$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/03C522BA8CF211ED8699F014C4F9AE02.roa File: 03C522BA8CF211ED8699F014C4F9AE02.roa (raw, json) Hash identifier: 436zBDnPnGZ3SOhOykoQMMQvMWG9r9+JB6vVgzRzKCE= Subject key identifier: 85:C3:A3:A1:63:E2:7E:08:7B:1E:39:89:C0:6A:A3:BA:38:42:42:61 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 36A1 Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/03C522BA8CF211ED8699F014C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:17:07 +0000 ROA not before: Wed 30 Sep 2026 16:17:07 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 148000 IP address blocks: 36.50.36.0/24 maxlen: 24 36.50.50.0/24 maxlen: 24 2409::/32 maxlen: 32 2409::/40 maxlen: 40 2409::/48 maxlen: 48 2409:1::/48 maxlen: 48 2409:e:eb::/48 maxlen: 48 2409:e:ed::/48 maxlen: 48 240a:e000::/20 maxlen: 20 240a:eabc::/32 maxlen: 32 240a:eabc:abcd::/48 maxlen: 48 240a:eabc:d00d::/48 maxlen: 48 240a:eff0::/32 maxlen: 32 240a:eff1::/32 maxlen: 32 240a:eff2::/32 maxlen: 32 240a:eff4::/32 maxlen: 32 240a:eff5::/32 maxlen: 32 240a:eff6::/32 maxlen: 32 240a:eff8::/32 maxlen: 32 240a:eff9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 15:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13985 (0x36a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Sep 30 16:17:07 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd3603-cfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:bd:3e:05:35:a9:56:3b:e8:fb:a0:f6:96: aa:ec:29:57:8e:f7:e4:0c:ca:5c:4c:00:08:bb:40: be:0b:e5:80:60:33:01:65:fa:83:fe:78:c1:ac:49: 93:5a:20:bd:e4:73:54:e7:be:72:48:ea:e0:ea:7d: b1:ce:18:39:49:73:21:ff:57:4e:6d:73:7e:ed:07: 33:f0:27:6c:4b:0a:2e:e2:1f:e4:ec:69:1f:2b:25: af:6a:9a:83:56:c7:9f:dd:ea:59:ad:c8:20:53:26: 01:34:bd:82:fd:72:53:16:e7:44:04:de:ce:5d:53: 13:da:3e:32:29:54:fc:63:a9:39:2d:6d:27:b8:c2: 9a:88:5e:ad:0b:41:ce:31:d4:6e:a2:6d:a8:80:0c: c6:46:b9:da:34:eb:2c:8e:aa:58:53:4e:51:d1:00: f3:1a:a9:6a:f9:1d:ad:10:07:be:e2:f9:a2:73:d0: d8:4a:16:77:5a:d5:5e:22:54:c6:71:60:9c:92:50: 50:0e:18:d0:8a:ff:72:f2:fe:de:25:8d:38:93:fb: 0c:da:29:18:3f:ca:22:70:12:d0:30:26:3b:5b:75: a2:c9:6e:5c:9a:29:17:40:ca:c1:6f:11:42:58:20: db:a5:fc:41:17:6c:21:11:a5:32:e4:d8:1b:c4:d9: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C3:A3:A1:63:E2:7E:08:7B:1E:39:89:C0:6A:A3:BA:38:42:42:61 