$ rpki-client -vvvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/BC507E02836A11F1B6AFA07868A30FBC.roa File: BC507E02836A11F1B6AFA07868A30FBC.roa (raw, json) Hash identifier: RgAXYPCqL+GT6+xQaTUTFiCAEuxqgRI1EjIIuWZbsk8= Subject key identifier: 2E:D7:E1:04:BA:AB:0A:D0:B9:52:7B:6B:13:C3:71:92:04:DA:6F:CA Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Certificate serial: 144F Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/BC507E02836A11F1B6AFA07868A30FBC.roa Signing time: Sun 26 Jul 2026 05:34:39 +0000 ROA not before: Sun 26 Jul 2026 05:34:39 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45170 IP address blocks: 36.0.4.0/22 maxlen: 22 101.251.4.0/22 maxlen: 22 183.91.132.0/22 maxlen: 22 183.91.132.0/24 maxlen: 24 202.52.0.0/23 maxlen: 23 2404:2c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5199 (0x144f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Validity Not Before: Jul 26 05:34:39 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a659c6f-5e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:3c:19:9f:c9:46:48:b9:9e:6f:d7:35:e3: 9a:5a:2f:0b:9a:e7:88:8c:c0:70:9f:73:2f:c1:e8: 17:57:05:1f:72:1e:b9:7c:ef:33:e8:5f:36:29:1a: d6:b1:04:5a:a9:4d:45:af:47:43:28:d7:8e:78:8d: de:88:e1:bf:8f:00:58:bf:c7:43:90:53:16:dd:ef: 8b:4f:64:c7:47:73:c8:56:c8:1f:04:8d:33:93:29: 13:da:5c:ed:ba:7c:5a:54:b2:8e:95:18:2a:82:63: 71:b3:5e:52:4d:9b:64:1a:35:30:53:64:57:b0:05: 05:48:b1:03:2e:11:c6:f5:b7:bc:2d:82:88:45:0c: 4c:0c:29:f9:65:6a:b5:83:cc:f7:98:40:da:d1:ed: aa:7e:7c:28:ac:2f:04:98:0d:9e:f7:39:3c:fe:3c: 25:9c:58:32:64:e0:49:02:bc:62:e3:eb:0e:88:20: 88:b8:62:5a:a2:9f:4e:bc:f0:b9:6e:17:90:da:6f: d1:d7:d5:11:da:08:13:8d:4d:50:a2:e2:fc:68:63: d7:52:4e:9a:a1:a0:7e:6e:3f:fb:c0:e2:98:b9:21: 2c:25:53:3d:01:df:ba:01:b7:c9:6f:c5:32:c9:3d: 14:dc:85:83:3a:58:46:03:0f:21:3e:0d:d0:90:74: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D7:E1:04:BA:AB:0A:D0:B9:52:7B:6B:13:C3:71:92:04:DA:6F:CA X509v3 Authority Key Identifier: keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/BC507E02836A11F1B6AFA07868A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 36.0.4.0/22 101.251.4.0/22 183.91.132.0/22 202.52.0.0/23 IPv6: 2404:2c00::/32 Signature Algorithm: sha256WithRSAEncryption 31:c2:1c:e9:e2:6f:dc:17:57:1c:07:c6:f7:2d:f5:c1:6e:1a: 05:8c:f8:c1:51:f5:dc:18:7e:94:00:d5:36:1b:6c:2f:aa:5c: 47:c1:2e:3c:80:1b:2b:e1:a6:10:36:dd:36:10:f1:40:54:c5: c3:e2:49:a7:0f:e6:bb:1f:f8:29:a4:41:a5:0a:0b:b3:99:70: 69:4e:d5:65:e5:02:ec:89:d7:30:f6:51:6b:56:1a:4e:a7:74: 5a:10:ec:61:3a:2d:33:3b:e3:85:eb:c4:e5:14:18:da:18:a2: 48:97:fa:5a:32:d6:e8:f6:2d:85:0a:90:0a:c3:0e:31:28:69: 35:8e:da:27:a0:e5:a4:ed:4d:09:63:0a:44:fc:99:f1:b7:8b: 05:4d:00:66:53:64:23:2d:27:5b:60:3c:87:04:77:10:b0:96: 80:1e:63:9e:5d:86:85:b8:f1:58:da:76:35:4a:e0:1d:de:24: 3b:b9:9c:0c:91:f8:b2:d6:50:af:d1:f3:16:e6:70:d1:f7:60: 61:c6:15:8b:0e:88:c0:41:13:4d:1e:b7:c0:b0:98:aa:60:f4: 91:fe:75:7f:1e:82:0f:09:e7:bf:a6:a0:30:4e:83:97:c7:80: db:02:c2:2f:71:12:e4:5b:71:1f:ee:70:47:9e:88:61:95:51: 22:fc:bf:e3 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICFE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz NDEzNzAxQTUwHhcNMjYwNzI2MDUzNDM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY1OWM2Zi01ZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp448GZ/JRki5nm/XNeOaWi8LmueIjMBwn3MvwegXVwUfch65fO8z6F82KRrW sQRaqU1Fr0dDKNeOeI3eiOG/jwBYv8dDkFMW3e+LT2THR3PIVsgfBI0zkykT2lzt unxaVLKOlRgqgmNxs15STZtkGjUwU2RXsAUFSLEDLhHG9be8LYKIRQxMDCn5ZWq1 g8z3mEDa0e2qfnworC8EmA2e9zk8/jwlnFgyZOBJArxi4+sOiCCIuGJaop9OvPC5 bheQ2m/R19UR2ggTjU1QouL8aGPXUk6aoaB+bj/7wOKYuSEsJVM9Ad+6AbfJb8Uy yT0U3IWDOlhGAw8hPg3QkHRUKwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFC7X4QS6 qwrQuVJ7axPDcZIE2m/KMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcxRTMvOTM4M0U2NDZBRDY1MTFFOEFDQkQwRDZBQzRGOUFFMDIvQkM1MDdFMDI4 MzZBMTFGMUI2QUZBMDc4NjhBMzBGQkMucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCJAAEAwQCZfsEAwQCt1uEAwQByjQAMA0EAgACMAcDBQAkBCwAMA0G CSqGSIb3DQEBCwUAA4IBAQAxwhzp4m/cF1ccB8b3LfXBbhoFjPjBUfXcGH6UANU2 G2wvqlxHwS48gBsr4aYQNt02EPFAVMXD4kmnD+a7H/gppEGlCguzmXBpTtVl5QLs idcw9lFrVhpOp3RaEOxhOi0zO+OF68TlFBjaGKJIl/paMtbo9i2FCpAKww4xKGk1 jtonoOWk7U0JYwpE/Jnxt4sFTQBmU2QjLSdbYDyHBHcQsJaAHmOeXYaFuPFY2nY1 SuAd3iQ7uZwMkfiy1lCv0fMW5nDR92BhxhWLDojAQRNNHrfAsJiqYPSR/nV/HoIP Cee/pqAwToOXx4DbAsIvcRLkW3Ef7nBHnohhlVEi/L/j -----END CERTIFICATE-----Generated at Sat Aug 22 06:52:08 2026 by rpki-client