2401:fce0:30::/47 Signature Algorithm: sha256WithRSAEncryption 09:93:8a:f5:44:1c:19:dc:3d:49:c6:cf:ef:89:18:22:d9:70: ec:e9:6e:18:32:e5:3c:5f:0c:90:f2:00:b8:a8:78:f1:70:4a: 3d:ad:b9:6c:55:0c:aa:86:9d:1d:2d:f5:ad:44:66:7a:eb:b7: dd:ee:25:17:62:38:1b:b1:27:a5:ea:ae:a1:63:8b:07:1a:e2: 30:9c:d0:ac:a5:fb:f2:74:da:0b:7e:2f:c8:4e:44:ff:cf:82: 76:de:30:d6:42:12:85:df:72:fb:a3:1a:ee:5b:72:ec:1e:54: 5e:96:2d:96:b2:4d:fb:33:a0:4c:02:af:a4:0d:2b:44:2c:c2: a0:06:70:46:b0:be:ab:29:ad:7c:fa:6d:f1:04:d0:5a:15:5b: 66:d5:64:34:bd:78:e7:80:04:29:96:fd:43:b3:63:d6:03:ec: 66:d9:d6:82:8b:32:d5:3c:9c:8e:a8:e8:31:1b:e1:79:05:a4: 66:18:7c:d3:42:69:fc:5f:6e:7a:73:9a:3f:cc:f8:20:4f:45: 25:ac:2d:c9:b3:34:99:4f:89:be:e9:92:88:e7:b0:53:45:2c: a2:7b:08:5c:a8:64:f9:b7:d6:52:65:a0:2e:f3:6a:7c:d1:f1: a1:45:f2:b4:26:ee:b0:33:97:59:4c:84:21:8e:7e:21:75:1b: ae:ab:71:be -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0QTYxMTAvBgNVBAUTKDczNzU4MkVDNEU4RkUzOURGNDJDMERDMjI5QkEzN0Qx QjZCMzg2NUEwHhcNMjUwODIyMDYyOTQzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTQ2YS1hMzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+xFDGA8W4GMVRf3bx55kO2YOULt2SaSYiI7n6bwwjvp/QJdnrD3C5Ece11o jJ5C642cb/NeI1qZLFbi26VL6EtOR+CMAGuSl6kYTkPlaWfyV5ueeLnw16Fzcnfb vWocbyCrVIyOrxPuDAWm2zdDswNquYJYBvH4u5Kffw8SAsUV1DZKdeaqCZPkaiwn Q/gtnmF1PMUMSrKLUbmbRFlI0NQIFLpqLkXBSIf/ZCGK3BlpsVwP+d7NpGsWIbk4 hfq8WYmW63qHdrMMCTKJkgAa5KV/V2sZeS6rIkNRFazeTLyhER6SJ+NoLnZtoEt1 ByJlNynF0xq3EY1XNSsBSUiI2QIDAQABo4ICjzCCAoswHQYDVR0OBBYEFOMClIK5 WCpBGAYy1vP/5XW/tpZSMB8GA1UdIwQYMBaAFHN1guxOj+Od9CwNwim6N9G2s4Za MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRBNi8zQjY3QUQ4RTYz QjcxMUYwODhEREYzNjVDNEY5QUUwMi9jM1dDN0U2UDQ1MzBMQTNDS2JvMzBiYXpo bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y0QTYvM0I2N0FEOEU2M0I3MTFGMDg4RERGMzY1QzRGOUFFMDIvMjU0RjI1OEU3 RUQwMTFGMDgzNTA5RTJCQzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTAY BAIAATASAwQCJP9MAwQAyxhiAwQAyx08MCEEAgACMBsDBwEkAfzgABADBwEkAfzg ACADBwEkAfzgADAwDQYJKoZIhvcNAQELBQADggEBAAmTivVEHBncPUnGz++JGCLZ cOzpbhgy5TxfDJDyALioePFwSj2tuWxVDKqGnR0t9a1EZnrrt93uJRdiOBuxJ6Xq rqFjiwca4jCc0Kyl+/J02gt+L8hORP/PgnbeMNZCEoXfcvujGu5bcuweVF6WLZay TfszoEwCr6QNK0QswqAGcEawvqsprXz6bfEE0FoVW2bVZDS9eOeABCmW/UOzY9YD 7GbZ1oKLMtU8nI6o6DEb4XkFpGYYfNNCafxfbnpzmj/M+CBPRSWsLcmzNJlPib7p kojnsFNFLKJ7CFyoZPm31lJloC7zanzR8aFF8rQm7rAzl1lMhCGOfiF1G66rcb4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:05 2026 by rpki-client