$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/254F258E7ED011F083509E2BC4F9AE02.roa File: 254F258E7ED011F083509E2BC4F9AE02.roa (raw, json) Hash identifier: sAUXemNxO6xniEk3FsI/MUCXegnzm3Yy4E2YL2XqTBk= Subject key identifier: DC:F4:A1:51:79:53:04:37:DF:D3:5B:63:78:54:68:E5:4E:60:09:BF Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Certificate serial: AF Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/254F258E7ED011F083509E2BC4F9AE02.roa Signing time: Thu 07 May 2026 07:45:58 +0000 ROA not before: Thu 07 May 2026 07:45:58 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 153773 IP address blocks: 36.255.76.0/24 maxlen: 24 36.255.77.0/24 maxlen: 24 36.255.78.0/24 maxlen: 24 36.255.79.0/24 maxlen: 24 203.24.98.0/24 maxlen: 24 203.29.60.0/24 maxlen: 24 2401:fce0:10::/48 maxlen: 48 2401:fce0:11::/48 maxlen: 48 2401:fce0:20::/48 maxlen: 48 2401:fce0:21::/48 maxlen: 48 2401:fce0:30::/48 maxlen: 48 2401:fce0:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 07:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Validity Not Before: May 7 07:45:58 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69fc4336-f2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:96:b1:6d:02:8d:7d:46:2d:a0:62:41:ec:91: 5e:b2:56:90:19:8a:b2:ed:78:d3:6d:23:b9:97:bb: 75:6c:51:f8:48:18:d0:fa:ba:c0:0a:d2:44:c1:fb: 8d:8f:42:ff:86:1f:ae:90:ca:80:9f:21:77:b7:26: eb:9b:8a:e3:4b:45:06:1e:7c:8a:f9:4b:82:68:90: 79:b6:12:99:bd:b7:92:8c:97:51:40:a9:4e:68:a9: c3:3a:28:c5:94:e3:96:27:fc:19:72:5e:fd:d6:6a: cb:f3:19:d8:8e:8e:bb:59:ea:43:6e:03:e9:bd:da: e4:08:df:ed:6f:5d:dc:8d:c3:5e:0c:2d:45:4c:31: df:71:9d:54:2e:1d:59:57:b1:da:7e:50:e8:75:b9: e1:52:cd:eb:9e:da:24:7a:62:00:a2:1e:49:19:c6: 10:64:46:cd:81:f7:68:d9:26:28:c5:c8:4b:19:9f: 4b:c6:8b:0a:2d:93:d7:f1:8d:35:23:f2:4c:86:49: 87:cf:32:ea:b4:86:b0:12:cf:6e:a2:5d:9b:87:56: 55:78:ee:4a:72:4c:56:0f:5a:70:c3:01:8c:7a:0c: 77:39:32:4c:3d:81:bd:f8:40:d7:c7:46:26:46:f9: 5c:a6:a0:08:82:99:68:aa:34:fd:af:59:e0:1d:5e: f6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F4:A1:51:79:53:04:37:DF:D3:5B:63:78:54:68:E5:4E:60:09:BF X509v3 Authority Key Identifier: keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/254F258E7ED011F083509E2BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.76.0/22 203.24.98.0/24 203.29.60.0/24 IPv6: 2401:fce0:10::/47 2401:fce0:20::/47 2401:fce0:30::/47 Signature Algorithm: sha256WithRSAEncryption 