$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/8E87CD5A8D4C11F0AD32532AC4F9AE02.roa File: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (raw, json) Hash identifier: T+njLY2SFAOPX3VSAe1EY/xCteiDMwgUqIpmnoo6/ro= Subject key identifier: C0:E7:E1:73:96:1F:81:6D:4E:AE:85:40:51:81:6A:A3:C9:A6:35:0B Certificate issuer: /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Certificate serial: 0187 Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/8E87CD5A8D4C11F0AD32532AC4F9AE02.roa Signing time: Sat 01 Nov 2025 04:18:02 +0000 ROA not before: Sat 01 Nov 2025 04:18:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 2914 IP address blocks: 36.50.32.0/24 maxlen: 24 36.50.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF Validity Not Before: Nov 1 04:18:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690589fa-896e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:2f:66:2e:99:84:65:84:63:45:9e:00:b9: 56:e1:15:62:a5:aa:51:83:15:2b:74:6d:c7:d8:8b: ea:3a:f8:a1:c8:85:81:ef:57:01:7a:0e:1e:24:99: e8:9c:ef:9b:c9:60:4c:ae:72:27:56:d3:8a:a6:2e: e1:a0:e8:cb:36:a2:82:be:af:f9:02:45:5d:29:78: 23:be:86:dd:06:95:35:85:b4:10:61:e1:11:10:41: 1d:ff:e6:0d:e5:dc:41:cb:e3:3b:03:2b:67:dd:d1: 3e:49:e7:f3:ba:ba:c5:6c:9f:dc:dc:29:11:e4:69: bd:f3:55:47:be:0a:39:81:98:63:08:37:98:8a:f6: 18:cb:e0:ab:e1:0d:db:7f:55:46:4e:72:ba:fa:c3: 7d:48:5e:86:10:34:2f:4d:96:14:c5:53:d0:1b:9a: 62:3a:cd:0a:ef:d9:54:d0:80:58:7e:e0:7c:09:51: 28:5f:ba:f9:e8:58:f6:b0:67:23:3f:34:0e:61:de: 74:05:57:40:9f:4d:a6:05:ca:d9:04:da:d6:e9:eb: d0:ac:c4:6d:55:cf:c8:8a:b8:73:58:c6:ac:f9:40: e2:fa:63:fd:dc:ea:e7:f1:9d:8b:52:3b:1f:96:29: 27:bc:11:f3:dc:60:bc:b8:07:a9:ed:3a:a9:f2:b9: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E7:E1:73:96:1F:81:6D:4E:AE:85:40:51:81:6A:A3:C9:A6:35:0B X509v3 Authority Key Identifier: keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/8E87CD5A8D4C11F0AD32532AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.32.0/23 Signature Algorithm: sha256WithRSAEncryption 00:4c:64:d2:b8:b2:49:17:55:2b:bc:39:e3:e9:9c:b4:3d:3b: 56:30:c7:af:87:24:4c:16:8d:56:73:97:cb:a1:f5:62:33:35: 60:bb:29:23:26:9a:db:0a:f9:a2:96:cd:2b:cc:38:de:18:d1: 39:46:de:bc:52:34:ce:f8:8f:19:dc:eb:73:55:27:02:31:4f: 8d:ae:8b:44:28:06:3c:7e:80:be:da:7a:9c:5e:a9:0b:6b:65: de:7a:17:d4:f4:22:5e:18:e4:f4:e7:df:af:2d:54:99:f1:fe: 49:2f:06:79:69:c7:29:fc:b2:e5:5e:cc:20:c9:de:cc:ad:cc: db:11:df:d6:70:5d:7d:f2:76:64:ad:59:d2:25:3d:92:5d:4c: 0f:55:72:90:7d:1a:30:77:a2:38:4d:c2:54:4f:7d:11:60:22: 5a:31:8b:ba:d0:1c:13:1b:0b:c0:5b:82:1a:4c:b2:bb:b1:49: 3d:37:a6:ed:5b:6e:e9:59:c9:68:75:9a:37:3f:69:6e:20:a2: d8:6b:45:db:ed:46:9e:35:42:2a:28:ad:87:e2:7d:3e:42:4b: 29:69:ec:69:de:b8:6f:04:a7:b1:b7:ae:f8:1a:37:84:63:56: bf:7d:da:46:71:55:78:2e:38:fb:26:46:7d:13:6e:5e:05:d0: 03:2a:85:f3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF OUYzMTE4RUYwHhcNMjUxMTAxMDQxODAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1ODlmYS04OTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobIvZi6ZhGWEY0WeALlW4RVipapRgxUrdG3H2IvqOvihyIWB71cBeg4eJJno nO+byWBMrnInVtOKpi7hoOjLNqKCvq/5AkVdKXgjvobdBpU1hbQQYeEREEEd/+YN 5dxBy+M7Aytn3dE+SefzurrFbJ/c3CkR5Gm981VHvgo5gZhjCDeYivYYy+Cr4Q3b f1VGTnK6+sN9SF6GEDQvTZYUxVPQG5piOs0K79lU0IBYfuB8CVEoX7r56Fj2sGcj PzQOYd50BVdAn02mBcrZBNrW6evQrMRtVc/IirhzWMas+UDi+mP93Orn8Z2LUjsf liknvBHz3GC8uAep7Tqp8rmbRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMDn4XOW H4FtTq6FQFGBaqPJpjULMB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzYwNEIvNDFDMDEzNUM2REFFMTFFRUE4MEQwNTc0QzRGOUFFMDIvOEU4N0NENUE4 RDRDMTFGMEFEMzI1MzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEkMiAwDQYJKoZIhvcNAQELBQADggEBAABMZNK4skkXVSu8 OePpnLQ9O1Ywx6+HJEwWjVZzl8uh9WIzNWC7KSMmmtsK+aKWzSvMON4Y0TlG3rxS NM74jxnc63NVJwIxT42ui0QoBjx+gL7aepxeqQtrZd56F9T0Il4Y5PTn368tVJnx /kkvBnlpxyn8suVezCDJ3sytzNsR39ZwXX3ydmStWdIlPZJdTA9VcpB9GjB3ojhN wlRPfRFgIloxi7rQHBMbC8BbghpMsruxST03pu1bbulZyWh1mjc/aW4gothrRdvt Rp41QioorYfifT5CSylp7GneuG8Ep7G3rvgaN4RjVr992kZxVXguOPsmRn0Tbl4F 0AMqhfM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:46:58 2025 by rpki-client