$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/B32DFBA0613E11F0807A9A39C4F9AE02.roa File: B32DFBA0613E11F0807A9A39C4F9AE02.roa (raw, json) Hash identifier: nT8Gn6kmDh+P+vCU8iV+2GM1ote3Wc58DjS3MS+fe0c= Subject key identifier: 99:56:A9:3E:2D:AA:DA:FE:6D:18:2B:E4:5D:2C:C1:E8:66:F7:AE:4A Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Certificate serial: 79 Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/B32DFBA0613E11F0807A9A39C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:12:33 +0000 ROA not before: Tue 15 Jul 2025 05:43:57 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 140687 IP address blocks: 165.101.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Validity Not Before: Jul 15 05:43:57 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a3f4f1-2fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:15:f3:0f:26:0d:ae:35:be:3a:7f:65:31:86: e2:d7:51:e7:67:4e:25:ee:14:76:cd:8e:83:fe:7d: 4d:6c:51:17:e0:fd:12:9f:f0:0a:fa:0b:41:8a:89: 5e:c7:33:d6:dd:b4:94:59:a6:27:ae:fe:6e:e5:a3: 87:51:b4:f1:ca:9c:97:dd:50:53:e0:a1:16:b2:db: fc:ec:5a:01:fe:22:57:99:98:12:9c:ef:40:44:93: 67:5b:d7:a7:bf:da:7a:5e:7e:07:a6:30:6c:ab:b1: 0d:63:fb:f7:69:fd:dd:69:65:d9:47:09:ca:12:b7: 0a:e6:90:8f:d9:55:7f:3e:6c:df:27:e4:ae:fd:43: 37:49:75:7c:5f:06:f0:f2:a5:6c:74:ae:07:25:55: 98:29:95:ad:19:5e:6b:93:da:e0:46:9a:5c:3e:4b: 4b:f0:71:a8:b9:a5:40:51:c7:5a:a8:98:02:40:fa: 99:0c:79:bd:61:48:1c:a1:73:42:61:33:c1:86:ba: f2:3f:74:ef:98:42:d0:43:98:6c:e9:76:04:c6:59: f6:3a:3f:2a:25:0a:70:3d:b0:eb:65:32:48:ba:67: 67:9c:95:d6:18:a7:ee:e1:30:f9:7b:83:0d:1c:2c: 36:50:4a:fd:31:14:09:fb:77:35:ef:2f:c0:40:f3: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:A9:3E:2D:AA:DA:FE:6D:18:2B:E4:5D:2C:C1:E8:66:F7:AE:4A X509v3 Authority Key Identifier: keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/B32DFBA0613E11F0807A9A39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.107.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:a4:72:b4:34:e1:3b:4b:d5:f7:c9:fe:2f:ed:c6:26:bf:26: 77:81:0c:fd:55:e6:b2:02:56:73:d7:0a:e5:79:7f:f9:e4:e4: 8b:76:1c:6a:c2:f3:c1:7e:47:0e:8f:36:86:60:85:ec:fe:f4: 27:39:95:db:f2:35:ff:fb:ef:57:7d:42:bf:3c:b5:bd:b5:c8: 56:c3:0b:b8:93:78:b4:32:b1:f8:1a:27:7d:2a:0f:5c:be:9b: c1:4c:84:f0:c3:96:d0:d0:51:b0:b3:bd:91:0c:2b:fa:a5:96: 8a:46:c4:37:d6:2b:e8:97:ba:83:ae:bc:c0:1a:3e:bc:8b:1c: ac:69:58:6b:c4:e8:75:17:3c:b3:85:a4:b7:a2:ba:56:ab:13: db:2f:49:54:e2:3c:39:34:8a:a5:b3:b1:4a:74:8b:e2:9e:e5: b5:7e:31:32:58:5f:6d:0d:fc:40:87:cb:e8:1d:ce:ff:f6:ec: dd:b5:17:c8:fa:ff:c4:41:f8:0c:57:eb:e2:68:fa:09:d6:d2: 1a:5b:40:a9:b9:44:ce:16:df:a3:cb:b9:34:e1:c5:0c:83:75: 14:2f:2a:00:7f:c8:92:bc:66:97:45:d7:a7:95:a1:11:9c:72: fb:be:1c:c4:d0:69:48:56:17:88:82:a5:8f:9a:97:ae:c2:58: b4:c7:2f:86 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTMwOTExMC8GA1UEBRMoN0Q4RkEwQkVGNkFFRjcxQkRGODgzODU4RjczNjE5RDNC NTlFMjc3NzAeFw0yNTA3MTUwNTQzNTdaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNmNGYxLTJmZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJFfMPJg2uNb46f2UxhuLXUednTiXuFHbNjoP+fU1sURfg/RKf8Ar6C0GKiV7H M9bdtJRZpieu/m7lo4dRtPHKnJfdUFPgoRay2/zsWgH+IleZmBKc70BEk2db16e/ 2npefgemMGyrsQ1j+/dp/d1pZdlHCcoStwrmkI/ZVX8+bN8n5K79QzdJdXxfBvDy pWx0rgclVZgpla0ZXmuT2uBGmlw+S0vwcai5pUBRx1qomAJA+pkMeb1hSByhc0Jh M8GGuvI/dO+YQtBDmGzpdgTGWfY6PyolCnA9sOtlMki6Z2ecldYYp+7hMPl7gw0c LDZQSv0xFAn7dzXvL8BA88PlAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUmVapPi2q 2v5tGCvkXSzB6Gb3rkowHwYDVR0jBBgwFoAUfY+gvvau9xvfiDhY9zYZ07WeJ3cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5Lzk4OTFFOTJFNjEz RDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUoz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZlktZ3Z2YXU5eHZmaURoWTl6WVowN1dlSjNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTMwOS85ODkxRTkyRTYxM0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9CMzJERkJBMDYx M0UxMUYwODA3QTlBMzlDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAClZWswDQYJKoZIhvcNAQELBQADggEBAD+kcrQ04TtL1ffJ/i/txia/ JneBDP1V5rICVnPXCuV5f/nk5It2HGrC88F+Rw6PNoZghez+9Cc5ldvyNf/771d9 Qr88tb21yFbDC7iTeLQysfgaJ30qD1y+m8FMhPDDltDQUbCzvZEMK/qllopGxDfW K+iXuoOuvMAaPryLHKxpWGvE6HUXPLOFpLeiularE9svSVTiPDk0iqWzsUp0i+Ke 5bV+MTJYX20N/ECHy+gdzv/27N21F8j6/8RB+AxX6+Jo+gnW0hpbQKm5RM4W36PL uTThxQyDdRQvKgB/yJK8ZpdF16eVoRGccvu+HMTQaUhWF4iCpY+al67CWLTHL4Y= -----END CERTIFICATE-----Generated at Mon Mar 2 07:38:39 2026 by rpki-client