$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/76CBDB6A6D3B11F094EF1637C4F9AE02.roa File: 76CBDB6A6D3B11F094EF1637C4F9AE02.roa (raw, json) Hash identifier: S7bxaDDAXQakuF016AdjVEyXPe/gRq6Ul7Boj5SjSh8= Subject key identifier: 3E:C4:56:56:DE:D3:29:27:9A:7E:04:7E:10:CC:08:84:E4:2C:38:45 Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 0309 Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/76CBDB6A6D3B11F094EF1637C4F9AE02.roa Signing time: Wed 30 Jul 2025 11:51:01 +0000 ROA not before: Wed 30 Jul 2025 11:51:01 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 212666 IP address blocks: 36.255.96.0/24 maxlen: 24 36.255.97.0/24 maxlen: 24 36.255.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 777 (0x309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Jul 30 11:51:01 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=688a0725-8b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:db:51:bd:45:14:96:76:2b:b8:21:2b:ae: d4:34:1e:17:60:95:ef:36:ec:e2:b7:e9:76:1c:23: 2f:b0:67:c5:9f:dd:a7:d7:a3:f6:5a:f6:c2:85:86: d1:ad:12:e5:b5:ad:03:2c:d1:98:5a:4e:7e:20:92: 7c:c2:7d:b7:14:70:56:a1:22:04:4f:f7:17:46:c9: c2:2f:3c:42:76:a4:92:dd:30:f7:d0:02:f5:fa:56: 85:58:57:09:8c:a1:6f:6d:1a:68:16:f4:b2:2e:fc: 06:56:45:04:9b:33:96:3c:8b:90:4d:53:8d:53:6a: 35:c0:ba:c6:aa:14:0f:26:d8:65:8a:79:02:63:12: bf:7f:3c:2e:c0:fa:86:13:2d:e7:22:00:a0:57:a6: f8:11:fd:15:c0:0a:f6:b6:76:9c:4a:07:38:1c:e8: a8:ed:7e:b6:73:58:af:6f:fd:35:57:ae:72:d9:03: 73:ef:fa:ad:70:cf:58:b8:be:de:1e:12:e6:af:dc: 3c:d5:90:f9:ac:3f:52:9a:fe:6f:c9:ff:c6:57:0d: d5:4f:c2:57:06:5d:e0:b9:75:8d:cd:8e:a6:dd:c3: 9b:40:37:7a:de:d0:2e:90:2c:6e:11:96:58:8b:49: f8:ae:2b:d8:b4:3d:08:c2:93:01:c5:2d:c7:5f:1b: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C4:56:56:DE:D3:29:27:9A:7E:04:7E:10:CC:08:84:E4:2C:38:45 X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/76CBDB6A6D3B11F094EF1637C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.96.0-36.255.98.255 Signature Algorithm: sha256WithRSAEncryption 0b:48:ed:26:9e:e3:29:91:38:c9:64:39:f9:2b:19:1c:a8:65: ef:5e:14:aa:8e:d3:6d:2d:5b:3e:e0:dd:fd:24:d7:7e:4d:0d: cb:58:41:8a:15:68:28:24:e9:48:c3:2b:d8:85:d2:37:28:7a: 70:1e:2f:c3:a3:c0:47:2f:1c:99:da:1c:25:13:29:dd:fa:f2: 97:8d:6d:11:dd:da:5e:4b:d2:d3:4d:6a:df:5d:0c:79:24:ae: 05:87:1a:c9:e6:ad:04:a7:19:7f:7e:2b:55:ff:02:31:c1:4f: 56:6b:8d:65:7d:2e:27:89:d3:fe:8b:7b:18:d2:b8:4e:49:9b: fe:65:27:f5:de:b6:e0:6e:b9:91:f2:e9:5c:84:93:98:31:b3: 93:15:99:75:60:77:83:6b:50:74:11:4c:52:32:a1:6a:e7:bc: 30:e3:35:05:00:f7:22:2c:6a:02:8f:c4:9e:a2:a5:83:51:d3: 27:0f:84:30:1b:63:22:70:6f:3b:4f:17:75:61:fe:6c:eb:24: ae:e9:d5:80:80:02:5e:c4:f9:d2:c5:4d:02:0a:3a:89:3b:8b: 0f:f6:8e:09:2c:f4:d1:48:7c:c9:02:cc:52:99:e5:fb:7c:92: 77:41:45:ed:0e:81:91:70:99:dc:c1:45:da:21:52:13:9c:78: 9f:9c:a8:47 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjUwNzMwMTE1MTAxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhMDcyNS04YjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobLbUb1FFJZ2K7ghK67UNB4XYJXvNuzit+l2HCMvsGfFn92n16P2WvbChYbR rRLlta0DLNGYWk5+IJJ8wn23FHBWoSIET/cXRsnCLzxCdqSS3TD30AL1+laFWFcJ jKFvbRpoFvSyLvwGVkUEmzOWPIuQTVONU2o1wLrGqhQPJthlinkCYxK/fzwuwPqG Ey3nIgCgV6b4Ef0VwAr2tnacSgc4HOio7X62c1ivb/01V65y2QNz7/qtcM9YuL7e HhLmr9w81ZD5rD9Smv5vyf/GVw3VT8JXBl3guXWNzY6m3cObQDd63tAukCxuEZZY i0n4rivYtD0IwpMBxS3HXxs4pwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFD7EVlbe 0yknmn4EfhDMCITkLDhFMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M0RTcvOTgxQzA1NThFQUQ4MTFFQ0JDN0VFMDE1QzRGOUFFMDIvNzZDQkRCNkE2 RDNCMTFGMDk0RUYxNjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBST/YAMEACT/YjANBgkqhkiG9w0BAQsFAAOCAQEAC0jt Jp7jKZE4yWQ5+SsZHKhl714Uqo7TbS1bPuDd/STXfk0Ny1hBihVoKCTpSMMr2IXS Nyh6cB4vw6PARy8cmdocJRMp3fryl41tEd3aXkvS001q310MeSSuBYcayeatBKcZ f34rVf8CMcFPVmuNZX0uJ4nT/ot7GNK4Tkmb/mUn9d624G65kfLpXISTmDGzkxWZ dWB3g2tQdBFMUjKhaue8MOM1BQD3IixqAo/EnqKlg1HTJw+EMBtjInBvO08XdWH+ bOskrunVgIACXsT50sVNAgo6iTuLD/aOCSz00Uh8yQLMUpnl+3ySd0FF7Q6BkXCZ 3MFF2iFSE5x4n5yoRw== -----END CERTIFICATE-----Generated at Sun Aug 10 18:16:34 2025 by rpki-client