$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/36020660DD2411EF9F4FB925C4F9AE02.roa File: 36020660DD2411EF9F4FB925C4F9AE02.roa (raw, json) Hash identifier: 6zc+rZhJnF4vpcd6GmjdYSDq7wBWKRzyhnCBcHAGEEU= Subject key identifier: 38:CF:48:19:CB:F2:8E:9E:93:3C:17:B0:36:A0:22:B1:A0:28:61:2C Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0193 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/36020660DD2411EF9F4FB925C4F9AE02.roa Signing time: Wed 29 Oct 2025 03:48:08 +0000 ROA not before: Wed 29 Oct 2025 03:48:08 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 149994 IP address blocks: 103.240.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Oct 29 03:48:08 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69018e78-c028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:b0:ae:32:65:af:78:59:61:61:02:15:17: 27:22:c0:7b:a5:c2:00:a2:3d:b9:88:27:54:ef:66: 5f:4b:7b:d7:0e:a1:a7:2f:08:12:54:bf:52:e1:90: 58:b7:26:6b:4e:fb:69:83:63:f6:dd:21:52:ea:9c: 39:0f:34:f9:df:1e:a8:33:20:75:bc:98:59:6b:9a: 8b:3c:75:3e:19:c3:ce:6b:4f:4d:b5:0d:ce:b6:0c: a2:a0:ff:1b:65:20:4c:e1:f6:e2:e3:21:2c:96:e3: fc:e0:df:3b:f9:e8:cc:0f:cb:57:05:e3:b0:89:66: 6e:f2:02:07:d5:b9:bb:5c:2d:30:af:ee:6a:33:87: d6:0c:e8:50:f7:91:e1:0f:00:96:51:3a:8f:dd:8a: 68:7a:81:55:1d:93:20:e9:f5:a4:33:bf:d6:f5:5f: 43:8c:df:04:a1:80:f6:02:b6:3a:35:52:bc:cd:3b: 24:d5:5e:53:c2:ac:8e:eb:e8:62:d5:99:03:76:43: cd:84:48:58:b1:a6:f8:4b:ed:7c:7b:18:93:cb:8f: bf:a2:9e:e5:88:eb:01:90:61:c2:8a:24:8a:72:92: 96:ee:73:95:2c:cf:97:54:19:19:8a:06:29:15:4e: 6e:fb:61:db:b5:bf:d2:f5:d0:63:fa:db:21:10:b8: 6f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CF:48:19:CB:F2:8E:9E:93:3C:17:B0:36:A0:22:B1:A0:28:61:2C X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/36020660DD2411EF9F4FB925C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.240.5.0/24 Signature Algorithm: sha256WithRSAEncryption 31:3e:f1:e2:5b:f4:5b:70:8c:da:b9:00:bf:20:74:23:2f:b8: d5:5c:7d:12:11:98:0e:08:b5:21:52:f4:d1:c2:74:22:01:11: 9d:f3:95:0c:cb:1c:f0:32:26:74:1e:5b:2b:61:6c:af:96:20: 4c:8c:dc:09:4d:b5:79:16:cb:c9:17:72:93:19:00:80:96:93: 22:ad:cf:f4:70:01:9e:72:ef:f6:c6:21:74:e6:cf:07:a1:e8: 2c:61:4e:c9:f8:5f:7a:e7:00:01:23:87:08:a2:97:10:b7:f9: 03:4a:89:01:cf:18:80:56:34:bb:13:ee:ba:88:94:ca:08:f2: 5c:dd:09:35:f3:06:ee:6e:c5:ac:dd:b0:cf:d1:eb:67:49:1a: b2:9a:72:05:0c:93:b8:c1:43:c2:ef:45:03:90:f8:f8:18:af: dc:10:23:8f:1d:18:4e:ab:22:7e:74:98:aa:c2:88:d0:4b:84: 59:79:c7:cd:4d:c3:fc:38:a9:3d:c9:1c:f3:67:38:c6:80:b6: 2e:e3:29:71:d4:26:a2:bf:e9:b0:fc:31:f3:d2:c1:b1:07:94: 15:64:75:4b:1b:ba:e6:88:a8:3b:17:b0:cb:39:15:98:04:00: d9:c6:9b:ae:19:b2:51:20:ce:7f:94:f0:e2:17:91:55:32:57: 9d:77:4b:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUxMDI5MDM0ODA4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAxOGU3OC1jMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2+wrjJlr3hZYWECFRcnIsB7pcIAoj25iCdU72ZfS3vXDqGnLwgSVL9S4ZBY tyZrTvtpg2P23SFS6pw5DzT53x6oMyB1vJhZa5qLPHU+GcPOa09NtQ3OtgyioP8b ZSBM4fbi4yEsluP84N87+ejMD8tXBeOwiWZu8gIH1bm7XC0wr+5qM4fWDOhQ95Hh DwCWUTqP3YpoeoFVHZMg6fWkM7/W9V9DjN8EoYD2ArY6NVK8zTsk1V5TwqyO6+hi 1ZkDdkPNhEhYsab4S+18exiTy4+/op7liOsBkGHCiiSKcpKW7nOVLM+XVBkZigYp FU5u+2Hbtb/S9dBj+tshELhvewIDAQABo4IClTCCApEwHQYDVR0OBBYEFDjPSBnL 8o6ekzwXsDagIrGgKGEsMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM4RkQvQTVBNkYzN0E2MUY4MTFFRTlGNzk0MDFBQzRGOUFFMDIvMzYwMjA2NjBE RDI0MTFFRjlGNEZCOTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn8AUwDQYJKoZIhvcNAQELBQADggEBADE+8eJb9FtwjNq5 AL8gdCMvuNVcfRIRmA4ItSFS9NHCdCIBEZ3zlQzLHPAyJnQeWythbK+WIEyM3AlN tXkWy8kXcpMZAICWkyKtz/RwAZ5y7/bGIXTmzweh6CxhTsn4X3rnAAEjhwiilxC3 +QNKiQHPGIBWNLsT7rqIlMoI8lzdCTXzBu5uxazdsM/R62dJGrKacgUMk7jBQ8Lv RQOQ+PgYr9wQI48dGE6rIn50mKrCiNBLhFl5x81Nw/w4qT3JHPNnOMaAti7jKXHU JqK/6bD8MfPSwbEHlBVkdUsbuuaIqDsXsMs5FZgEANnGm64ZslEgzn+U8OIXkVUy V513S4M= -----END CERTIFICATE-----Generated at Mon Nov 3 06:23:44 2025 by rpki-client