$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa File: 36521694382D11EDB904E684C4F9AE02.roa (raw, json) Hash identifier: DPXgSWwuMh96++VXld3rYzOdjSSsFPVJb5agT/2h4Mo= Subject key identifier: 93:72:02:01:12:54:A5:20:07:0A:E0:88:B0:19:2B:06:68:33:32:6B Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6C65 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa Signing time: Fri 24 Apr 2026 09:10:23 +0000 ROA not before: Fri 24 Apr 2026 09:10:23 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131414 IP address blocks: 45.118.144.0/22 maxlen: 24 103.97.132.0/22 maxlen: 24 103.237.144.0/22 maxlen: 24 2403:bf40:3::/48 maxlen: 48 2403:bf40:200::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27749 (0x6c65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Apr 24 09:10:23 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69eb337f-34e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:e1:b6:08:73:ca:06:43:b8:de:6f:f3:a2: 4d:f4:45:5c:9e:cc:3b:ea:eb:97:7e:db:91:c2:bd: 73:89:d9:1b:6c:9a:60:e7:ae:00:89:15:b4:f9:a8: 14:b4:9e:fd:54:63:01:9f:fd:49:f4:ab:74:29:83: d6:bf:89:b8:69:52:65:1d:ce:3d:c7:63:f0:ed:65: e7:26:c9:33:79:10:3c:6b:bb:7d:49:ef:44:8c:71: d5:7d:ba:54:7d:97:7b:8a:7f:b2:de:27:d1:2d:9b: 9d:05:4a:bd:3b:8a:fe:92:64:53:7d:d4:78:79:76: 03:03:a8:fe:2e:4c:90:fd:f0:45:79:72:50:64:ea: 6e:34:71:eb:93:ed:04:7d:8a:27:f0:a0:ea:9d:78: b1:a2:35:fc:57:96:fb:69:6c:b7:3e:19:14:5c:2d: 0f:b7:22:c1:18:11:f7:fb:aa:ce:f0:5d:4f:36:14: 10:35:53:07:39:a0:e2:16:73:c6:88:34:f3:9f:da: f2:03:7a:07:70:5e:12:9c:1b:ce:df:c0:b9:90:bb: 6c:b7:27:8a:fe:29:15:94:17:01:7a:17:5e:90:36: d4:12:9d:63:2a:f0:38:df:c5:76:a8:d0:3c:d3:a5: d8:c7:2d:c1:a6:cc:96:45:00:b6:6a:e6:45:f7:f9: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:72:02:01:12:54:A5:20:07:0A:E0:88:B0:19:2B:06:68:33:32:6B X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.118.144.0/22 103.97.132.0/22 103.237.144.0/22 IPv6: 2403:bf40:3::/48 2403:bf40:200::/42 Signature Algorithm: sha256WithRSAEncryption 86:4a:fd:9b:db:af:47:a2:34:f5:eb:57:c9:81:20:85:d7:fc: 51:43:5d:76:55:c3:d4:cf:f8:19:92:d9:2b:bc:ff:30:c7:17: c4:67:f3:bf:84:2d:07:15:e9:dc:e0:76:56:05:dc:26:af:5e: 62:63:f5:b7:d9:10:09:78:1f:61:f6:95:cf:ea:9f:32:7a:a7: a1:57:df:34:52:3c:01:04:c3:13:0c:2f:c6:e4:67:2a:ae:9b: 0e:d1:82:80:99:90:95:d7:0a:20:25:ad:27:95:7c:e1:a9:43: 03:22:38:7b:84:ff:2a:e0:f8:da:65:98:94:22:fd:17:f8:bd: 46:26:af:71:d0:ed:4a:4f:d4:df:39:a2:74:5b:dc:2a:4c:ed: d8:08:43:7d:2d:cd:f0:93:d0:27:79:23:f6:62:66:a9:38:09: 90:39:e3:8a:f2:a9:39:aa:ea:fb:a7:fd:8e:ca:ea:0f:e7:d6: a8:77:29:be:96:5e:d6:2d:62:9c:9f:5b:19:0c:ae:33:c7:77: fd:40:74:c3:76:05:56:db:4c:05:d7:32:e2:5a:8d:aa:7b:0b: e1:04:87:ab:96:5f:4c:19:78:5d:8a:f2:53:cf:bf:d6:75:09: 4b:c9:16:fa:00:cc:97:7b:19:4f:25:48:44:a5:5c:b8:88:37: 58:ba:a1:86 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICbGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYwNDI0MDkxMDIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWViMzM3Zi0zNGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx//htghzygZDuN5v86JN9EVcnsw76uuXftuRwr1zidkbbJpg564AiRW0+agU tJ79VGMBn/1J9Kt0KYPWv4m4aVJlHc49x2Pw7WXnJskzeRA8a7t9Se9EjHHVfbpU fZd7in+y3ifRLZudBUq9O4r+kmRTfdR4eXYDA6j+LkyQ/fBFeXJQZOpuNHHrk+0E fYon8KDqnXixojX8V5b7aWy3PhkUXC0PtyLBGBH3+6rO8F1PNhQQNVMHOaDiFnPG iDTzn9ryA3oHcF4SnBvO38C5kLtstyeK/ikVlBcBehdekDbUEp1jKvA438V2qNA8 06XYxy3BpsyWRQC2auZF9/lfCwIDAQABo4IChjCCAoIwHQYDVR0OBBYEFJNyAgES VKUgBwrgiLAZKwZoMzJrMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzY1MjE2OTQz ODJEMTFFREI5MDRFNjg0QzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAY BAIAATASAwQCLXaQAwQCZ2GEAwQCZ+2QMBgEAgACMBIDBwAkA79AAAMDBwYkA79A AgAwDQYJKoZIhvcNAQELBQADggEBAIZK/Zvbr0eiNPXrV8mBIIXX/FFDXXZVw9TP +BmS2Su8/zDHF8Rn87+ELQcV6dzgdlYF3CavXmJj9bfZEAl4H2H2lc/qnzJ6p6FX 3zRSPAEEwxMML8bkZyqumw7RgoCZkJXXCiAlrSeVfOGpQwMiOHuE/yrg+NplmJQi /Rf4vUYmr3HQ7UpP1N85onRb3CpM7dgIQ30tzfCT0Cd5I/ZiZqk4CZA544ryqTmq 6vun/Y7K6g/n1qh3Kb6WXtYtYpyfWxkMrjPHd/1AdMN2BVbbTAXXMuJajap7C+EE h6uWX0wZeF2K8lPPv9Z1CUvJFvoAzJd7GU8lSESlXLiIN1i6oYY= -----END CERTIFICATE-----Generated at Wed May 13 10:31:43 2026 by rpki-client