$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/84D917FC9F4911EEA0C5C856C4F9AE02.roa File: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (raw, json) Hash identifier: 7HiiQTV5zY5tbTdYcm8BulZ0FRGrmhKFMlzgoK8qTu8= Subject key identifier: 92:92:4C:F3:2B:BE:BB:A7:49:02:EA:A1:3D:39:BF:D3:92:C2:95:DF Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 01BF Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/84D917FC9F4911EEA0C5C856C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:29:25 +0000 ROA not before: Sun 11 Jan 2026 03:23:24 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 152185 IP address blocks: 36.50.182.0/23 maxlen: 23 36.50.182.0/24 maxlen: 24 36.50.183.0/24 maxlen: 24 2001:df3:4d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Jan 11 03:23:24 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a41505-ac7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:34:24:76:93:a2:c3:03:5b:d9:72:cd:44: b3:38:28:65:43:a5:93:74:de:78:5b:86:9a:5d:58: ea:6b:0c:1c:19:54:9a:b3:59:30:79:80:15:d8:38: 0b:4c:10:3c:89:9a:59:a4:59:f1:f7:e1:8e:69:cd: 80:c0:d4:f7:fd:27:fc:44:d3:8b:ac:44:49:49:7f: 1f:92:64:b8:27:db:f7:5a:c7:0c:f0:31:d8:9a:ab: a4:ae:79:fb:32:73:b3:cf:60:31:f0:0a:7e:ff:e8: 0a:69:b5:eb:b1:9b:b7:3b:8a:37:0d:69:6f:02:51: b7:ec:2d:9b:94:be:0c:e7:2f:f5:2b:34:bb:97:9c: 29:b5:38:35:09:76:ad:93:76:3f:5e:04:e9:9f:9e: de:1a:c2:bf:b4:a7:01:33:da:e6:8d:5a:1e:87:bb: af:e9:b6:b1:02:8e:3a:e1:4b:eb:ea:ed:fb:ed:b3: 72:54:92:8d:40:18:b3:fd:ea:30:d4:4d:29:47:1d: 5b:9b:ff:c1:39:00:7a:b1:d8:5a:21:f8:93:c7:97: 7c:de:b7:1b:88:fd:49:43:1b:c8:65:79:59:31:d7: c4:96:69:88:97:97:6d:42:76:6a:dc:01:2f:87:6f: 72:1c:47:da:d6:64:f0:34:a1:56:5b:19:68:97:1f: 50:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:92:4C:F3:2B:BE:BB:A7:49:02:EA:A1:3D:39:BF:D3:92:C2:95:DF X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/84D917FC9F4911EEA0C5C856C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.182.0/23 IPv6: 2001:df3:4d40::/48 Signature Algorithm: sha256WithRSAEncryption 3e:bd:fe:4c:99:cb:34:2f:83:c2:9a:1a:b3:b1:46:75:f9:9e: 39:a3:e4:1e:38:75:9f:4e:48:a0:2d:77:1d:55:0a:44:b3:3a: 58:12:9c:55:8a:dc:b5:c5:b3:78:57:2b:5e:25:12:27:0c:07: ec:09:42:1b:54:b1:40:8a:1e:0c:18:09:02:90:18:3a:b5:1c: 3a:82:a0:03:16:bc:54:80:73:b1:ea:e0:79:50:65:aa:ba:b2: 79:4e:8d:ea:e6:a4:78:04:f3:47:12:8b:5a:62:91:c4:c6:9d: f3:c0:6a:7a:6c:f6:9e:64:2b:9d:1e:c5:5f:70:f5:17:31:cc: bd:2a:d0:74:7d:4e:cb:6d:b5:9d:5e:db:d0:3e:f8:ce:dd:56: 62:eb:38:77:50:78:dd:e2:41:a1:19:af:f1:bc:51:2a:09:70: c1:37:8e:8f:e2:6e:79:25:45:d6:fe:6d:51:31:14:a5:07:ce: 68:17:bd:f4:00:fb:ac:ce:cd:c0:35:7f:75:fb:06:c9:6f:97: 00:f4:97:f4:c5:d3:a2:87:00:c9:bb:ed:41:0a:f3:d0:43:05: d3:f1:46:87:ad:d1:0c:7e:f7:2f:5f:ae:1d:85:a2:23:3b:8c: 5c:52:a8:58:e4:15:e6:fd:4b:7f:94:fd:8f:6e:d7:a5:b7:b3: 32:35:76:08 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjYwMTExMDMyMzI0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTUwNS1hYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7o0JHaTosMDW9lyzUSzOChlQ6WTdN54W4aaXVjqawwcGVSas1kweYAV2DgL TBA8iZpZpFnx9+GOac2AwNT3/Sf8RNOLrERJSX8fkmS4J9v3WscM8DHYmqukrnn7 MnOzz2Ax8Ap+/+gKabXrsZu3O4o3DWlvAlG37C2blL4M5y/1KzS7l5wptTg1CXat k3Y/XgTpn57eGsK/tKcBM9rmjVoeh7uv6baxAo464Uvr6u377bNyVJKNQBiz/eow 1E0pRx1bm//BOQB6sdhaIfiTx5d83rcbiP1JQxvIZXlZMdfElmmIl5dtQnZq3AEv h29yHEfa1mTwNKFWWxlolx9QxQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJKSTPMr vrunSQLqoT05v9OSwpXfMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y5QjAvMTRDOTQ5NkU5RjNGMTFFRTgwMUIxRDYyQzRGOUFFMDIvODREOTE3RkM5 RjQ5MTFFRUEwQzVDODU2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBJDK2MA8EAgACMAkDBwAgAQ3zTUAwDQYJKoZIhvcNAQELBQADggEB AD69/kyZyzQvg8KaGrOxRnX5njmj5B44dZ9OSKAtdx1VCkSzOlgSnFWK3LXFs3hX K14lEicMB+wJQhtUsUCKHgwYCQKQGDq1HDqCoAMWvFSAc7Hq4HlQZaq6snlOjerm pHgE80cSi1pikcTGnfPAanps9p5kK50exV9w9RcxzL0q0HR9TstttZ1e29A++M7d VmLrOHdQeN3iQaEZr/G8USoJcME3jo/ibnklRdb+bVExFKUHzmgXvfQA+6zOzcA1 f3X7BslvlwD0l/TF06KHAMm77UEK89BDBdPxRoet0Qx+9y9frh2FoiM7jFxSqFjk Feb9S3+U/Y9u16W3szI1dgg= -----END CERTIFICATE-----Generated at Fri Mar 27 04:09:04 2026 by rpki-client