$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa File: 36AB4096C51611E7AECA8B79C4F9AE02.roa (raw, json) Hash identifier: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs= Subject key identifier: A2:B3:F0:23:93:FB:6F:92:2B:1E:C8:AB:52:2E:16:75:64:56:A2:09 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 211B Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa Signing time: Thu 12 Mar 2026 16:20:36 +0000 ROA not before: Thu 12 Mar 2026 16:20:36 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 56109 IP address blocks: 43.239.233.0/24 maxlen: 24 43.239.234.0/24 maxlen: 24 103.17.124.0/24 maxlen: 24 103.17.125.0/24 maxlen: 24 103.35.143.0/24 maxlen: 24 203.10.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8475 (0x211b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Mar 12 16:20:36 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69b2e7d4-af97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:4a:31:d0:cc:5d:57:b3:b7:7e:b2:ca:fc: 99:35:6e:4f:f7:71:22:5f:22:dc:22:0e:46:70:67: 48:c4:a8:ee:47:0f:7f:99:e1:90:e6:d1:57:ac:a2: bd:76:38:8a:fc:6e:f8:42:f6:20:05:0d:78:81:46: 29:9d:55:cf:57:7d:48:fd:da:59:db:74:f7:19:65: 0d:3a:94:60:a8:90:ab:09:e9:13:fa:73:f4:18:41: a1:79:1c:a3:3a:9c:d0:7f:cf:f4:66:03:66:08:3a: 33:4b:44:7f:29:4b:ef:60:9c:f7:fe:47:27:9d:ad: a2:32:80:6a:78:3c:3a:0d:cc:0a:3d:48:94:73:cf: 8f:4f:e1:52:17:10:18:3e:fe:9b:14:6f:05:17:4f: b1:3e:b5:59:e4:97:7f:cd:81:31:14:6d:12:37:ae: 26:f2:6f:fb:f3:be:80:aa:f0:c1:ac:81:5f:c8:89: f6:e2:9f:db:87:44:ca:86:0f:93:85:5c:7b:b0:cd: 3c:97:4c:bb:0f:01:e9:77:b1:be:04:2a:e3:21:3d: 28:26:98:6f:f8:d3:ac:47:69:56:9d:ba:99:7d:dd: 63:09:c0:b2:ee:3f:9a:c0:e1:76:cf:86:cb:47:36: 5e:65:84:fc:44:9f:ee:a7:9d:8a:65:a3:27:c7:ba: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:F0:23:93:FB:6F:92:2B:1E:C8:AB:52:2E:16:75:64:56:A2:09 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.233.0-43.239.234.255 103.17.124.0/23 103.35.143.0/24 203.10.58.0/24 Signature Algorithm: sha256WithRSAEncryption 13:19:61:28:99:a6:55:08:87:82:2f:97:b1:5d:12:5b:31:71: bc:94:c1:d0:53:1a:1d:40:d5:03:02:fa:e3:e8:ed:4e:b4:e8: bf:df:53:bb:03:d0:0c:a1:e7:5a:7d:52:ce:7a:ea:b9:38:60: ff:61:a4:56:a4:01:b0:74:be:b6:31:25:69:ed:63:0b:1e:ee: cc:e8:3f:6b:66:1b:3f:99:b6:b0:0c:70:b7:5b:dc:34:0a:a7: 14:17:b3:74:45:ef:c0:0c:41:42:96:f0:ca:42:ec:31:e1:66: dd:61:f4:67:b5:52:2d:09:88:0b:4a:81:1e:a8:e6:bb:4c:49: 30:f9:87:c3:8b:ab:41:5e:8f:3d:1d:2c:74:8a:56:f5:a5:de: ab:a4:93:78:cf:f3:15:78:96:ba:49:76:d2:71:ac:41:fc:ae: 6c:74:2c:c9:cb:6a:d0:3e:6f:64:13:d0:db:83:a8:36:51:e3: 26:fd:21:7f:51:f6:93:26:9b:f8:a8:6f:a8:30:a6:5c:16:1e: 62:30:73:10:ec:9c:9b:ad:89:2b:be:f7:8c:bf:df:39:c1:b0: 64:9e:38:5a:39:dc:eb:2e:db:70:d5:3f:46:65:41:65:c6:80: d1:2e:29:51:02:98:33:1a:62:09:66:f5:d5:59:a5:a6:c7:ed: 81:32:b1:40 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICIRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjYwMzEyMTYyMDM2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWIyZTdkNC1hZjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSVKMdDMXVezt36yyvyZNW5P93EiXyLcIg5GcGdIxKjuRw9/meGQ5tFXrKK9 djiK/G74QvYgBQ14gUYpnVXPV31I/dpZ23T3GWUNOpRgqJCrCekT+nP0GEGheRyj OpzQf8/0ZgNmCDozS0R/KUvvYJz3/kcnna2iMoBqeDw6DcwKPUiUc8+PT+FSFxAY Pv6bFG8FF0+xPrVZ5Jd/zYExFG0SN64m8m/7876AqvDBrIFfyIn24p/bh0TKhg+T hVx7sM08l0y7DwHpd7G+BCrjIT0oJphv+NOsR2lWnbqZfd1jCcCy7j+awOF2z4bL RzZeZYT8RJ/up52KZaMnx7qAHwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFKKz8COT +2+SKx7Iq1IuFnVkVqIJMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjcyNEIvMUJDNzFBNjIxNjg5MTFFNjhFRUZEOTdCQzRGOUFFMDIvMzZBQjQwOTZD NTE2MTFFN0FFQ0E4Qjc5QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgMAwDBAAr7+kDBAAr7+oDBAFnEXwDBABnI48DBADLCjowDQYJKoZIhvcN AQELBQADggEBABMZYSiZplUIh4Ivl7FdElsxcbyUwdBTGh1A1QMC+uPo7U606L/f U7sD0Ayh51p9Us566rk4YP9hpFakAbB0vrYxJWntYwse7szoP2tmGz+ZtrAMcLdb 3DQKpxQXs3RF78AMQUKW8MpC7DHhZt1h9Ge1Ui0JiAtKgR6o5rtMSTD5h8OLq0Fe jz0dLHSKVvWl3qukk3jP8xV4lrpJdtJxrEH8rmx0LMnLatA+b2QT0NuDqDZR4yb9 IX9R9pMmm/iob6gwplwWHmIwcxDsnJutiSu+94y/3znBsGSeOFo53Osu23DVP0Zl QWXGgNEuKVECmDMaYglm9dVZpabH7YEysUA= -----END CERTIFICATE-----Generated at Thu Mar 26 06:58:38 2026 by rpki-client