1a:3d:1e:72:b4:73:fe:b6:b4:8b:db:68:bc:d6:1b:46:0c:3b: 8f:c5:17:8a:cb:3a:fa:74:de:a1:4a:9c:bc:69:a9:22:13:13: ce:fd:2a:df:2f:88:e5:7f:b4:1d:6e:eb:9f:95:45:64:f0:be: d0:a0:46:d9:e5:a8:49:51:67:36:a0:f3:27:c1:fe:6d:a5:75: 2b:4b:15:bd:2d:54:ba:d8:f6:57:b7:2a:22:ee:56:c2:57:c1: a8:ee:e2:69:ac:f3:bc:01:26:6d:09:29:d5:ae:9f:7f:99:55: 7c:95:cd:be:94:3c:28:74:c7:b7:0f:27:1f:15:b5:ba:18:96: d9:da:21:a5:25:6c:98:3a:00:5b:bf:2f:72:63:07:56:5a:71: 1e:1f:c1:d1:8e:4a:82:6e:ee:ad:18:0f:f6:a9:22:00:b0:14: 4f:0d:11:5c:9d:52:6e:fc:3f:a6:84:4f:33:a2:c5:bc:1c:3c: be:84:b6:04:48:35:3f:94:13:d4:a4:34:56:6d:f2:47:8c:16: 3f:d9:2e:8a:d4:ec:9f:55:b8:bc:15:a3:7f:b7:10:0c:f9:94: 52:62:79:a8:0f:80:3a:0d:37:05:16:2e:d2:95:79:07:7f:9c: bc:2b:63:bf:76:aa:05:2b:d4:07:81:73:e7:6e:3c:cc:e4:88: 32:14:68:dd -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0QTYxMTAvBgNVBAUTKDczNzU4MkVDNEU4RkUzOURGNDJDMERDMjI5QkEzN0Qx QjZCMzg2NUEwHhcNMjYwNTA3MDc0NTU4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZjNDMzNi1mMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9paxbQKNfUYtoGJB7JFeslaQGYqy7XjTbSO5l7t1bFH4SBjQ+rrACtJEwfuN j0L/hh+ukMqAnyF3tybrm4rjS0UGHnyK+UuCaJB5thKZvbeSjJdRQKlOaKnDOijF lOOWJ/wZcl791mrL8xnYjo67WepDbgPpvdrkCN/tb13cjcNeDC1FTDHfcZ1ULh1Z V7HaflDodbnhUs3rntokemIAoh5JGcYQZEbNgfdo2SYoxchLGZ9LxosKLZPX8Y01 I/JMhkmHzzLqtIawEs9uol2bh1ZVeO5KckxWD1pwwwGMegx3OTJMPYG9+EDXx0Ym RvlcpqAIgploqjT9r1ngHV72HwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFNz0oVF5 UwQ339NbY3hUaOVOYAm/MB8GA1UdIwQYMBaAFHN1guxOj+Od9CwNwim6N9G2s4Za MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRBNi8zQjY3QUQ4RTYz QjcxMUYwODhEREYzNjVDNEY5QUUwMi9jM1dDN0U2UDQ1MzBMQTNDS2JvMzBiYXpo bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y0QTYvM0I2N0FEOEU2M0I3MTFGMDg4RERGMzY1QzRGOUFFMDIvMjU0RjI1OEU3 RUQwMTFGMDgzNTA5RTJCQzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTAY BAIAATASAwQCJP9MAwQAyxhiAwQAyx08MCEEAgACMBsDBwEkAfzgABADBwEkAfzg ACADBwEkAfzgADAwDQYJKoZIhvcNAQELBQADggEBABo9HnK0c/62tIvbaLzWG0YM O4/FF4rLOvp03qFKnLxpqSITE879Kt8viOV/tB1u65+VRWTwvtCgRtnlqElRZzag 8yfB/m2ldStLFb0tVLrY9le3KiLuVsJXwaju4mms87wBJm0JKdWun3+ZVXyVzb6U PCh0x7cPJx8VtboYltnaIaUlbJg6AFu/L3JjB1ZacR4fwdGOSoJu7q0YD/apIgCw FE8NEVydUm78P6aETzOixbwcPL6EtgRINT+UE9SkNFZt8keMFj/ZLorU7J9VuLwV o3+3EAz5lFJieagPgDoNNwUWLtKVeQd/nLwrY792qgUr1AeBc+duPMzkiDIUaN0= -----END CERTIFICATE-----Generated at Sat Jun 13 17:59:12 2026 by rpki-client