$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/1298B038BE8811F1BBB9DC0C3911F970.roa File: 1298B038BE8811F1BBB9DC0C3911F970.roa (raw, json) Hash identifier: H8B8QHf5cR6QyZsDQYemEDiym0bGaWKaYVhZbc2G/5g= Subject key identifier: 6B:22:F2:72:5D:CC:B4:CB:45:11:92:58:C3:40:12:39:E4:42:11:64 Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0574 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/1298B038BE8811F1BBB9DC0C3911F970.roa Signing time: Fri 02 Oct 2026 17:38:27 +0000 ROA not before: Fri 02 Oct 2026 17:38:26 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9009 IP address blocks: 43.228.156.0/24 maxlen: 24 43.228.158.0/24 maxlen: 24 103.47.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 23:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Oct 2 17:38:26 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6abfec12-3544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:89:6c:9d:c5:a1:1b:fa:71:16:65:ae:db: 04:fd:66:50:4e:bd:58:fd:82:3d:2a:ad:69:8b:90: ac:1c:47:a6:69:de:cc:51:34:2d:dc:49:84:b4:46: 89:8f:f9:74:4e:92:4f:8a:de:89:39:a5:20:6b:9b: 00:ba:18:e3:37:a4:b2:2a:c8:bf:04:c5:5d:51:b9: 5e:4e:f7:45:6c:ec:65:b5:21:67:7b:f0:27:5f:9e: c5:b3:e7:e9:b8:6a:98:21:47:f6:e2:76:a5:85:aa: c4:fd:5a:58:00:eb:44:3a:e2:0a:f7:fb:e4:d1:62: 95:7f:62:f4:a0:e5:ee:ac:8c:67:bf:1a:3f:78:d6: 7d:61:b0:d5:5a:43:a3:53:7a:94:e9:c6:77:ec:ff: 6f:da:9e:65:ea:04:18:98:ff:e3:05:0f:24:71:31: fa:e3:f7:ad:43:a2:be:6b:57:e6:98:fa:c5:e4:90: f1:20:6b:32:e3:c8:52:a2:98:46:3f:a9:c1:60:0a: 05:15:99:17:c4:c3:f2:c4:57:a9:28:d9:6e:5f:ce: 01:cf:e4:21:4b:48:ac:d9:eb:6b:84:51:7c:b1:a6: da:f0:64:c4:fd:b7:6c:c2:2e:a6:9c:ae:a8:4c:79: 02:89:b1:fe:3f:f3:a7:e2:8a:1e:96:5a:a8:52:ca: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:22:F2:72:5D:CC:B4:CB:45:11:92:58:C3:40:12:39:E4:42:11:64 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/1298B038BE8811F1BBB9DC0C3911F970.roa sbgp-ipAddrBlock: critical IPv4: 43.228.156.0/24 43.228.158.0/24 103.47.146.0/24 Signature Algorithm: sha256WithRSAEncryption 60:48:c1:12:19:a7:c0:cc:9e:0d:3f:f7:ef:3a:e6:34:89:47: b7:5e:bf:fa:d1:f5:88:cd:8a:c5:45:4d:9c:39:95:b1:23:f6: 73:a1:c3:a4:79:9d:8d:db:91:ec:c2:10:22:89:5b:65:da:7a: 53:61:4e:dd:f8:b4:3f:16:56:5a:21:6e:13:b9:59:2f:b5:d5: cb:d5:e1:38:73:7b:d3:43:0b:33:5e:e9:9b:13:b1:31:51:60: c1:b4:79:f4:a6:32:41:d0:c7:66:eb:08:04:1c:f4:d4:b9:87: c3:d5:e2:0a:f2:ab:9b:02:6d:c1:94:e9:98:65:44:3e:e7:16: 2c:f6:e6:cb:e1:f4:14:86:c9:95:3d:1c:4e:4c:49:be:fb:68: 73:41:8c:b6:1f:ca:74:9e:d3:8b:42:25:c8:ce:4a:79:8a:f3: aa:77:2e:e5:30:ef:d8:50:71:c5:c8:85:88:ea:e2:c5:5a:5a: a5:97:35:98:b7:a5:28:47:e9:cb:29:3c:28:32:93:f9:ee:7b: 84:00:bb:c0:ca:5d:8f:ae:a6:99:0d:3e:f4:14:2e:04:3c:5e: e5:63:be:3c:b4:6f:dc:89:1c:15:6e:4a:0a:4f:01:1b:1a:19: e0:42:99:da:79:d2:a9:f1:df:f3:94:2d:4f:bc:76:c9:a6:ff: c2:17:6b:92 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjYxMDAyMTczODI2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmZWMxMi0zNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuy+JbJ3FoRv6cRZlrtsE/WZQTr1Y/YI9Kq1pi5CsHEemad7MUTQt3EmEtEaJ j/l0TpJPit6JOaUga5sAuhjjN6SyKsi/BMVdUbleTvdFbOxltSFne/AnX57Fs+fp uGqYIUf24nalharE/VpYAOtEOuIK9/vk0WKVf2L0oOXurIxnvxo/eNZ9YbDVWkOj U3qU6cZ37P9v2p5l6gQYmP/jBQ8kcTH64/etQ6K+a1fmmPrF5JDxIGsy48hSophG P6nBYAoFFZkXxMPyxFepKNluX84Bz+QhS0is2etrhFF8saba8GTE/bdswi6mnK6o THkCibH+P/On4ooellqoUsorFwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGsi8nJd zLTLRRGSWMNAEjnkQhFkMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvMTI5OEIwMzhC RTg4MTFGMUJCQjlEQzBDMzkxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK+ScAwQAK+SeAwQAZy+SMA0GCSqGSIb3DQEBCwUAA4IBAQBgSMES GafAzJ4NP/fvOuY0iUe3Xr/60fWIzYrFRU2cOZWxI/ZzocOkeZ2N25HswhAiiVtl 2npTYU7d+LQ/FlZaIW4TuVkvtdXL1eE4c3vTQwszXumbE7ExUWDBtHn0pjJB0Mdm 6wgEHPTUuYfD1eIK8qubAm3BlOmYZUQ+5xYs9ubL4fQUhsmVPRxOTEm++2hzQYy2 H8p0ntOLQiXIzkp5ivOqdy7lMO/YUHHFyIWI6uLFWlqllzWYt6UoR+nLKTwoMpP5 7nuEALvAyl2PrqaZDT70FC4EPF7lY748tG/ciRwVbkoKTwEbGhngQpnaedKp8d/z lC1PvHbJpv/CF2uS -----END CERTIFICATE-----Generated at Mon Oct 19 02:28:25 2026 by rpki-client