$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/32E40EFC6D6D11ED879E8878C4F9AE02.roa File: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (raw, json) Hash identifier: d7+51zVdH0HghBuXlAsVnHpo1xoTzE2q5X2+VM38Wfo= Subject key identifier: FB:8E:C2:01:F0:5D:08:20:A4:69:C1:F1:DB:8B:84:E2:78:12:D0:E4 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 0571 Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/32E40EFC6D6D11ED879E8878C4F9AE02.roa Signing time: Tue 14 Jul 2026 10:19:44 +0000 ROA not before: Tue 14 Jul 2026 10:19:44 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 38623 IP address blocks: 36.37.128.0/17 maxlen: 24 45.64.124.0/22 maxlen: 23 45.64.125.0/24 maxlen: 24 45.64.126.0/23 maxlen: 24 45.115.180.0/22 maxlen: 24 45.119.132.0/22 maxlen: 24 103.68.44.0/22 maxlen: 24 103.253.180.0/22 maxlen: 24 111.118.128.0/19 maxlen: 24 117.120.24.0/21 maxlen: 24 119.13.56.0/21 maxlen: 24 119.13.152.0/21 maxlen: 24 175.100.0.0/17 maxlen: 24 202.150.0.0/22 maxlen: 24 220.158.232.0/22 maxlen: 24 2405:8380::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: Jul 14 10:19:44 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a560d40-a916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:37:21:af:08:9f:08:2a:7d:be:e2:8d:68: 58:e0:6c:bc:bc:d0:cb:5c:cc:b2:c2:ef:7a:03:f4: 5a:a6:eb:76:b7:95:22:7f:da:6c:b2:53:4b:29:2c: b3:d9:c7:d9:45:da:70:86:76:8f:6f:2d:43:a7:e1: 48:06:f6:65:9b:f3:ea:d1:d4:c1:7c:4e:3f:57:fd: ab:c9:73:13:0e:de:60:9b:46:bb:06:84:8b:2b:0b: 7a:e5:ca:00:33:ec:a1:b5:20:6d:13:09:30:d4:d2: fa:5f:51:9e:cf:fe:75:61:29:6e:05:47:2f:e4:ae: 7d:2d:3a:7f:ab:e0:b4:76:b5:7e:e4:24:1b:76:ea: c8:ec:79:ca:ea:8d:86:d3:f2:02:96:99:e5:ae:bd: d5:3d:e9:ea:1f:33:ab:4c:fe:62:e1:cc:cf:dc:56: d9:f8:e5:4e:ff:f2:44:1d:20:5b:42:a8:67:16:90: 53:98:92:61:81:c9:94:f7:81:57:85:56:59:a4:f8: 12:48:a1:cf:1b:42:10:91:d3:a0:6c:2b:d0:8e:a7: a5:17:87:a9:e4:41:4f:a3:68:f9:63:55:23:4c:98: 7c:50:13:25:d6:fe:b6:1f:8e:43:7f:13:68:1a:bd: 23:63:ab:d4:78:7c:cb:5a:88:9b:b3:f2:96:8c:fb: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8E:C2:01:F0:5D:08:20:A4:69:C1:F1:DB:8B:84:E2:78:12:D0:E4 X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/32E40EFC6D6D11ED879E8878C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.37.128.0/17 45.64.124.0/22 45.115.180.0/22 45.119.132.0/22 103.68.44.0/22 103.253.180.0/22 