$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/36C31E00637111EEA51CA05EC4F9AE02.roa File: 36C31E00637111EEA51CA05EC4F9AE02.roa (raw, json) Hash identifier: k6hiSh/WFo6akSjWYkoigb0PhpCRTQBWZ0EKHh/r2Og= Subject key identifier: B5:13:1F:85:4A:7E:A0:91:71:68:CC:31:8F:63:17:DA:6E:CA:46:C5 Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 026B Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/36C31E00637111EEA51CA05EC4F9AE02.roa Signing time: Fri 07 Aug 2026 02:53:58 +0000 ROA not before: Fri 07 Aug 2026 02:53:58 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 18220 IP address blocks: 202.12.69.0/24 maxlen: 24 203.6.96.0/22 maxlen: 22 203.6.100.0/22 maxlen: 22 203.6.104.0/22 maxlen: 22 203.6.114.0/24 maxlen: 24 203.10.114.0/24 maxlen: 24 203.10.234.0/24 maxlen: 24 2401:6bfd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Aug 7 02:53:58 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7548c5-cb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:a4:74:00:6f:35:7e:91:79:ac:ba:7f:8a: b7:b4:11:11:43:62:62:55:20:71:9b:b6:f9:ad:54: b6:c9:59:3d:37:46:ae:e4:e1:56:3b:ce:0a:0e:96: 27:fe:4a:0f:2e:cd:e8:00:7b:df:7f:9b:9c:26:b1: e2:7b:4d:91:31:4d:ee:d9:ff:96:97:e7:00:9e:7e: c8:d8:45:96:10:a7:d4:92:42:5d:0a:be:4e:16:8b: 63:75:3f:a0:50:4a:38:1a:95:ba:5f:11:0e:37:6c: c4:2f:72:97:d5:17:a4:e0:23:00:f0:12:40:92:6c: 74:64:8a:99:3d:cf:b2:9b:df:39:7b:46:96:cb:51: 26:af:b7:43:9d:d1:ec:b2:60:27:ff:93:94:e6:2f: 24:97:83:d5:e6:1c:73:52:16:4d:37:b7:08:ac:21: 1f:f7:88:6a:33:56:4b:ae:21:b4:a5:56:8c:1d:d3: dc:c9:4a:f1:9d:8f:7e:a3:c0:b7:30:04:c1:0e:c0: a9:c0:d2:44:d3:3d:cd:6d:ad:35:d1:38:70:7a:d8: b4:32:9a:2c:3c:5c:52:f4:c5:5e:11:1f:27:9c:cf: b0:f4:b1:8f:44:34:54:92:92:9c:b0:5b:fa:03:47: c4:4e:c4:be:ac:68:df:a4:1b:d1:a6:8b:8f:a9:31: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:13:1F:85:4A:7E:A0:91:71:68:CC:31:8F:63:17:DA:6E:CA:46:C5 X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/36C31E00637111EEA51CA05EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.12.69.0/24 203.6.96.0-203.6.107.255 203.6.114.0/24 203.10.114.0/24 203.10.234.0/24 IPv6: 2401:6bfd::/32 Signature Algorithm: sha256WithRSAEncryption 19:a5:4f:97:86:b6:fa:04:61:a1:af:46:df:34:b3:41:46:ba: 7e:4b:64:d9:44:04:e9:ef:55:ea:0f:35:24:4b:e0:c9:5a:d8: c4:20:2e:7c:c1:3c:6d:aa:7d:ae:07:43:99:cd:ed:a4:44:8c: f1:ec:2a:61:3c:de:e3:ce:6f:f6:f6:18:e8:ef:fe:9c:43:df: 3c:9e:5c:e2:8c:c0:39:97:6c:3c:95:71:c4:6b:cb:66:90:72: 27:35:d2:6e:f0:5e:2f:38:35:2c:94:94:63:25:5a:0c:9c:63: 72:4f:1c:de:5e:b7:58:23:8a:ff:4f:33:9b:0f:d9:9d:42:ab: f5:d9:c3:7f:d8:3d:51:db:fa:0d:79:f6:c0:32:46:f5:e6:3f: 22:07:64:9d:cf:e4:89:84:d4:d3:66:0d:f7:d9:07:fe:49:ee: ad:3d:0b:44:14:81:c0:0d:44:d2:44:27:eb:10:3c:9b:33:07: 3b:d1:dc:b2:9c:51:bf:2d:35:f6:e7:a2:b7:07:24:eb:86:54: 27:75:b7:f4:2f:40:88:dd:ab:2b:23:10:70:a4:47:cd:ab:9f: c2:04:0d:23:3c:09:f6:76:05:8f:fa:7f:0e:8f:68:28:c2:9b: f6:9f:78:8e:dc:c1:be:32:5a:88:2c:6b:55:30:4d:7d:ce:4d: 78:c1:1a:19 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjYwODA3MDI1MzU4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1NDhjNS1jYjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T6kdABvNX6Reay6f4q3tBERQ2JiVSBxm7b5rVS2yVk9N0au5OFWO84KDpYn /koPLs3oAHvff5ucJrHie02RMU3u2f+Wl+cAnn7I2EWWEKfUkkJdCr5OFotjdT+g UEo4GpW6XxEON2zEL3KX1Rek4CMA8BJAkmx0ZIqZPc+ym985e0aWy1Emr7dDndHs smAn/5OU5i8kl4PV5hxzUhZNN7cIrCEf94hqM1ZLriG0pVaMHdPcyUrxnY9+o8C3 MATBDsCpwNJE0z3Nba010Thweti0MposPFxS9MVeER8nnM+w9LGPRDRUkpKcsFv6 A0fETsS+rGjfpBvRpouPqTG8zwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFLUTH4VK fqCRcWjMMY9jF9puykbFMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlFODIvRUE3RTVGQTY2MzZGMTFFRTk3Qzc0QjVDQzRGOUFFMDIvMzZDMzFFMDA2 MzcxMTFFRUE1MUNBMDVFQzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTAs BAIAATAmAwQAygxFMAwDBAXLBmADBALLBmgDBADLBnIDBADLCnIDBADLCuowDQQC AAIwBwMFACQBa/0wDQYJKoZIhvcNAQELBQADggEBABmlT5eGtvoEYaGvRt80s0FG un5LZNlEBOnvVeoPNSRL4Mla2MQgLnzBPG2qfa4HQ5nN7aREjPHsKmE83uPOb/b2 GOjv/pxD3zyeXOKMwDmXbDyVccRry2aQcic10m7wXi84NSyUlGMlWgycY3JPHN5e t1gjiv9PM5sP2Z1Cq/XZw3/YPVHb+g159sAyRvXmPyIHZJ3P5ImE1NNmDffZB/5J 7q09C0QUgcANRNJEJ+sQPJszBzvR3LKcUb8tNfbnorcHJOuGVCd1t/QvQIjdqysj EHCkR82rn8IEDSM8CfZ2BY/6fw6PaCjCm/afeI7cwb4yWogsa1UwTX3OTXjBGhk= -----END CERTIFICATE-----Generated at Sun Sep 20 14:04:02 2026 by rpki-client