$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/8E87CD5A8D4C11F0AD32532AC4F9AE02.roa File: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (raw, json) Hash identifier: JM8VjK+PFp9u8zNEBK2jqgS7ve8Z/0VuM590GlypGFg= Subject key identifier: E7:71:1B:3A:FA:B1:4C:A0:3B:CC:57:C1:4D:1D:B0:8F:2D:CF:8B:FC Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Certificate serial: 0168 Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/8E87CD5A8D4C11F0AD32532AC4F9AE02.roa Signing time: Tue 09 Sep 2025 07:14:00 +0000 ROA not before: Tue 09 Sep 2025 07:14:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 2914 IP address blocks: 36.50.32.0/24 maxlen: 24 36.50.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 04:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Validity Not Before: Sep 9 07:14:00 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68bfd3b8-80f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c6:fd:9a:b3:ea:ab:ad:a6:5d:58:85:f7:bf: 5a:f0:3d:83:72:e5:34:ac:8f:bf:f1:00:d0:da:46: d3:32:8c:d9:82:60:0e:1c:f7:d2:ca:a9:41:16:3b: e3:4c:bb:4d:fd:05:db:2d:0a:95:75:cc:05:58:02: 7c:47:0c:55:08:37:a8:9c:46:8b:03:6d:7c:ef:b3: 25:82:12:61:8c:93:7d:ae:69:c9:70:a8:4f:04:ab: f4:ee:82:b4:c3:10:12:42:fd:c0:df:ea:95:70:65: b3:46:8e:c3:dd:9e:d2:6b:79:46:c1:6d:1e:9d:81: 31:6d:f8:07:be:64:bc:a7:c1:03:63:10:a4:14:77: 82:c9:ed:5a:a4:00:ab:98:66:81:87:2d:2d:ae:30: 96:07:75:6f:66:0c:1a:14:64:03:e2:85:4e:57:94: e9:e8:9c:dc:cc:67:b5:f1:7c:a9:95:83:5d:7d:fc: e1:db:70:b0:e5:5d:c9:3a:29:b6:c7:4b:de:43:08: cb:25:30:2e:26:8b:33:5b:f9:37:34:40:ca:7f:5f: e8:e1:ed:2e:10:40:9d:0c:b5:55:59:a8:31:1b:fd: 4d:6f:c1:e8:86:90:f8:1b:02:64:53:1f:04:0f:df: 55:1d:75:66:17:a8:33:ae:8c:1b:e6:dc:c5:c6:b3: 72:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:71:1B:3A:FA:B1:4C:A0:3B:CC:57:C1:4D:1D:B0:8F:2D:CF:8B:FC X509v3 Authority Key Identifier: keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/8E87CD5A8D4C11F0AD32532AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.32.0/23 Signature Algorithm: sha256WithRSAEncryption 89:10:29:b8:6d:87:4e:47:82:4b:f6:b1:1a:46:fb:64:fa:e6: 91:71:17:4b:ba:e8:8a:0a:41:cd:69:25:cb:f8:45:39:70:de: 17:5c:eb:10:a6:ff:43:34:84:d7:57:1d:f4:13:06:04:41:d3: 21:c6:fe:3c:4f:45:a1:aa:8f:26:d1:66:18:fc:de:ec:65:57: fe:5e:30:a2:2c:85:e4:ea:86:e0:03:a7:3a:91:4d:8b:9c:a3: 48:f5:53:1b:ad:b2:12:39:1c:05:c3:8e:d5:20:c7:e2:2c:77: ac:ab:35:f9:e6:13:90:59:87:c8:9a:06:ed:3b:68:fb:80:06: 7f:88:1b:ec:a0:ca:c1:19:8e:26:66:14:c6:4e:e3:5f:7b:94: f9:14:e7:10:76:28:23:6c:af:70:1c:2b:35:8c:54:8a:98:10: fb:03:eb:b9:99:be:2c:2b:ee:c5:53:cc:a0:4e:76:a4:39:b3: 47:5c:e8:60:5e:f6:63:b3:c0:0b:7b:48:fe:67:ed:78:1b:21: 1f:4d:6b:53:c3:30:2c:94:2a:36:55:d5:a2:67:8c:0a:13:1e: 95:8f:1a:52:49:4b:ce:80:97:6e:ca:0a:83:27:93:8c:ac:0d: 72:5a:28:4d:48:92:e3:53:00:f3:41:73:84:60:48:ba:25:a6: a1:be:56:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF OUYzMTE4RUYwHhcNMjUwOTA5MDcxNDAwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJmZDNiOC04MGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9sb9mrPqq62mXViF979a8D2DcuU0rI+/8QDQ2kbTMozZgmAOHPfSyqlBFjvj TLtN/QXbLQqVdcwFWAJ8RwxVCDeonEaLA21877MlghJhjJN9rmnJcKhPBKv07oK0 wxASQv3A3+qVcGWzRo7D3Z7Sa3lGwW0enYExbfgHvmS8p8EDYxCkFHeCye1apACr mGaBhy0trjCWB3VvZgwaFGQD4oVOV5Tp6JzczGe18XyplYNdffzh23Cw5V3JOim2 x0veQwjLJTAuJoszW/k3NEDKf1/o4e0uEECdDLVVWagxG/1Nb8HohpD4GwJkUx8E D99VHXVmF6gzrowb5tzFxrNyNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOdxGzr6 sUygO8xXwU0dsI8tz4v8MB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzYwNEIvNDFDMDEzNUM2REFFMTFFRUE4MEQwNTc0QzRGOUFFMDIvOEU4N0NENUE4 RDRDMTFGMEFEMzI1MzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEkMiAwDQYJKoZIhvcNAQELBQADggEBAIkQKbhth05Hgkv2 sRpG+2T65pFxF0u66IoKQc1pJcv4RTlw3hdc6xCm/0M0hNdXHfQTBgRB0yHG/jxP RaGqjybRZhj83uxlV/5eMKIsheTqhuADpzqRTYuco0j1UxutshI5HAXDjtUgx+Is d6yrNfnmE5BZh8iaBu07aPuABn+IG+ygysEZjiZmFMZO4197lPkU5xB2KCNsr3Ac KzWMVIqYEPsD67mZviwr7sVTzKBOdqQ5s0dc6GBe9mOzwAt7SP5n7XgbIR9Na1PD MCyUKjZV1aJnjAoTHpWPGlJJS86Al27KCoMnk4ysDXJaKE1IkuNTAPNBc4RgSLol pqG+VtM= -----END CERTIFICATE-----Generated at Wed Oct 8 12:01:34 2025 by rpki-client