$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/32A7EBFE071E11F1A62A9B3F293D8C67.roa File: 32A7EBFE071E11F1A62A9B3F293D8C67.roa (raw, json) Hash identifier: ZFHZLOMarevC8PrPVwz/Uje1jTxsVlmVaNUXCB1xam0= Subject key identifier: 44:6E:18:68:7F:E8:77:43:EC:D8:54:08:E8:99:4D:66:07:F2:F6:5E Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 3ABA Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/32A7EBFE071E11F1A62A9B3F293D8C67.roa Signing time: Sun 01 Mar 2026 19:25:40 +0000 ROA not before: Wed 11 Feb 2026 07:49:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149419 IP address blocks: 111.88.170.0/24 maxlen: 24 111.88.171.0/24 maxlen: 24 115.186.117.0/24 maxlen: 24 115.186.118.0/24 maxlen: 24 115.186.119.0/24 maxlen: 24 115.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15034 (0x3aba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Feb 11 07:49:30 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a492b3-9c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:14:34:71:22:85:5d:6b:70:36:73:80:b7:67: 20:fd:e4:02:72:87:b8:e1:82:cf:6d:52:6a:8f:ef: d5:9e:57:53:38:69:05:95:60:5d:ce:c1:b3:9a:26: c1:ec:1a:d2:fe:1a:13:64:93:3b:ce:27:29:17:e5: 7c:a4:f3:e2:06:5c:49:37:70:3f:4c:7a:16:9c:11: 13:8a:da:a8:19:ce:26:18:c9:9b:68:f9:61:18:26: dd:bb:ba:9c:8f:d6:ae:b9:fd:c8:b0:10:49:f4:5f: 60:a7:d3:92:c8:f8:1b:10:9a:67:95:1e:6e:e7:e8: d7:10:7b:99:02:6f:c5:fb:5e:d2:f3:fa:fe:f3:0d: db:47:7e:56:e7:88:dd:cb:b0:f6:85:df:ac:87:2a: be:89:bb:73:9e:58:ea:db:ca:23:b0:16:32:88:72: b8:74:39:e0:16:93:cc:59:8e:18:bf:c4:a9:c0:e6: e4:80:36:24:60:d2:fd:77:18:fd:ca:5b:27:39:ab: 27:27:28:ba:9a:67:d0:01:7b:0f:74:9f:34:45:f1: 70:7d:90:4a:69:40:39:8a:ea:38:de:06:d2:e0:9c: 78:77:b3:2f:5d:eb:dc:b9:85:1e:ef:7a:e8:fb:34: 23:52:48:86:e9:a0:03:7d:8a:fa:24:89:8c:3f:9d: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6E:18:68:7F:E8:77:43:EC:D8:54:08:E8:99:4D:66:07:F2:F6:5E X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/32A7EBFE071E11F1A62A9B3F293D8C67.roa sbgp-ipAddrBlock: critical IPv4: 111.88.170.0/23 115.186.117.0-115.186.120.255 Signature Algorithm: sha256WithRSAEncryption a8:75:aa:6c:67:8f:2d:88:13:b9:33:97:94:97:24:57:55:b6: bb:36:ca:85:5a:5f:9e:48:b1:b3:2d:ea:f0:d1:65:2b:bf:d0: 8a:0a:63:48:65:8a:23:55:37:1c:d8:be:a1:d7:c7:d0:0e:24: c4:d2:65:64:cc:b9:18:9f:d0:7e:f1:fb:9c:58:5c:9d:1b:b9: 17:95:ae:70:34:8d:b9:b0:f5:60:87:80:2a:5b:48:44:3d:92: 95:77:60:11:2c:52:a9:ac:a0:41:21:fc:a5:bc:47:94:d2:ac: e9:c2:90:61:1f:f0:eb:ed:b1:e6:94:fd:cf:f9:cc:69:af:8f: 71:b0:da:53:e6:a6:6f:9d:ed:1e:59:ce:5e:4d:15:5b:81:ea: 8c:a9:f3:62:3b:24:b6:5a:5c:a5:31:12:43:75:8a:6e:3f:50: 79:eb:95:a9:1d:8e:8c:30:61:e2:d8:dd:35:93:32:6d:13:bf: be:69:1f:91:75:3b:3e:fd:38:f0:df:6d:d6:11:b3:a9:8e:6d: 4c:30:ea:41:d6:4f:83:d9:7c:41:31:fa:74:4d:5e:d4:16:0d: f6:04:ed:af:00:6b:7a:60:24:5b:85:f2:cd:e8:b5:73:ae:74: ae:79:96:f8:6c:f2:b6:c0:55:b2:85:70:53:b2:87:22:b9:8e: f3:26:9d:a7 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICOrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjYwMjExMDc0OTMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTJiMy05YzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xQ0cSKFXWtwNnOAt2cg/eQCcoe44YLPbVJqj+/VnldTOGkFlWBdzsGzmibB 7BrS/hoTZJM7zicpF+V8pPPiBlxJN3A/THoWnBETitqoGc4mGMmbaPlhGCbdu7qc j9auuf3IsBBJ9F9gp9OSyPgbEJpnlR5u5+jXEHuZAm/F+17S8/r+8w3bR35W54jd y7D2hd+shyq+ibtznljq28ojsBYyiHK4dDngFpPMWY4Yv8SpwObkgDYkYNL9dxj9 ylsnOasnJyi6mmfQAXsPdJ80RfFwfZBKaUA5iuo43gbS4Jx4d7MvXevcuYUe73ro +zQjUkiG6aADfYr6JImMP50GLQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFERuGGh/ 6HdD7NhUCOiZTWYH8vZeMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvMzJBN0VCRkUw NzFFMTFGMUE2MkE5QjNGMjkzRDhDNjcucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQBb1iqMAwDBABzunUDBABzungwDQYJKoZIhvcNAQELBQADggEBAKh1 qmxnjy2IE7kzl5SXJFdVtrs2yoVaX55IsbMt6vDRZSu/0IoKY0hliiNVNxzYvqHX x9AOJMTSZWTMuRif0H7x+5xYXJ0buReVrnA0jbmw9WCHgCpbSEQ9kpV3YBEsUqms oEEh/KW8R5TSrOnCkGEf8OvtseaU/c/5zGmvj3Gw2lPmpm+d7R5Zzl5NFVuB6oyp 82I7JLZaXKUxEkN1im4/UHnrlakdjowwYeLY3TWTMm0Tv75pH5F1Oz79OPDfbdYR s6mObUww6kHWT4PZfEEx+nRNXtQWDfYE7a8Aa3pgJFuF8s3otXOudK55lvhs8rbA VbKFcFOyhyK5jvMmnac= -----END CERTIFICATE-----Generated at Mon Mar 2 13:13:31 2026 by rpki-client