$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/36C31E00637111EEA51CA05EC4F9AE02.roa File: 36C31E00637111EEA51CA05EC4F9AE02.roa (raw, json) Hash identifier: sT56QjRFMA5RYNrfwK84aeqd2CWRIQx/z7cMGwk6r48= Subject key identifier: 9C:1F:16:37:49:BB:30:A2:A2:A7:68:E6:89:E9:8C:00:A1:C6:B8:D5 Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 0212 Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/36C31E00637111EEA51CA05EC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:44:16 +0000 ROA not before: Wed 13 Aug 2025 04:42:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 18220 IP address blocks: 202.12.69.0/24 maxlen: 24 203.6.96.0/22 maxlen: 22 203.6.100.0/22 maxlen: 22 203.6.104.0/22 maxlen: 22 203.6.114.0/24 maxlen: 24 203.10.114.0/24 maxlen: 24 203.10.234.0/24 maxlen: 24 2401:6bfd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Aug 13 04:42:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a47af0-ee38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:32:85:f6:5a:70:46:1f:10:3e:3c:98:d5: 4a:e1:83:ff:70:d7:3f:83:4f:24:d7:5f:ea:05:eb: 25:e1:b6:ce:24:43:db:2e:5e:83:18:49:e1:44:d3: 68:65:d2:8c:35:3b:ac:a3:ce:ca:0c:97:bf:e2:cb: 6f:a9:cf:a6:e0:90:3f:2d:72:44:c5:ce:51:dc:ed: 02:a0:be:c7:53:e2:87:3c:66:f5:97:70:1a:eb:59: 2a:fb:b6:4a:c6:4d:9e:33:92:2c:31:82:11:53:04: 51:92:d1:5f:79:09:0d:d6:c9:e7:10:0e:2f:19:9a: 5f:f7:32:12:5f:69:98:08:36:c4:14:c4:23:1e:ff: 8c:f1:d5:7d:f7:a2:d9:ab:45:dc:86:bf:e8:ab:79: 9d:3a:23:3c:ee:e1:0e:50:f3:ba:be:c5:ec:ba:36: 67:b2:d4:e6:a0:2b:4e:f8:1d:44:40:fa:11:af:e2: 56:60:ff:f9:69:7c:61:f7:cc:fc:70:80:ba:7e:f9: b8:88:99:59:34:44:d1:b2:3d:99:c9:6c:3d:cf:c2: ef:ad:03:64:fd:6f:0a:02:84:ef:49:18:4a:58:4a: 3f:7d:1a:fe:01:6c:84:39:ec:f0:e8:f5:0a:24:21: 71:b1:98:a7:33:9c:b0:ea:69:b1:aa:44:34:cc:e9: 76:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1F:16:37:49:BB:30:A2:A2:A7:68:E6:89:E9:8C:00:A1:C6:B8:D5 X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/36C31E00637111EEA51CA05EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.12.69.0/24 203.6.96.0-203.6.107.255 203.6.114.0/24 203.10.114.0/24 203.10.234.0/24 IPv6: 2401:6bfd::/32 Signature Algorithm: sha256WithRSAEncryption 68:ae:2b:86:f9:01:be:bc:fe:44:a4:9d:68:7e:3d:00:0b:34: ec:a2:7c:24:a3:d3:33:b7:7a:ea:7a:e6:b6:f0:2e:09:c3:de: 91:8c:2f:fe:b6:0b:76:40:b1:42:86:2e:92:9a:f3:55:d3:63: 88:46:71:36:52:44:ce:d4:13:39:f9:c5:19:a8:74:88:32:bd: e3:6c:27:87:85:2c:a1:f1:47:f2:6c:2d:90:d3:7f:c2:ee:61: 21:eb:36:f7:30:4b:78:a6:97:ba:de:17:74:65:4e:bf:03:75: 97:dd:72:b4:16:75:70:d9:c1:2c:aa:11:24:2f:20:21:fa:4b: c7:a3:8a:d8:11:81:e6:d6:5c:f2:05:7b:5e:9d:1f:e6:50:33: 3a:46:5c:d4:d7:9d:9e:11:f2:7c:84:91:00:a4:06:4f:fd:a6: 4d:fa:37:bc:ea:50:d2:f1:d8:fc:40:e3:d9:d0:2b:bd:1e:18: 74:8c:be:58:f6:67:e5:50:2d:94:bb:98:5e:63:ad:03:ca:24: b5:ee:9e:49:8a:52:33:f6:a0:eb:72:de:ee:71:20:ec:bc:1c: 6e:0d:f2:31:08:ee:9d:26:f9:e4:05:4e:6c:25:7f:1b:4d:8a: 52:ab:4b:91:61:8d:33:be:94:a0:0f:25:fc:b7:f3:75:35:70: 46:44:f6:c0 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjUwODEzMDQ0MjExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2FmMC1lZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYUyhfZacEYfED48mNVK4YP/cNc/g08k11/qBesl4bbOJEPbLl6DGEnhRNNo ZdKMNTuso87KDJe/4stvqc+m4JA/LXJExc5R3O0CoL7HU+KHPGb1l3Aa61kq+7ZK xk2eM5IsMYIRUwRRktFfeQkN1snnEA4vGZpf9zISX2mYCDbEFMQjHv+M8dV996LZ q0Xchr/oq3mdOiM87uEOUPO6vsXsujZnstTmoCtO+B1EQPoRr+JWYP/5aXxh98z8 cIC6fvm4iJlZNETRsj2ZyWw9z8LvrQNk/W8KAoTvSRhKWEo/fRr+AWyEOezw6PUK JCFxsZinM5yw6mmxqkQ0zOl2KwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFJwfFjdJ uzCioqdo5onpjAChxrjVMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlFODIvRUE3RTVGQTY2MzZGMTFFRTk3Qzc0QjVDQzRGOUFFMDIvMzZDMzFFMDA2 MzcxMTFFRUE1MUNBMDVFQzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTAs BAIAATAmAwQAygxFMAwDBAXLBmADBALLBmgDBADLBnIDBADLCnIDBADLCuowDQQC AAIwBwMFACQBa/0wDQYJKoZIhvcNAQELBQADggEBAGiuK4b5Ab68/kSknWh+PQAL NOyifCSj0zO3eup65rbwLgnD3pGML/62C3ZAsUKGLpKa81XTY4hGcTZSRM7UEzn5 xRmodIgyveNsJ4eFLKHxR/JsLZDTf8LuYSHrNvcwS3iml7reF3RlTr8DdZfdcrQW dXDZwSyqESQvICH6S8ejitgRgebWXPIFe16dH+ZQMzpGXNTXnZ4R8nyEkQCkBk/9 pk36N7zqUNLx2PxA49nQK70eGHSMvlj2Z+VQLZS7mF5jrQPKJLXunkmKUjP2oOty 3u5xIOy8HG4N8jEI7p0m+eQFTmwlfxtNilKrS5FhjTO+lKAPJfy383U1cEZE9sA= -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:48 2026 by rpki-client