$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/DCD4CBC6D5FC11F1BB599C6E0266CEF9.roa File: DCD4CBC6D5FC11F1BB599C6E0266CEF9.roa (raw, json) Hash identifier: 80FMYu4uMNxrWDdWrIbEc3oZ2iDpoKSZnSMm7WEC+nc= Subject key identifier: 76:E1:04:5E:90:CD:96:89:F7:99:5E:84:83:27:D3:05:6B:08:B1:1F Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 0479 Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/DCD4CBC6D5FC11F1BB599C6E0266CEF9.roa Signing time: Sun 01 Nov 2026 14:02:24 +0000 ROA not before: Sun 01 Nov 2026 14:02:24 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 29802 IP address blocks: 36.255.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Nov 1 14:02:24 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6ae74670-7a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:69:68:bf:70:09:8d:97:2d:c4:34:f0:16: e0:20:25:4b:0b:1d:53:25:97:ea:97:ab:92:68:ac: 9b:a3:a1:27:c2:25:22:f7:0b:c4:96:fb:da:8e:44: b9:08:c1:18:93:13:4a:6c:a4:8b:dc:b4:ad:54:14: 0a:92:b6:9e:8d:53:ce:e8:ae:8d:3e:f6:77:18:58: ac:30:14:11:2f:02:ce:ba:b2:f9:3b:1d:b9:d9:dc: 1e:fe:85:75:85:c2:da:34:6b:51:ae:a3:9c:74:4c: a1:4d:a9:ed:3c:9a:83:03:67:36:b3:71:57:77:96: 35:9f:68:8c:f0:46:20:83:aa:ab:61:f9:da:58:27: 90:bd:e6:10:57:4d:66:1e:6a:c5:50:5d:f2:2b:b3: ba:7a:de:92:e3:9d:ee:1f:5f:4a:1c:00:ba:b2:ff: 57:d5:1f:8f:89:45:96:11:a4:d1:60:1f:c1:ac:84: 09:96:78:0c:05:d9:a8:80:1c:4b:c2:b2:d7:a8:84: ff:26:8f:d1:bd:4c:a1:c9:bc:16:7f:9c:aa:90:98: e9:50:d9:2b:8e:63:e5:6e:10:80:90:75:02:1b:9e: f6:d4:a0:65:1c:79:d6:ca:3a:8a:a0:69:6e:9a:c1: 9f:af:33:10:7c:b4:65:3c:1f:bf:ca:6a:a9:1f:33: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E1:04:5E:90:CD:96:89:F7:99:5E:84:83:27:D3:05:6B:08:B1:1F X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/DCD4CBC6D5FC11F1BB599C6E0266CEF9.roa sbgp-ipAddrBlock: critical IPv4: 36.255.98.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:60:e1:13:8d:be:af:b9:9c:3d:ca:3a:29:58:42:81:c2:01: 3d:0c:bf:e1:5f:2e:40:b0:f2:77:29:b8:7c:b9:6d:30:b5:70: ad:f2:3c:d6:cc:8d:ad:ca:da:10:d5:46:fa:00:b6:cb:5a:ef: dc:d3:d8:30:d2:69:aa:a2:3d:91:cc:6a:9d:31:8e:a1:5d:8d: fa:ce:2c:c3:3c:21:2c:c2:21:df:56:fa:2b:be:94:fa:2b:a6: b2:f6:12:42:dd:99:17:03:57:85:26:11:ac:55:e7:a4:af:c7: a4:59:cb:7a:15:21:e1:a5:9b:ac:ab:f2:19:49:60:75:9c:63: 8f:fe:55:e3:50:72:4f:8f:89:d9:69:6d:ec:bb:60:e5:9a:28: e0:1d:ab:2d:8e:01:f5:ee:c4:85:14:fb:39:bb:d2:20:a2:49: 47:7b:27:0f:c5:2a:af:2e:f2:88:43:4c:a7:58:da:78:cd:09: 62:27:9f:9f:c9:69:26:a2:2a:e6:58:d1:ac:4f:ab:86:be:a7: af:85:e2:76:43:ab:e2:c5:4e:0b:dc:a9:7f:bb:31:63:83:34: 96:b5:80:97:53:b7:c1:70:49:23:c5:c3:d2:f6:20:6d:ce:d0: c9:51:2d:a0:22:91:de:66:6f:5c:77:ac:30:1e:dd:79:39:24: 56:27:61:d6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjYxMTAxMTQwMjI0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YWU3NDY3MC03YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0NpaL9wCY2XLcQ08BbgICVLCx1TJZfql6uSaKybo6EnwiUi9wvElvvajkS5 CMEYkxNKbKSL3LStVBQKkraejVPO6K6NPvZ3GFisMBQRLwLOurL5Ox252dwe/oV1 hcLaNGtRrqOcdEyhTantPJqDA2c2s3FXd5Y1n2iM8EYgg6qrYfnaWCeQveYQV01m HmrFUF3yK7O6et6S453uH19KHAC6sv9X1R+PiUWWEaTRYB/BrIQJlngMBdmogBxL wrLXqIT/Jo/RvUyhybwWf5yqkJjpUNkrjmPlbhCAkHUCG5721KBlHHnWyjqKoGlu msGfrzMQfLRlPB+/ymqpHzMwpQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHbhBF6Q zZaJ95lehIMn0wVrCLEfMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M0RTcvOTgxQzA1NThFQUQ4MTFFQ0JDN0VFMDE1QzRGOUFFMDIvRENENENCQzZE NUZDMTFGMUJCNTk5QzZFMDI2NkNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAJP9iMA0GCSqGSIb3DQEBCwUAA4IBAQBvYOETjb6vuZw9yjopWEKB wgE9DL/hXy5AsPJ3Kbh8uW0wtXCt8jzWzI2tytoQ1Ub6ALbLWu/c09gw0mmqoj2R zGqdMY6hXY36zizDPCEswiHfVvorvpT6K6ay9hJC3ZkXA1eFJhGsVeekr8ekWct6 FSHhpZusq/IZSWB1nGOP/lXjUHJPj4nZaW3su2DlmijgHastjgH17sSFFPs5u9Ig oklHeycPxSqvLvKIQ0ynWNp4zQliJ5+fyWkmoirmWNGsT6uGvqevheJ2Q6vixU4L 3Kl/uzFjgzSWtYCXU7fBcEkjxcPS9iBtztDJUS2gIpHeZm9cd6wwHt15OSRWJ2HW -----END CERTIFICATE-----Generated at Thu Nov 5 11:30:16 2026 by rpki-client