$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CCD290E767411F0B22A7D0FC4F9AE02.roa File: 8CCD290E767411F0B22A7D0FC4F9AE02.roa (raw, json) Hash identifier: vimDqazoV/CvN79Ot9Otpn9KuOe7Bq39ot+sGtkN0cQ= Subject key identifier: A5:94:54:40:3B:62:BA:C1:82:BD:08:A9:11:6E:A8:49:22:FB:44:4A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F600 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CCD290E767411F0B22A7D0FC4F9AE02.roa Signing time: Mon 06 Jul 2026 17:38:12 +0000 ROA not before: Mon 06 Jul 2026 17:38:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151684 IP address blocks: 43.231.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62976 (0xf600) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:38:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be804-866e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:91:1b:f2:e4:a8:53:76:6e:d3:57:60:29: 5a:a8:7d:93:7d:ab:5c:bf:d8:e9:71:72:c4:83:78: b7:6d:71:4e:55:e4:de:db:0c:25:4c:6a:80:12:af: a2:b1:e7:05:3f:2f:e3:84:a0:96:b5:03:6d:78:b0: df:42:40:98:8b:8f:44:8c:47:f5:73:d4:d7:b3:eb: a3:30:38:58:80:da:fa:45:34:ea:67:b9:7a:ed:fd: bc:3a:49:87:12:be:f3:84:20:66:de:82:cc:6b:57: 8f:3e:8f:ba:23:f6:dc:40:d3:ba:d8:6a:0f:fc:c6: 37:fd:6f:18:bf:76:bf:13:c9:54:d3:35:c0:88:9a: 19:cd:6c:69:8c:d0:1e:5d:b3:04:76:9b:8e:57:4f: cf:a8:18:81:cb:45:15:ff:06:24:e6:1e:5e:4b:fb: 5f:aa:e8:be:b0:5a:25:47:c6:ba:e9:c2:1f:25:87: 2f:62:85:b1:28:2c:3d:c8:c8:6d:f7:90:42:3b:d2: e0:36:c8:4a:4a:8c:4e:87:3c:54:3d:70:eb:2e:36: 47:0e:c1:b5:6f:53:86:5a:80:06:c8:a8:24:58:f2: fe:d5:76:5f:fe:ed:ed:47:16:d4:b6:ec:99:d3:aa: 36:42:d5:d3:d5:f9:47:98:8c:4c:72:8a:14:95:ee: 60:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:94:54:40:3B:62:BA:C1:82:BD:08:A9:11:6E:A8:49:22:FB:44:4A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CCD290E767411F0B22A7D0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.130.0/24 Signature Algorithm: sha256WithRSAEncryption 05:ff:c4:18:93:f4:21:a3:bb:73:c9:b9:86:f7:30:2c:06:f8: b3:e6:2a:ba:d3:f9:a1:0f:ad:d4:0d:af:07:e4:ef:5b:50:3d: 87:f1:52:8c:8b:69:84:0a:4f:39:c7:3d:e8:55:c1:c7:7c:b0: 2b:b3:7f:d7:3d:20:ea:da:cd:7f:75:20:1b:ca:51:96:02:b2: e4:d3:16:b4:24:0e:4e:6d:14:4b:e9:93:40:13:d2:25:01:b6: af:2e:d9:3a:bc:87:9e:e9:ca:8d:2f:74:27:1c:eb:0d:88:da: 89:75:8f:8d:46:59:4c:74:7d:0e:49:d7:35:b5:0e:5d:18:fb: 49:dc:6b:f3:32:1d:3c:2a:74:c1:06:8f:68:98:71:37:78:ad: dc:ad:26:05:81:b3:46:40:1a:6f:b8:88:5c:38:67:7b:75:6b: b2:48:13:a2:c3:94:fc:53:cf:41:fc:ac:81:36:a6:3a:1a:49: 0c:78:fe:5f:82:e5:e9:d4:9e:1b:76:b9:99:1e:a6:e7:82:1a: bc:82:b2:58:75:f6:aa:d5:b6:08:99:03:e0:83:8e:1f:9c:e0: dd:83:99:48:d5:83:4c:c4:a1:97:4a:e7:2b:70:9c:77:3b:21: c7:3c:7b:ba:f7:83:67:60:50:6d:2f:bb:17:77:5b:76:42:42: 4c:24:cc:cf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAPYAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzgxMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU4MDQtODY2ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJzMkRvy5KhTdm7TV2ApWqh9k32rXL/Y6XFyxIN4t21xTlXk3tsMJUxqgBKv orHnBT8v44SglrUDbXiw30JAmIuPRIxH9XPU17ProzA4WIDa+kU06me5eu39vDpJ hxK+84QgZt6CzGtXjz6PuiP23EDTuthqD/zGN/1vGL92vxPJVNM1wIiaGc1saYzQ Hl2zBHabjldPz6gYgctFFf8GJOYeXkv7X6rovrBaJUfGuunCHyWHL2KFsSgsPcjI bfeQQjvS4DbISkqMToc8VD1w6y42Rw7BtW9ThlqABsioJFjy/tV2X/7t7UcW1Lbs mdOqNkLV09X5R5iMTHKKFJXuYPECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSllFRA O2K6wYK9CKkRbqhJIvtESjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhDQ0QyOTBF NzY3NDExRjBCMjJBN0QwRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACvngjANBgkqhkiG9w0BAQsFAAOCAQEABf/EGJP0IaO7c8m5hvcw LAb4s+YqutP5oQ+t1A2vB+TvW1A9h/FSjItphApPOcc96FXBx3ywK7N/1z0g6trN f3UgG8pRlgKy5NMWtCQOTm0US+mTQBPSJQG2ry7ZOryHnunKjS90JxzrDYjaiXWP jUZZTHR9DknXNbUOXRj7Sdxr8zIdPCp0wQaPaJhxN3it3K0mBYGzRkAab7iIXDhn e3VrskgTosOU/FPPQfysgTamOhpJDHj+X4Ll6dSeG3a5mR6m54IavIKyWHX2qtW2 CJkD4IOOH5zg3YOZSNWDTMShl0rnK3Ccdzshxzx7uveDZ2BQbS+7F3dbdkJCTCTM zw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:13:08 2026 by rpki-client