$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/50068D0EAB2511F0BE8B7031C4F9AE02.roa File: 50068D0EAB2511F0BE8B7031C4F9AE02.roa (raw, json) Hash identifier: 9yIoHQ+ELoqFiM/kFcS1mLC7j0Wc78liuHQJD/W63p8= Subject key identifier: 1E:B3:9A:34:47:01:91:DB:13:80:E2:F7:33:43:73:F4:2D:AC:9A:CD Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 03BD Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/50068D0EAB2511F0BE8B7031C4F9AE02.roa Signing time: Thu 12 Mar 2026 09:35:26 +0000 ROA not before: Thu 12 Mar 2026 09:35:26 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 208185 IP address blocks: 36.255.98.0/24 maxlen: 24 103.209.76.0/24 maxlen: 24 103.209.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Mar 12 09:35:26 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69b288dd-5629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:6f:51:df:f1:42:49:22:72:0f:c0:3b:5d: e9:da:89:59:da:c6:dc:5e:54:bd:80:0a:05:1d:4d: fa:bf:da:d9:60:4a:16:4c:f2:8d:e9:de:a1:93:a7: 40:f4:aa:7c:37:82:78:0c:a4:50:cb:0f:47:ec:ac: 66:ba:f4:9d:b6:fd:5a:4c:78:3d:18:6a:83:08:8e: ef:a3:c1:5b:f5:16:86:a3:ea:55:9e:73:72:07:a3: b7:0d:6c:48:3b:fb:6d:bd:e0:a0:9b:60:48:93:93: fb:3b:a6:19:c4:f0:1f:22:96:47:a6:00:d6:b5:a6: 2f:e5:0a:8a:17:52:04:16:28:62:ca:f1:07:65:83: a7:9d:9b:7f:1c:19:00:ff:c7:6e:f6:7b:55:83:52: 8d:00:f3:2c:7d:f1:8b:3d:07:36:39:58:33:00:33: aa:25:6f:46:34:aa:b5:0e:63:54:85:3f:24:66:93: d1:28:96:f2:9b:a4:0c:8c:be:56:78:d3:59:a0:a5: 17:90:e3:56:da:c6:18:dc:2f:5c:e0:09:eb:72:10: 58:48:c1:5e:b5:53:98:0f:29:98:d0:de:61:1d:c6: 5d:e2:75:43:6a:10:85:10:ca:53:73:5e:e2:66:45: 87:0d:63:16:ef:f8:4b:7d:14:f0:54:cb:a9:fc:4a: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:9A:34:47:01:91:DB:13:80:E2:F7:33:43:73:F4:2D:AC:9A:CD X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/50068D0EAB2511F0BE8B7031C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.98.0/24 103.209.76.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:3b:da:3a:bc:3e:e5:26:c4:d6:2c:8e:c5:f2:2a:f4:82:14: 41:2c:90:da:8c:0c:8a:2d:cf:5c:9f:b4:2b:0e:15:76:64:5a: 2a:0a:50:25:51:d3:c7:cb:f0:f8:79:91:82:aa:92:97:af:6b: 4f:37:ff:0c:00:c4:0c:10:39:04:76:90:f3:89:c8:13:5a:27: 8d:7b:b9:23:b2:cb:d2:45:74:09:a6:07:47:9c:04:6a:27:0f: 28:56:88:30:b1:e7:a4:91:fe:ca:e0:8e:17:0f:88:78:4b:1d: e2:0f:18:3f:92:6f:e9:37:9f:0e:d5:d0:4e:b7:ec:21:51:e8: 30:68:df:54:0c:7b:42:9b:82:e5:74:4c:4e:73:4c:8a:87:ab: 27:36:92:86:67:e3:1f:ef:a2:c8:e5:b6:3f:53:42:93:22:d3: 87:0a:fa:a9:ed:43:c1:32:d4:3b:ee:b9:1e:31:b8:0b:c8:59: 2e:70:07:4f:1f:21:f6:15:71:e4:15:9a:9d:93:7b:08:70:2d: 33:cf:e9:70:3e:e5:ec:a7:61:c7:d0:01:df:18:7f:65:7e:55: 16:b9:36:31:aa:88:d0:28:80:56:06:8b:85:fa:3b:b2:8a:e3: fc:06:90:57:80:0d:dc:25:79:bc:0f:fa:c6:18:2e:04:a7:84: ed:0c:84:57 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjYwMzEyMDkzNTI2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWIyODhkZC01NjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttdvUd/xQkkicg/AO13p2olZ2sbcXlS9gAoFHU36v9rZYEoWTPKN6d6hk6dA 9Kp8N4J4DKRQyw9H7KxmuvSdtv1aTHg9GGqDCI7vo8Fb9RaGo+pVnnNyB6O3DWxI O/ttveCgm2BIk5P7O6YZxPAfIpZHpgDWtaYv5QqKF1IEFihiyvEHZYOnnZt/HBkA /8du9ntVg1KNAPMsffGLPQc2OVgzADOqJW9GNKq1DmNUhT8kZpPRKJbym6QMjL5W eNNZoKUXkONW2sYY3C9c4AnrchBYSMFetVOYDymY0N5hHcZd4nVDahCFEMpTc17i ZkWHDWMW7/hLfRTwVMup/EpOWwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFB6zmjRH AZHbE4Di9zNDc/QtrJrNMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M0RTcvOTgxQzA1NThFQUQ4MTFFQ0JDN0VFMDE1QzRGOUFFMDIvNTAwNjhEMEVB QjI1MTFGMEJFOEI3MDMxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAJP9iAwQBZ9FMMA0GCSqGSIb3DQEBCwUAA4IBAQBKO9o6vD7lJsTW LI7F8ir0ghRBLJDajAyKLc9cn7QrDhV2ZFoqClAlUdPHy/D4eZGCqpKXr2tPN/8M AMQMEDkEdpDzicgTWieNe7kjssvSRXQJpgdHnARqJw8oVogwseekkf7K4I4XD4h4 Sx3iDxg/km/pN58O1dBOt+whUegwaN9UDHtCm4LldExOc0yKh6snNpKGZ+Mf76LI 5bY/U0KTItOHCvqp7UPBMtQ77rkeMbgLyFkucAdPHyH2FXHkFZqdk3sIcC0zz+lw PuXsp2HH0AHfGH9lflUWuTYxqojQKIBWBouF+juyiuP8BpBXgA3cJXm8D/rGGC4E p4TtDIRX -----END CERTIFICATE-----Generated at Sat Mar 21 09:37:29 2026 by rpki-client