$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/32D8E190D0CB11EEAB1CAF34C4F9AE02.roa File: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (raw, json) Hash identifier: FOd1W7zMCod1PsCz4NDcAAA6iXQg7qF4eo6XlN29wRY= Subject key identifier: 9B:02:5C:38:84:84:65:A9:AE:B7:24:66:19:3A:15:F7:AA:15:77:30 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 0293 Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/32D8E190D0CB11EEAB1CAF34C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:20:26 +0000 ROA not before: Fri 09 Jan 2026 01:21:19 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150696 IP address blocks: 103.60.204.0/23 maxlen: 23 103.60.204.0/24 maxlen: 24 103.60.205.0/24 maxlen: 24 2400:cf60::/32 maxlen: 32 2400:cf60:fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: Jan 9 01:21:19 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a51e1a-fb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3a:d5:54:0a:fa:6b:63:54:07:34:81:68:7a: 01:89:6e:90:ac:1f:27:93:59:62:be:12:27:0e:4a: 94:ce:68:a7:bc:e5:ba:fb:af:ab:1c:0f:92:58:9a: ee:f7:21:67:55:a6:15:96:7c:d8:42:b6:34:78:bc: 3b:62:fa:00:f4:73:30:e6:35:bf:6a:7f:f3:99:73: f2:b0:ba:c2:26:e6:0e:ed:b0:1e:20:ff:8d:4f:f9: 97:d5:4a:1e:b4:c0:c2:d0:c1:c5:f3:6d:f6:78:f0: 5c:6b:7d:0a:41:54:43:3e:75:9d:e9:5c:db:f9:19: 0d:3c:00:9c:98:3a:16:40:cd:69:a5:bc:1f:1a:73: d6:a4:ab:ae:44:0f:14:b2:48:53:d3:57:2a:73:d9: 6d:0f:73:f2:8c:ee:15:44:3e:8b:30:0b:8c:3b:d6: 72:ff:8b:7b:14:9e:81:ef:07:ef:c5:8d:44:ec:3c: 00:a6:10:1f:87:a0:89:30:2b:03:e1:9b:b9:85:c4: 53:dd:21:56:47:f8:3f:07:84:c3:6e:11:e0:3f:3b: b4:01:e0:57:36:52:22:14:5e:d3:41:18:39:8c:a4: ed:78:bb:6c:ba:e0:a6:07:a5:b9:4f:4e:f3:dd:33: 33:ff:00:02:91:88:54:2b:49:41:b3:8a:07:95:63: 7f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:02:5C:38:84:84:65:A9:AE:B7:24:66:19:3A:15:F7:AA:15:77:30 X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/32D8E190D0CB11EEAB1CAF34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.60.204.0/23 IPv6: 2400:cf60::/32 Signature Algorithm: sha256WithRSAEncryption 1f:93:b5:90:36:9e:6b:56:36:8c:69:f5:b5:32:82:06:e5:f9: ca:c7:d8:67:27:22:09:2c:7a:c7:2f:46:7c:64:88:d9:6c:3b: 79:fd:34:87:ae:9e:9d:a5:b3:b2:8e:36:93:f0:a9:b0:54:76: 10:3d:d5:5e:de:e1:a2:56:dc:24:fe:6a:e4:1a:ed:44:78:81: 4f:ce:5f:33:05:fb:7d:f8:1c:64:e5:e2:a4:f8:f4:6b:be:07: 5d:c7:43:b6:19:31:38:83:53:ac:81:35:db:14:12:80:19:f7: 89:e3:98:2c:3f:c9:bc:b3:86:49:40:21:a4:51:50:8c:e9:f5: 11:58:ae:61:7a:01:0c:e3:18:9c:5a:de:21:39:f6:c5:4f:9f: 4c:5d:62:d9:3b:9e:ea:21:de:98:d7:69:6e:74:3e:2b:9e:ff: e8:28:71:9b:46:95:ed:16:a1:9c:6b:92:01:f9:60:cb:a2:1d: 04:58:34:fc:83:7e:fc:80:d0:18:21:24:ad:f7:37:d9:f0:99: 8f:67:c6:da:8c:2e:8c:68:69:04:47:fb:65:4d:d5:1f:60:6a: fc:12:2c:58:a7:d7:c5:4f:96:05:5f:42:68:84:f8:30:70:a5: 16:7d:11:59:5d:52:97:6d:cc:cb:ee:b5:36:31:30:43:aa:cf: e6:bc:d2:af -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjYwMTA5MDEyMTE5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWUxYS1mYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TrVVAr6a2NUBzSBaHoBiW6QrB8nk1livhInDkqUzminvOW6+6+rHA+SWJru 9yFnVaYVlnzYQrY0eLw7YvoA9HMw5jW/an/zmXPysLrCJuYO7bAeIP+NT/mX1Uoe tMDC0MHF8232ePBca30KQVRDPnWd6Vzb+RkNPACcmDoWQM1ppbwfGnPWpKuuRA8U skhT01cqc9ltD3PyjO4VRD6LMAuMO9Zy/4t7FJ6B7wfvxY1E7DwAphAfh6CJMCsD 4Zu5hcRT3SFWR/g/B4TDbhHgPzu0AeBXNlIiFF7TQRg5jKTteLtsuuCmB6W5T07z 3TMz/wACkYhUK0lBs4oHlWN/nQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJsCXDiE hGWprrckZhk6FfeqFXcwMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQ4NkYvMjJDRjM0NDg4NjZDMTFFREFGQTVBNDcxQzRGOUFFMDIvMzJEOEUxOTBE MENCMTFFRUFCMUNBRjM0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZzzMMA0EAgACMAcDBQAkAM9gMA0GCSqGSIb3DQEBCwUAA4IBAQAf k7WQNp5rVjaMafW1MoIG5fnKx9hnJyIJLHrHL0Z8ZIjZbDt5/TSHrp6dpbOyjjaT 8KmwVHYQPdVe3uGiVtwk/mrkGu1EeIFPzl8zBft9+Bxk5eKk+PRrvgddx0O2GTE4 g1OsgTXbFBKAGfeJ45gsP8m8s4ZJQCGkUVCM6fURWK5hegEM4xicWt4hOfbFT59M XWLZO57qId6Y12ludD4rnv/oKHGbRpXtFqGca5IB+WDLoh0EWDT8g378gNAYISSt 9zfZ8JmPZ8bajC6MaGkER/tlTdUfYGr8EixYp9fFT5YFX0JohPgwcKUWfRFZXVKX bczL7rU2MTBDqs/mvNKv -----END CERTIFICATE-----Generated at Thu Mar 26 16:00:08 2026 by rpki-client