$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/7DD523E4B5BF11F1A1B9E4684011F970.roa File: 7DD523E4B5BF11F1A1B9E4684011F970.roa (raw, json) Hash identifier: navXUxd42r8K849QLWHVk8UDG4xLM10KkyvQqrJsOcs= Subject key identifier: F7:D8:F2:FB:A1:03:F0:30:A7:FF:A8:E1:CA:77:93:44:F3:FF:CC:39 Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Certificate serial: 8C Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/7DD523E4B5BF11F1A1B9E4684011F970.roa Signing time: Sat 24 Oct 2026 16:02:00 +0000 ROA not before: Sat 24 Oct 2026 16:02:00 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 131275 IP address blocks: 151.123.236.0/24 maxlen: 24 151.123.237.0/24 maxlen: 24 151.123.238.0/24 maxlen: 24 151.123.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Validity Not Before: Oct 24 16:02:00 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6adcd678-8fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:f7:67:76:f2:37:13:6c:20:3d:14:6b:f8: ff:9a:38:b2:77:31:97:e6:ba:2d:f0:d5:c6:c2:cf: 79:92:b7:bb:03:98:1a:2d:a0:f9:3e:bc:45:58:06: 6b:f1:31:da:75:95:7b:95:e0:d7:7f:5d:66:c2:70: 50:ce:e6:cf:f5:e4:5f:23:01:42:45:b9:1c:fd:0f: d2:ce:71:0a:ca:8b:b0:1e:2f:b3:0f:cd:5e:1d:2f: 29:f7:88:d6:d6:5e:ca:00:09:b1:01:25:21:fc:79: 6c:a3:e3:e5:1c:d8:39:dc:51:b7:83:04:ed:1e:0b: 20:cd:9d:56:cd:40:12:93:c9:cd:36:d0:62:13:86: 44:93:1b:66:d8:9b:e5:18:e4:0f:b2:61:f6:79:e2: e3:5d:62:51:fe:ce:a1:0e:eb:36:f8:3d:d1:1c:9f: 9f:0a:7f:50:94:d6:26:69:8c:9a:2f:ae:06:6e:f8: 92:1e:7b:80:69:ef:e1:af:7f:66:b6:c2:ba:8e:1e: 31:84:85:86:ac:71:9e:14:d2:62:40:94:e3:b9:a3: 2c:ec:5e:a4:bd:cc:1d:3c:0b:dd:8f:95:39:6f:7d: 98:3f:c8:d9:04:3e:2e:64:55:d2:df:43:c8:7f:b6: f4:a2:48:3b:c1:7b:6f:77:e1:7e:10:7c:dc:75:fe: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D8:F2:FB:A1:03:F0:30:A7:FF:A8:E1:CA:77:93:44:F3:FF:CC:39 X509v3 Authority Key Identifier: keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/7DD523E4B5BF11F1A1B9E4684011F970.roa sbgp-ipAddrBlock: critical IPv4: 151.123.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:7d:0c:ba:16:b3:02:ba:d4:52:f7:22:8e:3d:50:79:6c:6d: 45:64:fd:02:41:b2:e2:b2:ce:0e:d5:f1:e4:33:a8:29:9a:50: fe:65:b4:d7:a3:fb:24:79:a3:18:f9:c1:39:eb:0e:c6:22:53: 04:a8:5c:41:88:55:1b:59:bd:6a:05:2a:e8:d6:21:b0:77:0b: f8:f8:19:0a:1e:81:f5:69:f4:37:de:d3:d8:55:4e:ef:e1:05: 89:32:5d:c2:e1:14:2d:5b:27:eb:0c:cd:0e:1f:72:ed:68:13: 5e:38:7f:d1:01:9b:d3:0f:84:e5:11:60:e9:78:5e:1c:60:b6: 56:7c:5c:29:79:47:62:d7:f3:82:7a:18:ec:fe:9d:c9:0b:cf: 62:a8:5e:c7:06:65:04:27:e3:e9:5c:db:46:00:c9:b8:18:ab: f3:44:a4:20:35:c6:47:92:80:53:d3:fa:ed:4a:4a:66:bb:7d: 05:75:37:ad:3b:c6:ba:89:fd:83:54:8d:ec:b4:57:10:b1:f8: 6a:31:3d:9a:c1:b4:0a:46:48:b9:d1:03:6c:40:5e:17:21:47: 7a:8b:31:ab:b0:34:d9:b5:13:5b:4d:02:50:e8:a6:07:fa:e9: 56:00:c5:9a:e6:97:04:bc:f5:1c:20:9b:47:93:54:82:5d:8f: c4:6d:1c:0b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDYzN0Q1NkE3NUJCOTVCQzVDOUU2QjA4OUQ5MzRDQjVF MkZCRDk2MkQwHhcNMjYxMDI0MTYwMjAwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRjZDY3OC04ZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSL3Z3byNxNsID0Ua/j/mjiydzGX5rot8NXGws95kre7A5gaLaD5PrxFWAZr 8THadZV7leDXf11mwnBQzubP9eRfIwFCRbkc/Q/SznEKyouwHi+zD81eHS8p94jW 1l7KAAmxASUh/Hlso+PlHNg53FG3gwTtHgsgzZ1WzUASk8nNNtBiE4ZEkxtm2Jvl GOQPsmH2eeLjXWJR/s6hDus2+D3RHJ+fCn9QlNYmaYyaL64GbviSHnuAae/hr39m tsK6jh4xhIWGrHGeFNJiQJTjuaMs7F6kvcwdPAvdj5U5b32YP8jZBD4uZFXS30PI f7b0okg7wXtvd+F+EHzcdf5kewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPfY8vuh A/Awp/+o4cp3k0Tz/8w5MB8GA1UdIwQYMBaAFGN9VqdbuVvFyeawidk0y14vvZYt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS83N0FDN0JEMjM0 RjcxMUYxQkI3MzZDQTc3Q0VFNTI4RS9ZMzFXcDF1NVc4WEo1ckNKMlRUTFhpLTls aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4NEEvNzdBQzdCRDIzNEY3MTFGMUJCNzM2Q0E3N0NFRTUyOEUvN0RENTIzRTRC NUJGMTFGMUExQjlFNDY4NDAxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCl3vsMA0GCSqGSIb3DQEBCwUAA4IBAQAtfQy6FrMCutRS9yKOPVB5 bG1FZP0CQbLiss4O1fHkM6gpmlD+ZbTXo/skeaMY+cE56w7GIlMEqFxBiFUbWb1q BSro1iGwdwv4+BkKHoH1afQ33tPYVU7v4QWJMl3C4RQtWyfrDM0OH3LtaBNeOH/R AZvTD4TlEWDpeF4cYLZWfFwpeUdi1/OCehjs/p3JC89iqF7HBmUEJ+PpXNtGAMm4 GKvzRKQgNcZHkoBT0/rtSkpmu30FdTetO8a6if2DVI3stFcQsfhqMT2awbQKRki5 0QNsQF4XIUd6izGrsDTZtRNbTQJQ6KYH+ulWAMWa5pcEvPUcIJtHk1SCXY/EbRwL -----END CERTIFICATE-----Generated at Wed Oct 28 18:57:41 2026 by rpki-client