$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4EDC52B27B3B11EFAF3B4433C4F9AE02.roa File: 4EDC52B27B3B11EFAF3B4433C4F9AE02.roa (raw, json) Hash identifier: yIcsvpO9j5iT5Hoaa5ncOSMVc7rBW3HdtnPtPKSbcUk= Subject key identifier: 29:AD:00:9B:C0:7A:93:CD:A0:7B:35:FC:2E:08:FD:50:96:9A:AD:5F Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 07BC Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4EDC52B27B3B11EFAF3B4433C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:55:29 +0000 ROA not before: Fri 20 Jun 2025 22:11:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 63440 IP address blocks: 36.255.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Jun 20 22:11:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a47d91-54ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ee:93:dd:27:b2:86:fd:ea:fd:73:89:b9:6c: 2e:b8:26:65:ab:ef:a2:50:0c:de:30:1b:aa:93:29: c8:65:cb:1e:ea:00:12:34:94:80:27:aa:8c:b6:02: fb:85:e9:16:89:3b:71:06:55:40:46:28:d5:b3:63: da:5a:55:a8:25:d3:41:37:f2:b7:59:ca:c7:87:b7: 36:4f:9c:4e:be:24:72:ec:62:da:d5:72:e8:8d:40: fa:73:13:73:e4:9d:5b:10:6c:77:4c:4b:72:b1:46: 40:e2:3b:06:8f:4c:54:a8:05:2c:40:0d:b6:eb:7f: f1:93:17:90:b8:81:de:33:15:2c:55:66:82:d2:70: 84:78:00:8b:a8:45:ba:21:a8:35:20:98:37:f1:3d: ff:7f:30:eb:44:b0:8d:9c:f7:01:1d:1f:bf:5a:8c: 8b:46:a4:db:d5:41:d4:26:86:80:40:a7:51:6f:ea: 5b:4f:40:bd:8a:cf:65:df:a2:61:51:92:92:db:94: 23:2e:92:45:e2:08:ad:40:06:0c:83:ea:5d:7d:82: fd:74:bb:93:18:c9:af:8e:93:2b:cb:70:84:87:dd: 64:b5:2c:3c:46:ae:b3:e3:6b:bc:7b:85:74:33:86: 2a:af:b2:b3:5d:12:3e:40:12:38:96:28:0e:69:1a: 98:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AD:00:9B:C0:7A:93:CD:A0:7B:35:FC:2E:08:FD:50:96:9A:AD:5F X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4EDC52B27B3B11EFAF3B4433C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.198.0/24 Signature Algorithm: sha256WithRSAEncryption 30:52:43:19:a4:24:8b:6b:61:40:2b:6d:fe:cb:d8:10:d6:aa: 52:af:14:17:31:7f:6c:38:ac:07:cd:4a:58:c0:40:0c:fb:0d: c3:21:0e:ea:79:5d:bd:8f:00:c5:fd:75:b0:6d:72:a5:e3:3a: 08:a4:cd:4d:8a:19:17:a5:f8:d6:33:1e:33:d4:5d:27:b1:d9: 38:5e:f1:2f:e7:0f:e9:d8:bc:9e:c5:ee:cd:be:59:e0:6c:cf: 17:57:b2:91:43:0a:6c:96:75:52:83:09:8c:69:98:d8:07:0e: 29:0b:bd:4e:30:d0:e2:0a:c4:80:0e:b9:ad:51:ba:5e:59:21: 96:39:9c:d1:b2:81:a5:2c:a0:8b:2b:2a:b8:37:04:82:7d:40: fa:9f:d5:5e:ef:7e:42:fc:aa:75:52:11:76:d5:60:49:b7:2c: f1:a0:ff:4a:a7:4d:66:a3:59:4e:ba:0c:d3:33:1b:6c:ec:5f: 81:3d:03:bf:4d:75:35:da:e4:8c:28:95:9d:59:e2:1b:93:34: 1e:3a:92:f2:aa:09:27:3e:c2:ac:52:b8:14:f6:e1:cf:0c:3d: 7e:27:51:6d:93:25:97:86:53:e4:47:59:58:f3:21:b8:42:16: 5a:d6:14:13:23:46:a1:4f:01:d0:17:fa:1d:03:ce:33:06:3c: 2d:c5:80:d9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNjIwMjIxMTI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Q5MS01NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+6T3Seyhv3q/XOJuWwuuCZlq++iUAzeMBuqkynIZcse6gASNJSAJ6qMtgL7 hekWiTtxBlVARijVs2PaWlWoJdNBN/K3WcrHh7c2T5xOviRy7GLa1XLojUD6cxNz 5J1bEGx3TEtysUZA4jsGj0xUqAUsQA2263/xkxeQuIHeMxUsVWaC0nCEeACLqEW6 Iag1IJg38T3/fzDrRLCNnPcBHR+/WoyLRqTb1UHUJoaAQKdRb+pbT0C9is9l36Jh UZKS25QjLpJF4gitQAYMg+pdfYL9dLuTGMmvjpMry3CEh91ktSw8Rq6z42u8e4V0 M4Yqr7KzXRI+QBI4ligOaRqYPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCmtAJvA epPNoHs1/C4I/VCWmq1fMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvNEVEQzUyQjI3 QjNCMTFFRkFGM0I0NDMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAJP/GMA0GCSqGSIb3DQEBCwUAA4IBAQAwUkMZpCSLa2FAK23+y9gQ 1qpSrxQXMX9sOKwHzUpYwEAM+w3DIQ7qeV29jwDF/XWwbXKl4zoIpM1NihkXpfjW Mx4z1F0nsdk4XvEv5w/p2Lyexe7NvlngbM8XV7KRQwpslnVSgwmMaZjYBw4pC71O MNDiCsSADrmtUbpeWSGWOZzRsoGlLKCLKyq4NwSCfUD6n9Ve735C/Kp1UhF21WBJ tyzxoP9Kp01mo1lOugzTMxts7F+BPQO/TXU12uSMKJWdWeIbkzQeOpLyqgknPsKs UrgU9uHPDD1+J1FtkyWXhlPkR1lY8yG4QhZa1hQTI0ahTwHQF/odA84zBjwtxYDZ -----END CERTIFICATE-----Generated at Mon Mar 2 11:54:44 2026 by rpki-client