$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/32A3B5E229E811F18CA8F3909F833773.roa File: 32A3B5E229E811F18CA8F3909F833773.roa (raw, json) Hash identifier: bm+D908YeL/P1T00rFim9gtV6dNznmF0Z3qK05Yc0lM= Subject key identifier: A4:03:CA:FA:FD:5A:CF:A4:5D:F3:E0:A6:A0:57:85:B0:52:5F:CD:96 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 0161 Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/32A3B5E229E811F18CA8F3909F833773.roa Signing time: Tue 28 Jul 2026 19:41:04 +0000 ROA not before: Tue 28 Jul 2026 19:41:04 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 6621 IP address blocks: 205.177.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Jul 28 19:41:04 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a6905d0-362d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ca:ab:59:d9:b6:e5:56:7b:d9:52:be:eb:87: 2a:5c:1a:d2:7c:1c:c3:ce:f8:28:d9:bc:8e:82:22: 46:eb:89:fa:70:8d:2d:b1:b8:ed:f7:2e:20:00:a6: fd:9e:28:63:49:ed:79:92:7e:58:85:b1:1e:5b:b6: 70:f2:67:af:f2:05:b1:71:a1:a9:57:62:28:f5:19: 18:82:87:1b:30:6c:4c:3a:48:98:0d:6c:36:f9:b2: 98:6b:c2:9c:31:76:01:d1:74:de:4d:14:77:92:8f: ef:5c:ef:2c:c3:bd:d9:5e:52:d0:98:ff:05:05:e2: e5:55:87:cd:76:a7:59:45:b7:f3:2f:8b:68:f0:7e: 3d:0a:c1:b6:d1:e8:72:5e:af:37:da:fe:89:0d:b5: d7:89:46:db:ed:91:73:05:33:d7:ed:11:a6:39:cb: c5:e9:d2:c1:65:a6:80:89:8a:f0:e9:24:3f:ea:4c: 62:2b:6c:e2:3e:4c:16:16:a2:7c:2e:74:d6:86:d5: bd:eb:c6:5d:35:b7:84:b2:a8:8b:f5:de:3e:93:8f: b4:6c:ee:25:e1:23:56:cc:6a:6e:6c:15:01:b1:38: 91:4b:3c:c7:e1:12:a3:aa:e2:d4:96:5a:18:5d:42: 0a:bf:ed:0a:d1:32:c4:b7:74:93:42:f3:26:e3:f8: 08:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:03:CA:FA:FD:5A:CF:A4:5D:F3:E0:A6:A0:57:85:B0:52:5F:CD:96 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/32A3B5E229E811F18CA8F3909F833773.roa sbgp-ipAddrBlock: critical IPv4: 205.177.62.0/24 Signature Algorithm: sha256WithRSAEncryption 47:31:b0:62:88:90:c4:3a:81:81:de:63:f1:85:17:cd:5f:5e: 06:44:60:b6:01:fd:a5:9c:53:c1:73:07:1a:d1:1c:7e:02:a2: d4:df:6f:e6:cc:8e:c9:fe:27:7e:b9:26:1c:2a:16:1f:15:9e: 90:c7:00:03:45:2e:5b:f6:9a:8b:3c:29:09:96:08:bf:3a:49: d0:f5:5f:49:46:43:31:af:e6:86:48:3c:08:a1:4f:d0:6e:f7: b3:3f:53:cc:01:1d:a6:65:0f:5a:44:8a:b9:76:61:42:1f:83: 93:d1:e2:0d:76:ab:ff:6b:8d:28:a7:02:ee:62:64:67:12:0f: f7:01:5a:f6:d4:47:04:eb:82:d7:05:0e:24:79:8f:df:91:45: 93:93:97:7a:db:f3:31:b8:a7:80:83:1e:a5:9b:6a:e8:bc:8b: 3d:c6:57:7f:1c:64:13:66:13:81:9e:ad:02:9f:7f:4a:c5:31: 9c:3f:dc:b0:51:a6:3d:0b:ec:fb:1b:b8:27:77:ed:ae:85:32: 88:89:80:0e:f3:ed:a1:1f:29:93:25:a6:a8:64:79:b9:04:1b: b6:e2:42:b1:05:e5:91:0a:d6:43:70:b5:df:4c:af:b1:3c:6d: ae:0b:d1:c2:bb:12:9c:c0:f9:90:43:c8:36:77:54:dd:50:4d: 96:6f:3d:32 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5 MjkxRTY4M0EwHhcNMjYwNzI4MTk0MTA0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDVkMC0zNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58qrWdm25VZ72VK+64cqXBrSfBzDzvgo2byOgiJG64n6cI0tsbjt9y4gAKb9 nihjSe15kn5YhbEeW7Zw8mev8gWxcaGpV2Io9RkYgocbMGxMOkiYDWw2+bKYa8Kc MXYB0XTeTRR3ko/vXO8sw73ZXlLQmP8FBeLlVYfNdqdZRbfzL4to8H49CsG20ehy Xq832v6JDbXXiUbb7ZFzBTPX7RGmOcvF6dLBZaaAiYrw6SQ/6kxiK2ziPkwWFqJ8 LnTWhtW968ZdNbeEsqiL9d4+k4+0bO4l4SNWzGpubBUBsTiRSzzH4RKjquLUlloY XUIKv+0K0TLEt3STQvMm4/gIVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKQDyvr9 Ws+kXfPgpqBXhbBSX82WMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5 NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvMzJBM0I1RTIy OUU4MTFGMThDQThGMzkwOUY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAzbE+MA0GCSqGSIb3DQEBCwUAA4IBAQBHMbBiiJDEOoGB3mPxhRfN X14GRGC2Af2lnFPBcwca0Rx+AqLU32/mzI7J/id+uSYcKhYfFZ6QxwADRS5b9pqL PCkJlgi/OknQ9V9JRkMxr+aGSDwIoU/QbvezP1PMAR2mZQ9aRIq5dmFCH4OT0eIN dqv/a40opwLuYmRnEg/3AVr21EcE64LXBQ4keY/fkUWTk5d62/MxuKeAgx6lm2ro vIs9xld/HGQTZhOBnq0Cn39KxTGcP9ywUaY9C+z7G7gnd+2uhTKIiYAO8+2hHymT JaaoZHm5BBu24kKxBeWRCtZDcLXfTK+xPG2uC9HCuxKcwPmQQ8g2d1TdUE2Wbz0y -----END CERTIFICATE-----Generated at Wed Jul 29 03:58:24 2026 by rpki-client