$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/32DFCCDCEB8011EAAB806163C4F9AE02.roa File: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (raw, json) Hash identifier: 8LoanuZufNzx+8l/p8k3XiFtrX7kSJzxs+0zjNwQCLM= Subject key identifier: 41:DC:F0:18:84:72:4F:AB:30:F7:58:81:84:53:B1:50:16:79:B2:38 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 35D3 Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/32DFCCDCEB8011EAAB806163C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:40:48 +0000 ROA not before: Fri 02 Oct 2026 15:40:48 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 133418 IP address blocks: 103.136.123.0/24 maxlen: 24 2404:8e80:4::/48 maxlen: 48 2404:8e80:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 15:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13779 (0x35d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Oct 2 15:40:48 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abfd07f-fd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:0d:51:42:66:3d:bb:91:b5:d9:62:08:eb: 70:56:14:a1:38:de:be:e1:b1:7e:a5:1d:ea:1c:15: 32:85:ae:9e:4c:a7:3f:ca:e8:f7:ad:0b:be:c8:d6: f1:bd:90:66:99:df:c9:95:9f:0b:18:60:c8:c7:2d: 94:4f:af:7e:ea:56:e9:83:94:60:6a:6d:94:e5:cb: 1e:66:16:fa:1b:00:f4:e9:68:8a:fa:ab:41:15:04: a0:82:a9:57:f5:e0:11:7d:de:f5:2b:f4:59:64:03: ba:29:ee:9e:28:a8:c7:11:8d:6d:b6:4f:7c:00:80: e4:05:64:de:90:8f:49:bf:e7:43:0a:84:30:c1:db: 96:8d:59:70:f9:d1:4b:7c:2f:4c:7b:55:fa:2b:e1: a7:1a:95:55:bb:c0:89:c6:dc:b8:20:67:66:87:ea: 06:2d:be:a7:91:1c:fa:c7:a9:81:32:c9:53:6f:70: 08:68:81:0d:0c:3c:8d:93:a6:c5:73:23:54:34:45: d1:42:68:d8:d3:39:e2:53:c2:44:dc:03:ce:8e:b6: da:dd:e1:43:de:a5:a8:ac:ac:8d:d5:a3:88:2f:7d: bb:ea:4e:4a:ca:80:c8:9c:9e:91:d4:b8:3e:91:88: ea:62:d6:b6:33:cb:c4:be:16:24:9f:ee:c0:62:c4: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DC:F0:18:84:72:4F:AB:30:F7:58:81:84:53:B1:50:16:79:B2:38 X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/32DFCCDCEB8011EAAB806163C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.123.0/24 IPv6: 2404:8e80:4::/48 2404:8e80:8::/48 Signature Algorithm: sha256WithRSAEncryption 44:01:e5:61:ea:5f:a8:da:a3:dc:7b:d0:3a:d0:84:85:5b:4b: e0:56:ba:11:02:46:9e:c2:c3:81:25:9b:4e:62:13:99:11:5f: 52:f5:c7:b9:bb:df:57:ff:97:e8:df:51:a1:b3:a7:79:00:0f: 8f:f8:f7:49:1e:bf:bc:ea:43:3e:a4:07:30:c1:d9:c0:01:f4: 3f:33:e6:e9:51:c8:9b:d4:86:e4:6c:33:dd:8a:c0:b5:43:d3: 3c:4d:00:bc:dd:a5:44:6b:8b:b6:08:b5:d8:ff:eb:6f:d7:5e: 22:a8:13:94:cf:77:ab:92:3f:a2:6b:fe:90:b0:34:80:ba:f5: 68:52:e5:1d:69:d4:17:1f:df:9b:ef:30:ff:28:70:09:6b:c6: f7:bd:d4:3f:be:30:7f:26:e2:c2:92:56:63:4b:24:db:5f:6d: e7:47:cc:e8:f1:83:9a:b7:1c:22:ff:a9:29:33:97:4d:d7:de: 67:29:35:b2:9b:14:01:40:aa:46:83:5c:c7:15:ab:8d:48:1e: 94:80:aa:be:1e:1a:23:e8:35:27:81:1c:9e:9d:ee:72:67:e3: 83:69:47:1a:4f:54:f3:96:1e:c9:8b:87:ee:bb:c9:64:c1:47: 29:8d:36:83:84:4a:62:cc:90:4d:55:c0:f5:f7:ea:b1:68:f4: 9a:d9:ac:4e -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICNdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjYxMDAyMTU0MDQ4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmZDA3Zi1mZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkANUUJmPbuRtdliCOtwVhShON6+4bF+pR3qHBUyha6eTKc/yuj3rQu+yNbx vZBmmd/JlZ8LGGDIxy2UT69+6lbpg5Rgam2U5cseZhb6GwD06WiK+qtBFQSggqlX 9eARfd71K/RZZAO6Ke6eKKjHEY1ttk98AIDkBWTekI9Jv+dDCoQwwduWjVlw+dFL fC9Me1X6K+GnGpVVu8CJxty4IGdmh+oGLb6nkRz6x6mBMslTb3AIaIENDDyNk6bF cyNUNEXRQmjY0zniU8JE3APOjrba3eFD3qWorKyN1aOIL3276k5KyoDInJ6R1Lg+ kYjqYta2M8vEvhYkn+7AYsRZnwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFEHc8BiE ck+rMPdYgYRTsVAWebI4MB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVFQjgvOEUwRjJDQjYxREExMTFFMkI5MDZCQzkzMDhCMDJDRDIvMzJERkNDRENF QjgwMTFFQUFCODA2MTYzQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQAZ4h7MBgEAgACMBIDBwAkBI6AAAQDBwAkBI6AAAgwDQYJKoZIhvcN AQELBQADggEBAEQB5WHqX6jao9x70DrQhIVbS+BWuhECRp7Cw4Elm05iE5kRX1L1 x7m731f/l+jfUaGzp3kAD4/490kev7zqQz6kBzDB2cAB9D8z5ulRyJvUhuRsM92K wLVD0zxNALzdpURri7YItdj/62/XXiKoE5TPd6uSP6Jr/pCwNIC69WhS5R1p1Bcf 35vvMP8ocAlrxve91D++MH8m4sKSVmNLJNtfbedHzOjxg5q3HCL/qSkzl03X3mcp NbKbFAFAqkaDXMcVq41IHpSAqr4eGiPoNSeBHJ6d7nJn44NpRxpPVPOWHsmLh+67 yWTBRymNNoOESmLMkE1VwPX36rFo9JrZrE4= -----END CERTIFICATE-----Generated at Tue Oct 6 14:52:19 2026 by rpki-client