$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/78287A4A8F9311EE9CC9E648C4F9AE02.roa File: 78287A4A8F9311EE9CC9E648C4F9AE02.roa (raw, json) Hash identifier: CKFuhjjD4LFJhc/zBwKp/WUnx773MjeOVUImN47uNH8= Subject key identifier: A9:D3:82:AC:B2:A4:65:BE:33:C2:D8:3F:8C:A4:AA:6F:10:44:58:6E Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 07BA Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/78287A4A8F9311EE9CC9E648C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:55:27 +0000 ROA not before: Fri 20 Jun 2025 22:11:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 36.255.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 21:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1978 (0x7ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Jun 20 22:11:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a47d8f-320c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:0b:6c:5a:1d:be:45:e6:41:d0:2a:f7:f3: 33:38:ce:3b:e9:ce:ee:b6:c4:53:22:e6:db:da:87: 42:68:b8:ac:e8:88:73:03:55:b4:c3:54:f4:01:36: dd:f1:54:c2:13:da:64:bb:e6:5e:e9:2c:11:89:c8: 65:65:03:22:4e:af:06:3e:40:f2:76:29:1c:dc:11: fb:5c:a6:78:eb:68:e8:32:93:11:d9:9a:b7:40:59: da:8f:8a:7f:65:42:9a:f2:4a:c4:a4:e7:e1:65:7b: 33:20:47:80:5e:cb:fb:fc:52:f2:ac:08:77:a4:80: 4c:be:27:d2:51:8d:2f:6c:85:fc:75:2a:e9:43:37: 19:aa:3a:6d:e3:ee:c9:7d:4d:c7:1c:14:08:e9:cb: cb:fe:29:17:0d:99:52:2c:d6:3b:72:22:94:68:84: d2:49:f0:37:c2:d0:48:cd:ef:99:ba:73:6b:9c:1f: ee:53:91:17:03:7b:92:cf:b5:ed:3c:3c:08:f5:91: 03:bf:fb:bb:a6:af:c6:88:97:bc:23:5d:a9:95:0b: 7e:2c:fc:48:3b:c8:09:d6:0d:df:b8:30:c9:53:c1: 26:46:1e:c9:0e:5c:f2:8c:8d:79:1d:e3:85:8b:18: 94:46:90:b9:1c:b6:cf:a5:8f:22:69:51:97:12:4d: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D3:82:AC:B2:A4:65:BE:33:C2:D8:3F:8C:A4:AA:6F:10:44:58:6E X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/78287A4A8F9311EE9CC9E648C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.196.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:59:a4:d0:51:9e:08:34:54:43:3f:d0:55:fd:75:8b:0f:9f: 8e:ba:d2:3d:f4:de:81:35:0d:a6:19:ce:85:51:cf:96:d0:d6: c6:d8:6b:d9:b7:80:88:7a:43:3c:0c:64:95:8e:ba:e2:69:38: d7:cc:6c:17:bc:2a:9a:c5:f8:0f:ee:13:b6:8b:8d:07:b6:06: 94:96:a9:17:a2:59:01:0c:4f:96:dc:02:45:7e:17:5f:33:83: 0a:d1:8f:2f:90:f5:0b:b7:d8:27:be:ae:7c:d7:5b:50:fe:c8: 77:ce:58:f4:1f:eb:28:52:13:6d:36:83:94:83:bf:0f:e6:37: a9:e0:14:58:dd:31:1f:1e:26:5e:d8:77:84:46:86:f9:e9:1b: e2:3b:14:d9:0b:9f:ee:0e:07:3a:64:4c:d0:58:6e:eb:aa:0e: 5e:19:4d:0f:da:ec:43:62:37:24:34:ef:54:3f:11:5d:73:c0: 54:ff:53:d4:ca:b4:77:fa:e3:6f:fb:41:9d:7b:7a:df:40:9c: 6e:ef:aa:e9:54:f7:eb:4a:d5:f7:61:81:7a:23:2f:89:40:ae: f1:f3:f3:f5:9b:9f:b5:d2:64:1f:84:5f:28:18:41:f9:22:9c: 62:16:3a:1c:46:e1:d3:96:a5:ec:32:66:c0:83:6c:dd:68:a5: b2:0a:c6:1a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNjIwMjIxMTI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Q4Zi0zMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKQLbFodvkXmQdAq9/MzOM476c7utsRTIubb2odCaLis6IhzA1W0w1T0ATbd 8VTCE9pku+Ze6SwRichlZQMiTq8GPkDydikc3BH7XKZ462joMpMR2Zq3QFnaj4p/ ZUKa8krEpOfhZXszIEeAXsv7/FLyrAh3pIBMvifSUY0vbIX8dSrpQzcZqjpt4+7J fU3HHBQI6cvL/ikXDZlSLNY7ciKUaITSSfA3wtBIze+ZunNrnB/uU5EXA3uSz7Xt PDwI9ZEDv/u7pq/GiJe8I12plQt+LPxIO8gJ1g3fuDDJU8EmRh7JDlzyjI15HeOF ixiURpC5HLbPpY8iaVGXEk0J9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKnTgqyy pGW+M8LYP4ykqm8QRFhuMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvNzgyODdBNEE4 RjkzMTFFRTlDQzlFNjQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAJP/EMA0GCSqGSIb3DQEBCwUAA4IBAQB6WaTQUZ4INFRDP9BV/XWL D5+OutI99N6BNQ2mGc6FUc+W0NbG2GvZt4CIekM8DGSVjrriaTjXzGwXvCqaxfgP 7hO2i40HtgaUlqkXolkBDE+W3AJFfhdfM4MK0Y8vkPULt9gnvq5811tQ/sh3zlj0 H+soUhNtNoOUg78P5jep4BRY3TEfHiZe2HeERob56RviOxTZC5/uDgc6ZEzQWG7r qg5eGU0P2uxDYjckNO9UPxFdc8BU/1PUyrR3+uNv+0Gde3rfQJxu76rpVPfrStX3 YYF6Iy+JQK7x8/P1m5+10mQfhF8oGEH5IpxiFjocRuHTlqXsMmbAg2zdaKWyCsYa -----END CERTIFICATE-----Generated at Thu Mar 19 20:58:09 2026 by rpki-client