$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa File: 36AB4096C51611E7AECA8B79C4F9AE02.roa (raw, json) Hash identifier: GNf2bNgVQfuaICiZmpsTnJWiooukU1mU0+V2gbgGrqI= Subject key identifier: E6:E0:18:30:F3:57:86:0C:46:C6:B5:54:97:CB:5B:04:23:09:2E:73 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 2110 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:28:18 +0000 ROA not before: Wed 12 Mar 2025 16:13:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 56109 IP address blocks: 43.239.233.0/24 maxlen: 24 43.239.234.0/24 maxlen: 24 103.17.124.0/24 maxlen: 24 103.17.125.0/24 maxlen: 24 103.35.143.0/24 maxlen: 24 203.10.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8464 (0x2110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Mar 12 16:13:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a422d2-6a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:80:a4:7a:03:db:56:92:69:2f:43:21:12: 1a:1d:f5:bf:68:81:2e:bc:89:83:84:f3:c6:a0:d4: 4b:69:af:08:64:80:62:f9:af:a9:e8:59:ec:e5:5f: f7:1c:4f:32:86:a1:c7:76:c6:a1:61:4d:a4:49:a3: 1c:1c:6a:90:27:65:ce:44:2c:e2:89:e4:83:bc:7d: 79:7f:18:53:6f:51:9f:e7:5b:d9:69:83:dd:8b:a1: 3c:46:01:a6:6d:1a:e4:55:fa:cc:64:74:0a:aa:69: f5:89:ad:c6:18:ba:9d:a0:17:f4:00:1f:c2:56:33: db:c1:50:31:22:54:5c:45:c3:7a:a9:2d:de:c3:c6: c1:01:b1:6d:6c:26:0d:59:d6:ce:18:6f:18:35:bb: 96:fc:80:96:ae:f7:ad:28:68:b6:24:22:7b:1d:20: f6:db:f9:a4:3a:a5:2c:32:3e:c8:a9:0c:36:40:15: 44:69:4c:80:00:b7:f4:7b:da:b1:ae:0b:7f:b4:b5: fd:31:1a:f7:8c:28:94:f3:fa:77:19:a9:41:d0:e0: 7f:ae:61:0b:07:e5:58:18:49:42:d8:b4:16:35:ed: 96:07:ef:91:6f:2d:cb:4d:fa:96:70:94:52:7a:ab: 7a:4b:30:91:5f:55:79:ea:cf:81:c0:f1:b8:ba:65: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E0:18:30:F3:57:86:0C:46:C6:B5:54:97:CB:5B:04:23:09:2E:73 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.233.0-43.239.234.255 103.17.124.0/23 103.35.143.0/24 203.10.58.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:6c:24:cd:f4:78:07:c3:b7:c9:5f:53:dc:4c:34:84:a3:47: 1f:b2:ab:21:78:06:0b:f4:13:c5:90:3f:e2:fc:6a:bd:c5:52: ff:80:50:dd:e2:37:0b:0c:36:36:48:db:5d:b3:54:12:2f:61: 19:d5:04:2b:41:37:5d:cd:5b:bc:34:8b:c3:8f:a5:1d:8e:22: 52:98:e0:4b:be:b1:99:04:c1:9e:1e:9f:8e:78:da:7a:5f:8c: f5:d8:3e:58:ed:dc:67:5b:21:17:a7:83:2f:49:a9:fa:e8:2c: c6:f6:ab:ab:11:9b:d3:2a:ce:84:73:49:07:90:43:34:62:7d: 2f:f0:0c:33:0b:dc:80:f5:1d:9d:3e:73:16:f3:93:7f:48:ce: 91:ba:c7:5f:e7:2c:2f:98:44:95:9e:7d:4f:92:5b:b5:b5:85: ba:6f:1c:4f:fb:3a:02:58:5f:1b:52:c6:58:8d:0e:c0:51:ac: f5:3d:34:e2:ca:ca:69:47:96:f7:db:e5:4e:79:0b:c6:4c:16: 1b:9b:83:80:7b:97:53:4c:42:a1:d7:e2:b6:8d:b6:10:36:82: 79:46:8a:47:72:4e:2b:c0:60:5a:1a:b6:a8:27:4d:a6:52:8f: 24:4a:53:5a:9f:aa:c9:ee:0a:00:28:6d:ad:f1:4d:d9:e5:7c: 2c:d9:1a:e5 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICIRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwMzEyMTYxMzQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjJkMi02YTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVeApHoD21aSaS9DIRIaHfW/aIEuvImDhPPGoNRLaa8IZIBi+a+p6Fns5V/3 HE8yhqHHdsahYU2kSaMcHGqQJ2XORCziieSDvH15fxhTb1Gf51vZaYPdi6E8RgGm bRrkVfrMZHQKqmn1ia3GGLqdoBf0AB/CVjPbwVAxIlRcRcN6qS3ew8bBAbFtbCYN WdbOGG8YNbuW/ICWrvetKGi2JCJ7HSD22/mkOqUsMj7IqQw2QBVEaUyAALf0e9qx rgt/tLX9MRr3jCiU8/p3GalB0OB/rmELB+VYGElC2LQWNe2WB++Rby3LTfqWcJRS eqt6SzCRX1V56s+BwPG4umUtswIDAQABo4ICejCCAnYwHQYDVR0OBBYEFObgGDDz V4YMRsa1VJfLWwQjCS5zMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjcyNEIvMUJDNzFBNjIxNjg5MTFFNjhFRUZEOTdCQzRGOUFFMDIvMzZBQjQwOTZD NTE2MTFFN0FFQ0E4Qjc5QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgMAwDBAAr7+kDBAAr7+oDBAFnEXwDBABnI48DBADLCjowDQYJKoZIhvcN AQELBQADggEBAE5sJM30eAfDt8lfU9xMNISjRx+yqyF4Bgv0E8WQP+L8ar3FUv+A UN3iNwsMNjZI212zVBIvYRnVBCtBN13NW7w0i8OPpR2OIlKY4Eu+sZkEwZ4en454 2npfjPXYPljt3GdbIRengy9JqfroLMb2q6sRm9MqzoRzSQeQQzRifS/wDDML3ID1 HZ0+cxbzk39IzpG6x1/nLC+YRJWefU+SW7W1hbpvHE/7OgJYXxtSxliNDsBRrPU9 NOLKymlHlvfb5U55C8ZMFhubg4B7l1NMQqHX4raNthA2gnlGikdyTivAYFoatqgn TaZSjyRKU1qfqsnuCgAoba3xTdnlfCzZGuU= -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:17 2026 by rpki-client