$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/BF529990959F11EC844CAD64C4F9AE02.roa File: BF529990959F11EC844CAD64C4F9AE02.roa (raw, json) Hash identifier: 8slOQpxcJ7i4Fqpb2U0NO9KtNpjmpZLi6X29SuRjdfI= Subject key identifier: 90:42:8C:EC:24:0C:05:C8:B6:FD:72:99:8F:8C:3A:4D:DB:7B:65:7C Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 0845 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/BF529990959F11EC844CAD64C4F9AE02.roa Signing time: Mon 02 Mar 2026 21:26:16 +0000 ROA not before: Mon 02 Mar 2026 21:26:16 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 399734 IP address blocks: 113.29.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Mar 2 21:26:16 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a60078-e87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:3d:ca:56:1a:3e:f3:a7:ba:d7:fe:40:2e: 3f:2a:29:1d:62:8e:d7:27:eb:1d:ed:01:f6:a9:c6: 9e:06:7d:62:30:48:33:2b:4c:0c:d4:16:40:f6:27: da:e6:6a:16:dd:25:16:7a:d6:d3:7a:9e:3a:19:bc: b8:3f:af:13:b1:e9:b3:fa:13:63:55:5c:1a:f9:c7: b1:ae:43:32:28:19:a3:b7:e1:c9:99:a5:76:84:c2: 9f:8b:b2:f6:26:b8:2d:3c:c0:67:b0:46:2b:18:4d: 67:00:0e:fe:4f:8d:a6:f6:f2:1c:64:c9:fa:57:6c: 76:b1:c9:cb:c1:fb:c0:c0:b4:a3:9e:52:3f:d5:8f: cc:8d:61:db:ed:c3:19:53:8f:f5:ff:0d:5d:1c:51: 9e:65:d7:33:1c:6f:a7:ad:fd:80:7f:7f:79:93:76: 2a:4a:9c:c3:5b:ce:f3:57:3f:bd:63:2d:36:18:53: c7:7b:23:d6:84:04:cb:18:c2:65:1e:39:e0:18:0e: 8d:6b:3a:7e:a1:b5:8e:51:d2:f5:ad:ba:be:6c:a1: 42:82:dd:09:7b:2b:a0:54:80:1c:b2:0b:c6:5d:08: c8:24:18:fb:c0:b5:7b:ab:f5:e7:f3:8b:ec:47:0c: 28:8f:07:a4:0d:fa:25:48:1d:fe:24:49:64:d7:eb: a9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:42:8C:EC:24:0C:05:C8:B6:FD:72:99:8F:8C:3A:4D:DB:7B:65:7C X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/BF529990959F11EC844CAD64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 113.29.58.0/24 Signature Algorithm: sha256WithRSAEncryption 46:08:88:cd:a1:df:b9:7d:8e:00:b3:6a:78:12:46:46:e1:77: 5c:8b:85:8b:d2:70:65:e8:81:88:08:05:5b:82:24:53:a6:ea: 67:c1:01:39:ac:26:cd:cd:a0:ba:6d:af:d0:4b:97:10:00:7f: 65:56:30:e5:13:e9:50:cd:ba:ec:a3:fa:ba:54:a7:b9:91:4f: 50:be:ad:b2:fb:36:7e:f4:f0:ed:25:ac:a4:82:f1:c8:3f:c6: 21:05:db:1d:b6:e3:70:7f:fc:9b:f8:27:71:39:b7:78:f5:55: 00:dd:41:a8:d9:87:f4:97:23:d2:d1:08:38:ba:1b:b8:35:17: 4d:6e:71:5f:36:bc:ce:c2:87:e8:94:31:a4:2c:0f:69:1e:e1: 91:0d:fb:58:ac:18:70:f0:7c:aa:c1:39:f9:23:ab:e3:21:e0: 98:26:3b:05:e0:07:d6:36:b9:6f:f6:3f:4b:2a:79:55:d4:3c: 92:33:a4:5f:89:3c:48:5a:b5:2c:95:2b:5b:50:09:e5:cd:eb: c6:76:03:72:cf:0f:1f:bc:60:77:41:83:da:ea:74:ab:44:58: cf:04:5d:54:2f:5d:9b:ee:f1:89:d9:3d:16:9b:ad:78:e3:5f: c9:56:25:f9:48:d9:6b:17:2d:1d:ef:b1:75:45:f8:85:b7:ea: ee:f1:14:55 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjYwMzAyMjEyNjE2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MDA3OC1lODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyA9ylYaPvOnutf+QC4/KikdYo7XJ+sd7QH2qcaeBn1iMEgzK0wM1BZA9ifa 5moW3SUWetbTep46Gby4P68Tsemz+hNjVVwa+cexrkMyKBmjt+HJmaV2hMKfi7L2 JrgtPMBnsEYrGE1nAA7+T42m9vIcZMn6V2x2scnLwfvAwLSjnlI/1Y/MjWHb7cMZ U4/1/w1dHFGeZdczHG+nrf2Af395k3YqSpzDW87zVz+9Yy02GFPHeyPWhATLGMJl HjngGA6Nazp+obWOUdL1rbq+bKFCgt0JeyugVIAcsgvGXQjIJBj7wLV7q/Xn84vs RwwojwekDfolSB3+JElk1+upgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJBCjOwk DAXItv1ymY+MOk3be2V8MB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0JFQTIvMTlGRUE0NTgwMzMyMTFFQkIwNUQ1ODE0QzRGOUFFMDIvQkY1Mjk5OTA5 NTlGMTFFQzg0NENBRDY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAcR06MA0GCSqGSIb3DQEBCwUAA4IBAQBGCIjNod+5fY4As2p4EkZG 4Xdci4WL0nBl6IGICAVbgiRTpupnwQE5rCbNzaC6ba/QS5cQAH9lVjDlE+lQzbrs o/q6VKe5kU9Qvq2y+zZ+9PDtJaykgvHIP8YhBdsdtuNwf/yb+CdxObd49VUA3UGo 2Yf0lyPS0Qg4uhu4NRdNbnFfNrzOwofolDGkLA9pHuGRDftYrBhw8HyqwTn5I6vj IeCYJjsF4AfWNrlv9j9LKnlV1DySM6RfiTxIWrUslStbUAnlzevGdgNyzw8fvGB3 QYPa6nSrRFjPBF1UL12b7vGJ2T0Wm61441/JViX5SNlrFy0d77F1RfiFt+ru8RRV -----END CERTIFICATE-----Generated at Mon Mar 23 10:09:33 2026 by rpki-client