$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/036D9582D09611F0AF11A347C4F9AE02.roa File: 036D9582D09611F0AF11A347C4F9AE02.roa (raw, json) Hash identifier: U/Cth24XW1eH8PSpCPgWjeZm4V+I2IuNPWViPcU9EHI= Subject key identifier: 09:7B:B8:38:8D:D8:A5:1A:DE:80:25:7B:93:49:17:AB:AE:28:08:51 Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 08E7 Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/036D9582D09611F0AF11A347C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:46:39 +0000 ROA not before: Wed 03 Dec 2025 22:18:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 14593 IP address blocks: 14.1.64.0/19 maxlen: 24 103.152.126.0/23 maxlen: 24 103.235.92.0/22 maxlen: 24 116.91.208.0/20 maxlen: 24 150.228.128.0/17 maxlen: 24 2406:2d40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2279 (0x8e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: Dec 3 22:18:37 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a6134f-2fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:4c:9d:59:18:db:d2:05:55:11:84:76:85: 48:cf:a2:e0:2d:aa:c4:de:f6:95:e6:8f:60:da:38: 55:bc:a7:9f:0e:ac:bf:71:41:d5:42:e9:b9:86:61: 8c:66:99:19:9c:d8:63:73:ca:3f:2e:f8:ab:08:25: 0b:1f:4a:13:69:ad:65:98:7a:56:d8:a4:d6:0c:71: 29:81:5b:44:15:8b:e7:49:f1:77:ef:8d:c8:7e:32: a6:cd:4f:db:65:40:d7:e8:80:18:ea:03:6f:4d:8e: ee:c9:f3:9c:74:a8:92:ab:92:7d:02:e5:66:a3:38: dd:bb:36:4c:92:77:fb:86:41:8b:57:43:28:d4:01: ee:65:11:cf:b7:ee:77:cb:20:4b:a5:e9:8f:01:88: 1c:10:8d:bb:99:8c:65:90:37:53:3a:c6:b4:c4:f1: 9e:7b:66:1e:1d:46:1f:be:2c:42:82:1e:05:ce:a4: a8:c5:28:41:df:33:f8:29:3f:b4:3b:7f:ae:e2:ba: 61:7d:f2:f5:c4:e2:8b:47:f0:1e:68:9b:07:19:51: 2b:33:56:0e:04:67:62:7a:68:04:79:3c:99:44:80: 50:ae:76:d7:ac:a9:05:50:94:ea:df:88:93:7c:e4: 93:0a:06:3f:c9:00:4c:0c:0b:05:b3:ba:05:4a:c3: c4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7B:B8:38:8D:D8:A5:1A:DE:80:25:7B:93:49:17:AB:AE:28:08:51 X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/036D9582D09611F0AF11A347C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.1.64.0/19 103.152.126.0/23 103.235.92.0/22 116.91.208.0/20 150.228.128.0/17 IPv6: 2406:2d40::/32 Signature Algorithm: sha256WithRSAEncryption 2b:5e:0e:7e:61:60:25:2a:2a:00:79:d9:27:15:2e:ec:cb:a9: 18:e4:22:be:99:84:80:97:f6:b1:ea:55:43:36:d3:a1:17:f7: ed:2a:9c:6e:5f:2b:ed:a7:bc:00:c7:82:72:2c:22:a3:fc:c2: 81:6b:1b:eb:f8:ac:d5:c2:12:5d:73:a7:5c:16:72:d0:7c:af: a4:66:eb:87:70:f4:ed:91:e2:66:b2:35:ed:bc:d7:9f:a3:1c: 31:4c:89:2a:ff:69:a2:aa:40:65:6a:0c:78:26:4e:55:73:2d: 20:3f:b6:35:8f:27:7e:33:4c:bf:d9:43:27:fa:10:88:e8:93: 7b:e0:a0:ce:93:51:51:5e:a4:e9:3c:a2:23:44:4d:1d:2a:a9: ab:28:18:20:4c:9b:32:d3:65:9f:a9:46:98:62:32:d3:29:2a: 98:b1:49:6a:9d:0f:62:a5:00:01:f2:53:d4:1c:d3:39:8f:47: e9:fa:2a:16:eb:4a:c9:c3:67:92:72:75:16:96:41:a5:b6:c0: 6f:ba:cf:35:fc:6a:c8:c9:29:e8:8c:17:5d:f5:37:8d:79:19: 8d:fd:81:11:aa:fa:f5:29:a7:b0:a1:e3:ba:cb:c0:ce:5b:2b: 86:25:b9:eb:7c:4b:db:4d:ab:3d:67:80:24:e6:46:8a:86:18: 57:5b:2b:97 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICCOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjUxMjAzMjIxODM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MTM0Zi0yZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPlMnVkY29IFVRGEdoVIz6LgLarE3vaV5o9g2jhVvKefDqy/cUHVQum5hmGM ZpkZnNhjc8o/LvirCCULH0oTaa1lmHpW2KTWDHEpgVtEFYvnSfF3743IfjKmzU/b ZUDX6IAY6gNvTY7uyfOcdKiSq5J9AuVmozjduzZMknf7hkGLV0Mo1AHuZRHPt+53 yyBLpemPAYgcEI27mYxlkDdTOsa0xPGee2YeHUYfvixCgh4FzqSoxShB3zP4KT+0 O3+u4rphffL1xOKLR/AeaJsHGVErM1YOBGdiemgEeTyZRIBQrnbXrKkFUJTq34iT fOSTCgY/yQBMDAsFs7oFSsPEwwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFAl7uDiN 2KUa3oAle5NJF6uuKAhRMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU4REYvNTMxOTEwNDZEQzI0MTFFQUJEMDU3RjE2QzRGOUFFMDIvMDM2RDk1ODJE MDk2MTFGMEFGMTFBMzQ3QzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQFDgFAAwQBZ5h+AwQCZ+tcAwQEdFvQAwQHluSAMA0EAgACMAcDBQAk Bi1AMA0GCSqGSIb3DQEBCwUAA4IBAQArXg5+YWAlKioAedknFS7sy6kY5CK+mYSA l/ax6lVDNtOhF/ftKpxuXyvtp7wAx4JyLCKj/MKBaxvr+KzVwhJdc6dcFnLQfK+k ZuuHcPTtkeJmsjXtvNefoxwxTIkq/2miqkBlagx4Jk5Vcy0gP7Y1jyd+M0y/2UMn +hCI6JN74KDOk1FRXqTpPKIjRE0dKqmrKBggTJsy02WfqUaYYjLTKSqYsUlqnQ9i pQAB8lPUHNM5j0fp+ioW60rJw2eScnUWlkGltsBvus81/GrIySnojBdd9TeNeRmN /YERqvr1KaewoeO6y8DOWyuGJbnrfEvbTas9Z4Ak5kaKhhhXWyuX -----END CERTIFICATE-----Generated at Wed Mar 25 17:09:36 2026 by rpki-client