$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/32BF2AD8F36E11E883FFB865C4F9AE02.roa File: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (raw, json) Hash identifier: dZG6es6tOCIPazsxJ8KTxDzO3mGqMFOCDjB+9iL/OjU= Subject key identifier: 79:7E:F1:3C:4B:72:11:09:C7:02:71:C9:61:5E:38:83:39:87:A3:07 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1AA4 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/32BF2AD8F36E11E883FFB865C4F9AE02.roa Signing time: Thu 28 May 2026 17:04:02 +0000 ROA not before: Thu 28 May 2026 17:04:02 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 132892 IP address blocks: 2400:cb00:36::/48 maxlen: 48 2400:cb00:348::/48 maxlen: 48 2400:cb00:349::/48 maxlen: 48 2400:cb00:958::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6820 (0x1aa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: May 28 17:04:02 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a187582-d6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:70:d4:ac:a6:27:be:2f:f8:0c:8c:d7:14: cb:1a:6b:03:47:8c:59:3b:b0:53:d9:82:d6:e4:f8: a5:a9:1a:9f:e0:5e:a2:1d:c3:5e:0f:ec:47:4b:97: 1c:ce:cf:fe:48:38:14:1f:ca:82:d7:c3:3e:a9:18: 80:d6:89:64:ad:b0:d2:51:0e:d0:04:bd:60:85:fa: 3a:47:94:93:c4:2e:d7:f8:8f:5a:05:27:ac:78:22: 4a:62:46:20:c4:c4:a9:58:bf:b8:1f:47:e7:04:a9: 7c:64:06:97:19:95:8a:3e:7a:eb:a4:dc:8c:e5:f3: 18:0a:34:d3:4f:83:f9:2b:f6:69:c0:22:97:29:e1: 0b:fd:9a:57:2b:31:0d:62:73:41:05:1e:44:d5:84: fd:39:65:c7:a5:ee:e7:88:61:24:e7:a6:a7:a6:6c: 1b:22:3d:2d:1d:25:fd:2a:b9:5e:23:26:c8:4a:23: e6:c8:19:7e:b9:b5:a3:c0:03:79:ca:0e:85:b1:ea: 7e:d3:de:59:a4:0b:62:ff:8d:77:44:1c:cf:e1:b7: 2c:88:49:7f:09:53:39:43:c6:19:ac:26:2c:68:e6: b3:a8:5a:76:c0:28:37:6d:ed:ac:b1:66:c7:b0:7a: c3:91:c5:9b:45:f4:89:2c:16:5b:ef:cd:6b:c5:e4: 55:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7E:F1:3C:4B:72:11:09:C7:02:71:C9:61:5E:38:83:39:87:A3:07 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/32BF2AD8F36E11E883FFB865C4F9AE02.roa sbgp-ipAddrBlock: critical IPv6: 2400:cb00:36::/48 2400:cb00:348::/47 2400:cb00:958::/48 Signature Algorithm: sha256WithRSAEncryption 1a:f3:bc:34:bf:dd:69:26:44:c2:60:f9:b2:62:bb:47:8a:51: b9:84:8a:c1:0b:e9:eb:53:5d:80:c4:81:25:67:3f:85:57:3d: 48:c6:d5:c2:3f:14:97:62:2a:e7:99:6c:0b:0b:d4:51:52:42: ab:30:b8:ff:7d:45:9f:9d:e6:10:88:75:0c:63:b6:f4:c7:d8: b4:12:b8:da:0b:bf:ce:8c:6e:06:28:c5:57:9a:45:0d:4a:b2: eb:90:ff:d2:68:46:f1:34:d6:1f:5f:fb:88:9d:67:a3:9d:87: 95:a9:f8:1d:fe:c0:91:9f:27:be:02:a3:e2:46:ef:eb:bb:bd: 74:3f:e4:15:19:ac:fa:0b:fd:e8:7e:4b:40:6b:59:46:57:08: d3:93:8b:08:eb:cf:31:e4:76:da:2e:eb:5e:69:44:d2:a9:67: df:fd:d8:04:63:1c:83:6d:4e:f7:dd:4e:d8:b1:31:ba:81:e5: cc:02:bb:79:a1:67:34:e1:52:e9:be:40:0b:5d:70:8b:8a:45: 06:87:35:a2:a4:43:d1:01:18:8c:86:1a:a9:af:2c:ea:3a:58: c7:9c:e4:be:dd:3a:dd:21:27:e2:9e:2d:4f:84:a5:47:5b:8e: 5a:c3:31:76:18:18:54:8e:76:c0:6b:9b:4b:85:c3:bb:d2:0a: da:f7:24:a7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICGqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjYwNTI4MTcwNDAyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE4NzU4Mi1kNmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukVw1KymJ74v+AyM1xTLGmsDR4xZO7BT2YLW5PilqRqf4F6iHcNeD+xHS5cc zs/+SDgUH8qC18M+qRiA1olkrbDSUQ7QBL1ghfo6R5STxC7X+I9aBSeseCJKYkYg xMSpWL+4H0fnBKl8ZAaXGZWKPnrrpNyM5fMYCjTTT4P5K/ZpwCKXKeEL/ZpXKzEN YnNBBR5E1YT9OWXHpe7niGEk56anpmwbIj0tHSX9KrleIybISiPmyBl+ubWjwAN5 yg6Fsep+095ZpAti/413RBzP4bcsiEl/CVM5Q8YZrCYsaOazqFp2wCg3be2ssWbH sHrDkcWbRfSJLBZb781rxeRVfwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHl+8TxL chEJxwJxyWFeOIM5h6MHMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJEQTQvMUVDNzAyQkNGMUE3MTFFODkwRjA2NjUwQzRGOUFFMDIvMzJCRjJBRDhG MzZFMTFFODgzRkZCODY1QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAh BAIAAjAbAwcAJADLAAA2AwcBJADLAANIAwcAJADLAAlYMA0GCSqGSIb3DQEBCwUA A4IBAQAa87w0v91pJkTCYPmyYrtHilG5hIrBC+nrU12AxIElZz+FVz1IxtXCPxSX YirnmWwLC9RRUkKrMLj/fUWfneYQiHUMY7b0x9i0ErjaC7/OjG4GKMVXmkUNSrLr kP/SaEbxNNYfX/uInWejnYeVqfgd/sCRnye+AqPiRu/ru710P+QVGaz6C/3ofktA a1lGVwjTk4sI688x5HbaLuteaUTSqWff/dgEYxyDbU733U7YsTG6geXMArt5oWc0 4VLpvkALXXCLikUGhzWipEPRARiMhhqpryzqOljHnOS+3TrdISfini1PhKVHW45a wzF2GBhUjnbAa5tLhcO70gra9ySn -----END CERTIFICATE-----Generated at Sat Jun 13 13:23:23 2026 by rpki-client