$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/3DB1BB00867211F1A49B353F5EA30FBC.roa File: 3DB1BB00867211F1A49B353F5EA30FBC.roa (raw, json) Hash identifier: ciyJTYbsJu4EqjJPQTwPgA9seL8CchhfPXFNoQk7kF0= Subject key identifier: 6B:38:A4:24:F1:2F:AD:8C:86:19:69:7F:82:66:FD:64:2E:37:B8:52 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 08C3 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/3DB1BB00867211F1A49B353F5EA30FBC.roa Signing time: Thu 23 Jul 2026 08:41:05 +0000 ROA not before: Thu 23 Jul 2026 08:41:05 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 139341 IP address blocks: 152.32.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2243 (0x8c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Jul 23 08:41:05 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a61d3a1-f35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:14:99:2d:e3:08:f7:c6:43:a6:27:6f:7d:f8: 6b:96:e3:16:da:66:f5:f1:3c:39:d5:12:f3:04:f4: 64:99:f7:ea:6a:a6:da:62:90:49:db:30:68:3e:b5: ab:68:cf:02:aa:d8:06:bb:c9:eb:7b:2e:61:80:b1: 9e:1a:e9:f1:79:f4:28:94:97:dd:95:a9:1c:69:8d: 01:94:fb:12:90:fb:1b:95:5e:3b:53:65:e3:0b:47: 2f:a6:38:48:59:7c:36:2d:59:f2:0b:3c:79:ff:72: 42:05:10:43:56:5c:d7:ce:f6:0f:c1:b7:4a:b4:58: 18:e5:f6:fa:34:a4:9c:5c:03:f5:cd:e6:dd:7c:c4: da:09:0f:2e:08:7d:57:5b:f7:f2:df:f6:41:12:64: 5a:76:82:79:cb:4b:11:ab:44:2c:dd:b0:74:d2:76: b4:44:50:67:86:c5:95:7a:8b:f4:ce:05:53:36:fd: 40:f3:13:19:28:12:dc:a8:3f:f1:ca:80:0d:c2:e0: f8:5e:d1:ce:19:d2:41:57:81:6d:c4:57:28:41:f3: a7:c6:bf:12:2a:cd:59:43:9d:c8:16:3a:34:40:12: 16:93:61:0f:04:4e:32:ae:da:3e:19:4c:92:92:62: d9:39:95:25:09:24:8e:be:b0:fb:58:a0:a9:a6:f6: c9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:38:A4:24:F1:2F:AD:8C:86:19:69:7F:82:66:FD:64:2E:37:B8:52 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/3DB1BB00867211F1A49B353F5EA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 152.32.166.0/24 Signature Algorithm: sha256WithRSAEncryption d1:e7:22:e0:95:6e:44:32:c1:e5:9b:ab:cb:9d:ac:ce:1c:81: e7:f3:33:f9:04:54:f3:98:9c:73:c3:71:5c:1f:eb:af:17:17: 6d:7d:4f:4d:2e:93:3f:ce:2d:1d:b4:d8:8c:06:1c:59:a4:d6: a4:03:db:fd:a2:f4:87:62:89:bb:82:cc:4e:98:e9:61:5b:f9: fe:08:28:9b:15:b5:2b:00:2b:8b:a5:15:31:2f:c8:4e:d1:a4: d0:38:82:0e:3f:57:15:9a:87:f7:91:8d:85:2e:3f:f8:85:90: 92:23:21:01:ec:25:6b:e9:ea:9d:7a:b9:72:56:15:1d:8b:de: 55:41:0c:98:3d:cb:df:1f:85:4d:18:df:88:98:ba:c2:2f:17: b2:1d:e1:7e:3a:18:45:5b:c2:fc:77:e2:cf:5c:76:61:6e:a8: d7:0f:b8:a6:2b:2d:38:3f:5b:63:e8:a8:94:bb:3f:54:54:db: 88:9a:b8:dc:9b:b2:db:9e:61:d6:16:01:51:92:8a:87:fb:0d: d0:27:51:24:cf:c2:2d:86:f5:da:2d:95:b6:bc:6d:11:e9:a7: dd:f2:47:de:84:a3:21:71:f5:be:20:44:3c:7e:fc:1c:40:9e: bd:54:c7:5c:ee:3e:21:16:de:65:b8:f8:31:4c:54:c8:84:fd: 18:b1:a7:34 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjYwNzIzMDg0MTA1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxZDNhMS1mMzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hSZLeMI98ZDpidvffhrluMW2mb18Tw51RLzBPRkmffqaqbaYpBJ2zBoPrWr aM8CqtgGu8nrey5hgLGeGunxefQolJfdlakcaY0BlPsSkPsblV47U2XjC0cvpjhI WXw2LVnyCzx5/3JCBRBDVlzXzvYPwbdKtFgY5fb6NKScXAP1zebdfMTaCQ8uCH1X W/fy3/ZBEmRadoJ5y0sRq0Qs3bB00na0RFBnhsWVeov0zgVTNv1A8xMZKBLcqD/x yoANwuD4XtHOGdJBV4FtxFcoQfOnxr8SKs1ZQ53IFjo0QBIWk2EPBE4yrto+GUyS kmLZOZUlCSSOvrD7WKCppvbJrwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGs4pCTx L62Mhhlpf4Jm/WQuN7hSMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODZFOEEvMzE0OERDOUUyREZGMTFFQjg2OEE5MTM1QzRGOUFFMDIvM0RCMUJCMDA4 NjcyMTFGMUE0OUIzNTNGNUVBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAmCCmMA0GCSqGSIb3DQEBCwUAA4IBAQDR5yLglW5EMsHlm6vLnazO HIHn8zP5BFTzmJxzw3FcH+uvFxdtfU9NLpM/zi0dtNiMBhxZpNakA9v9ovSHYom7 gsxOmOlhW/n+CCibFbUrACuLpRUxL8hO0aTQOIIOP1cVmof3kY2FLj/4hZCSIyEB 7CVr6eqderlyVhUdi95VQQyYPcvfH4VNGN+ImLrCLxeyHeF+OhhFW8L8d+LPXHZh bqjXD7imKy04P1tj6KiUuz9UVNuImrjcm7LbnmHWFgFRkoqH+w3QJ1Ekz8IthvXa LZW2vG0R6afd8kfehKMhcfW+IEQ8fvwcQJ69VMdc7j4hFt5luPgxTFTIhP0Ysac0 -----END CERTIFICATE-----Generated at Fri Jul 24 05:29:35 2026 by rpki-client