$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/7AD7FD049DE911F0A23C8031C4F9AE02.roa File: 7AD7FD049DE911F0A23C8031C4F9AE02.roa (raw, json) Hash identifier: CUjzOk4Yzo5HfsbOc1jf19caQKnMTxc8EO2EcR/1U8c= Subject key identifier: EC:7B:23:C0:61:C3:11:08:9E:76:AB:8D:D8:66:25:85:67:AC:9E:B7 Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 0347 Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/7AD7FD049DE911F0A23C8031C4F9AE02.roa Signing time: Tue 30 Sep 2025 10:37:36 +0000 ROA not before: Tue 30 Sep 2025 10:37:36 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 208137 IP address blocks: 36.255.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Sep 30 10:37:36 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68dbb2f0-6e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:2e:eb:46:86:2c:15:0c:fd:0e:8b:7a:50: ed:b5:2b:ed:9d:1c:8e:00:16:86:4c:a4:ac:33:15: 46:5f:54:77:2d:7c:d5:0b:d8:20:b7:18:24:69:be: 4e:34:03:6f:12:e6:76:f2:ad:34:1d:fd:33:95:24: 98:9f:48:d9:86:01:a8:b6:fc:3b:d7:b7:f6:49:6e: cb:6a:b7:fb:da:5e:8d:58:04:03:96:36:22:07:5b: 50:10:72:eb:52:fc:62:02:19:95:db:ea:86:5a:cc: 60:c9:cf:51:a0:91:95:2f:63:c2:c9:9c:80:5c:49: 4f:17:56:a7:24:28:cb:98:91:9d:e8:9a:e8:a2:ee: 77:a7:d4:6b:7f:2b:15:e1:ba:ca:4d:05:29:6a:44: f3:63:24:23:84:c1:90:b8:78:33:b4:bf:42:3f:6b: 97:fc:5b:31:c7:a9:26:bb:ba:98:a2:7c:91:b5:94: 4a:b3:a4:3c:fd:bd:16:30:8c:7c:d1:93:4e:9b:23: 74:0e:a5:78:75:8f:64:e4:20:4d:b2:8b:ee:f3:fb: fc:e9:4a:d4:2b:b0:bd:69:83:29:0d:f2:4d:97:8b: 5f:dc:7e:fc:1e:42:04:1c:fa:3c:40:ec:88:a7:d0: 2a:e5:0f:d1:a8:2b:64:60:d3:79:da:2a:50:fb:28: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7B:23:C0:61:C3:11:08:9E:76:AB:8D:D8:66:25:85:67:AC:9E:B7 X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/7AD7FD049DE911F0A23C8031C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.98.0/24 Signature Algorithm: sha256WithRSAEncryption ae:83:e0:fe:ea:0b:92:0d:54:a0:1b:b5:cc:51:f6:f8:ab:8f: 30:49:7f:f5:ff:d7:c2:d4:6d:72:de:7c:11:d0:e0:a0:a9:24: 5f:3a:43:8f:69:5c:b0:e3:02:99:a4:43:b9:bf:9b:09:3f:f6: 4a:a1:11:89:a6:76:51:f5:54:81:8d:a4:b1:c4:31:d0:08:81: b7:b6:8c:b2:83:47:95:2e:08:57:bf:59:88:3b:d3:4b:fe:55: 97:c4:7d:89:e5:78:64:bb:b3:00:46:2e:ab:66:77:97:e0:06: e2:08:01:68:02:85:df:92:3b:2c:a0:ae:58:1c:5e:22:41:1c: 7a:2a:fb:f3:93:2b:a9:72:0b:ba:d3:ee:3b:a0:df:06:98:16: 91:68:c0:ad:7a:1b:04:a2:a4:b7:17:62:2e:52:bd:e6:3c:29: de:65:be:f1:9b:4c:50:5a:8b:7a:8c:1f:1b:1b:51:90:35:68: 0f:1d:3e:8c:ff:fb:31:3b:a1:c3:84:a1:81:84:88:ae:75:c9: 31:19:d3:a7:79:93:c9:09:0d:d0:ad:a6:1c:de:9a:f8:33:04: 71:dc:9c:ff:8b:66:c3:d7:79:4b:70:53:5e:42:69:48:a5:2d: 81:f3:fa:f1:6f:65:e2:3c:d4:bb:a8:45:78:8d:52:13:da:7e: 12:d7:7b:db -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjUwOTMwMTAzNzM2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGRiYjJmMC02ZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6su60aGLBUM/Q6LelDttSvtnRyOABaGTKSsMxVGX1R3LXzVC9ggtxgkab5O NANvEuZ28q00Hf0zlSSYn0jZhgGotvw717f2SW7Larf72l6NWAQDljYiB1tQEHLr UvxiAhmV2+qGWsxgyc9RoJGVL2PCyZyAXElPF1anJCjLmJGd6Jroou53p9RrfysV 4brKTQUpakTzYyQjhMGQuHgztL9CP2uX/Fsxx6kmu7qYonyRtZRKs6Q8/b0WMIx8 0ZNOmyN0DqV4dY9k5CBNsovu8/v86UrUK7C9aYMpDfJNl4tf3H78HkIEHPo8QOyI p9Aq5Q/RqCtkYNN52ipQ+yj4DQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOx7I8Bh wxEInnarjdhmJYVnrJ63MB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M0RTcvOTgxQzA1NThFQUQ4MTFFQ0JDN0VFMDE1QzRGOUFFMDIvN0FEN0ZEMDQ5 REU5MTFGMEEyM0M4MDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAk/2IwDQYJKoZIhvcNAQELBQADggEBAK6D4P7qC5INVKAb tcxR9virjzBJf/X/18LUbXLefBHQ4KCpJF86Q49pXLDjApmkQ7m/mwk/9kqhEYmm dlH1VIGNpLHEMdAIgbe2jLKDR5UuCFe/WYg700v+VZfEfYnleGS7swBGLqtmd5fg BuIIAWgChd+SOyygrlgcXiJBHHoq+/OTK6lyC7rT7jug3waYFpFowK16GwSipLcX Yi5SveY8Kd5lvvGbTFBai3qMHxsbUZA1aA8dPoz/+zE7ocOEoYGEiK51yTEZ06d5 k8kJDdCtphzemvgzBHHcnP+LZsPXeUtwU15CaUilLYHz+vFvZeI81LuoRXiNUhPa fhLXe9s= -----END CERTIFICATE-----Generated at Fri Oct 24 06:58:30 2025 by rpki-client