111.118.128.0/19 117.120.24.0/21 119.13.56.0/21 119.13.152.0/21 175.100.0.0/17 202.150.0.0/22 220.158.232.0/22 IPv6: 2405:8380::/32 Signature Algorithm: sha256WithRSAEncryption 31:84:3f:66:f3:bd:6b:ec:08:4f:2c:93:9e:0e:fb:20:e4:94: 21:af:d7:c3:58:f0:d2:5e:c1:ee:36:9c:43:30:4a:1c:7f:ae: cc:85:42:53:24:77:35:9b:66:4e:3b:7b:37:e1:c9:02:04:62: 1d:96:5b:19:97:8c:21:08:9e:a7:e5:49:2c:64:bb:f3:3f:d3: 1f:98:4f:be:18:4b:5b:24:3c:f4:69:56:5c:cf:22:7c:db:83: 06:b5:96:18:cb:6a:af:56:99:43:70:b9:9d:4f:03:2f:71:f1: f5:4b:4c:47:16:bc:06:cb:17:23:c4:4f:9e:fe:a1:43:45:eb: 8b:d4:9d:26:b3:cc:ac:37:46:38:f6:68:48:7f:7f:71:8e:4e: a8:1c:4b:fa:d6:bf:87:75:a4:d1:0d:9d:c9:eb:24:b5:82:f3: d5:1b:1c:ba:90:14:f3:22:e3:6f:3c:71:8b:76:2d:25:9b:54: 85:99:50:68:ec:89:c2:20:b9:86:e7:b6:46:51:f5:79:00:09: 0a:3e:6d:18:92:cb:07:69:ff:19:02:a3:c7:eb:ae:96:d7:5a: e2:a6:03:bd:8a:94:1d:81:fe:55:bf:80:66:e5:de:d4:ee:ea: ab:95:1a:b6:65:04:fe:24:27:2c:b6:f1:60:3a:b2:cc:c1:d3: c2:44:fe:d7 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjYwNzE0MTAxOTQ0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2MGQ0MC1hOTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhc3Ia8Inwgqfb7ijWhY4Gy8vNDLXMyywu96A/Raput2t5Uif9psslNLKSyz 2cfZRdpwhnaPby1Dp+FIBvZlm/Pq0dTBfE4/V/2ryXMTDt5gm0a7BoSLKwt65coA M+yhtSBtEwkw1NL6X1Gez/51YSluBUcv5K59LTp/q+C0drV+5CQbdurI7HnK6o2G 0/IClpnlrr3VPenqHzOrTP5i4czP3FbZ+OVO//JEHSBbQqhnFpBTmJJhgcmU94FX hVZZpPgSSKHPG0IQkdOgbCvQjqelF4ep5EFPo2j5Y1UjTJh8UBMl1v62H45DfxNo Gr0jY6vUeHzLWoibs/KWjPtqmQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFPuOwgHw XQggpGnB8duLhOJ4EtDkMB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc4RTgvQjg5RUI2OTAzRTFDMTFFQ0I4QjBBMjRBQzRGOUFFMDIvMzJFNDBFRkM2 RDZEMTFFRDg3OUU4ODc4QzRGOUFFMDIucm9hMHYGCCsGAQUFBwEHAQH/BGcwZTBU BAIAATBOAwQHJCWAAwQCLUB8AwQCLXO0AwQCLXeEAwQCZ0QsAwQCZ/20AwQFb3aA AwQDdXgYAwQDdw04AwQDdw2YAwQHr2QAAwQCypYAAwQC3J7oMA0EAgACMAcDBQAk BYOAMA0GCSqGSIb3DQEBCwUAA4IBAQAxhD9m871r7AhPLJOeDvsg5JQhr9fDWPDS XsHuNpxDMEocf67MhUJTJHc1m2ZOO3s34ckCBGIdllsZl4whCJ6n5UksZLvzP9Mf mE++GEtbJDz0aVZczyJ824MGtZYYy2qvVplDcLmdTwMvcfH1S0xHFrwGyxcjxE+e /qFDReuL1J0ms8ysN0Y49mhIf39xjk6oHEv61r+HdaTRDZ3J6yS1gvPVGxy6kBTz IuNvPHGLdi0lm1SFmVBo7InCILmG57ZGUfV5AAkKPm0YkssHaf8ZAqPH666W11ri pgO9ipQdgf5Vv4Bm5d7U7uqrlRq2ZQT+JCcstvFgOrLMwdPCRP7X -----END CERTIFICATE-----Generated at Fri Jul 24 12:41:25 2026 by rpki-client