$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/32A7EBFE071E11F1A62A9B3F293D8C67.roa File: 32A7EBFE071E11F1A62A9B3F293D8C67.roa (raw, json) Hash identifier: CwEuo3yjGZBW6COo46Wwuerd28J69eKHrO9/S42Fy00= Subject key identifier: 57:D3:B1:95:1B:E6:C3:90:71:9A:CA:B6:ED:35:AF:90:FE:8F:BF:59 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 3B71 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/32A7EBFE071E11F1A62A9B3F293D8C67.roa Signing time: Wed 22 Apr 2026 15:10:53 +0000 ROA not before: Wed 22 Apr 2026 15:10:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149419 IP address blocks: 111.88.170.0/24 maxlen: 24 111.88.171.0/24 maxlen: 24 115.186.117.0/24 maxlen: 24 115.186.118.0/24 maxlen: 24 115.186.119.0/24 maxlen: 24 115.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 13:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15217 (0x3b71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Apr 22 15:10:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e8e4fd-0fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:1d:b9:61:b4:84:f6:46:b7:7c:69:55:25: 98:4e:22:2f:3d:54:33:bd:f9:ca:a8:bd:64:c4:0b: c6:5d:b5:c8:9c:06:d7:6d:2e:3c:02:50:15:ea:07: e4:7b:4f:85:87:0f:08:fd:1b:69:89:4d:4a:69:b8: 1d:d1:a8:49:63:81:d8:d6:9c:12:0a:52:c6:62:de: 55:99:c3:12:62:89:f0:94:05:03:13:0e:53:17:2b: 2d:b0:31:d8:36:39:08:38:e5:db:6b:bd:61:02:e1: a4:63:b3:66:6e:f5:5a:81:f3:c9:d7:1a:09:3a:2e: 03:f2:01:dc:44:c2:70:eb:cb:cb:0f:a0:08:9f:25: 99:b7:e2:49:d0:53:55:02:0c:6a:35:6d:37:fc:2a: a7:2d:7b:7e:c6:e8:b2:55:b2:4e:e5:96:19:80:78: 6c:29:0d:2e:5f:e5:10:70:7d:82:26:97:10:10:53: b7:be:6b:ff:71:07:fe:e6:10:0f:9b:05:65:61:ef: 8e:fc:4d:91:f1:5e:bf:44:a8:e4:b0:3e:b5:0a:22: 4c:47:87:c2:f8:b2:18:2d:f7:f2:56:97:a9:0c:13: c4:df:11:5e:fb:53:b4:de:6c:ac:6b:4c:cb:03:cb: 70:e7:b9:68:c7:a8:9f:16:7a:97:0c:30:3a:d1:fb: 70:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D3:B1:95:1B:E6:C3:90:71:9A:CA:B6:ED:35:AF:90:FE:8F:BF:59 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/32A7EBFE071E11F1A62A9B3F293D8C67.roa sbgp-ipAddrBlock: critical IPv4: 111.88.170.0/23 115.186.117.0-115.186.120.255 Signature Algorithm: sha256WithRSAEncryption 43:99:b6:f1:72:c3:43:20:29:f7:46:8e:b3:e8:6f:b1:8e:f9: e2:a8:7e:40:76:c1:5a:b5:e0:b3:6c:b6:9d:63:ce:10:e2:c3: b8:6c:5a:4d:96:86:c2:57:d2:82:94:29:9b:24:b1:2a:91:d3: d5:7c:a6:e8:67:93:e2:fc:59:a3:41:a0:c6:3d:ce:7d:58:6f: be:25:c5:90:3e:41:9e:c2:93:2c:cc:c3:e6:97:9f:38:74:d3: 4c:8b:d8:39:fc:91:27:23:81:a9:ae:43:97:9d:cd:ba:33:ae: a6:e8:88:d3:dd:e5:82:2d:b8:d6:ae:29:42:61:0a:81:0b:5b: b9:f2:23:82:b8:94:d6:55:3e:af:51:8b:9a:83:68:c4:95:42: b8:11:88:11:5e:dc:c9:b9:00:da:0d:59:5b:62:9c:b9:d1:a4: 26:a9:0a:57:27:23:9b:78:fc:52:67:b3:d0:96:ab:c5:0b:cb: 98:da:af:c3:3c:60:63:62:33:29:4f:71:e2:14:13:a2:d3:46: 19:38:5c:04:34:55:ed:4f:39:5d:7e:13:e4:51:c0:7f:65:4a: e9:2a:ae:05:73:91:79:5e:af:7b:8d:3d:a9:81:88:f4:7f:f6: 98:7b:38:47:6a:28:40:f5:f4:18:b5:11:eb:76:25:57:4e:d2: 41:9d:34:71 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICO3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjYwNDIyMTUxMDUzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWU4ZTRmZC0wZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWoduWG0hPZGt3xpVSWYTiIvPVQzvfnKqL1kxAvGXbXInAbXbS48AlAV6gfk e0+Fhw8I/RtpiU1Kabgd0ahJY4HY1pwSClLGYt5VmcMSYonwlAUDEw5TFystsDHY NjkIOOXba71hAuGkY7NmbvVagfPJ1xoJOi4D8gHcRMJw68vLD6AInyWZt+JJ0FNV AgxqNW03/CqnLXt+xuiyVbJO5ZYZgHhsKQ0uX+UQcH2CJpcQEFO3vmv/cQf+5hAP mwVlYe+O/E2R8V6/RKjksD61CiJMR4fC+LIYLffyVpepDBPE3xFe+1O03mysa0zL A8tw57lox6ifFnqXDDA60ftwMwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFFfTsZUb 5sOQcZrKtu01r5D+j79ZMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvMzJBN0VCRkUw NzFFMTFGMUE2MkE5QjNGMjkzRDhDNjcucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQBb1iqMAwDBABzunUDBABzungwDQYJKoZIhvcNAQELBQADggEBAEOZ tvFyw0MgKfdGjrPob7GO+eKofkB2wVq14LNstp1jzhDiw7hsWk2WhsJX0oKUKZsk sSqR09V8puhnk+L8WaNBoMY9zn1Yb74lxZA+QZ7CkyzMw+aXnzh000yL2Dn8kScj gamuQ5edzbozrqboiNPd5YItuNauKUJhCoELW7nyI4K4lNZVPq9Ri5qDaMSVQrgR iBFe3Mm5ANoNWVtinLnRpCapClcnI5t4/FJns9CWq8ULy5jar8M8YGNiMylPceIU E6LTRhk4XAQ0Ve1POV1+E+RRwH9lSukqrgVzkXler3uNPamBiPR/9ph7OEdqKED1 9Bi1Eet2JVdO0kGdNHE= -----END CERTIFICATE-----Generated at Tue Apr 28 08:22:51 2026 by rpki-client