$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/32E40EFC6D6D11ED879E8878C4F9AE02.roa File: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (raw, json) Hash identifier: 2zqEKjQ7EA0DcaZNO514ATSUcx26/DDUWGZVRPsnCK8= Subject key identifier: 88:9B:02:9E:09:5D:A2:78:DF:EA:02:F6:22:CD:F0:76:EF:25:57:06 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 0527 Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/32E40EFC6D6D11ED879E8878C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:57:56 +0000 ROA not before: Sat 31 May 2025 00:26:41 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38623 IP address blocks: 36.37.128.0/17 maxlen: 24 45.64.124.0/22 maxlen: 23 45.64.125.0/24 maxlen: 24 45.64.126.0/23 maxlen: 24 45.115.180.0/22 maxlen: 24 45.119.132.0/22 maxlen: 24 103.68.44.0/22 maxlen: 24 103.253.180.0/22 maxlen: 24 111.118.128.0/19 maxlen: 24 117.120.24.0/21 maxlen: 24 119.13.56.0/21 maxlen: 24 119.13.152.0/21 maxlen: 24 175.100.0.0/17 maxlen: 24 202.150.0.0/22 maxlen: 24 220.158.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: May 31 00:26:41 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a40da4-9cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:10:d5:8b:39:c5:30:20:f4:84:7b:7d:0f: bf:51:22:1d:81:a4:06:95:b7:27:e7:56:94:f5:35: 8c:89:d6:01:b9:76:66:69:1a:6c:9e:02:c3:66:91: 1e:af:8c:59:09:02:38:4e:3c:7e:3d:63:61:85:08: 37:e5:10:d2:70:2f:61:52:2b:07:01:6b:60:0e:48: db:a0:c7:dd:26:0d:60:56:22:c6:4a:36:c6:05:14: 3a:a2:4a:bb:aa:d2:cf:bf:2b:0d:c2:a7:1c:81:4e: 0c:bf:3b:5e:d0:72:38:a5:04:39:e5:38:b0:8a:68: f3:33:47:ca:29:62:fc:0e:c8:d1:28:92:db:2e:76: 45:db:e6:de:c1:41:6d:07:29:7c:92:3f:11:b3:f1: bf:9b:ac:0b:b4:3c:1b:d7:bd:82:e8:49:22:f0:de: 55:6f:af:5c:dc:80:a1:03:26:4e:e7:2d:03:a6:a5: 97:1c:a4:df:da:76:3c:58:62:96:3e:96:4b:a0:83: 6e:64:4a:4c:2a:2a:47:ed:e6:9d:7e:38:8e:33:cc: 48:90:6c:56:f9:5c:b9:81:58:79:40:0d:5b:4f:ab: 9e:bd:18:50:9e:0e:8b:fa:4b:ef:01:cd:57:c6:7a: 78:57:d1:13:40:1d:80:d3:0f:e9:a1:77:21:13:64: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9B:02:9E:09:5D:A2:78:DF:EA:02:F6:22:CD:F0:76:EF:25:57:06 X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/32E40EFC6D6D11ED879E8878C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.37.128.0/17 45.64.124.0/22 45.115.180.0/22 45.119.132.0/22 103.68.44.0/22 103.253.180.0/22 111.118.128.0/19 117.120.24.0/21 119.13.56.0/21 119.13.152.0/21 175.100.0.0/17 202.150.0.0/22 220.158.232.0/22 Signature Algorithm: sha256WithRSAEncryption 54:b2:ce:53:b8:23:42:71:14:8b:c3:69:36:56:26:f3:46:4b: 2f:cb:8d:5d:76:09:53:39:b0:ca:b8:25:82:2f:f1:08:4f:da: 3c:94:0d:39:9e:70:33:5e:7e:51:7c:5e:1d:58:6a:e7:29:79: a2:a1:24:69:1d:da:df:ef:b8:e6:64:ce:ef:4e:0c:30:86:e4: 23:7d:f5:29:43:4a:b4:28:92:c7:82:ec:72:e2:06:50:cc:f2: 77:d8:76:2b:0b:0b:58:28:44:36:a2:fb:89:fd:bd:7f:99:8e: 9a:82:fc:23:eb:15:d8:3a:ce:6f:b7:5b:34:0e:73:79:2f:77: 9b:4c:2f:e7:d8:2f:d5:9a:c5:0f:02:97:a5:7a:e6:33:e6:32: e0:30:a4:4a:50:66:eb:45:ff:f3:5a:76:99:3a:39:db:e1:bb: c6:95:01:50:fa:86:63:f5:ed:8c:e0:ae:9f:24:be:15:5d:6b: ad:1b:18:8d:de:0b:f8:8e:7d:e8:01:a5:62:ce:2b:98:0e:3b: dd:5f:d5:97:60:e9:d6:28:a4:4b:e1:a4:c1:e8:b8:5e:04:f7: 4a:b4:f8:88:68:74:e5:d1:d3:d7:e9:df:5c:01:d0:90:ed:04: ae:fe:08:61:50:25:38:4c:78:a5:94:0e:03:ff:47:bf:ca:e4: 86:2a:67:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjUwNTMxMDAyNjQxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGRhNC05Y2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/kQ1Ys5xTAg9IR7fQ+/USIdgaQGlbcn51aU9TWMidYBuXZmaRpsngLDZpEe r4xZCQI4Tjx+PWNhhQg35RDScC9hUisHAWtgDkjboMfdJg1gViLGSjbGBRQ6okq7 qtLPvysNwqccgU4Mvzte0HI4pQQ55TiwimjzM0fKKWL8DsjRKJLbLnZF2+bewUFt Byl8kj8Rs/G/m6wLtDwb172C6Eki8N5Vb69c3IChAyZO5y0DpqWXHKTf2nY8WGKW PpZLoINuZEpMKipH7eadfjiOM8xIkGxW+Vy5gVh5QA1bT6uevRhQng6L+kvvAc1X xnp4V9ETQB2A0w/poXchE2SB9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIibAp4J XaJ43+oC9iLN8HbvJVcGMB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc4RTgvQjg5RUI2OTAzRTFDMTFFQ0I4QjBBMjRBQzRGOUFFMDIvMzJFNDBFRkM2 RDZEMTFFRDg3OUU4ODc4QzRGOUFFMDIucm9hMGcGCCsGAQUFBwEHAQH/BFgwVjBU BAIAATBOAwQHJCWAAwQCLUB8AwQCLXO0AwQCLXeEAwQCZ0QsAwQCZ/20AwQFb3aA AwQDdXgYAwQDdw04AwQDdw2YAwQHr2QAAwQCypYAAwQC3J7oMA0GCSqGSIb3DQEB CwUAA4IBAQBUss5TuCNCcRSLw2k2VibzRksvy41ddglTObDKuCWCL/EIT9o8lA05 nnAzXn5RfF4dWGrnKXmioSRpHdrf77jmZM7vTgwwhuQjffUpQ0q0KJLHguxy4gZQ zPJ32HYrCwtYKEQ2ovuJ/b1/mY6agvwj6xXYOs5vt1s0DnN5L3ebTC/n2C/VmsUP ApeleuYz5jLgMKRKUGbrRf/zWnaZOjnb4bvGlQFQ+oZj9e2M4K6fJL4VXWutGxiN 3gv4jn3oAaViziuYDjvdX9WXYOnWKKRL4aTB6LheBPdKtPiIaHTl0dPX6d9cAdCQ 7QSu/ghhUCU4THillA4D/0e/yuSGKmfg -----END CERTIFICATE-----Generated at Mon Mar 2 09:19:35 2026 by rpki-client