$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa File: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (raw, json) Hash identifier: 2qm8xc9Dh6l4WZzdxSvQg3OKbuj7hzzJ5qxge8M4c/o= Subject key identifier: F9:82:A1:5D:BE:67:7B:95:55:5B:7A:F7:E8:89:D7:A1:F9:71:D8:8A Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0258 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa Signing time: Fri 03 Jul 2026 03:29:42 +0000 ROA not before: Fri 03 Jul 2026 03:29:42 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 56309 IP address blocks: 43.229.76.0/22 maxlen: 24 103.22.180.0/22 maxlen: 24 2403:2300::/32 maxlen: 36 2403:2300:2::/48 maxlen: 48 2403:2300:3::/48 maxlen: 48 2403:2300:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Jul 3 03:29:42 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a472ca6-2be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a0:cd:ad:fa:4a:1a:85:4a:4b:88:f1:5b:0c: 15:77:e7:c5:08:eb:2b:1b:11:ef:cc:fd:1a:32:06: d9:71:97:dc:68:65:a6:76:6d:b9:ea:34:78:5e:10: bf:6f:40:30:cb:fc:ff:cb:72:30:02:a5:e6:95:5e: 2d:4c:22:6c:f8:4c:54:90:9a:a5:fa:fb:e8:dd:92: 02:34:74:7c:34:d8:62:81:38:4e:d2:e3:6d:46:e4: b2:12:8c:77:b6:4e:d0:9f:37:31:55:1f:48:44:0d: 21:c0:89:a4:c7:a9:47:78:c3:ca:9c:db:35:d3:3a: dc:66:db:53:1f:78:93:c4:b0:f2:83:04:b2:3f:5a: d4:63:43:2b:29:e8:d5:d0:00:8b:41:a1:87:57:cf: f1:12:8d:00:b8:82:43:9b:bd:69:23:45:45:91:30: 87:94:ce:8c:d0:3e:4c:2f:9c:c6:2c:48:bd:04:33: 1c:a6:e0:dd:40:53:69:94:67:0c:6a:38:8a:1e:6c: ef:93:29:89:df:b8:7d:8a:46:99:a1:84:99:d1:d8: 9c:ed:57:d7:04:ff:7d:0f:b6:63:91:5f:64:85:93: 34:21:3f:00:fa:d4:9f:76:e7:8e:fa:53:12:09:c1: e9:3b:2d:02:bc:3a:8c:ae:b2:45:d7:a8:dc:f2:63: d1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:82:A1:5D:BE:67:7B:95:55:5B:7A:F7:E8:89:D7:A1:F9:71:D8:8A X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/1966C856FB9E11ED8309FC1DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.76.0/22 103.22.180.0/22 IPv6: 2403:2300::/32 Signature Algorithm: sha256WithRSAEncryption 50:ca:d2:69:8b:f0:ad:7f:0b:25:60:62:b3:e8:17:bd:2a:ae: c7:f7:59:46:85:72:f1:43:d0:02:83:80:6d:11:85:c1:14:80: b9:81:5a:4c:72:db:95:9a:f0:84:fc:0b:f1:05:69:2b:1b:60: 21:2b:38:1e:94:14:8e:07:45:59:4e:b1:5a:36:3a:11:41:94: af:e2:c3:3a:0a:71:13:e6:1a:23:3a:20:6f:5b:fe:f1:74:f1: 18:82:89:96:a9:43:10:71:e9:2a:49:59:e3:df:67:c8:58:64: cc:56:79:09:1b:ef:40:04:f6:79:01:cc:ca:52:2a:ab:ef:86: 2c:c7:15:75:ec:4d:15:07:65:0a:28:c6:6c:8c:47:6c:e7:a8: 30:b0:c5:bb:6c:0e:b1:46:ac:b3:b7:4c:24:d8:7c:01:d5:18: ef:4b:44:85:18:2e:34:f4:95:7f:ab:8f:fc:b3:7d:82:99:f7: cc:01:32:c3:f7:06:df:2f:f8:39:f7:8d:90:50:c7:f0:6c:38: 96:ce:39:39:3c:53:2d:c4:00:8a:a6:08:23:79:bc:69:c2:3f: cc:20:a0:cf:bb:28:d6:a9:c7:9e:63:f9:97:92:63:54:7f:29: 0d:42:6c:e3:ad:00:1c:ad:42:8e:bd:4c:3f:d7:d7:70:da:d1: 56:a3:22:99 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjYwNzAzMDMyOTQyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3MmNhNi0yYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7qDNrfpKGoVKS4jxWwwVd+fFCOsrGxHvzP0aMgbZcZfcaGWmdm256jR4XhC/ b0Awy/z/y3IwAqXmlV4tTCJs+ExUkJql+vvo3ZICNHR8NNhigThO0uNtRuSyEox3 tk7QnzcxVR9IRA0hwImkx6lHeMPKnNs10zrcZttTH3iTxLDygwSyP1rUY0MrKejV 0ACLQaGHV8/xEo0AuIJDm71pI0VFkTCHlM6M0D5ML5zGLEi9BDMcpuDdQFNplGcM ajiKHmzvkymJ37h9ikaZoYSZ0dic7VfXBP99D7ZjkV9khZM0IT8A+tSfdueO+lMS CcHpOy0CvDqMrrJF16jc8mPRWQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPmCoV2+ Z3uVVVt69+iJ16H5cdiKMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1NDAvRDk3QTk1QkNGODgwMTFFREI5QUJGQzU2QzRGOUFFMDIvMTk2NkM4NTZG QjlFMTFFRDgzMDlGQzFEQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+VMAwQCZxa0MA0EAgACMAcDBQAkAyMAMA0GCSqGSIb3DQEBCwUA A4IBAQBQytJpi/CtfwslYGKz6Be9Kq7H91lGhXLxQ9ACg4BtEYXBFIC5gVpMctuV mvCE/AvxBWkrG2AhKzgelBSOB0VZTrFaNjoRQZSv4sM6CnET5hojOiBvW/7xdPEY gomWqUMQcekqSVnj32fIWGTMVnkJG+9ABPZ5AczKUiqr74YsxxV17E0VB2UKKMZs jEds56gwsMW7bA6xRqyzt0wk2HwB1RjvS0SFGC409JV/q4/8s32CmffMATLD9wbf L/g5942QUMfwbDiWzjk5PFMtxACKpggjebxpwj/MIKDPuyjWqceeY/mXkmNUfykN QmzjrQAcrUKOvUw/19dw2tFWoyKZ -----END CERTIFICATE-----Generated at Tue Jul 21 13:52:51 2026 by rpki-client