$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/E959541EB28511ED8893C51CC4F9AE02.roa File: E959541EB28511ED8893C51CC4F9AE02.roa (raw, json) Hash identifier: QKoUwJgiHX/PqIEeu2ww7bkvr6f0jtKmyOvKfaMxJm8= Subject key identifier: 9E:3F:F5:BC:13:79:4C:9E:F1:66:8C:FA:D8:94:CA:94:23:F9:8B:94 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 074D Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/E959541EB28511ED8893C51CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:55:38 +0000 ROA not before: Tue 05 Aug 2025 07:31:01 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 62610 IP address blocks: 36.255.220.0/24 maxlen: 24 36.255.221.0/24 maxlen: 24 36.255.222.0/24 maxlen: 24 36.255.223.0/24 maxlen: 24 103.210.20.0/24 maxlen: 24 103.210.21.0/24 maxlen: 24 103.210.22.0/24 maxlen: 24 122.10.161.0/24 maxlen: 24 122.10.196.0/23 maxlen: 24 122.10.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Aug 5 07:31:01 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4536a-9bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:16:2e:5e:80:f9:4b:3d:0a:a1:f1:69:9b: 07:35:73:04:1d:34:43:26:e1:c2:5b:2d:3b:01:cb: b3:a7:18:06:4a:e4:e4:e7:94:43:e3:2f:b2:c6:9b: b4:e4:57:c5:98:90:15:fe:fe:c3:8d:4d:95:39:8c: af:be:c4:47:20:10:1c:af:da:bf:33:d7:7f:ae:39: d9:72:e0:82:6a:ea:a3:d9:65:bc:62:65:a9:8a:f0: 45:b4:22:a8:b5:a8:7f:27:c5:39:68:93:71:9f:26: 36:7e:78:95:2a:31:dc:9d:a6:b5:b4:00:51:d6:fe: 1e:f3:52:1d:c1:9c:16:6c:9f:2c:65:04:d4:2c:3b: c3:da:3b:d9:57:c8:ce:0f:a5:e9:8a:a9:22:4e:25: 5a:ce:a0:05:5c:be:64:19:d1:a9:da:08:1c:74:1c: ea:9f:ba:38:2b:af:a4:3e:a0:45:b1:6c:d2:92:f3: 1e:d8:a2:54:6f:de:c4:8d:62:64:31:b4:d8:75:7f: 7b:50:46:b9:8c:52:98:6b:19:e0:39:2d:ab:3c:a4: ad:5a:94:66:8c:94:01:47:22:12:5a:69:f4:76:8a: 8b:a0:69:60:b9:7d:d0:5e:48:f3:57:9f:56:b9:9b: e7:70:0e:f3:6d:65:72:21:e3:6d:c4:a8:72:d9:e2: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3F:F5:BC:13:79:4C:9E:F1:66:8C:FA:D8:94:CA:94:23:F9:8B:94 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/E959541EB28511ED8893C51CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.220.0/22 103.210.20.0-103.210.22.255 122.10.161.0/24 122.10.196.0/23 122.10.221.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:86:8f:2c:1e:13:77:3e:96:95:81:07:9b:64:2e:4d:58:4b: 99:6e:ed:63:63:dd:dd:62:ca:62:ec:e7:fc:5d:c3:ce:a3:6f: 7f:ef:9b:f9:89:e2:14:af:f7:f6:4f:73:bf:fb:11:3f:c8:49: 0f:b8:bb:d0:92:8f:5a:ab:98:2a:f2:29:29:9a:b1:2b:43:ae: 78:f1:8f:14:36:9b:15:09:60:02:3a:9a:14:eb:d6:4e:7e:ba: c4:55:6c:7f:09:ca:ab:15:26:7c:a9:a1:55:11:a9:0a:d0:b7: 31:be:02:32:b2:1e:62:eb:6b:f6:9a:aa:44:c4:03:3d:e4:ed: 4e:a5:03:bf:cb:6a:da:98:c4:70:29:f9:18:fc:09:f7:27:4c: e2:4c:29:84:0b:76:88:08:94:99:4f:35:28:94:bf:81:77:78: d6:e6:d4:09:09:7b:f8:5a:b9:9f:1c:96:c9:2d:02:35:3b:51: 4f:d2:5f:06:80:65:10:63:ff:55:33:43:a2:cd:a8:29:55:84: a0:50:56:d0:90:af:80:69:a9:33:b4:3b:ba:75:26:e2:cc:60: 49:ac:13:11:0b:b4:8e:23:44:ad:72:a8:67:b6:15:da:1c:a9: 86:e8:2d:52:4d:b0:c5:72:b9:24:7d:a0:36:68:87:33:e9:57: 4a:81:f8:8d -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjUwODA1MDczMTAxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTM2YS05YmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAUWLl6A+Us9CqHxaZsHNXMEHTRDJuHCWy07AcuzpxgGSuTk55RD4y+yxpu0 5FfFmJAV/v7DjU2VOYyvvsRHIBAcr9q/M9d/rjnZcuCCauqj2WW8YmWpivBFtCKo tah/J8U5aJNxnyY2fniVKjHcnaa1tABR1v4e81IdwZwWbJ8sZQTULDvD2jvZV8jO D6XpiqkiTiVazqAFXL5kGdGp2ggcdBzqn7o4K6+kPqBFsWzSkvMe2KJUb97EjWJk MbTYdX97UEa5jFKYaxngOS2rPKStWpRmjJQBRyISWmn0doqLoGlguX3QXkjzV59W uZvncA7zbWVyIeNtxKhy2eKOzQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFJ4/9bwT eUye8WaM+tiUypQj+YuUMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNTc2NDczN0E3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvRTk1OTU0MUVC Mjg1MTFFRDg4OTNDNTFDQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQCJP/cMAwDBAJn0hQDBABn0hYDBAB6CqEDBAF6CsQDBAB6Ct0wDQYJ KoZIhvcNAQELBQADggEBAA+GjyweE3c+lpWBB5tkLk1YS5lu7WNj3d1iymLs5/xd w86jb3/vm/mJ4hSv9/ZPc7/7ET/ISQ+4u9CSj1qrmCryKSmasStDrnjxjxQ2mxUJ YAI6mhTr1k5+usRVbH8JyqsVJnypoVURqQrQtzG+AjKyHmLra/aaqkTEAz3k7U6l A7/LatqYxHAp+Rj8CfcnTOJMKYQLdogIlJlPNSiUv4F3eNbm1AkJe/hauZ8clskt AjU7UU/SXwaAZRBj/1UzQ6LNqClVhKBQVtCQr4BpqTO0O7p1JuLMYEmsExELtI4j RK1yqGe2FdocqYboLVJNsMVyuSR9oDZohzPpV0qB+I0= -----END CERTIFICATE-----Generated at Thu Mar 26 04:39:17 2026 by rpki-client