$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/AB6989BCEADF11ECADC46036C4F9AE02.roa File: AB6989BCEADF11ECADC46036C4F9AE02.roa (raw, json) Hash identifier: FcszbT9UpAZNEdhWpfe1rZtdf3GpRziwiFdccRgq20g= Subject key identifier: AD:A5:0C:1E:C8:07:89:97:68:1E:3E:16:FD:20:FC:78:FC:44:CA:6A Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 03B0 Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/AB6989BCEADF11ECADC46036C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:40:29 +0000 ROA not before: Thu 13 Mar 2025 01:27:06 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 212238 IP address blocks: 36.255.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Mar 13 01:27:06 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4881d-3490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:53:b4:f3:da:ef:fc:41:4f:76:b1:91:48: f1:32:86:f4:8a:26:6b:29:a1:72:36:7e:86:63:1f: 69:4d:69:6c:3a:b1:40:e4:dd:2b:11:dc:ea:49:18: f4:04:53:e9:a3:76:78:76:f7:b1:05:b8:3a:b8:53: 60:95:c6:ae:40:3d:f3:1b:6f:80:ab:ed:78:8e:cb: 3c:19:09:f4:bd:4b:3d:20:12:05:2a:f6:3e:f2:61: 95:60:de:43:81:80:c3:2e:6a:a9:2e:06:b8:af:96: 41:79:e2:4a:0a:89:48:97:23:d7:67:a7:e9:88:6d: 5b:67:3a:18:51:80:c3:fa:b2:f2:bd:ac:73:80:28: 16:71:53:13:d3:dd:bc:29:4a:a6:2d:e0:1d:7c:ea: 83:d9:14:8e:25:04:da:36:00:43:04:0c:19:fb:9c: 4c:f4:49:ab:91:05:4a:17:fd:f2:a8:00:41:a4:61: 6d:d9:de:12:d3:27:7a:fb:7b:81:0f:44:07:22:81: af:49:04:4d:10:f9:d4:a9:98:9c:dd:08:cb:4d:8c: e6:17:24:aa:4f:9d:86:bd:07:95:f9:27:97:80:1f: 84:0c:29:93:dd:37:5b:56:e4:15:aa:37:24:cd:e5: 6d:ba:68:4b:37:82:48:d9:b0:55:35:de:da:d9:6b: e9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A5:0C:1E:C8:07:89:97:68:1E:3E:16:FD:20:FC:78:FC:44:CA:6A X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/AB6989BCEADF11ECADC46036C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.99.0/24 Signature Algorithm: sha256WithRSAEncryption a1:8f:8b:28:18:01:ed:bb:cc:a0:4a:13:e7:7e:a1:17:cf:bb: cb:9a:c1:15:85:c6:59:68:46:e0:dc:37:b4:a2:c8:62:bc:3a: 8b:db:c3:00:b0:c0:e8:4c:70:45:ef:36:70:43:1a:25:a4:e8: 59:e1:0a:95:25:c4:58:b8:7d:99:56:6c:33:ac:6b:65:72:ac: 95:da:e5:d1:b3:9e:51:78:91:fd:55:53:16:1d:a3:ab:67:3d: 6f:4c:64:4b:9f:29:5f:73:d6:79:6d:2c:a7:4c:ea:01:cc:b4: 16:f1:cc:e9:34:86:aa:66:86:2d:03:bf:54:83:55:18:99:9e: f1:40:8f:1a:68:95:bd:d3:d5:e1:32:77:e8:3c:17:f5:0a:ef: ef:63:a1:88:26:a1:e9:8b:4e:34:e6:73:f6:70:98:0e:c1:6b: 16:0b:a6:f1:24:03:e8:07:4f:15:6a:8f:4e:23:6e:02:99:f6: ab:1b:af:f3:18:97:0c:cc:42:9b:29:9a:83:19:0f:00:11:12: 5d:a0:a1:43:8f:e0:f6:da:5a:52:12:20:95:81:2f:5d:32:ec: 65:b4:27:76:5d:a8:27:71:48:a6:89:05:fc:f7:f5:f8:25:0f: 20:41:af:84:e1:fc:f7:4c:c5:25:cf:35:b2:4a:ed:29:fe:63: b9:21:09:48 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjUwMzEzMDEyNzA2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODgxZC0zNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8BTtPPa7/xBT3axkUjxMob0iiZrKaFyNn6GYx9pTWlsOrFA5N0rEdzqSRj0 BFPpo3Z4dvexBbg6uFNglcauQD3zG2+Aq+14jss8GQn0vUs9IBIFKvY+8mGVYN5D gYDDLmqpLga4r5ZBeeJKColIlyPXZ6fpiG1bZzoYUYDD+rLyvaxzgCgWcVMT0928 KUqmLeAdfOqD2RSOJQTaNgBDBAwZ+5xM9EmrkQVKF/3yqABBpGFt2d4S0yd6+3uB D0QHIoGvSQRNEPnUqZic3QjLTYzmFySqT52GvQeV+SeXgB+EDCmT3TdbVuQVqjck zeVtumhLN4JI2bBVNd7a2Wvp0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK2lDB7I B4mXaB4+Fv0g/Hj8RMpqMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M0RTcvOTgxQzA1NThFQUQ4MTFFQ0JDN0VFMDE1QzRGOUFFMDIvQUI2OTg5QkNF QURGMTFFQ0FEQzQ2MDM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAJP9jMA0GCSqGSIb3DQEBCwUAA4IBAQChj4soGAHtu8ygShPnfqEX z7vLmsEVhcZZaEbg3De0oshivDqL28MAsMDoTHBF7zZwQxolpOhZ4QqVJcRYuH2Z VmwzrGtlcqyV2uXRs55ReJH9VVMWHaOrZz1vTGRLnylfc9Z5bSynTOoBzLQW8czp NIaqZoYtA79Ug1UYmZ7xQI8aaJW909XhMnfoPBf1Cu/vY6GIJqHpi0405nP2cJgO wWsWC6bxJAPoB08Vao9OI24CmfarG6/zGJcMzEKbKZqDGQ8AERJdoKFDj+D22lpS EiCVgS9dMuxltCd2XagncUimiQX89/X4JQ8gQa+E4fz3TMUlzzWySu0p/mO5IQlI -----END CERTIFICATE-----Generated at Sat Mar 21 06:50:30 2026 by rpki-client