$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58F8E9A8735711F099D2B76CC4F9AE02.roa File: 58F8E9A8735711F099D2B76CC4F9AE02.roa (raw, json) Hash identifier: bTiCvja+yOqeomFp+LbPLTURCr/1xk2C9gEP9ehi0II= Subject key identifier: A1:97:1C:5E:04:AD:E4:79:30:FA:0E:CD:D1:14:1F:68:81:3C:4E:77 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E8FD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58F8E9A8735711F099D2B76CC4F9AE02.roa Signing time: Sun 31 May 2026 17:32:14 +0000 ROA not before: Sun 31 May 2026 17:32:14 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 149623 IP address blocks: 103.151.128.0/24 maxlen: 24 2001:df1:fdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59645 (0xe8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:32:14 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c709e-c781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:33:1e:a2:96:d4:16:54:08:b6:47:d0:51: 27:59:97:2b:75:b3:49:91:72:d7:38:a5:80:78:8b: 48:86:56:55:7c:e5:3b:a8:88:56:5c:03:1a:d6:3b: 4a:7d:f1:c2:25:6d:9e:45:5b:93:fd:67:75:ed:64: 9c:0c:d1:4b:1a:72:5c:84:a5:ca:21:3e:9d:dc:bd: 9d:a9:20:cd:f6:aa:8c:e9:e8:5b:fb:b2:c7:30:85: c9:33:79:a5:40:57:0f:f4:f7:51:4e:c5:6d:e9:79: d3:83:86:4c:a8:d4:4c:bd:35:1b:81:cb:ec:5e:6b: 61:44:2e:22:65:73:2f:b8:eb:bf:e2:17:fb:08:fa: 79:34:c4:80:0d:d5:13:d2:15:62:9e:3d:ee:d9:d0: 4d:a3:c9:2c:e5:4c:ea:ff:8b:ba:eb:0d:ed:4e:fc: dc:85:cf:56:4f:b4:5a:66:0e:f5:77:62:0c:03:4c: b4:e0:fe:94:f8:81:23:e7:25:28:f8:37:68:07:ba: 45:db:01:b1:49:75:0f:ac:4f:e3:97:a2:86:9d:a1: 1b:8d:3e:6f:45:65:64:6f:70:b0:07:a4:91:98:1c: 21:5d:df:06:3f:93:7b:85:bf:31:19:c4:cf:77:7e: 90:84:ce:b9:c3:6a:32:a2:d0:2c:39:a2:25:42:ec: 69:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:97:1C:5E:04:AD:E4:79:30:FA:0E:CD:D1:14:1F:68:81:3C:4E:77 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58F8E9A8735711F099D2B76CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.151.128.0/24 IPv6: 2001:df1:fdc0::/48 Signature Algorithm: sha256WithRSAEncryption 60:5d:be:74:cd:b6:71:e5:2d:a2:ae:19:58:db:a7:4d:dd:9f: e4:b5:8d:79:11:a3:f0:9e:9a:df:e8:b9:b2:a4:62:29:39:d7: 64:85:2c:a1:c2:dc:10:94:a3:47:41:78:18:66:6c:9e:b3:f3: 50:0d:d8:a3:47:5d:15:4f:a2:15:17:d4:38:ff:0c:db:70:13: 74:3b:a2:cf:06:1e:93:00:d1:08:ce:40:83:35:fd:f4:60:34: 1c:8f:8e:d2:ad:0a:89:5a:42:6c:51:5d:b2:63:ee:35:00:a3: 3d:f1:07:8e:a8:92:49:5e:04:a8:0b:1a:1d:e7:46:3e:fb:ce: 16:79:f5:f6:5f:e1:98:28:23:46:3b:78:3d:6b:38:21:45:7c: 3f:91:97:db:a6:a1:a5:4f:8a:44:fe:de:95:ef:ef:6f:29:2d: a6:cb:6b:90:e1:08:7f:f7:6f:fc:92:90:04:a7:d1:54:3e:29: f1:6d:3f:be:51:ec:9b:36:61:7f:2f:24:1a:ca:15:55:0a:94: db:84:de:bb:3b:2f:bf:76:18:e1:cb:ea:9d:61:54:cf:6f:5d: 49:1a:db:b1:81:7d:72:f7:e1:83:66:46:d5:97:6b:8f:1c:94: e7:e5:13:d8:47:a3:5f:72:b4:18:dc:39:59:c7:54:70:78:4c: 16:44:59:d0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAOj9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MzIxNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzcwOWUtYzc4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJz0Mx6iltQWVAi2R9BRJ1mXK3WzSZFy1zilgHiLSIZWVXzlO6iIVlwDGtY7 Sn3xwiVtnkVbk/1nde1knAzRSxpyXISlyiE+ndy9nakgzfaqjOnoW/uyxzCFyTN5 pUBXD/T3UU7Fbel504OGTKjUTL01G4HL7F5rYUQuImVzL7jrv+IX+wj6eTTEgA3V E9IVYp497tnQTaPJLOVM6v+LuusN7U783IXPVk+0WmYO9XdiDANMtOD+lPiBI+cl KPg3aAe6RdsBsUl1D6xP45eihp2hG40+b0VlZG9wsAekkZgcIV3fBj+Te4W/MRnE z3d+kITOucNqMqLQLDmiJULsaXkCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBShlxxe BK3keTD6Ds3RFB9ogTxOdzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4RjhFOUE4 NzM1NzExRjA5OUQyQjc2Q0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeXgDAPBAIAAjAJAwcAIAEN8f3AMA0GCSqGSIb3DQEBCwUAA4IB AQBgXb50zbZx5S2irhlY26dN3Z/ktY15EaPwnprf6LmypGIpOddkhSyhwtwQlKNH QXgYZmyes/NQDdijR10VT6IVF9Q4/wzbcBN0O6LPBh6TANEIzkCDNf30YDQcj47S rQqJWkJsUV2yY+41AKM98QeOqJJJXgSoCxod50Y++84WefX2X+GYKCNGO3g9azgh RXw/kZfbpqGlT4pE/t6V7+9vKS2my2uQ4Qh/92/8kpAEp9FUPinxbT++UeybNmF/ LyQayhVVCpTbhN67Oy+/dhjhy+qdYVTPb11JGtuxgX1y9+GDZkbVl2uPHJTn5RPY R6NfcrQY3DlZx1RweEwWRFnQ -----END CERTIFICATE-----Generated at Thu Jun 4 09:05:53 2026 by rpki-client