$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/36020660DD2411EF9F4FB925C4F9AE02.roa File: 36020660DD2411EF9F4FB925C4F9AE02.roa (raw, json) Hash identifier: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4= Subject key identifier: 04:6B:B7:4A:21:F8:14:67:0F:8A:9A:0E:E0:13:A6:C6:69:5F:7E:5B Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 01D7 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/36020660DD2411EF9F4FB925C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:03:24 +0000 ROA not before: Wed 29 Oct 2025 03:48:08 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 149994 IP address blocks: 103.240.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Oct 29 03:48:08 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4391c-3ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:08:08:3c:8c:62:4d:49:1b:1e:3b:7a:3a: ca:eb:fe:32:16:37:50:9f:51:10:7a:8a:98:7a:ee: ba:73:c8:c0:2d:b7:2d:e5:5d:ef:ff:29:85:9b:a4: 09:f7:fe:fd:96:60:8b:53:b2:fa:f4:66:71:1e:93: e2:82:1b:98:24:24:a9:36:c8:e5:a7:bf:a4:c1:d9: c9:0a:1d:41:52:11:fe:f6:7f:32:a3:b6:d1:56:c1: b7:7f:b6:b8:0f:0f:dd:1f:2c:55:b5:96:78:72:f6: 43:9f:1d:ff:60:27:46:f5:7d:07:b6:c3:40:e4:e2: 4b:b4:fe:2a:f9:ac:27:1b:81:75:0f:50:e9:d1:9a: c6:9e:c0:dc:d1:ae:aa:c6:07:59:6f:f3:18:49:ac: e6:8b:57:ae:dc:99:7d:80:61:44:ec:58:24:07:7f: c5:19:68:1d:de:7b:be:f6:09:ba:79:59:f9:e0:7e: 3b:42:28:04:48:a0:4b:75:e5:88:6c:b0:0a:03:3a: 07:05:88:42:d1:fe:ff:b7:c3:56:bd:1a:e8:ef:62: e4:67:75:1c:87:88:37:07:68:ac:1e:11:a3:5a:90: d0:6b:50:f4:41:40:d0:7c:62:89:1e:95:2e:db:0e: 82:08:65:af:bb:f2:89:79:c0:32:8f:b3:7b:9c:11: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6B:B7:4A:21:F8:14:67:0F:8A:9A:0E:E0:13:A6:C6:69:5F:7E:5B X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/36020660DD2411EF9F4FB925C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.240.5.0/24 Signature Algorithm: sha256WithRSAEncryption 75:5d:78:21:7a:48:bd:d1:51:67:9f:1a:04:74:12:92:af:c4: 87:0a:0e:df:94:ad:f6:a7:fb:f5:c0:0d:34:f4:9b:fe:0f:01: 97:17:53:e7:d9:27:cd:ad:37:74:43:ff:6f:ed:06:8c:3e:93: c5:0f:b7:d1:a2:13:94:b5:e5:d9:9c:cf:35:a2:89:bc:13:be: 67:f3:53:53:90:1d:4a:5e:53:2b:37:7f:86:e9:29:bf:c6:64: c1:40:d1:fd:16:93:e1:5c:5f:e3:23:4a:fe:97:92:e6:78:ed: bc:92:c2:da:8a:06:ab:31:64:5f:ec:c5:ba:ef:10:6f:91:81: 69:1d:a1:d3:4d:65:f8:85:52:22:41:c5:86:6e:e3:89:07:3a: e9:b6:29:da:2d:11:c4:8f:60:f4:91:48:60:0a:c1:c0:05:56: 5f:8c:98:3d:e7:7a:1a:80:e5:a9:98:d4:51:93:13:5d:e7:3f: e2:97:3a:0a:7a:1c:5b:2f:b5:27:51:bd:a6:b9:08:f3:e9:8b: a2:c8:63:c4:20:b2:aa:ef:d2:b5:56:3b:33:71:90:a8:41:b3: 6b:ba:72:ef:98:73:65:49:1d:05:2a:93:5a:84:10:10:cb:4b: 86:ee:96:e0:1d:c6:cb:14:48:85:68:57:68:8c:c4:60:47:ce: 65:e4:f4:5e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUxMDI5MDM0ODA4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzkxYy0zZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJAICDyMYk1JGx47ejrK6/4yFjdQn1EQeoqYeu66c8jALbct5V3v/ymFm6QJ 9/79lmCLU7L69GZxHpPighuYJCSpNsjlp7+kwdnJCh1BUhH+9n8yo7bRVsG3f7a4 Dw/dHyxVtZZ4cvZDnx3/YCdG9X0HtsNA5OJLtP4q+awnG4F1D1Dp0ZrGnsDc0a6q xgdZb/MYSazmi1eu3Jl9gGFE7FgkB3/FGWgd3nu+9gm6eVn54H47QigESKBLdeWI bLAKAzoHBYhC0f7/t8NWvRro72LkZ3Uch4g3B2isHhGjWpDQa1D0QUDQfGKJHpUu 2w6CCGWvu/KJecAyj7N7nBEVfQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFARrt0oh +BRnD4qaDuATpsZpX35bMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM4RkQvQTVBNkYzN0E2MUY4MTFFRTlGNzk0MDFBQzRGOUFFMDIvMzYwMjA2NjBE RDI0MTFFRjlGNEZCOTI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ/AFMA0GCSqGSIb3DQEBCwUAA4IBAQB1XXgheki90VFnnxoEdBKS r8SHCg7flK32p/v1wA009Jv+DwGXF1Pn2SfNrTd0Q/9v7QaMPpPFD7fRohOUteXZ nM81oom8E75n81NTkB1KXlMrN3+G6Sm/xmTBQNH9FpPhXF/jI0r+l5LmeO28ksLa igarMWRf7MW67xBvkYFpHaHTTWX4hVIiQcWGbuOJBzrptinaLRHEj2D0kUhgCsHA BVZfjJg953oagOWpmNRRkxNd5z/ilzoKehxbL7UnUb2muQjz6YuiyGPEILKq79K1 VjszcZCoQbNrunLvmHNlSR0FKpNahBAQy0uG7pbgHcbLFEiFaFdojMRgR85l5PRe -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:16 2026 by rpki-client