$ rpki-client -vvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/36E3783A1BA311F0985A7C2DC4F9AE02.roa File: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (raw, json) Hash identifier: XUeovlZ/4oeHJvRX/WJ4baIyTmKgtfV6QNue3wAaFAE= Subject key identifier: 17:42:13:2F:A5:8A:2A:CD:7D:1B:DA:63:5F:B0:1E:9E:D9:97:92:3F Certificate issuer: /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A Certificate serial: AA Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/36E3783A1BA311F0985A7C2DC4F9AE02.roa Signing time: Tue 03 Mar 2026 07:43:17 +0000 ROA not before: Tue 03 Mar 2026 07:43:17 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 153667 IP address blocks: 163.223.34.0/24 maxlen: 24 163.223.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A Validity Not Before: Mar 3 07:43:17 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a69115-aaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:2f:95:b0:bf:86:0c:8d:26:cc:79:7a:02: fa:c9:da:cc:11:6e:23:cf:db:b0:c2:d0:93:67:06: c3:ff:48:c4:ba:61:32:1c:11:38:31:5c:02:d1:c1: b9:31:5c:97:6f:c7:1f:45:22:0a:3f:08:62:fd:98: 0e:01:fb:56:e2:c7:97:29:85:77:40:9a:e2:3e:e4: 15:03:76:d1:94:e7:50:8f:6e:12:97:bc:97:57:4e: d4:f1:b6:d6:a2:b0:81:33:f0:5a:ca:57:63:fd:5d: cf:1a:0d:c5:33:ac:f3:26:26:d9:0a:4e:fe:aa:8f: 70:53:6c:c6:50:9a:ae:e8:a6:71:50:7e:e7:3e:5c: aa:b4:f6:36:8d:36:58:19:71:33:98:31:73:b1:c7: db:8a:bf:f2:15:bf:1a:37:93:2c:d4:a4:43:cf:be: 44:e1:fe:42:bb:27:ce:63:59:06:72:bf:14:b8:28: d1:70:56:e7:37:bc:82:f0:3c:14:d0:a5:f8:35:d5: e0:9e:ae:c1:d5:40:d8:0c:2d:0e:66:06:8a:96:40: b6:01:86:c0:a7:59:37:f1:b7:a3:e9:d2:63:68:5b: f2:e5:51:70:1d:be:a2:28:b1:e9:44:9c:82:29:ca: 92:11:97:ed:1a:b5:a2:be:41:0c:da:8d:6f:8d:f1: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:42:13:2F:A5:8A:2A:CD:7D:1B:DA:63:5F:B0:1E:9E:D9:97:92:3F X509v3 Authority Key Identifier: keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/36E3783A1BA311F0985A7C2DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.223.34.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:98:b0:4c:21:3d:e3:09:13:a8:2b:77:3a:56:ae:96:f9:b7: a1:6d:25:2c:6a:85:00:22:f2:af:68:c6:58:be:95:5b:0c:95: e4:df:21:54:1e:77:55:c1:52:dd:30:6f:ae:03:55:3c:a1:e7: 6f:99:42:34:06:2e:4a:7c:23:73:02:9e:27:33:a7:cf:87:5f: c0:a1:79:66:75:bb:72:05:3f:97:ac:50:70:18:8b:cc:87:6c: 7d:99:75:56:da:e3:84:16:24:3c:f6:a5:c4:a7:20:2b:b6:39: 56:0a:01:f3:1d:a4:64:8a:e4:ee:b6:05:b8:65:b8:b9:95:2b: c8:36:56:9c:8b:84:14:ce:f0:14:51:0a:18:38:8c:f7:a7:24: d7:d2:bd:64:53:84:30:86:60:9a:20:c1:e5:71:d4:8e:47:1c: 84:c5:b4:2e:cd:93:45:ba:b1:47:d5:d5:14:48:1c:e8:68:1b: 88:38:bd:35:6f:ec:7a:39:c3:8a:d0:69:ad:e2:02:1f:b6:42: 82:73:35:32:6b:c5:de:ac:c9:77:27:27:80:7e:0f:aa:ca:3c: 96:61:16:9c:a2:83:9c:f7:70:1b:5e:cf:25:b5:7a:80:19:5c: a4:58:62:5b:b4:4a:67:ce:0a:85:03:99:12:7e:27:03:ae:3c: dd:05:53:06 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU4NTIxMTAvBgNVBAUTKDg3NUI2MTc0MENEMzcwQkQ0QjRBNEY2QUVBMEE4NjA4 Mzg4REJBOEEwHhcNMjYwMzAzMDc0MzE3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2OTExNS1hYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9gvlbC/hgyNJsx5egL6ydrMEW4jz9uwwtCTZwbD/0jEumEyHBE4MVwC0cG5 MVyXb8cfRSIKPwhi/ZgOAftW4seXKYV3QJriPuQVA3bRlOdQj24Sl7yXV07U8bbW orCBM/Bayldj/V3PGg3FM6zzJibZCk7+qo9wU2zGUJqu6KZxUH7nPlyqtPY2jTZY GXEzmDFzscfbir/yFb8aN5Ms1KRDz75E4f5CuyfOY1kGcr8UuCjRcFbnN7yC8DwU 0KX4NdXgnq7B1UDYDC0OZgaKlkC2AYbAp1k38bej6dJjaFvy5VFwHb6iKLHpRJyC KcqSEZftGrWivkEM2o1vjfGgcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBdCEy+l iirNfRvaY1+wHp7Zl5I/MB8GA1UdIwQYMBaAFIdbYXQM03C9S0pPauoKhgg4jbqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTg1Mi9FOTU0RkQ3ODFC QTIxMUYwOEIyOUU5MkNDNEY5QUUwMi9oMXRoZEF6VGNMMUxTazlxNmdxR0NEaU51 b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdGhkQXpUY0wxTFNrOXE2Z3FHQ0RpTnVvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU4NTIvRTk1NEZENzgxQkEyMTFGMDhCMjlFOTJDQzRGOUFFMDIvMzZFMzc4M0Ex QkEzMTFGMDk4NUE3QzJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBo98iMA0GCSqGSIb3DQEBCwUAA4IBAQA6mLBMIT3jCROoK3c6Vq6W +behbSUsaoUAIvKvaMZYvpVbDJXk3yFUHndVwVLdMG+uA1U8oedvmUI0Bi5KfCNz Ap4nM6fPh1/AoXlmdbtyBT+XrFBwGIvMh2x9mXVW2uOEFiQ89qXEpyArtjlWCgHz HaRkiuTutgW4Zbi5lSvINlaci4QUzvAUUQoYOIz3pyTX0r1kU4QwhmCaIMHlcdSO RxyExbQuzZNFurFH1dUUSBzoaBuIOL01b+x6OcOK0Gmt4gIftkKCczUya8XerMl3 JyeAfg+qyjyWYRacooOc93AbXs8ltXqAGVykWGJbtEpnzgqFA5kSficDrjzdBVMG -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:28 2026 by rpki-client