$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/32D8FF34C99E11ED98E9BE5BC4F9AE02.roa File: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (raw, json) Hash identifier: yd4buxnCUiP8RDjBDNVk91tWj2JzoJK9mOzB6Ho4Uo8= Subject key identifier: D5:D5:27:9D:B8:E9:4D:5A:1F:8C:43:EB:F6:FD:80:34:9F:CD:7C:AD Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Certificate serial: 047A Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/32D8FF34C99E11ED98E9BE5BC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:00:02 +0000 ROA not before: Thu 03 Jul 2025 01:04:26 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149451 IP address blocks: 103.179.181.0/24 maxlen: 24 103.187.68.0/24 maxlen: 24 2001:df0:5240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157031, serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Validity Not Before: Jul 3 01:04:26 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a40e22-364b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:3e:bc:6b:c5:9a:55:af:5f:9f:77:a3:e1: df:92:81:d1:00:60:f5:bb:ae:3a:a4:14:41:31:97: 89:3b:48:3c:b9:8f:5f:b6:b1:8c:24:e7:80:01:57: f3:02:51:c5:2f:29:e4:fb:0a:a2:ed:cc:a4:01:9c: d1:39:76:7f:d7:82:7b:08:cd:01:34:4c:8b:c7:5f: 45:5f:66:e9:ad:64:2a:95:a1:dd:84:e9:84:29:7a: 56:4b:f4:ea:a5:dc:03:83:9c:c5:78:a3:88:69:8f: cf:db:5b:d9:4f:2c:fb:a8:1f:fd:69:b9:80:44:3c: 20:2e:d3:f8:ef:11:11:b3:1a:90:4a:f4:3c:4c:97: a7:48:c4:9b:e1:03:bc:9f:6d:75:98:eb:58:bf:85: 24:15:b6:64:b6:d4:f8:14:b5:75:b2:88:d5:91:76: 79:53:03:21:2c:4a:8d:e9:56:ac:fc:04:83:aa:e5: 84:89:74:c2:98:be:3d:3c:f1:31:45:bf:27:94:63: d5:99:1d:46:b8:cd:4d:ba:9f:ff:fc:d4:50:2c:c5: 88:a1:db:93:b4:ff:87:e6:85:fe:09:5f:cc:94:33: d5:40:02:fe:77:9a:cd:b5:f1:20:5e:4e:03:cd:15: df:4e:a5:80:99:4c:d3:65:ff:91:9e:52:ec:5a:ee: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D5:27:9D:B8:E9:4D:5A:1F:8C:43:EB:F6:FD:80:34:9F:CD:7C:AD X509v3 Authority Key Identifier: keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/32D8FF34C99E11ED98E9BE5BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.179.181.0/24 103.187.68.0/24 IPv6: 2001:df0:5240::/48 Signature Algorithm: sha256WithRSAEncryption 15:3c:f2:3f:70:6e:04:cb:f5:d5:e8:ce:21:e2:1d:3d:79:a3: e4:ad:73:58:b6:e7:c7:2f:f8:25:97:1d:33:3f:e9:fc:04:23: ea:ff:87:24:28:8a:2b:66:c3:f5:d8:2b:59:65:12:28:d2:cd: 1f:32:8c:8f:d9:d3:14:da:62:43:2c:3a:e6:48:b8:47:f1:a8: 20:1f:10:53:b1:51:c2:69:81:b5:cf:de:5c:38:93:30:4a:7e: 56:14:b0:20:5a:4a:bf:89:e4:87:26:8b:26:9b:c1:fe:bf:6a: 74:0e:58:a5:63:7f:5a:8c:da:55:0a:ef:8e:3f:22:35:4b:75: f0:8c:50:52:07:f2:e5:c5:58:23:dc:1d:c1:db:bb:ba:cb:59: 34:b1:30:93:40:f2:87:64:b1:60:ff:65:d0:20:e5:76:a5:8a: 23:f5:22:b5:ec:55:3b:ba:6b:6f:de:3b:53:7c:26:e2:74:29: 83:b2:8d:b1:a1:11:f7:58:cc:b9:7f:13:5b:29:07:a6:51:7e: ab:6e:a5:75:c0:f7:e1:5e:97:d3:ac:7b:de:07:96:c1:f7:50: 4b:73:38:27:7f:16:4f:97:03:63:a1:90:77:0a:dd:db:72:36: f8:8a:1f:3f:a1:f8:99:1e:47:9e:5b:af:7f:56:28:2d:b6:d2: c6:6f:14:0f -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwMzExMTAvBgNVBAUTKDUwRTUwRURBRjY0QTJDMjVCNzMxMjM5NjczRDkwNzBG NjE4MzAyNzkwHhcNMjUwNzAzMDEwNDI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGUyMi0zNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYU+vGvFmlWvX593o+HfkoHRAGD1u646pBRBMZeJO0g8uY9ftrGMJOeAAVfz AlHFLynk+wqi7cykAZzROXZ/14J7CM0BNEyLx19FX2bprWQqlaHdhOmEKXpWS/Tq pdwDg5zFeKOIaY/P21vZTyz7qB/9abmARDwgLtP47xERsxqQSvQ8TJenSMSb4QO8 n211mOtYv4UkFbZkttT4FLV1sojVkXZ5UwMhLEqN6Vas/ASDquWEiXTCmL49PPEx Rb8nlGPVmR1GuM1Nup///NRQLMWIoduTtP+H5oX+CV/MlDPVQAL+d5rNtfEgXk4D zRXfTqWAmUzTZf+RnlLsWu7DzwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFNXVJ524 6U1aH4xD6/b9gDSfzXytMB8GA1UdIwQYMBaAFFDlDtr2SiwltzEjlnPZBw9hgwJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzAzMS83QTAwNEY3ODdF QzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xDVzNNU09XYzlrSEQyR0RB bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPVU8ydlpLTENXM01TT1djOWtIRDJHREFuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTcwMzEvN0EwMDRGNzg3RUM5MTFFQzg0RUM0NDE4QzRGOUFFMDIvMzJEOEZGMzRD OTlFMTFFRDk4RTlCRTVCQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ7O1AwQAZ7tEMA8EAgACMAkDBwAgAQ3wUkAwDQYJKoZIhvcNAQEL BQADggEBABU88j9wbgTL9dXoziHiHT15o+Stc1i258cv+CWXHTM/6fwEI+r/hyQo iitmw/XYK1llEijSzR8yjI/Z0xTaYkMsOuZIuEfxqCAfEFOxUcJpgbXP3lw4kzBK flYUsCBaSr+J5Icmiyabwf6/anQOWKVjf1qM2lUK744/IjVLdfCMUFIH8uXFWCPc HcHbu7rLWTSxMJNA8odksWD/ZdAg5XaliiP1IrXsVTu6a2/eO1N8JuJ0KYOyjbGh EfdYzLl/E1spB6ZRfqtupXXA9+Fel9Ose94HlsH3UEtzOCd/Fk+XA2OhkHcK3dty NviKHz+h+JkeR55br39WKC220sZvFA8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:40:36 2026 by rpki-client