$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa File: 36521694382D11EDB904E684C4F9AE02.roa (raw, json) Hash identifier: oE5sqx2sa1pWE1E4YeTJorNISwn3cfK4mnY17qiJiBA= Subject key identifier: 3C:17:8F:61:90:EA:41:0C:E9:D3:14:16:44:3A:90:AA:E5:93:8F:86 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CD8 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:52:51 +0000 ROA not before: Thu 28 Aug 2025 14:52:51 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131414 IP address blocks: 45.118.144.0/22 maxlen: 24 103.97.132.0/22 maxlen: 24 103.237.144.0/22 maxlen: 24 2403:bf40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19672 (0x4cd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:51 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d43-b128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:3d:dc:6a:0d:e5:84:77:82:35:25:1c:77: 3a:24:de:20:0b:33:3f:2c:45:ee:fc:73:81:2a:ee: 2c:3c:f3:85:1a:30:78:0b:11:f3:d9:35:1c:65:e6: 99:d9:60:96:68:fe:62:c0:7b:24:c2:de:2a:b0:7d: 79:5b:99:bb:47:ef:99:b1:fe:ca:56:82:2e:37:54: 0c:38:d6:61:a1:2e:08:b8:de:e0:16:e1:89:b8:2e: 53:cf:75:cb:de:06:ac:d4:7b:4d:94:5a:32:1c:f4: f7:e7:3d:6b:a4:10:d0:93:ac:d0:e8:fc:5a:4d:9e: 46:65:87:8f:8b:1a:e3:01:7f:6e:a3:64:73:e2:53: 2f:c0:c1:31:c9:44:24:a7:e7:9e:02:b4:54:94:87: 78:dc:38:14:cc:9d:a7:22:a0:a8:27:26:df:f8:50: 6a:ba:3e:e8:40:6b:a4:85:eb:bf:71:d0:6c:82:35: bf:f6:53:dc:f5:bf:3c:b1:6a:42:72:bf:8f:5b:86: b8:48:45:0a:cd:1b:e1:c3:71:dd:6f:d2:22:36:f9: 14:81:5b:48:a0:8f:4d:57:18:84:80:f4:b0:54:db: e5:90:91:d3:ac:cf:0f:98:78:4b:97:c8:46:32:f2: 87:05:1a:5b:9d:94:26:7d:a2:ef:ab:22:c8:d2:d1: 73:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:17:8F:61:90:EA:41:0C:E9:D3:14:16:44:3A:90:AA:E5:93:8F:86 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.144.0/22 103.97.132.0/22 103.237.144.0/22 IPv6: 2403:bf40:3::/48 Signature Algorithm: sha256WithRSAEncryption 48:98:6f:3a:a0:f3:10:fb:61:77:22:ee:ac:13:7b:f6:b3:63: f9:53:cb:75:9e:6c:c4:d0:ae:ea:83:1a:71:91:93:5f:be:bc: 48:ae:3b:cf:f9:87:1c:c8:9c:51:43:a4:54:93:14:b4:41:2f: 54:dc:e6:e6:b5:88:6c:77:d2:f0:30:d3:34:85:85:e0:26:be: 07:ad:6f:15:81:cc:a3:d0:87:72:bb:f0:85:c9:2d:ae:aa:d4: 09:fb:93:92:19:3c:b3:d0:2b:06:fc:8d:38:35:ed:47:df:73: 1e:75:84:a4:89:f9:1e:80:dc:ae:a2:ae:13:d9:d4:e3:c5:ef: e5:6d:60:b0:94:7e:5d:31:97:81:f1:da:a8:e8:8f:1b:cc:10: 66:c2:cc:c0:df:26:73:ce:9c:8e:ba:dc:a7:2d:a1:eb:78:15: 59:76:5b:f0:6f:9c:43:e1:fa:3d:2a:64:a1:90:5a:6c:ff:bb: 20:be:ff:88:a0:1a:c2:cc:e6:51:a8:9d:d2:23:99:32:a7:11: 74:ac:a3:94:14:ae:54:b1:b1:83:b2:c5:32:a3:a2:6c:f6:48: 34:e9:49:b5:3d:ee:16:31:de:eb:04:c5:b9:74:b6:72:0e:ee: b8:87:a8:62:94:2c:1c:a3:18:01:01:80:96:18:10:10:3a:2d: 03:cf:7f:13 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICTNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjUxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQ0My1iMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjM93GoN5YR3gjUlHHc6JN4gCzM/LEXu/HOBKu4sPPOFGjB4CxHz2TUcZeaZ 2WCWaP5iwHskwt4qsH15W5m7R++Zsf7KVoIuN1QMONZhoS4IuN7gFuGJuC5Tz3XL 3gas1HtNlFoyHPT35z1rpBDQk6zQ6PxaTZ5GZYePixrjAX9uo2Rz4lMvwMExyUQk p+eeArRUlId43DgUzJ2nIqCoJybf+FBquj7oQGukheu/cdBsgjW/9lPc9b88sWpC cr+PW4a4SEUKzRvhw3Hdb9IiNvkUgVtIoI9NVxiEgPSwVNvlkJHTrM8PmHhLl8hG MvKHBRpbnZQmfaLvqyLI0tFzQQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFDwXj2GQ 6kEM6dMUFkQ6kKrlk4+GMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzY1MjE2OTQz ODJEMTFFREI5MDRFNjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAItdpADBAJnYYQDBAJn7ZAwDwQCAAIwCQMHACQDv0AAAzAN BgkqhkiG9w0BAQsFAAOCAQEASJhvOqDzEPthdyLurBN79rNj+VPLdZ5sxNCu6oMa cZGTX768SK47z/mHHMicUUOkVJMUtEEvVNzm5rWIbHfS8DDTNIWF4Ca+B61vFYHM o9CHcrvwhcktrqrUCfuTkhk8s9ArBvyNODXtR99zHnWEpIn5HoDcrqKuE9nU48Xv 5W1gsJR+XTGXgfHaqOiPG8wQZsLMwN8mc86cjrrcpy2h63gVWXZb8G+cQ+H6PSpk oZBabP+7IL7/iKAawszmUaid0iOZMqcRdKyjlBSuVLGxg7LFMqOibPZINOlJtT3u FjHe6wTFuXS2cg7uuIeoYpQsHKMYAQGAlhgQEDotA89/Ew== -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:34 2025 by rpki-client