$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/24D0960C4AFA11EFB1EEA481C4F9AE02.roa File: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (raw, json) Hash identifier: khYjfuRKyk9d4qvk9tSAFWiSBjcko00fCsRP/3vjlB0= Subject key identifier: 36:0A:38:78:2F:14:DE:12:44:0D:7E:8B:B5:48:C2:83:FF:D8:56:E2 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 360B Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/24D0960C4AFA11EFB1EEA481C4F9AE02.roa Signing time: Fri 24 Oct 2025 04:19:53 +0000 ROA not before: Fri 24 Oct 2025 04:19:53 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 137019 IP address blocks: 36.66.5.0/24 maxlen: 24 36.66.17.0/24 maxlen: 24 36.66.18.0/24 maxlen: 24 36.66.21.0/24 maxlen: 24 36.66.22.0/24 maxlen: 24 180.250.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13835 (0x360b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Oct 24 04:19:53 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68fafe69-8f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:50:d7:38:73:96:6e:1a:76:3e:e2:a8:ef:f3: ef:f7:31:37:19:81:e4:4d:d4:f7:c5:58:63:65:6d: f7:67:b8:11:cc:15:b8:af:80:9b:97:2e:6e:ab:59: 42:26:d0:26:85:1c:b3:18:3a:f2:b4:03:d1:30:08: 34:2e:98:b1:65:cd:5d:53:8c:3c:c3:78:00:d2:03: ef:86:19:44:6f:3c:c0:d8:f5:20:32:e0:55:a5:9a: 9c:a9:4f:01:87:c9:50:7b:1e:89:df:f1:f4:da:34: ec:b5:7e:64:ea:8f:10:46:99:27:ab:76:84:15:fb: fb:f1:c4:1e:96:44:ab:78:4f:c4:c2:22:26:33:82: 2f:d5:14:49:9e:28:34:d4:ae:20:48:e0:00:78:e1: 8c:9b:79:d3:20:90:4f:90:80:06:4d:4e:fb:77:3a: 89:81:1f:ac:b9:0a:e3:a6:5a:6a:60:7a:ca:61:fa: 7c:7c:5e:f2:87:bf:e3:c3:81:e4:9b:30:6c:82:ea: 0d:e0:27:21:27:a0:0e:17:dc:57:1c:84:93:e7:a0: a9:06:98:73:7b:5b:ee:02:81:18:9f:99:d8:c9:49: 6a:f9:e0:34:16:cd:b4:33:76:3f:39:fa:6f:b7:00: 47:c5:8a:55:76:af:fa:ff:4d:64:0e:fa:83:5a:5f: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0A:38:78:2F:14:DE:12:44:0D:7E:8B:B5:48:C2:83:FF:D8:56:E2 X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/24D0960C4AFA11EFB1EEA481C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.66.5.0/24 36.66.17.0-36.66.18.255 36.66.21.0-36.66.22.255 180.250.2.0/23 Signature Algorithm: sha256WithRSAEncryption 60:17:b7:94:da:e4:64:0e:2e:47:c2:71:ee:1f:f8:1a:65:4f: 28:58:e8:c5:cd:4f:fb:6e:c3:c6:bb:ec:43:40:b4:10:ed:75: 4c:79:a8:4d:d1:f2:a5:5f:88:29:a9:02:9e:34:d3:97:8c:52: 5c:2e:95:49:e0:55:92:be:0f:b4:bd:9b:ca:30:4a:91:7b:c8: c0:a5:a8:31:fd:57:76:2d:77:8b:c7:0f:67:27:71:28:e9:82: 16:32:38:82:5f:d8:89:cd:f4:f0:8f:a5:4c:16:dc:bb:57:cf: a9:05:12:52:57:58:68:8a:e8:ca:25:df:72:12:26:e1:ec:22: 9a:0e:02:5f:36:7c:a8:b6:26:97:bd:71:fa:18:79:21:f8:dd: fc:b6:d0:0b:ed:6a:9e:d2:aa:f3:42:03:e4:05:c4:e5:12:79: 3e:df:fd:8f:1c:6f:f0:f2:7e:fe:d0:3a:55:f2:ed:80:0d:cb: eb:6e:22:53:0f:83:12:51:18:48:1d:c9:f5:db:18:17:cb:d9: 35:45:70:d0:31:86:8b:0f:24:fe:ac:09:01:c7:c3:5d:ec:e8: c7:4d:ae:08:42:98:19:8d:b7:fc:a7:06:ad:9c:79:28:5f:cb: 10:1e:7d:4f:a1:55:5a:60:05:25:c9:a5:02:13:86:e1:24:10: a8:e0:87:00 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICNgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjUxMDI0MDQxOTUzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZhZmU2OS04ZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lDXOHOWbhp2PuKo7/Pv9zE3GYHkTdT3xVhjZW33Z7gRzBW4r4Cbly5uq1lC JtAmhRyzGDrytAPRMAg0LpixZc1dU4w8w3gA0gPvhhlEbzzA2PUgMuBVpZqcqU8B h8lQex6J3/H02jTstX5k6o8QRpknq3aEFfv78cQelkSreE/EwiImM4Iv1RRJnig0 1K4gSOAAeOGMm3nTIJBPkIAGTU77dzqJgR+suQrjplpqYHrKYfp8fF7yh7/jw4Hk mzBsguoN4CchJ6AOF9xXHIST56CpBphze1vuAoEYn5nYyUlq+eA0Fs20M3Y/Ofpv twBHxYpVdq/6/01kDvqDWl9aSQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFDYKOHgv FN4SRA1+i7VIwoP/2FbiMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkxMUMvQkJDNTRCQTQxRDgzMTFFMjhFN0UyREQ5MDhCMDJDRDIvMjREMDk2MEM0 QUZBMTFFRkIxRUVBNDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgDBAAkQgUwDAMEACRCEQMEACRCEjAMAwQAJEIVAwQAJEIWAwQB tPoCMA0GCSqGSIb3DQEBCwUAA4IBAQBgF7eU2uRkDi5HwnHuH/gaZU8oWOjFzU/7 bsPGu+xDQLQQ7XVMeahN0fKlX4gpqQKeNNOXjFJcLpVJ4FWSvg+0vZvKMEqRe8jA pagx/Vd2LXeLxw9nJ3Eo6YIWMjiCX9iJzfTwj6VMFty7V8+pBRJSV1hoiujKJd9y Eibh7CKaDgJfNnyotiaXvXH6GHkh+N38ttAL7Wqe0qrzQgPkBcTlEnk+3/2PHG/w 8n7+0DpV8u2ADcvrbiJTD4MSURhIHcn12xgXy9k1RXDQMYaLDyT+rAkBx8Nd7OjH Ta4IQpgZjbf8pwatnHkoX8sQHn1PoVVaYAUlyaUCE4bhJBCo4IcA -----END CERTIFICATE-----Generated at Wed Nov 5 13:15:41 2025 by rpki-client