$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/D32DB3AE7FC111F0B3BEC06AC4F9AE02.roa File: D32DB3AE7FC111F0B3BEC06AC4F9AE02.roa (raw, json) Hash identifier: e1E68Ho50ngwWh9r7dC17sN0VAiVWs7P5I7wOcaITiM= Subject key identifier: FE:3B:A8:A5:4E:30:4A:C9:01:2B:CC:3C:6C:28:F9:F4:A3:3C:E1:9E Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 08FC Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/D32DB3AE7FC111F0B3BEC06AC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:21:08 +0000 ROA not before: Sat 23 Aug 2025 01:38:10 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154114 IP address blocks: 45.125.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2300 (0x8fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Aug 23 01:38:10 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a42f34-cc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:32:01:c2:9d:9b:e1:1b:75:f2:62:bd:bb: 1f:25:ff:44:be:d1:2e:d5:79:c9:fd:de:80:73:1e: cb:c6:70:d5:f6:9d:fa:eb:93:14:17:af:ff:02:f0: 7e:a7:37:a8:3f:fd:41:13:a4:ae:fe:dd:2f:e6:63: dc:3c:04:6f:44:99:90:88:2e:08:ab:8b:3a:2a:9f: 5f:d6:15:ed:c4:64:8b:f9:01:3a:b0:0d:07:9d:44: d6:92:50:a6:70:c4:d8:d1:3f:9f:e1:6e:9b:c6:3f: 34:9f:24:e0:49:9f:b9:8d:6a:0c:ec:cf:23:12:98: 32:dd:d4:c5:7a:8f:56:cd:28:2a:31:5b:21:9e:54: af:a2:14:d9:83:25:f8:aa:16:88:e0:37:33:e0:fb: f3:41:07:c0:a6:a1:91:07:e6:07:b3:58:0a:c9:b7: 31:94:1b:fc:20:7b:d6:37:2e:d9:d6:1b:6f:1a:ab: 2f:c9:8e:42:b0:93:65:51:bf:e3:14:2a:26:5a:ff: f4:16:ce:e5:8e:a3:12:a2:07:17:95:af:ab:aa:3c: 10:71:a6:be:f7:c9:f9:57:5e:b4:9f:52:a6:f9:8e: 4d:ae:16:cc:a5:c0:56:4a:d3:b8:73:02:5b:93:85: 85:b8:91:13:ec:b0:cf:8a:5f:76:cd:5f:d4:46:b3: 7a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3B:A8:A5:4E:30:4A:C9:01:2B:CC:3C:6C:28:F9:F4:A3:3C:E1:9E X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/D32DB3AE7FC111F0B3BEC06AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.50.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:d0:ec:9d:1a:b0:5e:6a:6f:44:a5:da:7f:d4:a2:d7:47:ac: 8a:5b:35:2b:8f:21:58:93:54:21:42:20:8d:f6:af:4b:05:aa: d8:f3:7d:d3:bc:83:5b:7c:84:c1:ed:d0:69:f4:69:20:a2:30: 4f:38:3d:dc:c1:69:f8:a9:6c:38:29:bc:da:21:c7:d1:f9:89: 58:1c:d1:2b:e6:f9:54:58:e4:2c:3f:31:d4:b3:0d:01:1a:9b: 65:8d:3c:4f:0f:06:f4:71:11:f4:27:c1:de:e7:13:43:e9:89: 6c:4a:df:0a:25:6a:56:48:20:a6:a4:aa:e4:cb:8e:3f:91:48: 52:81:d4:2e:19:50:c6:e3:1b:87:26:53:dd:f5:c9:8b:35:f8: 61:bf:2b:5c:87:c2:08:e8:58:cf:4b:38:84:f9:70:e8:12:dc: 79:6b:fd:ae:a4:5f:7b:78:4d:b7:50:dc:35:d0:b3:4a:16:06: 60:0a:6d:7a:56:0d:5d:89:83:56:cd:4e:5f:92:5d:94:dc:8d: 52:9b:e2:cc:a1:8f:cc:c5:97:e9:ba:d9:31:bd:41:5e:a9:a2: 8a:de:0f:27:f1:0e:23:e0:68:3b:b9:6a:3e:03:a8:e9:b9:8f: f6:a6:40:f6:6b:c2:e4:1a:c7:6b:5e:d8:97:9d:ed:55:88:90: cc:e3:f3:bf -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjUwODIzMDEzODEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmYzNC1jYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuacyAcKdm+EbdfJivbsfJf9EvtEu1XnJ/d6Acx7LxnDV9p3665MUF6//AvB+ pzeoP/1BE6Su/t0v5mPcPARvRJmQiC4Iq4s6Kp9f1hXtxGSL+QE6sA0HnUTWklCm cMTY0T+f4W6bxj80nyTgSZ+5jWoM7M8jEpgy3dTFeo9WzSgqMVshnlSvohTZgyX4 qhaI4Dcz4PvzQQfApqGRB+YHs1gKybcxlBv8IHvWNy7Z1htvGqsvyY5CsJNlUb/j FComWv/0Fs7ljqMSogcXla+rqjwQcaa+98n5V160n1Km+Y5NrhbMpcBWStO4cwJb k4WFuJET7LDPil92zV/URrN6VwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP47qKVO MErJASvMPGwo+fSjPOGeMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ4MzQvNTFCRURGQzRDQzhEMTFFQUFGRkVEQjM2QzRGOUFFMDIvRDMyREIzQUU3 RkMxMTFGMEIzQkVDMDZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBLX0yMA0GCSqGSIb3DQEBCwUAA4IBAQAd0OydGrBeam9Epdp/1KLX R6yKWzUrjyFYk1QhQiCN9q9LBarY833TvINbfITB7dBp9GkgojBPOD3cwWn4qWw4 KbzaIcfR+YlYHNEr5vlUWOQsPzHUsw0BGptljTxPDwb0cRH0J8He5xND6YlsSt8K JWpWSCCmpKrky44/kUhSgdQuGVDG4xuHJlPd9cmLNfhhvytch8II6FjPSziE+XDo Etx5a/2upF97eE23UNw10LNKFgZgCm16Vg1diYNWzU5fkl2U3I1Sm+LMoY/MxZfp utkxvUFeqaKK3g8n8Q4j4Gg7uWo+A6jpuY/2pkD2a8LkGsdrXtiXne1ViJDM4/O/ -----END CERTIFICATE-----Generated at Thu Mar 26 19:22:51 2026 by rpki-client