$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/36AEBDD61C9C11EF9953E67EC4F9AE02.roa File: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (raw, json) Hash identifier: 7slcloQAeT5wyJqAjye83Okm4uzNEuS1+WoZpKS16D8= Subject key identifier: 7A:93:A5:BB:9B:C6:9D:7E:5E:48:F4:CB:92:10:58:87:67:03:05:0D Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Certificate serial: 0161 Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/36AEBDD61C9C11EF9953E67EC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:14:22 +0000 ROA not before: Tue 05 Aug 2025 06:14:21 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 137971 IP address blocks: 103.118.161.0/24 maxlen: 24 2001:df5:d500::/48 maxlen: 48 2001:df5:d501::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Validity Not Before: Aug 5 06:14:21 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a59b3e-e756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:46:b1:d7:7a:be:fb:3a:39:79:8e:28:e3:df: 5c:2b:b0:36:dc:79:4e:6f:96:8f:47:0a:db:46:08: 50:d3:4c:ca:90:64:74:6f:a7:aa:8c:1f:52:45:87: 8e:05:1f:2e:e0:d1:6d:b3:7d:23:47:4e:a0:f9:80: 23:08:fd:4a:f5:7f:db:7c:6c:92:2a:9a:15:82:66: a6:d5:b6:47:e9:20:88:70:a0:07:90:b8:60:72:40: ef:fe:48:09:0a:ea:3b:25:3c:fa:c9:71:94:ac:77: 92:53:3c:ab:0a:75:2f:1a:8c:b3:cf:88:49:64:e0: af:83:fc:a6:a0:fd:fe:64:61:f2:d1:06:03:75:13: ba:5d:b2:82:48:87:7d:b0:43:ad:68:0c:71:44:51: 17:d1:6d:c6:9d:57:d0:51:dd:34:24:a6:f6:78:97: a0:fc:a1:99:31:f0:1a:4c:68:d1:93:76:e9:d4:9e: a9:56:59:ac:5d:07:3a:f5:f7:76:c8:c8:dc:d3:3a: 28:3f:06:44:32:fb:3e:fb:1a:2d:86:3c:cb:9f:2a: 59:be:0c:51:5a:12:a2:51:a8:02:54:26:ef:bb:6e: 33:96:9b:95:69:00:ce:47:08:45:d4:d9:cf:97:3b: c7:05:67:66:5e:bc:8a:08:44:e7:e2:b6:0d:0f:d6: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:93:A5:BB:9B:C6:9D:7E:5E:48:F4:CB:92:10:58:87:67:03:05:0D X509v3 Authority Key Identifier: keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/36AEBDD61C9C11EF9953E67EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.118.161.0/24 IPv6: 2001:df5:d500::/47 Signature Algorithm: sha256WithRSAEncryption 4c:7f:ed:b9:35:40:cd:89:84:46:da:d6:70:f6:77:00:da:9f: 7e:28:5f:44:38:4b:fe:80:90:22:ee:1f:a1:83:f7:11:c6:27: 09:53:c2:d4:12:6c:a3:08:b1:d4:32:45:be:30:f6:99:b6:ce: c7:70:95:cc:fd:4e:eb:ae:2f:53:61:c7:95:cc:7c:04:96:e3: 4c:fc:5a:d8:eb:83:1f:8d:be:e8:a7:be:fe:87:82:4f:78:5d: bf:55:b0:23:c4:bf:41:98:c3:de:96:5c:51:09:5d:d6:8a:ea: a8:e3:24:c0:ab:fc:74:b0:82:49:fd:43:af:49:db:06:62:5f: 41:b6:27:97:bc:b3:bd:97:6a:57:4b:1f:7d:38:29:4f:7a:33: 14:8a:cd:3a:26:53:70:42:a2:94:a5:52:5d:73:e4:7c:e0:f5: c4:7a:33:be:8d:c1:b4:95:f6:a6:28:94:65:8c:c8:09:24:ad: 29:18:2a:d3:93:ae:8d:13:bc:2b:24:2a:c6:0b:72:fb:6d:19: 96:63:23:92:4c:84:83:1b:6e:80:ce:4f:17:cc:de:41:5d:c5: 31:98:29:61:82:37:3f:a9:a1:5d:b2:7a:ac:eb:65:25:e6:46: cf:63:76:37:fb:75:4a:81:4c:0a:9a:2b:b5:a6:75:f4:f3:5d: 39:83:41:e8 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg3OUExMTAvBgNVBAUTKDM5OUE1RTE3RDlDQTQzQjZDMzNBQzMzMDIwNkRDQkRE OTM1RTc4NzEwHhcNMjUwODA1MDYxNDIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWIzZS1lNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkax13q++zo5eY4o499cK7A23HlOb5aPRwrbRghQ00zKkGR0b6eqjB9SRYeO BR8u4NFts30jR06g+YAjCP1K9X/bfGySKpoVgmam1bZH6SCIcKAHkLhgckDv/kgJ Cuo7JTz6yXGUrHeSUzyrCnUvGoyzz4hJZOCvg/ymoP3+ZGHy0QYDdRO6XbKCSId9 sEOtaAxxRFEX0W3GnVfQUd00JKb2eJeg/KGZMfAaTGjRk3bp1J6pVlmsXQc69fd2 yMjc0zooPwZEMvs++xothjzLnypZvgxRWhKiUagCVCbvu24zlpuVaQDORwhF1NnP lzvHBWdmXryKCETn4rYND9Zb5wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHqTpbub xp1+Xkj0y5IQWIdnAwUNMB8GA1UdIwQYMBaAFDmaXhfZykO2wzrDMCBty92TXnhx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODc5QS9CNjcwMTczQzFD OUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3YkRPc013SUczTDNaTmVl SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09acGVGOW5LUTdiRE9zTXdJRzNMM1pOZWVIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg3OUEvQjY3MDE3M0MxQzlCMTFFRjhGNDVDQzdEQzRGOUFFMDIvMzZBRUJERDYx QzlDMTFFRjk5NTNFNjdFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ3ahMA8EAgACMAkDBwEgAQ311QAwDQYJKoZIhvcNAQELBQADggEB AEx/7bk1QM2JhEba1nD2dwDan34oX0Q4S/6AkCLuH6GD9xHGJwlTwtQSbKMIsdQy Rb4w9pm2zsdwlcz9TuuuL1Nhx5XMfASW40z8Wtjrgx+Nvuinvv6Hgk94Xb9VsCPE v0GYw96WXFEJXdaK6qjjJMCr/HSwgkn9Q69J2wZiX0G2J5e8s72XaldLH304KU96 MxSKzTomU3BCopSlUl1z5Hzg9cR6M76NwbSV9qYolGWMyAkkrSkYKtOTro0TvCsk KsYLcvttGZZjI5JMhIMbboDOTxfM3kFdxTGYKWGCNz+poV2yeqzrZSXmRs9jdjf7 dUqBTAqaK7WmdfTzXTmDQeg= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:30 2026 by rpki-client