$ rpki-client -vvvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/436F4126B65011F1948A73976C11F970.roa File: 436F4126B65011F1948A73976C11F970.roa (raw, json) Hash identifier: F3+uY7nHwDjlXNt5YeZTIT18vC2O5MfAcnf6hK5VOi0= Subject key identifier: 63:CF:1D:13:F9:2E:43:D2:A2:02:5C:0F:D4:1E:69:FC:A2:FC:A3:E4 Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Certificate serial: 02BC Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/436F4126B65011F1948A73976C11F970.roa Signing time: Tue 22 Sep 2026 06:38:47 +0000 ROA not before: Tue 22 Sep 2026 06:38:47 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 133955 IP address blocks: 103.235.4.0/24 maxlen: 24 103.235.5.0/24 maxlen: 24 103.235.6.0/24 maxlen: 24 103.235.7.0/24 maxlen: 24 150.129.208.0/24 maxlen: 24 150.129.209.0/24 maxlen: 24 150.129.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Validity Not Before: Sep 22 06:38:47 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6ab22277-3ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:20:d4:bd:a1:ef:5d:83:cb:b6:e6:96:e1: 5e:54:68:c4:f5:4c:d5:f0:f2:77:9f:ee:1c:e7:cd: d5:96:96:f7:66:af:f5:b6:bb:4c:f8:7b:1b:34:ae: 98:99:eb:ab:1c:42:90:34:a1:b4:5a:af:94:19:cd: d1:ce:06:e8:88:f6:25:a1:42:ca:e5:d9:c6:d1:43: b2:e2:ab:d9:50:b9:80:21:14:3b:d1:c9:eb:f1:0e: f0:9b:53:7e:8f:c5:a6:24:1f:90:7c:c3:bc:59:33: dd:74:b9:81:18:27:9a:19:ef:00:11:74:c9:da:44: 5e:43:8d:41:6e:c9:4e:70:fb:5f:60:f8:f0:de:dd: e8:49:7e:45:5f:47:c7:f0:a5:c1:d0:5f:34:09:a9: 45:54:b7:07:56:24:46:01:50:c5:38:a7:1d:01:79: 87:6b:73:a7:2d:6d:6b:6a:fb:b8:98:cc:5e:d1:2c: 6f:ce:d2:e6:ca:17:66:41:9e:1a:f6:b1:b0:5e:22: 20:4b:82:73:bc:9d:c4:aa:08:81:66:fa:f9:04:87: c6:e5:5e:71:ff:49:eb:21:2f:7b:74:c2:7b:48:e4: 8a:42:49:7c:b8:23:af:6a:f6:99:60:6f:2d:f9:da: be:05:82:a1:ef:fd:ba:dd:ce:06:1f:79:70:6f:a4: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CF:1D:13:F9:2E:43:D2:A2:02:5C:0F:D4:1E:69:FC:A2:FC:A3:E4 X509v3 Authority Key Identifier: keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/436F4126B65011F1948A73976C11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.235.4.0/22 150.129.208.0-150.129.210.255 Signature Algorithm: sha256WithRSAEncryption 0f:a4:50:8e:0f:32:8f:cf:51:38:c5:70:34:cc:81:17:5d:2e: 6f:fb:36:40:23:37:7b:f1:d6:e2:9a:90:01:10:ec:d6:69:be: 01:fc:3f:2e:6d:28:51:91:0e:fe:9d:41:79:10:4c:20:1f:b9: 46:7c:70:3d:cb:ea:e7:d2:da:d5:d4:f7:f6:7f:84:f5:74:d5: 9c:56:8d:98:7e:c7:40:19:23:29:d6:b1:7c:53:d8:f8:5f:e1: f3:61:f8:86:90:c8:8e:f8:d1:0f:a4:13:33:b6:da:53:d2:a8: 58:37:c4:34:e6:1e:d0:21:1d:54:11:e5:29:4e:e3:67:ce:4e: b8:4c:d0:df:e3:4e:59:63:31:e6:ce:77:54:ff:2a:8a:d6:be: b0:59:02:03:ae:76:18:56:fa:46:2f:b8:67:e4:a2:2d:49:cc: 0f:c7:3b:08:df:d2:d8:8b:a8:f1:a2:35:e9:c2:36:bb:d2:d3: f3:ea:83:ba:9b:ed:97:ac:ab:87:41:d8:01:91:c8:0c:cd:75: ed:bc:b4:64:d8:07:a7:24:6f:db:c7:5d:d5:b0:8f:84:4d:01: 78:f2:ce:61:aa:93:3d:af:e3:11:03:0c:30:d6:94:98:4d:81: a0:5c:97:51:36:f1:34:f2:78:f4:cb:0b:23:7d:23:95:f7:64: 7c:98:e8:48 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTkxMTAvBgNVBAUTKEVCQzNEN0ZDRkIxMzRGNTM4RkMxOUY5OEFEODk4QzBG M0YwNzRGMjAwHhcNMjYwOTIyMDYzODQ3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIyMjI3Ny0zYWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArasg1L2h712Dy7bmluFeVGjE9UzV8PJ3n+4c583Vlpb3Zq/1trtM+HsbNK6Y meurHEKQNKG0Wq+UGc3RzgboiPYloULK5dnG0UOy4qvZULmAIRQ70cnr8Q7wm1N+ j8WmJB+QfMO8WTPddLmBGCeaGe8AEXTJ2kReQ41BbslOcPtfYPjw3t3oSX5FX0fH 8KXB0F80CalFVLcHViRGAVDFOKcdAXmHa3OnLW1ravu4mMxe0SxvztLmyhdmQZ4a 9rGwXiIgS4JzvJ3EqgiBZvr5BIfG5V5x/0nrIS97dMJ7SOSKQkl8uCOvavaZYG8t +dq+BYKh7/263c4GH3lwb6RBEQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFGPPHRP5 LkPSogJcD9Qeafyi/KPkMB8GA1UdIwQYMBaAFOvD1/z7E09Tj8GfmK2JjA8/B08g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBOS8yNjE4ODQwRUIx NDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQxT1B3Wi1ZclltTUR6OEhU eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY4UFhfUHNUVDFPUHdaLVlyWW1NRHo4SFR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI1QTkvMjYxODg0MEVCMTQzMTFFRDg3RDA3Njc4QzRGOUFFMDIvNDM2RjQxMjZC NjUwMTFGMTk0OEE3Mzk3NkMxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQCZ+sEMAwDBASWgdADBACWgdIwDQYJKoZIhvcNAQELBQADggEBAA+k UI4PMo/PUTjFcDTMgRddLm/7NkAjN3vx1uKakAEQ7NZpvgH8Py5tKFGRDv6dQXkQ TCAfuUZ8cD3L6ufS2tXU9/Z/hPV01ZxWjZh+x0AZIynWsXxT2Phf4fNh+IaQyI74 0Q+kEzO22lPSqFg3xDTmHtAhHVQR5SlO42fOTrhM0N/jTlljMebOd1T/KorWvrBZ AgOudhhW+kYvuGfkoi1JzA/HOwjf0tiLqPGiNenCNrvS0/Pqg7qb7Zesq4dB2AGR yAzNde28tGTYB6ckb9vHXdWwj4RNAXjyzmGqkz2v4xEDDDDWlJhNgaBcl1E28TTy ePTLCyN9I5X3ZHyY6Eg= -----END CERTIFICATE-----Generated at Thu Sep 24 07:13:07 2026 by rpki-client