$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/E9E80356AD6211EABEDF046AC4F9AE02.roa File: E9E80356AD6211EABEDF046AC4F9AE02.roa (raw, json) Hash identifier: 3/DJ3hL5G9etvpvOyj7MflbEEZYKEAa9BhYU/ttjjb0= Subject key identifier: 3A:B8:40:70:40:EA:A8:9D:2B:42:4C:DE:A1:CA:52:C8:E7:8F:E5:D0 Certificate issuer: /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3 Certificate serial: 09AF Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/E9E80356AD6211EABEDF046AC4F9AE02.roa Signing time: Thu 04 Jun 2026 20:25:01 +0000 ROA not before: Thu 04 Jun 2026 20:25:01 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 137811 IP address blocks: 5.28.32.0/21 maxlen: 21 5.28.32.0/24 maxlen: 24 5.28.33.0/24 maxlen: 24 5.28.34.0/24 maxlen: 24 5.28.35.0/24 maxlen: 24 5.28.36.0/23 maxlen: 24 5.28.38.0/24 maxlen: 24 5.28.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 20:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2479 (0x9af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3 Validity Not Before: Jun 4 20:25:01 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a21df1c-79be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:e8:ce:89:2c:f0:59:3e:55:fb:e2:05:34: 9b:63:46:70:57:80:aa:ea:3b:2d:33:43:c3:ef:af: a9:49:ce:aa:0a:84:4a:7c:95:7f:3f:11:4a:9a:75: a3:67:80:de:77:46:24:b0:9d:b9:88:b5:9c:90:85: 93:f7:83:91:49:37:40:ea:dd:3f:0f:6d:04:85:f3: 91:9a:b7:a3:a4:b3:dd:ed:cf:99:c6:35:e9:32:d9: e1:f0:94:a0:ce:b8:b6:c7:78:0e:15:56:08:d6:fc: f1:84:f5:a8:b3:41:77:aa:b3:60:c9:60:f2:b5:33: d9:40:da:04:cb:0c:0d:84:9f:f8:77:08:c1:4a:92: dd:9a:20:aa:ae:a4:98:ba:2a:53:0f:a4:73:9d:b1: 02:e1:7f:dc:85:cf:40:cd:7e:60:b2:31:00:37:77: a9:45:93:4c:27:56:0f:f0:50:70:1f:e8:2f:c0:f6: fe:82:a5:1b:41:24:ba:47:4d:6d:4b:85:66:41:cc: 9c:fa:9c:7b:67:da:3b:36:85:ed:61:f0:a3:9b:54: ff:fb:21:45:55:ea:59:6e:f3:7c:c0:7a:8f:9b:95: 52:8a:f5:e1:4d:a1:ac:ef:77:bb:ee:be:d5:fd:6d: 94:4e:26:58:87:9f:0d:17:fd:d8:10:04:18:f9:ae: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B8:40:70:40:EA:A8:9D:2B:42:4C:DE:A1:CA:52:C8:E7:8F:E5:D0 X509v3 Authority Key Identifier: keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/E9E80356AD6211EABEDF046AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 5.28.32.0/21 Signature Algorithm: sha256WithRSAEncryption ad:9e:a3:f2:79:5d:6a:c5:dd:e5:ff:55:44:19:3f:0d:cf:09: d8:7d:80:74:7e:ae:9a:05:55:e7:65:a1:f2:68:d3:e9:37:fe: 3d:49:fd:84:ce:7d:e3:28:41:87:4b:ad:e6:40:87:18:a8:40: e5:60:25:39:ff:69:ee:56:73:36:f0:b0:01:14:29:b1:ce:48: 28:f5:04:eb:5f:f5:62:a8:82:e3:ea:4d:17:e2:e6:37:b5:aa: d6:6b:e5:3a:dc:39:cd:d1:6d:3e:e0:e7:83:ac:b1:f6:6b:83: 98:ea:3a:2c:5c:12:ab:14:4c:7c:09:59:b9:b7:a3:d9:9b:48: fb:a7:09:ce:81:48:f8:19:96:71:c6:66:2e:21:27:e8:35:cc: 5a:b0:bf:1e:5a:e0:72:f9:c7:df:1e:ec:31:1c:ed:9f:6c:92: eb:b2:2e:32:68:d1:59:56:82:46:b2:ef:98:44:64:ca:ad:1d: 09:06:3d:0a:f6:c6:9d:6f:33:3f:11:b9:f1:71:46:dc:4a:81: 25:38:63:43:83:06:51:00:c1:54:26:ab:55:50:40:74:dd:e8: 6d:58:d6:d4:a4:9c:bb:66:7a:eb:07:da:b1:0e:39:ba:4c:84: e6:3b:c7:a5:db:80:b5:cf:77:b1:87:06:32:38:a3:3f:62:77: 54:ec:80:2f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1QkExMTAvBgNVBAUTKDE0MjBGODA3MDlEREQzREZDM0Y1MTE1NjU1MDNDRUY0 NDQ0QkVEQzMwHhcNMjYwNjA0MjAyNTAxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIxZGYxYy03OWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iHozoks8Fk+VfviBTSbY0ZwV4Cq6jstM0PD76+pSc6qCoRKfJV/PxFKmnWj Z4Ded0YksJ25iLWckIWT94ORSTdA6t0/D20EhfORmrejpLPd7c+ZxjXpMtnh8JSg zri2x3gOFVYI1vzxhPWos0F3qrNgyWDytTPZQNoEywwNhJ/4dwjBSpLdmiCqrqSY uipTD6RznbEC4X/chc9AzX5gsjEAN3epRZNMJ1YP8FBwH+gvwPb+gqUbQSS6R01t S4VmQcyc+px7Z9o7NoXtYfCjm1T/+yFFVepZbvN8wHqPm5VSivXhTaGs73e77r7V /W2UTiZYh58NF/3YEAQY+a6/MwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDq4QHBA 6qidK0JM3qHKUsjnj+XQMB8GA1UdIwQYMBaAFBQg+AcJ3dPfw/URVlUDzvRES+3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjVCQS8wNDlEQ0QyMkFE NjExMUVBOEYxQThENjNDNEY5QUUwMi9GQ0Q0QnduZDA5X0Q5UkZXVlFQTzlFUkw3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZDRDRCd25kMDlfRDlSRldWUVBPOUVSTDdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEY1QkEvMDQ5RENEMjJBRDYxMTFFQThGMUE4RDYzQzRGOUFFMDIvRTlFODAzNTZB RDYyMTFFQUJFREYwNDZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDBRwgMA0GCSqGSIb3DQEBCwUAA4IBAQCtnqPyeV1qxd3l/1VEGT8N zwnYfYB0fq6aBVXnZaHyaNPpN/49Sf2Ezn3jKEGHS63mQIcYqEDlYCU5/2nuVnM2 8LABFCmxzkgo9QTrX/ViqILj6k0X4uY3tarWa+U63DnN0W0+4OeDrLH2a4OY6jos XBKrFEx8CVm5t6PZm0j7pwnOgUj4GZZxxmYuISfoNcxasL8eWuBy+cffHuwxHO2f bJLrsi4yaNFZVoJGsu+YRGTKrR0JBj0K9sadbzM/EbnxcUbcSoElOGNDgwZRAMFU JqtVUEB03ehtWNbUpJy7ZnrrB9qxDjm6TITmO8el24C1z3exhwYyOKM/YndU7IAv -----END CERTIFICATE-----Generated at Sat Jun 6 13:20:50 2026 by rpki-client