$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/E71CE1BC83F611F0B19EB44FC4F9AE02.roa File: E71CE1BC83F611F0B19EB44FC4F9AE02.roa (raw, json) Hash identifier: rSg74Csb+dQQsrUpCX/1FVVumYzuWikJes2m65+eqvY= Subject key identifier: 8A:28:90:21:00:EE:D1:11:7E:E1:F8:FC:C9:06:79:B5:33:B9:2D:23 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 074A Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/E71CE1BC83F611F0B19EB44FC4F9AE02.roa Signing time: Thu 28 Aug 2025 10:08:11 +0000 ROA not before: Thu 28 Aug 2025 10:08:11 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 36.255.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Aug 28 10:08:11 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68b02a8b-93af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:97:a4:69:3b:e0:ba:87:8d:43:b8:5d:b2: 6b:71:e5:fc:53:84:23:d6:e4:1a:34:a1:f6:8c:8c: 62:70:1c:85:1b:bd:42:82:97:fb:f8:50:c2:2e:52: 4c:dd:e7:ec:12:c7:b7:bb:93:78:74:ad:fe:cf:cd: 35:16:56:57:8b:73:4c:f7:6c:34:2c:61:eb:18:27: fb:f9:fc:61:fc:a3:19:6d:9a:f7:6c:8f:ca:0c:0a: c6:2f:1b:16:ad:cb:d2:76:16:72:bd:a0:d5:08:17: 67:1b:fb:ef:1a:f8:0a:02:55:2c:34:3e:a7:9a:49: 7b:96:18:95:d6:fc:77:37:33:08:1c:ad:c3:3a:2d: 59:11:83:a0:58:7c:df:1b:f0:95:e3:03:d0:d9:e4: de:af:db:66:44:3a:81:4b:7a:3d:75:4a:f1:84:4c: 3b:a4:bf:6b:f4:6c:b3:ab:00:ca:e9:5f:ed:45:f6: dd:d7:bc:55:24:6d:e6:14:c5:94:a7:0b:47:88:a5: 69:fc:9f:c7:af:b7:1d:22:11:89:3f:d5:e0:0e:57: 45:64:a8:4b:ec:f3:7e:4b:81:ed:cc:29:d9:27:31: 76:15:8c:6f:02:86:c3:97:b5:c3:06:ec:9a:44:dd: f0:71:ba:e3:a4:21:7e:20:97:4b:ae:e5:b3:06:76: 82:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:90:21:00:EE:D1:11:7E:E1:F8:FC:C9:06:79:B5:33:B9:2D:23 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/E71CE1BC83F611F0B19EB44FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.199.0/24 Signature Algorithm: sha256WithRSAEncryption 79:09:d2:5f:6c:ed:f9:8d:1e:0c:e2:01:90:a9:4a:5b:7d:65: b3:39:d4:61:11:6e:9b:6a:04:59:ec:69:9d:ea:19:30:aa:a7: 93:ee:ae:1a:72:f1:72:f7:d5:85:3d:07:50:88:0c:1e:63:ae: 98:f0:5d:03:b3:81:09:7f:de:9f:b0:54:03:e9:28:77:53:d7: 0e:7f:bf:55:60:54:82:bd:01:d8:b5:2d:68:6e:d8:c9:6e:91: 6e:0f:0c:81:79:42:62:8a:7e:f3:3e:95:bb:53:8f:e2:df:2f: 13:4d:66:c1:d1:35:04:f1:7c:83:0c:be:db:1c:11:5a:57:ac: 85:43:2e:37:04:e1:43:e1:c2:02:0e:2f:7c:f9:e6:6d:1b:17: 8d:f7:13:c6:44:24:38:b2:39:ca:9b:69:3b:a8:a1:9a:dd:99: c5:15:59:8c:14:e6:47:df:80:3d:ae:87:44:1a:16:6e:9c:61: ce:1f:ff:4d:38:f7:2d:6c:02:c0:d0:99:3f:e3:60:cc:7c:99: 9e:e2:b6:20:74:6e:ef:63:84:cd:b9:cb:d8:45:2a:c9:86:b6: 0f:66:db:56:55:22:7c:96:1b:af:10:1a:86:ca:ef:a2:e4:40: 9b:61:dc:e4:2c:45:1f:1e:b6:57:15:09:d1:21:79:1b:c1:29: 66:88:37:20 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwODI4MTAwODExWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwMmE4Yi05M2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNWXpGk74LqHjUO4XbJrceX8U4Qj1uQaNKH2jIxicByFG71Cgpf7+FDCLlJM 3efsEse3u5N4dK3+z801FlZXi3NM92w0LGHrGCf7+fxh/KMZbZr3bI/KDArGLxsW rcvSdhZyvaDVCBdnG/vvGvgKAlUsND6nmkl7lhiV1vx3NzMIHK3DOi1ZEYOgWHzf G/CV4wPQ2eTer9tmRDqBS3o9dUrxhEw7pL9r9GyzqwDK6V/tRfbd17xVJG3mFMWU pwtHiKVp/J/Hr7cdIhGJP9XgDldFZKhL7PN+S4HtzCnZJzF2FYxvAobDl7XDBuya RN3wcbrjpCF+IJdLruWzBnaCLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIookCEA 7tERfuH4/MkGebUzuS0jMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvRTcxQ0UxQkM4 M0Y2MTFGMEIxOUVCNDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAk/8cwDQYJKoZIhvcNAQELBQADggEBAHkJ0l9s7fmNHgzi AZCpSlt9ZbM51GERbptqBFnsaZ3qGTCqp5Purhpy8XL31YU9B1CIDB5jrpjwXQOz gQl/3p+wVAPpKHdT1w5/v1VgVIK9Adi1LWhu2MlukW4PDIF5QmKKfvM+lbtTj+Lf LxNNZsHRNQTxfIMMvtscEVpXrIVDLjcE4UPhwgIOL3z55m0bF433E8ZEJDiyOcqb aTuooZrdmcUVWYwU5kffgD2uh0QaFm6cYc4f/0049y1sAsDQmT/jYMx8mZ7itiB0 bu9jhM25y9hFKsmGtg9m21ZVInyWG68QGobK76LkQJth3OQsRR8etlcVCdEheRvB KWaINyA= -----END CERTIFICATE-----Generated at Tue Sep 9 06:19:08 2025 by rpki-client