$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/36C31E00637111EEA51CA05EC4F9AE02.roa File: 36C31E00637111EEA51CA05EC4F9AE02.roa (raw, json) Hash identifier: lY96nEi5CKYTXJTj1z2X+4msAEH0lgBh87K7FsjTVZ8= Subject key identifier: E9:6D:27:E9:8D:A4:A9:F9:50:B2:8B:CF:44:2D:76:CC:F7:2D:2F:0E Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 019A Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/36C31E00637111EEA51CA05EC4F9AE02.roa Signing time: Wed 13 Aug 2025 04:42:11 +0000 ROA not before: Wed 13 Aug 2025 04:42:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 18220 IP address blocks: 202.12.69.0/24 maxlen: 24 203.6.96.0/22 maxlen: 22 203.6.100.0/22 maxlen: 22 203.6.104.0/22 maxlen: 22 203.6.114.0/24 maxlen: 24 203.10.114.0/24 maxlen: 24 203.10.234.0/24 maxlen: 24 2401:6bfd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Aug 13 04:42:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689c17a3-867c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:10:2f:5b:47:37:25:fd:c5:6d:b9:c1:4a: b2:6d:e8:6e:23:e3:fa:8e:06:0f:81:7b:9f:79:2c: 73:54:b0:28:0d:5f:83:67:d5:e0:39:bc:22:cc:99: 1f:dc:2b:e3:1e:03:ad:a3:e5:34:08:1e:14:0b:ac: 7a:61:fc:48:49:4f:5c:27:b0:e0:94:15:1f:ea:ae: 26:4d:98:21:70:b5:b6:83:51:54:82:e0:65:14:ee: 32:ba:38:01:6a:d2:c5:63:a0:95:92:83:11:37:43: 4f:5c:ef:11:eb:7c:78:bb:ae:56:5d:d3:dc:55:6b: 5d:c2:fd:ad:17:fc:b8:7f:d0:e5:21:14:8a:60:cd: b5:89:0d:bf:de:a1:a0:82:52:0a:f5:7a:1c:bd:1e: bf:ae:b6:9f:a4:9a:f0:60:3e:e9:1e:0e:ee:3e:12: d8:10:2b:2e:34:21:a2:1f:be:42:5b:53:6e:91:c3: df:70:bf:3a:ad:93:83:50:4e:67:2d:ba:8b:88:b5: 68:6d:fb:78:a0:d2:00:9c:e7:b0:d3:c2:11:c0:73: 73:98:9a:a4:36:19:da:8b:f2:ca:a0:6b:24:36:a2: ca:e0:b1:09:73:5e:a8:25:e7:af:61:0b:cc:49:34: 7a:55:9e:cc:6e:5e:82:9a:5f:c2:6b:af:34:c7:49: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6D:27:E9:8D:A4:A9:F9:50:B2:8B:CF:44:2D:76:CC:F7:2D:2F:0E X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/36C31E00637111EEA51CA05EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.69.0/24 203.6.96.0-203.6.107.255 203.6.114.0/24 203.10.114.0/24 203.10.234.0/24 IPv6: 2401:6bfd::/32 Signature Algorithm: sha256WithRSAEncryption 8f:b1:c3:b7:50:eb:c1:ce:2d:76:81:c8:03:79:52:d8:12:d6: d2:94:1a:7d:fa:fa:8e:11:cd:d1:8c:c8:79:07:34:d8:60:ca: fc:f7:b6:cf:b1:2c:a0:9f:fc:a4:56:89:64:b2:f1:62:24:58: 69:1c:54:74:23:3d:15:0d:26:8b:fc:1e:1a:f5:66:7e:66:0b: 99:41:07:70:23:27:7d:00:13:48:d1:c5:b8:8e:07:f5:27:0e: b8:f9:17:d2:ae:43:be:66:fa:26:6c:3d:a0:2b:6c:a1:f1:40: 45:24:fe:9a:7c:75:83:64:ae:83:53:b0:e0:fe:38:d4:78:ed: a0:6a:5a:b0:63:2e:a9:22:dd:de:64:44:70:bd:9d:6c:e6:07: 1d:af:38:fc:a7:10:4f:fa:61:0f:d9:7d:d2:11:ac:af:87:36: 75:7b:ce:3b:a0:be:3a:08:66:bd:82:68:27:ee:c6:dc:e9:9a: 88:19:8b:e3:19:39:5a:e5:64:64:65:eb:7d:a0:4d:0b:27:c2: 68:70:b1:00:ae:b2:64:04:f4:d0:ca:b3:89:29:6c:d1:0e:bb: 4b:c8:f4:36:5a:f0:0e:04:83:0a:d2:34:f8:5f:d8:63:43:e3: 33:ee:a6:dc:0d:f8:4c:9f:fd:23:48:1f:dc:48:67:7a:a7:53: ad:bb:09:de -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjUwODEzMDQ0MjExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODljMTdhMy04NjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmUQL1tHNyX9xW25wUqybehuI+P6jgYPgXufeSxzVLAoDV+DZ9XgObwizJkf 3CvjHgOto+U0CB4UC6x6YfxISU9cJ7DglBUf6q4mTZghcLW2g1FUguBlFO4yujgB atLFY6CVkoMRN0NPXO8R63x4u65WXdPcVWtdwv2tF/y4f9DlIRSKYM21iQ2/3qGg glIK9XocvR6/rrafpJrwYD7pHg7uPhLYECsuNCGiH75CW1NukcPfcL86rZODUE5n LbqLiLVobft4oNIAnOew08IRwHNzmJqkNhnai/LKoGskNqLK4LEJc16oJeevYQvM STR6VZ7Mbl6Cml/Ca680x0nzwQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFOltJ+mN pKn5ULKLz0Qtdsz3LS8OMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlFODIvRUE3RTVGQTY2MzZGMTFFRTk3Qzc0QjVDQzRGOUFFMDIvMzZDMzFFMDA2 MzcxMTFFRUE1MUNBMDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E PzA9MCwEAgABMCYDBADKDEUwDAMEBcsGYAMEAssGaAMEAMsGcgMEAMsKcgMEAMsK 6jANBAIAAjAHAwUAJAFr/TANBgkqhkiG9w0BAQsFAAOCAQEAj7HDt1Drwc4tdoHI A3lS2BLW0pQaffr6jhHN0YzIeQc02GDK/Pe2z7EsoJ/8pFaJZLLxYiRYaRxUdCM9 FQ0mi/weGvVmfmYLmUEHcCMnfQATSNHFuI4H9ScOuPkX0q5Dvmb6Jmw9oCtsofFA RST+mnx1g2Sug1Ow4P441HjtoGpasGMuqSLd3mREcL2dbOYHHa84/KcQT/phD9l9 0hGsr4c2dXvOO6C+OghmvYJoJ+7G3OmaiBmL4xk5WuVkZGXrfaBNCyfCaHCxAK6y ZAT00MqziSls0Q67S8j0NlrwDgSDCtI0+F/YY0PjM+6m3A34TJ/9I0gf3EhneqdT rbsJ3g== -----END CERTIFICATE-----Generated at Sat Aug 23 22:15:08 2025 by rpki-client