$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/32CF326ECA2E11EA80305F0DC4F9AE02.roa File: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (raw, json) Hash identifier: Tvw2f69b+5p+ID20B8iBZZ0yBfURv9eNZRD114TIL4I= Subject key identifier: 84:0F:87:D0:96:98:B5:B1:1D:0B:73:54:78:3B:8C:1B:CA:67:14:F1 Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Certificate serial: 36CE Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/32CF326ECA2E11EA80305F0DC4F9AE02.roa Signing time: Sat 22 Mar 2025 15:01:22 +0000 ROA not before: Sat 22 Mar 2025 15:01:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9541 IP address blocks: 59.103.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14030 (0x36ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Validity Not Before: Mar 22 15:01:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67ded0c2-a631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:8c:2e:84:fd:7c:0f:6a:d5:05:97:59:d3: f3:f9:08:45:ba:ac:63:1e:37:58:6c:c3:6b:cd:49: 13:bf:69:0c:b4:5c:1a:50:08:cc:64:67:55:40:c5: 4c:17:c1:70:27:07:9f:97:61:c7:44:0c:0e:e0:d7: 25:e9:95:cd:49:b5:87:ad:f6:18:8a:9d:a1:2e:1b: 34:ae:10:8b:4e:9a:6d:ea:06:17:cb:05:8e:35:80: 24:fe:3a:d1:7e:39:c1:d8:23:eb:c0:35:01:65:97: d7:5e:0c:9d:50:4c:9e:ff:06:ce:3a:27:fb:db:d4: dd:39:76:1c:c9:45:61:45:e8:24:a4:c3:45:78:9f: 90:3f:f0:55:a4:e9:52:9e:4b:52:03:61:f0:58:2d: 9a:9c:55:85:c8:42:54:82:5a:3b:71:4a:d4:48:2d: 55:6f:b9:a9:21:24:26:10:cd:59:9a:bf:3c:57:21: dd:aa:67:37:6a:4b:e3:3d:f7:c2:8e:18:1d:36:ce: a3:40:10:b0:0b:40:aa:b5:a1:be:ca:44:6a:68:8d: 8c:a1:5c:07:a0:b5:55:4a:ec:cb:56:c3:d8:a2:73: 9d:9e:e0:7f:87:dd:bd:60:a2:89:42:f6:af:aa:46: b2:ce:d7:33:d4:df:c8:d6:c5:fc:f1:db:20:b7:98: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0F:87:D0:96:98:B5:B1:1D:0B:73:54:78:3B:8C:1B:CA:67:14:F1 X509v3 Authority Key Identifier: keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/32CF326ECA2E11EA80305F0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.103.96.0/19 Signature Algorithm: sha256WithRSAEncryption 43:62:f9:29:7e:6c:9e:c6:fd:be:22:1a:93:39:cd:39:39:2a: c4:d4:78:23:7b:2e:89:0b:48:c0:9c:1d:75:33:62:06:75:2c: 5c:38:0c:c7:98:9c:7b:e3:e7:3b:31:be:92:33:89:5d:41:3d: 7a:23:16:a2:8e:89:66:98:07:a6:87:0d:4d:0e:38:44:f4:b8: be:53:4b:25:49:d0:68:14:ff:a1:66:43:34:7d:3b:91:3e:18: 78:f0:81:4f:19:65:ff:c5:f0:c4:18:48:9f:39:48:ee:e6:ab: 54:60:42:85:09:b3:db:c7:a5:74:76:d6:50:69:0d:bd:7e:ef: e5:00:f2:8e:94:0d:b7:56:a9:37:31:1d:d1:9e:e8:4c:df:eb: f2:61:b2:a7:cc:f9:97:bc:dc:0a:5e:3f:f3:c9:c2:e3:8d:c7: b9:dc:12:06:8f:5f:40:9b:f2:2a:3a:dc:b0:93:e9:14:9a:36: c5:0e:d3:a4:aa:2c:4b:d2:a8:f8:05:a1:6c:73:54:75:d8:86: 1a:ee:b5:9f:40:0e:f4:9a:f2:94:d6:c5:2d:d4:e2:52:da:d0: fc:45:b1:aa:2d:6f:b4:a3:5b:e5:42:25:a3:b6:33:08:45:c7: e9:55:98:8a:7a:b7:7b:1f:bf:aa:55:31:20:18:8d:f0:56:59: f4:59:a4:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB NzYwQUVCNTQwHhcNMjUwMzIyMTUwMTIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RlZDBjMi1hNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0qMLoT9fA9q1QWXWdPz+QhFuqxjHjdYbMNrzUkTv2kMtFwaUAjMZGdVQMVM F8FwJwefl2HHRAwO4Ncl6ZXNSbWHrfYYip2hLhs0rhCLTppt6gYXywWONYAk/jrR fjnB2CPrwDUBZZfXXgydUEye/wbOOif729TdOXYcyUVhRegkpMNFeJ+QP/BVpOlS nktSA2HwWC2anFWFyEJUglo7cUrUSC1Vb7mpISQmEM1Zmr88VyHdqmc3akvjPffC jhgdNs6jQBCwC0CqtaG+ykRqaI2MoVwHoLVVSuzLVsPYonOdnuB/h929YKKJQvav qkayztcz1N/I1sX88dsgt5jIHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIQPh9CW mLWxHQtzVHg7jBvKZxTxMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvMzJDRjMyNkVD QTJFMTFFQTgwMzA1RjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAU7Z2AwDQYJKoZIhvcNAQELBQADggEBAENi+Sl+bJ7G/b4i GpM5zTk5KsTUeCN7LokLSMCcHXUzYgZ1LFw4DMeYnHvj5zsxvpIziV1BPXojFqKO iWaYB6aHDU0OOET0uL5TSyVJ0GgU/6FmQzR9O5E+GHjwgU8ZZf/F8MQYSJ85SO7m q1RgQoUJs9vHpXR21lBpDb1+7+UA8o6UDbdWqTcxHdGe6Ezf6/JhsqfM+Ze83Ape P/PJwuONx7ncEgaPX0Cb8io63LCT6RSaNsUO06SqLEvSqPgFoWxzVHXYhhrutZ9A DvSa8pTWxS3U4lLa0PxFsaotb7SjW+VCJaO2MwhFx+lVmIp6t3sfv6pVMSAYjfBW WfRZpJ8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:50:13 2025 by rpki-client