$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/32BA4EE0913311EB96A8E810C4F9AE02.roa File: 32BA4EE0913311EB96A8E810C4F9AE02.roa (raw, json) Hash identifier: nsL98DjLizWCqx4Patg3cg4Eq9lpyc3pgv6iSE1gflA= Subject key identifier: 5D:08:B6:B6:B8:63:20:A9:52:34:0B:B5:F9:CE:9F:B7:5D:2E:FA:26 Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Certificate serial: 0735 Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/32BA4EE0913311EB96A8E810C4F9AE02.roa Signing time: Wed 02 Sep 2026 22:43:18 +0000 ROA not before: Wed 02 Sep 2026 22:43:18 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136766 IP address blocks: 103.142.220.0/24 maxlen: 24 103.142.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1845 (0x735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23D1, serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Validity Not Before: Sep 2 22:43:18 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a98a686-0945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:98:33:dc:43:6c:24:71:d7:c3:89:20:45:bd: c7:0f:b5:2b:cf:a8:1d:f1:17:0a:bb:85:6c:a1:2d: c2:b7:ac:dd:8c:dc:bb:b6:00:51:fd:e3:ee:6b:83: 21:36:cf:fc:f3:c3:35:24:8b:03:ea:25:6c:63:92: 98:68:22:04:05:e5:55:ca:ec:90:ad:3f:e5:be:9f: d9:0d:1a:af:4e:5e:99:28:9b:ef:93:70:73:3c:21: 50:87:c3:3c:b5:df:7b:4d:74:db:f5:89:b3:2b:ce: 71:0a:ac:45:2e:1c:e9:47:08:02:be:b8:75:cd:05: 97:0f:49:62:bf:88:7a:7b:50:67:4e:8d:0a:7d:e4: f0:92:90:2b:b2:93:b9:9c:ab:36:db:5c:95:68:17: 42:6b:43:d6:64:f9:8d:2e:a4:50:31:83:c2:61:4d: b8:3e:2e:ea:dc:62:9c:52:78:dc:29:f4:c6:16:1a: de:4a:be:19:2c:4b:ba:d7:24:c8:c4:b7:44:36:af: 20:6b:07:d2:de:03:3b:cb:d2:70:ec:96:d2:e1:ac: 96:b9:b7:e7:55:d8:6c:4e:a4:cd:cc:79:2f:16:cd: 06:38:fb:05:dc:80:40:84:ac:fa:1d:44:20:d8:9a: 8a:73:bc:e7:11:a2:35:b7:61:b4:8a:93:10:d1:3a: 74:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:08:B6:B6:B8:63:20:A9:52:34:0B:B5:F9:CE:9F:B7:5D:2E:FA:26 X509v3 Authority Key Identifier: keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/32BA4EE0913311EB96A8E810C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.142.220.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:40:48:fd:c5:9c:b0:ea:a6:e0:0c:78:08:8a:32:3d:14:d6: e4:d2:0c:9a:58:b4:2d:d5:9b:17:33:43:08:43:8a:2e:64:d9: fc:d9:6c:99:68:6b:51:7f:c2:07:48:ed:0a:5c:b0:24:32:61: 7d:b2:be:4b:be:7c:76:da:e1:48:3e:e6:67:15:ee:50:6f:b1: 20:33:01:a1:bb:b0:c8:e7:5b:ea:dc:1c:56:19:01:28:bc:5b: 7c:ea:14:af:6d:e4:85:5f:ef:9f:73:1e:43:04:73:df:d3:0c: 76:6b:ae:40:66:1e:2b:8f:b9:5e:91:df:1c:66:40:5c:cb:bb: 7d:bc:eb:9f:b7:cd:04:52:96:31:a2:2e:6f:e1:3b:b9:0d:e4: 56:3f:81:ba:e4:3e:cd:da:11:f7:f2:73:9a:43:47:80:38:28: eb:a7:82:74:3c:53:7f:d5:98:02:85:08:59:8f:03:2c:0a:05: 81:8e:55:f3:59:3e:8f:5f:d0:ed:8a:63:82:60:69:fd:7a:62: e4:7c:e2:87:82:b4:e0:d2:35:d3:d7:1d:25:3e:3d:98:45:ec: 3e:61:36:f0:94:4b:9f:79:cd:4b:1a:34:5f:49:56:6f:85:e5: 78:7e:6b:49:ea:d7:34:d1:83:05:d0:95:ab:7d:5e:cb:7d:c7: 79:68:4e:36 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF RDNERDA5RjMwHhcNMjYwOTAyMjI0MzE4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4YTY4Ni0wOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45gz3ENsJHHXw4kgRb3HD7Urz6gd8RcKu4VsoS3Ct6zdjNy7tgBR/ePua4Mh Ns/888M1JIsD6iVsY5KYaCIEBeVVyuyQrT/lvp/ZDRqvTl6ZKJvvk3BzPCFQh8M8 td97TXTb9YmzK85xCqxFLhzpRwgCvrh1zQWXD0liv4h6e1BnTo0KfeTwkpArspO5 nKs221yVaBdCa0PWZPmNLqRQMYPCYU24Pi7q3GKcUnjcKfTGFhreSr4ZLEu61yTI xLdENq8gawfS3gM7y9Jw7JbS4ayWubfnVdhsTqTNzHkvFs0GOPsF3IBAhKz6HUQg 2JqKc7znEaI1t2G0ipMQ0Tp06QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF0Itra4 YyCpUjQLtfnOn7ddLvomMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDIzRDEvMUYzMzhBQzQ5MENDMTFFQkIxQkUxMDJEQzRGOUFFMDIvMzJCQTRFRTA5 MTMzMTFFQjk2QThFODEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ47cMA0GCSqGSIb3DQEBCwUAA4IBAQCPQEj9xZyw6qbgDHgIijI9 FNbk0gyaWLQt1ZsXM0MIQ4ouZNn82WyZaGtRf8IHSO0KXLAkMmF9sr5Lvnx22uFI PuZnFe5Qb7EgMwGhu7DI51vq3BxWGQEovFt86hSvbeSFX++fcx5DBHPf0wx2a65A Zh4rj7lekd8cZkBcy7t9vOuft80EUpYxoi5v4Tu5DeRWP4G65D7N2hH38nOaQ0eA OCjrp4J0PFN/1ZgChQhZjwMsCgWBjlXzWT6PX9DtimOCYGn9emLkfOKHgrTg0jXT 1x0lPj2YRew+YTbwlEufec1LGjRfSVZvheV4fmtJ6tc00YMF0JWrfV7Lfcd5aE42 -----END CERTIFICATE-----Generated at Wed Sep 23 10:24:02 2026 by rpki-client