$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/C58A126EC5E511F09C7BE943C4F9AE02.roa File: C58A126EC5E511F09C7BE943C4F9AE02.roa (raw, json) Hash identifier: zAj56uVK+5wN7MPOHl1TluLXmtjKdnYu2fKDDhyDAr4= Subject key identifier: 78:12:BC:BD:A2:C0:69:D2:43:A8:1C:E7:0F:AB:D2:DD:18:F6:4B:4D Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3E31 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/C58A126EC5E511F09C7BE943C4F9AE02.roa Signing time: Wed 02 Sep 2026 00:22:30 +0000 ROA not before: Wed 02 Sep 2026 00:22:30 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 13335 IP address blocks: 49.213.44.0/24 maxlen: 24 103.162.52.0/24 maxlen: 24 114.141.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15921 (0x3e31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Sep 2 00:22:30 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a976c46-c3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:9b:d9:c0:d3:b1:5c:36:10:42:f5:e6:4f: fa:a0:5a:f8:e8:d3:5d:5f:aa:85:c9:9a:22:72:24: ad:1c:6e:88:7c:fb:2b:eb:8e:c8:86:82:f4:1d:ad: 18:3c:a0:3b:58:a8:8f:e3:20:31:b6:2c:7d:c0:48: 44:34:4c:6e:82:17:2c:86:c8:4c:63:f6:ac:64:7e: ad:1e:fa:5a:ab:52:95:b6:60:22:dc:70:c3:2c:3d: f5:0d:e4:72:50:da:35:13:5a:76:a7:39:25:ba:1e: 7e:f5:7d:86:68:c5:4b:2d:33:a2:1c:6f:b3:75:69: 4b:23:5e:9f:05:76:fb:bf:5a:0b:f8:e7:6d:2d:ad: 20:94:70:23:f2:a4:63:50:18:f4:ff:1f:0e:9c:46: 8c:83:c4:08:a1:df:fc:61:2f:15:bc:ec:f8:5d:47: 1a:45:86:0d:d1:03:5b:6d:10:89:d2:f1:ec:e6:cc: 1a:51:8a:ea:cd:72:a7:c1:73:83:e3:db:fe:aa:00: e7:dd:4a:c9:cf:eb:43:fe:3e:15:db:dd:36:b8:02: e7:ab:f1:1a:4c:e8:5c:3e:5c:ac:1b:0b:49:d6:99: 55:45:52:64:43:80:d9:78:d4:6f:89:99:56:7b:6f: 2d:e0:e1:72:e2:0d:e0:ae:47:40:af:df:d7:fa:77: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:12:BC:BD:A2:C0:69:D2:43:A8:1C:E7:0F:AB:D2:DD:18:F6:4B:4D X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/C58A126EC5E511F09C7BE943C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.213.44.0/24 103.162.52.0/24 114.141.24.0/24 Signature Algorithm: sha256WithRSAEncryption b9:19:43:ab:e8:38:24:83:f9:a0:f0:bc:c9:d4:61:28:27:fc: 0b:bb:ec:87:de:2a:23:d3:16:e9:79:5e:12:23:33:22:40:2b: 52:a5:f3:db:4a:71:76:93:d8:cb:01:9b:aa:74:7f:20:a3:52: a5:b1:81:55:f8:40:f6:10:3e:e3:b1:64:3e:72:43:3b:38:5a: 1d:9e:e0:28:45:05:73:32:eb:5d:7b:42:d4:cd:05:7e:69:6f: 99:d3:e7:70:82:6f:13:fa:93:78:0f:ee:a2:9a:0b:5d:9e:aa: 3f:1e:c7:7f:74:7e:1e:ec:a7:d0:2c:99:d0:43:f7:03:5e:76: 60:f6:99:4c:00:68:80:33:bd:69:6b:81:14:b7:59:c4:bb:05: ed:05:13:0d:3e:c8:3b:66:44:37:65:84:da:8b:4e:62:8b:a0: 3c:40:d5:cc:85:6a:24:d9:7a:76:06:e2:61:78:46:74:0f:e6: dd:3e:aa:81:c2:f2:1b:97:68:73:5e:6c:b3:2c:40:de:3a:0a: ae:54:72:07:8c:de:de:44:10:b0:ea:d1:24:af:1c:5a:bf:58: 6a:6a:b9:1f:aa:44:82:3b:a8:81:25:52:c6:b7:64:ab:9a:50: 6c:07:d5:0b:70:33:e1:d3:92:9a:5a:d1:83:76:ba:c9:94:9a: c5:6e:b2:18 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICPjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwOTAyMDAyMjMwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk3NmM0Ni1jM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH+b2cDTsVw2EEL15k/6oFr46NNdX6qFyZoiciStHG6IfPsr647IhoL0Ha0Y PKA7WKiP4yAxtix9wEhENExughcshshMY/asZH6tHvpaq1KVtmAi3HDDLD31DeRy UNo1E1p2pzkluh5+9X2GaMVLLTOiHG+zdWlLI16fBXb7v1oL+OdtLa0glHAj8qRj UBj0/x8OnEaMg8QIod/8YS8VvOz4XUcaRYYN0QNbbRCJ0vHs5swaUYrqzXKnwXOD 49v+qgDn3UrJz+tD/j4V2902uALnq/EaTOhcPlysGwtJ1plVRVJkQ4DZeNRviZlW e28t4OFy4g3grkdAr9/X+ncYlwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHgSvL2i wGnSQ6gc5w+r0t0Y9ktNMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvQzU4QTEyNkVD NUU1MTFGMDlDN0JFOTQzQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAMdUsAwQAZ6I0AwQAco0YMA0GCSqGSIb3DQEBCwUAA4IBAQC5GUOr 6Dgkg/mg8LzJ1GEoJ/wLu+yH3ioj0xbpeV4SIzMiQCtSpfPbSnF2k9jLAZuqdH8g o1KlsYFV+ED2ED7jsWQ+ckM7OFodnuAoRQVzMutde0LUzQV+aW+Z0+dwgm8T+pN4 D+6imgtdnqo/Hsd/dH4e7KfQLJnQQ/cDXnZg9plMAGiAM71pa4EUt1nEuwXtBRMN Psg7ZkQ3ZYTai05ii6A8QNXMhWok2Xp2BuJheEZ0D+bdPqqBwvIbl2hzXmyzLEDe OgquVHIHjN7eRBCw6tEkrxxav1hqarkfqkSCO6iBJVLGt2SrmlBsB9ULcDPh05Ka WtGDdrrJlJrFbrIY -----END CERTIFICATE-----Generated at Thu Sep 10 18:12:39 2026 by rpki-client