$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A32546F8A3DB11EA98BC5D48C4F9AE02.roa File: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (raw, json) Hash identifier: fFsNR12R3pP/AJUsoiljuBLUKnPB5wu9KTa5f+JWnzE= Subject key identifier: F1:DC:38:4D:A2:CD:7F:7D:35:1A:50:66:C8:98:C8:E5:3F:24:68:AD Certificate issuer: /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Certificate serial: 0AF2 Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A32546F8A3DB11EA98BC5D48C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:07:50 +0000 ROA not before: Wed 06 Aug 2025 20:31:25 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 14618 IP address blocks: 58.181.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Validity Not Before: Aug 6 20:31:25 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a51b26-0a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:c5:cd:77:be:99:05:1d:b0:6a:fe:ce:15: b8:9b:30:75:ef:8c:33:4c:c4:3e:fd:7b:2b:18:28: cc:07:c3:89:3c:8a:02:ed:f0:f8:e4:2a:d8:16:08: ac:f1:d6:52:81:b2:4a:a0:b7:82:77:49:89:05:00: aa:89:9c:10:35:be:91:13:fe:17:20:79:16:01:0c: ac:06:6e:e9:c5:73:ab:71:a3:18:e8:16:c0:51:d2: c4:e2:ed:d9:e2:e9:7e:c7:be:3b:55:c9:5e:34:cd: 79:86:01:d3:3b:ef:28:85:8d:0a:24:27:00:c8:29: 55:fd:6f:54:14:3f:9c:41:f6:9e:a2:75:13:04:77: 7a:b3:70:fa:b6:4a:03:41:54:2c:8c:42:bd:4d:37: 3a:95:f9:2c:e8:c3:c4:33:73:53:0d:35:bf:cf:7f: 12:f0:ff:f8:a7:f4:95:96:dc:4a:3a:ff:a3:d7:23: 20:5e:a5:d1:66:5b:c2:70:8e:8f:79:a2:59:af:25: b8:0b:0f:ea:25:4e:7d:9a:bd:81:97:93:f7:fb:1a: 6f:1a:f9:bc:4d:49:a2:d4:e7:da:f6:80:1f:71:69: fb:ab:e1:3e:38:49:e1:20:36:d2:af:87:39:85:61: a2:bc:38:a6:ff:41:8a:49:c4:11:5c:25:10:29:cb: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DC:38:4D:A2:CD:7F:7D:35:1A:50:66:C8:98:C8:E5:3F:24:68:AD X509v3 Authority Key Identifier: keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A32546F8A3DB11EA98BC5D48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.181.95.0/24 Signature Algorithm: sha256WithRSAEncryption a5:0e:91:3f:0c:39:85:f2:b1:78:eb:dd:4c:95:5b:1d:fd:8e: 5c:db:b5:6f:45:00:47:2a:b7:8b:ba:30:75:93:82:80:1b:79: 05:84:f9:63:8b:8b:fe:a8:9e:5d:9f:ab:9c:55:fe:64:a9:74: 2b:50:a2:f3:0c:39:36:75:56:3c:ad:3e:67:ff:4f:66:9d:2e: 29:ee:2c:1b:ea:05:20:dc:40:d5:fa:16:1c:39:1b:d2:22:0f: d1:9e:b8:45:1f:08:ea:4e:87:b6:69:8a:d4:0a:41:b1:a7:10: d9:43:cb:4a:2c:10:6b:55:e9:be:ab:05:0a:1a:c9:64:1c:7b: b5:af:f3:7d:84:91:40:c9:cb:e2:25:95:e2:19:cd:2d:66:6d: e0:03:0e:80:7f:53:c2:92:75:a7:05:9d:91:ce:28:73:63:5e: 8c:b8:08:02:b7:ae:29:e8:c1:56:7d:cd:13:d5:f5:fe:2d:f8: 34:4a:ee:af:7a:80:bf:4a:4f:f8:ca:e5:b4:ec:09:ae:bc:5e: 3e:4b:d7:79:90:43:59:06:0c:37:62:ee:fb:77:8c:65:2b:3b: c3:55:51:79:34:fa:1d:54:62:3a:96:85:f6:1f:84:1c:49:5b: f2:39:df:5b:94:54:21:bf:41:e2:fc:24:6e:77:a3:38:14:d9: 51:0c:9e:0a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4 MkNGNkE1QjMwHhcNMjUwODA2MjAzMTI1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWIyNi0wYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAom/FzXe+mQUdsGr+zhW4mzB174wzTMQ+/XsrGCjMB8OJPIoC7fD45CrYFgis 8dZSgbJKoLeCd0mJBQCqiZwQNb6RE/4XIHkWAQysBm7pxXOrcaMY6BbAUdLE4u3Z 4ul+x747VcleNM15hgHTO+8ohY0KJCcAyClV/W9UFD+cQfaeonUTBHd6s3D6tkoD QVQsjEK9TTc6lfks6MPEM3NTDTW/z38S8P/4p/SVltxKOv+j1yMgXqXRZlvCcI6P eaJZryW4Cw/qJU59mr2Bl5P3+xpvGvm8TUmi1Ofa9oAfcWn7q+E+OEnhIDbSr4c5 hWGivDim/0GKScQRXCUQKcvpMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPHcOE2i zX99NRpQZsiYyOU/JGitMB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTczNEMvQTczMjM1RUM3M0MyMTFFQTlENDBCODg1QzRGOUFFMDIvQTMyNTQ2RjhB M0RCMTFFQTk4QkM1RDQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAOrVfMA0GCSqGSIb3DQEBCwUAA4IBAQClDpE/DDmF8rF4691MlVsd /Y5c27VvRQBHKreLujB1k4KAG3kFhPlji4v+qJ5dn6ucVf5kqXQrUKLzDDk2dVY8 rT5n/09mnS4p7iwb6gUg3EDV+hYcORvSIg/RnrhFHwjqToe2aYrUCkGxpxDZQ8tK LBBrVem+qwUKGslkHHu1r/N9hJFAycviJZXiGc0tZm3gAw6Af1PCknWnBZ2Rzihz Y16MuAgCt64p6MFWfc0T1fX+Lfg0Su6veoC/Sk/4yuW07AmuvF4+S9d5kENZBgw3 Yu77d4xlKzvDVVF5NPodVGI6loX2H4QcSVvyOd9blFQhv0Hi/CRud6M4FNlRDJ4K -----END CERTIFICATE-----Generated at Thu Mar 26 02:00:24 2026 by rpki-client