$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/32E97B06EABB11ECA6E9D068C4F9AE02.roa File: 32E97B06EABB11ECA6E9D068C4F9AE02.roa (raw, json) Hash identifier: +rndys+UZqtiSUJhJqUuwTbst0Tl0LERlTfw70bMHCw= Subject key identifier: AB:20:B0:42:D4:2A:19:2D:15:92:0C:69:C5:18:63:4C:1E:61:40:3A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6D70 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/32E97B06EABB11ECA6E9D068C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:21:45 +0000 ROA not before: Fri 02 Oct 2026 15:21:45 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131347 IP address blocks: 103.5.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28016 (0x6d70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:21:45 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcc09-f210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:be:16:fa:ef:3e:f3:28:d4:63:b1:5d:e1:41: eb:b2:73:70:97:2b:55:d3:d6:10:14:ca:2c:63:08: f3:00:76:ff:fe:5d:3e:a5:26:15:9d:5a:73:41:b3: 89:57:75:b8:cb:c0:ed:b1:37:00:06:f0:29:fd:b4: de:6d:fa:06:dc:69:c9:73:96:80:39:00:c6:f3:94: 72:7e:46:9e:37:9e:26:3e:4e:30:25:d3:a5:0c:d5: 2a:78:d8:75:8c:3a:27:b8:cb:08:29:db:92:b5:38: 7b:c3:45:e0:ef:db:5c:cc:d2:41:d8:3f:7d:e1:ae: 8d:a5:84:95:10:6e:45:47:44:ad:d5:1b:2d:cf:05: 71:ae:95:e6:c3:ba:8a:14:cf:7d:a1:00:3c:b5:05: 30:c2:4f:71:ce:fa:36:39:85:6a:b7:ca:52:2c:e9: 3b:6d:b6:3c:13:27:75:a5:b0:1a:df:33:af:da:be: fe:c3:ca:da:d3:9c:f0:85:4f:67:0e:6e:e7:40:d5: 6f:d5:ff:2a:2b:43:a2:7c:76:76:77:43:c9:0b:37: d0:82:0d:32:0a:4e:3a:f2:31:21:16:a6:d6:d1:d5: 3f:b8:21:8e:f2:d4:c3:fe:ca:0f:29:ef:92:f1:f7: a1:62:6e:db:26:da:d7:94:35:8b:2a:fa:00:ce:f8: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:20:B0:42:D4:2A:19:2D:15:92:0C:69:C5:18:63:4C:1E:61:40:3A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/32E97B06EABB11ECA6E9D068C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.204.0/23 Signature Algorithm: sha256WithRSAEncryption ba:cc:fc:ec:00:d6:5a:22:29:e3:35:4a:0d:d6:af:6a:b3:e0: ef:ce:41:61:cc:c8:dd:3c:56:50:0f:1a:4d:ad:73:1b:4a:f9: 5a:ff:a2:68:47:10:a0:78:ce:f1:28:38:57:8e:d5:ee:31:be: e4:ed:1c:0c:ce:e7:c9:69:cc:f6:2e:c6:d6:96:a1:ad:75:b8: 6e:38:30:5a:4d:4a:99:d1:87:0a:c1:7b:32:64:eb:24:a1:b7: 24:a8:9c:0d:f8:33:55:06:cb:9a:f0:c1:88:cc:7e:70:45:5c: 13:4e:71:0a:fd:bc:01:29:a0:6b:99:7e:ad:d3:13:96:8f:72: c3:97:c6:97:bc:ad:d9:bd:ce:64:be:52:b7:39:4e:9f:84:3a: dd:91:81:e9:85:4a:6f:f6:93:64:01:96:14:01:de:48:1d:f1: 91:9f:89:78:ad:1a:17:d5:bf:a7:97:84:35:36:37:47:b6:0c: 45:46:58:c8:9a:aa:f7:9f:16:53:5c:a4:a7:cb:92:2a:64:0b: fd:c2:a4:03:17:8c:38:22:f7:39:18:8a:fc:02:52:70:30:6b: c9:13:7a:e1:ab:bc:95:bb:d2:27:f8:18:63:5b:ed:9c:00:4d: 0d:a7:81:c5:df:c8:88:42:3b:d4:97:b6:56:b1:20:ef:d5:04: eb:fa:70:cf -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICbXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyMTQ1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2MwOS1mMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1r4W+u8+8yjUY7Fd4UHrsnNwlytV09YQFMosYwjzAHb//l0+pSYVnVpzQbOJ V3W4y8DtsTcABvAp/bTebfoG3GnJc5aAOQDG85RyfkaeN54mPk4wJdOlDNUqeNh1 jDonuMsIKduStTh7w0Xg79tczNJB2D994a6NpYSVEG5FR0St1RstzwVxrpXmw7qK FM99oQA8tQUwwk9xzvo2OYVqt8pSLOk7bbY8Eyd1pbAa3zOv2r7+w8ra05zwhU9n Dm7nQNVv1f8qK0OifHZ2d0PJCzfQgg0yCk468jEhFqbW0dU/uCGO8tTD/soPKe+S 8fehYm7bJtrXlDWLKvoAzvhIdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKsgsELU KhktFZIMacUYY0weYUA6MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzJFOTdCMDZF QUJCMTFFQ0E2RTlEMDY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZwXMMA0GCSqGSIb3DQEBCwUAA4IBAQC6zPzsANZaIinjNUoN1q9q s+DvzkFhzMjdPFZQDxpNrXMbSvla/6JoRxCgeM7xKDhXjtXuMb7k7RwMzufJacz2 LsbWlqGtdbhuODBaTUqZ0YcKwXsyZOskobckqJwN+DNVBsua8MGIzH5wRVwTTnEK /bwBKaBrmX6t0xOWj3LDl8aXvK3Zvc5kvlK3OU6fhDrdkYHphUpv9pNkAZYUAd5I HfGRn4l4rRoX1b+nl4Q1NjdHtgxFRljImqr3nxZTXKSny5IqZAv9wqQDF4w4Ivc5 GIr8AlJwMGvJE3rhq7yVu9In+BhjW+2cAE0Np4HF38iIQjvUl7ZWsSDv1QTr+nDP -----END CERTIFICATE-----Generated at Sun Oct 25 18:04:08 2026 by rpki-client