$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa File: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (raw, json) Hash identifier: ssDnql2MG6fnkqqCP0FpBW7E4sAvlHQs1UvA3iYbed4= Subject key identifier: 26:23:20:BD:36:A5:9B:AE:0B:A5:2C:99:87:B0:C2:95:26:0C:F3:F5 Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Certificate serial: 01A6 Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa Signing time: Sun 01 Mar 2026 05:24:33 +0000 ROA not before: Sun 01 Mar 2026 05:24:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152193 IP address blocks: 36.50.250.0/23 maxlen: 23 36.50.250.0/24 maxlen: 24 36.50.251.0/24 maxlen: 24 2401:5f60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Validity Not Before: Mar 1 05:24:33 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3cd91-1a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:b3:59:46:e4:05:65:3f:10:85:1d:51:4e: 93:c0:7d:3e:6f:0f:45:9f:16:1b:1e:b9:49:66:14: e9:10:32:9a:77:0b:c1:4d:b2:5c:83:2b:e9:1f:d1: ec:9c:11:bc:30:07:79:a5:5f:70:02:ad:1c:5d:59: 80:79:02:63:fc:75:8c:60:56:68:1e:da:f5:70:f6: ea:14:7b:fc:cb:c4:dd:35:b0:d5:52:7c:48:f6:07: 46:c5:4a:ca:77:16:2a:5a:77:92:26:09:0d:4b:52: 1a:b2:73:e9:bc:f3:de:7d:21:82:1a:66:b2:c3:63: 5e:a5:03:ec:21:df:53:23:1b:ed:1f:54:3a:e0:bc: 78:1c:89:67:0b:aa:fe:59:4c:61:54:65:6e:af:da: 1f:63:c0:3e:75:53:bb:fa:15:90:ab:a7:9f:94:e9: c5:36:d9:2a:62:82:84:c0:ac:36:d2:6a:52:a0:9f: 6d:7c:d2:3c:74:18:27:a7:69:b7:53:e5:ee:73:91: 0f:13:6d:23:f7:04:73:9f:78:2e:03:91:22:93:c4: a9:e5:d0:56:ad:7d:03:5f:33:19:48:fc:64:49:c1: 0f:01:70:42:39:e1:d2:2b:6e:09:4a:3b:1a:1e:30: 54:c0:eb:6b:e4:3b:97:c3:df:2b:d8:8f:cf:1f:d4: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:23:20:BD:36:A5:9B:AE:0B:A5:2C:99:87:B0:C2:95:26:0C:F3:F5 X509v3 Authority Key Identifier: keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.250.0/23 IPv6: 2401:5f60::/32 Signature Algorithm: sha256WithRSAEncryption ba:57:3a:15:07:81:4e:f6:ec:5c:0c:56:e2:52:c9:b7:bf:0b: 4e:89:cd:a1:51:ca:15:58:2b:e0:0f:70:6b:c4:b0:1f:10:00: 02:cd:ca:20:1c:47:97:d2:7c:78:cc:51:36:39:f0:23:41:a6: d1:67:36:51:8b:75:31:c0:dd:ec:3b:dd:39:ba:22:62:78:06: 74:5f:64:30:51:5f:8e:5d:a9:0c:05:11:b1:1f:49:1f:57:d9: 8e:e0:f8:48:de:62:7c:80:54:b9:b5:e3:c6:26:5b:76:3b:39: b4:bb:9d:b1:5e:8d:20:cc:a4:f0:ae:fb:54:02:6e:93:2b:77: 84:f5:6f:ec:06:af:3f:28:be:79:a3:33:e4:45:ce:71:b8:bb: 84:af:39:c7:25:41:69:6f:7e:0d:65:a8:69:5a:5a:b8:69:6a: a8:c3:3d:b0:2d:ec:c6:06:21:68:44:36:a8:93:b5:61:71:8b: 9f:90:e5:c0:d1:1c:b5:16:e8:22:6d:1a:be:8e:b4:84:f3:52: dd:d0:aa:ca:68:fc:b4:a5:05:40:94:6f:7a:25:5d:ea:4d:f3: 8d:bb:00:20:05:2a:aa:27:b1:24:5d:8d:e8:fb:48:7d:5c:87: 5e:47:a9:ae:af:ab:96:1a:23:ba:e2:d6:e9:ff:e5:85:fe:2d: f1:ec:e7:5c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxRUUxMTAvBgNVBAUTKDZCM0JFOEYzNENFQTY5NEIwRDY0QkNGODU3ODVEOTE3 NDQzNjk1RDQwHhcNMjYwMzAxMDUyNDMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OWEzY2Q5MS0xYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfazWUbkBWU/EIUdUU6TwH0+bw9FnxYbHrlJZhTpEDKadwvBTbJcgyvpH9Hs nBG8MAd5pV9wAq0cXVmAeQJj/HWMYFZoHtr1cPbqFHv8y8TdNbDVUnxI9gdGxUrK dxYqWneSJgkNS1IasnPpvPPefSGCGmayw2NepQPsId9TIxvtH1Q64Lx4HIlnC6r+ WUxhVGVur9ofY8A+dVO7+hWQq6eflOnFNtkqYoKEwKw20mpSoJ9tfNI8dBgnp2m3 U+Xuc5EPE20j9wRzn3guA5Eik8Sp5dBWrX0DXzMZSPxkScEPAXBCOeHSK24JSjsa HjBUwOtr5DuXw98r2I/PH9TNdwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCYjIL02 pZuuC6UsmYewwpUmDPP1MB8GA1UdIwQYMBaAFGs76PNM6mlLDWS8+FeF2RdENpXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFFRS9ERTZBNjEzMEE1 NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFVc05aTHo0VjRYWkYwUTJs ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0IxRUUvREU2QTYxMzBBNTVEMTFFRUI4RTlDRTEwQzRGOUFFMDIvMEY3QTBDRDRD NzJFMTFFRUFBNkI0MjNCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBJDL6MA0EAgACMAcDBQAkAV9gMA0GCSqGSIb3DQEBCwUAA4IBAQC6 VzoVB4FO9uxcDFbiUsm3vwtOic2hUcoVWCvgD3BrxLAfEAACzcogHEeX0nx4zFE2 OfAjQabRZzZRi3UxwN3sO905uiJieAZ0X2QwUV+OXakMBRGxH0kfV9mO4PhI3mJ8 gFS5tePGJlt2Ozm0u52xXo0gzKTwrvtUAm6TK3eE9W/sBq8/KL55ozPkRc5xuLuE rznHJUFpb34NZahpWlq4aWqowz2wLezGBiFoRDaok7VhcYufkOXA0Ry1FugibRq+ jrSE81Ld0KrKaPy0pQVAlG96JV3qTfONuwAgBSqqJ7EkXY3o+0h9XIdeR6mur6uW GiO64tbp/+WF/i3x7Odc -----END CERTIFICATE-----Generated at Sun Mar 1 22:58:30 2026 by rpki-client