$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/2958A208394011EF8BFF2329C4F9AE02.roa File: 2958A208394011EF8BFF2329C4F9AE02.roa (raw, json) Hash identifier: +4dDlburVO2MmfNARrkvQtCk1fegQCkSHo+kZlpjT9U= Subject key identifier: 0C:D3:9B:30:E4:37:1F:1A:1F:91:D3:32:08:A8:06:C6:07:C6:E0:4D Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 1A97 Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/2958A208394011EF8BFF2329C4F9AE02.roa Signing time: Tue 14 Jul 2026 17:16:44 +0000 ROA not before: Tue 14 Jul 2026 17:16:44 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 4620 IP address blocks: 43.255.56.0/24 maxlen: 24 203.78.149.0/24 maxlen: 24 203.78.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 16:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6807 (0x1a97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: Jul 14 17:16:44 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a566efc-1e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:40:73:80:94:53:08:4f:fc:67:08:cb:03:18: d7:5e:00:2a:48:a4:28:60:a1:16:f8:bc:e3:17:5d: 53:1d:01:36:16:85:7d:79:61:8d:eb:1b:1d:ee:2e: c1:fd:b3:7f:c3:9f:30:16:6b:43:3e:a1:a5:f5:b5: 04:5f:72:94:b1:45:f9:02:72:78:46:84:01:32:50: d9:b1:dc:96:2c:f3:33:62:2c:b4:c5:fa:38:d7:49: 7d:3c:fe:8a:53:34:c2:ed:f3:19:f1:37:1a:c0:ae: 7e:70:28:a4:db:85:02:57:43:3f:b3:26:5d:54:b2: 11:86:2f:92:e4:fe:70:aa:80:bf:d5:28:35:c1:a5: 66:93:fa:71:cc:e8:bb:89:ef:63:76:0f:a1:f4:b1: c5:64:6f:49:62:78:8e:83:ae:c8:ec:23:a6:09:db: ba:19:38:65:b9:bb:74:ae:fd:ad:3e:a1:71:96:3c: c2:1e:1f:2a:17:f8:5f:00:30:3f:29:1b:40:41:a2: 62:0f:d0:75:7c:8c:07:a3:44:3c:c3:5c:71:5e:8b: 7e:dc:24:c9:13:54:43:bc:d3:22:58:dd:a7:d3:cd: 94:df:ac:bc:54:a6:24:e5:39:50:94:c1:b3:a2:dc: 65:0f:5e:35:32:49:55:ac:5b:81:20:cd:bb:85:70: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D3:9B:30:E4:37:1F:1A:1F:91:D3:32:08:A8:06:C6:07:C6:E0:4D X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/2958A208394011EF8BFF2329C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.56.0/24 203.78.149.0/24 203.78.151.0/24 Signature Algorithm: sha256WithRSAEncryption 33:4b:e7:53:96:95:f7:e0:24:be:22:84:a3:c4:fa:65:d4:3f: a2:c4:17:53:7c:dd:c0:45:8c:59:f4:45:3b:37:cd:a1:61:f2: ba:39:f4:48:e9:85:7d:d3:c2:2e:9e:62:54:bb:65:5b:1e:a2: 28:e9:10:04:ff:84:29:28:c7:ee:20:d1:2b:79:e6:8a:ed:c6: 19:2e:c4:7c:22:ec:94:48:8d:fb:21:83:7c:13:75:14:29:bc: bb:9b:1d:3a:ad:1e:38:48:45:ac:20:f3:21:aa:fe:14:93:ee: bd:05:d6:f5:38:c5:dd:dc:4b:23:7c:98:70:a9:0d:bc:4e:3a: 73:b7:90:18:df:03:55:05:68:29:40:d9:26:92:61:de:13:b7: 50:46:6e:b2:ae:81:96:71:3d:98:a2:2f:25:8b:dd:89:3e:d5: 1a:db:14:d9:b2:78:43:48:3b:65:d6:e3:6a:d9:f4:4d:71:a3: 4e:37:47:30:cd:c5:e7:b7:88:d6:cf:d8:b7:cb:7f:b8:33:a4: 2f:8c:8e:e2:e9:a5:99:bc:be:0c:1e:9a:03:c3:44:0c:f2:e7: 0d:81:a0:23:35:08:4e:ad:90:0e:fc:78:ba:a8:f8:69:c3:24: 84:31:3d:67:a0:e2:a6:10:1f:75:da:68:c8:4c:bc:04:23:5c: 92:cc:db:28 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICGpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjYwNzE0MTcxNjQ0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2NmVmYy0xZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0BzgJRTCE/8ZwjLAxjXXgAqSKQoYKEW+LzjF11THQE2FoV9eWGN6xsd7i7B /bN/w58wFmtDPqGl9bUEX3KUsUX5AnJ4RoQBMlDZsdyWLPMzYiy0xfo410l9PP6K UzTC7fMZ8TcawK5+cCik24UCV0M/syZdVLIRhi+S5P5wqoC/1Sg1waVmk/pxzOi7 ie9jdg+h9LHFZG9JYniOg67I7COmCdu6GThlubt0rv2tPqFxljzCHh8qF/hfADA/ KRtAQaJiD9B1fIwHo0Q8w1xxXot+3CTJE1RDvNMiWN2n082U36y8VKYk5TlQlMGz otxlD141MklVrFuBIM27hXACsQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAzTmzDk Nx8aH5HTMgioBsYHxuBNMB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBRjMvOUQyMDBEQkM2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvMjk1OEEyMDgz OTQwMTFFRjhCRkYyMzI5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK/84AwQAy06VAwQAy06XMA0GCSqGSIb3DQEBCwUAA4IBAQAzS+dT lpX34CS+IoSjxPpl1D+ixBdTfN3ARYxZ9EU7N82hYfK6OfRI6YV908IunmJUu2Vb HqIo6RAE/4QpKMfuINEreeaK7cYZLsR8IuyUSI37IYN8E3UUKby7mx06rR44SEWs IPMhqv4Uk+69Bdb1OMXd3EsjfJhwqQ28Tjpzt5AY3wNVBWgpQNkmkmHeE7dQRm6y roGWcT2Yoi8li92JPtUa2xTZsnhDSDtl1uNq2fRNcaNON0cwzcXnt4jWz9i3y3+4 M6QvjI7i6aWZvL4MHpoDw0QM8ucNgaAjNQhOrZAO/Hi6qPhpwySEMT1noOKmEB91 2mjITLwEI1ySzNso -----END CERTIFICATE-----Generated at Sat Jul 18 03:00:04 2026 by rpki-client