X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/03C522BA8CF211ED8699F014C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.36.0/24 36.50.50.0/24 IPv6: 2409::-2409:1:0:ffff:ffff:ffff:ffff:ffff 2409:e:eb::/48 2409:e:ed::/48 240a:e000::/20 Signature Algorithm: sha256WithRSAEncryption c9:de:9c:d0:42:60:f5:c0:94:5f:3f:da:42:d4:1e:02:01:13: bd:40:d5:05:fc:1b:9c:fa:9d:6a:4f:d7:94:61:60:ae:bc:b8: 90:75:3a:d8:ca:6f:5e:c1:ae:04:ff:64:3e:c7:06:59:7d:97: 70:ec:2d:60:7f:9f:d7:fc:49:d3:0c:b6:47:2c:af:b5:6c:4c: a3:bb:7a:36:2a:25:b7:f8:19:01:81:ec:f5:61:75:7e:6c:7d: a8:37:4b:fc:d8:ef:86:46:e8:b3:cb:34:b5:42:5b:0b:4f:5a: 63:c7:bc:fa:da:e4:08:fd:21:13:f5:51:62:9e:f3:ec:6e:a1: 8b:17:33:a2:4c:5f:c2:27:52:dc:6b:cc:fd:67:99:8e:65:2c: ce:e4:28:2a:31:84:c6:83:ae:7c:04:1b:26:27:e9:9e:a4:e6: 25:4e:56:89:d9:6b:64:2c:a4:93:67:01:15:d6:ad:07:90:b8: c3:85:fe:f0:bd:c4:fb:72:e2:6f:b1:c3:32:e9:52:ba:ee:56: 01:f7:1d:1a:3d:0c:2c:03:5c:e4:8b:cf:a7:ca:f0:e0:78:c2: 3c:16:1d:c4:48:ed:4d:2a:22:b1:f8:40:e5:4b:8e:e5:45:69: 24:dd:c0:dc:9f:ed:41:cc:68:f5:a2:ea:5d:4f:b4:8d:98:fa: 23:96:bd:e6 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICNqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjYwOTMwMTYxNzA3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzYwMy1jZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EC9PgU1qVY76Pug9paq7ClXjvfkDMpcTAAIu0C+C+WAYDMBZfqD/njBrEmT WiC95HNU575ySOrg6n2xzhg5SXMh/1dObXN+7Qcz8CdsSwou4h/k7GkfKyWvapqD Vsef3epZrcggUyYBNL2C/XJTFudEBN7OXVMT2j4yKVT8Y6k5LW0nuMKaiF6tC0HO MdRuom2ogAzGRrnaNOssjqpYU05R0QDzGqlq+R2tEAe+4vmic9DYShZ3WtVeIlTG cWCcklBQDhjQiv9y8v7eJY04k/sM2ikYP8oicBLQMCY7W3WiyW5cmikXQMrBbxFC WCDbpfxBF2whEaUy5NgbxNnlswIDAQABo4ICljCCApIwHQYDVR0OBBYEFIXDo6Fj 4n4Iex45icBqo7o4QkJhMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvMDNDNTIyQkE4 Q0YyMTFFRDg2OTlGMDE0QzRGOUFFMDIucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDAS BAIAATAMAwQAJDIkAwQAJDIyMC4EAgACMCgwDgMDACQJAwcAJAkAAQAAAwcAJAkA DgDrAwcAJAkADgDtAwQEJArgMA0GCSqGSIb3DQEBCwUAA4IBAQDJ3pzQQmD1wJRf P9pC1B4CARO9QNUF/Buc+p1qT9eUYWCuvLiQdTrYym9ewa4E/2Q+xwZZfZdw7C1g f5/X/EnTDLZHLK+1bEyju3o2KiW3+BkBgez1YXV+bH2oN0v82O+GRuizyzS1QlsL T1pjx7z62uQI/SET9VFinvPsbqGLFzOiTF/CJ1Lca8z9Z5mOZSzO5CgqMYTGg658 BBsmJ+mepOYlTlaJ2WtkLKSTZwEV1q0HkLjDhf7wvcT7cuJvscMy6VK67lYB9x0a PQwsA1zki8+nyvDgeMI8Fh3ESO1NKiKx+EDlS47lRWkk3cDcn+1BzGj1oupdT7SN mPojlr3m -----END CERTIFICATE-----Generated at Mon Oct 26 11:13:19 2026 by rpki-client