$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/058B976ECA9811F0A295B360C4F9AE02.roa File: 058B976ECA9811F0A295B360C4F9AE02.roa (raw, json) Hash identifier: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58= Subject key identifier: AC:0C:D1:24:CC:CC:F7:97:7B:82:3D:98:1B:F1:95:DE:C7:C9:A2:E9 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 0440 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/058B976ECA9811F0A295B360C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:49:49 +0000 ROA not before: Tue 02 Dec 2025 23:59:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150300 IP address blocks: 43.249.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Dec 2 23:59:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48a4c-845e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:78:79:af:ad:e1:89:9c:90:18:c2:dd:be: c0:6b:f7:73:4c:32:76:8b:34:86:6a:2e:c5:73:49: 67:05:92:84:e9:5b:44:9d:f0:e7:9a:d0:28:51:74: 02:50:38:52:28:d0:dc:07:a0:1c:e6:de:fd:18:d6: 8b:78:5c:16:d6:eb:f4:4a:f4:a0:7e:b3:78:bc:30: c8:99:f1:c5:b6:4d:6b:c6:e2:c4:b9:4e:07:9c:a8: 28:88:c2:75:39:4b:45:d7:67:95:ab:7d:32:28:f5: d7:eb:7f:e0:90:a0:55:a9:86:4e:1d:ca:aa:b8:85: ce:f0:13:c6:a7:2a:cd:60:5f:ce:12:b6:3e:53:18: 9f:80:63:58:7b:e0:7a:80:61:67:44:cf:04:fc:d6: 4e:84:81:43:b9:31:9f:53:48:72:61:46:aa:7e:db: 03:f1:de:38:a7:43:fe:73:3d:30:37:e6:6e:90:fc: dc:cc:4c:da:ee:e5:f2:38:e8:d1:ea:1c:f5:41:8d: 5a:2f:de:41:62:af:d7:13:0b:68:ca:07:06:52:8c: 1f:5b:56:41:ff:66:28:a0:0d:a9:d3:4d:a6:6f:a2: d2:e2:71:c3:12:b6:1d:66:01:40:e4:20:3a:6f:aa: da:46:15:40:c0:05:ae:d9:41:ba:54:72:9e:55:86: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0C:D1:24:CC:CC:F7:97:7B:82:3D:98:1B:F1:95:DE:C7:C9:A2:E9 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/058B976ECA9811F0A295B360C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.63.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:1d:4f:5a:fb:c2:01:20:bd:83:8e:06:8b:90:7b:22:47:8d: 34:e7:41:04:5c:82:54:a6:07:08:26:16:07:38:bb:a2:fe:06: c0:21:a7:8a:f8:76:f5:18:e2:40:9b:c9:7a:2a:a0:80:4e:4b: eb:70:dc:a9:d4:e0:3c:f6:82:5a:25:dc:26:0f:f6:57:37:67: ee:53:a5:2e:4c:51:65:3a:68:5e:97:9e:d0:13:3e:27:34:38: 35:ca:34:b3:b8:64:c0:60:3f:82:4c:74:8c:e9:08:d8:04:74: 4d:d8:4a:33:49:1a:f2:b5:ee:87:bd:c0:40:77:62:31:31:e9: 84:a5:3d:7a:c1:da:1b:00:bd:0a:d5:13:86:33:ae:d7:fd:28: 12:ee:9d:56:ce:8b:30:dc:f2:d4:a8:bd:33:51:92:ca:90:33: c3:56:fb:b2:3d:96:ff:a3:66:f0:6b:c2:54:06:48:c9:66:ab: f2:22:53:3a:47:20:1d:aa:19:7d:01:40:ea:9a:8f:56:f9:f3: 89:ef:0b:8c:a8:2d:f0:ee:f7:5b:58:8d:c8:b8:14:e2:0b:94: 2a:2a:06:5a:9f:67:48:3e:4c:f5:35:5a:05:ff:1a:72:e6:e2: 1b:67:53:86:4f:04:2a:76:89:a7:f4:2f:15:5f:cf:e4:f5:68: bf:5b:39:0f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMjAyMjM1OTA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGE0Yy04NDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Bp4ea+t4YmckBjC3b7Aa/dzTDJ2izSGai7Fc0lnBZKE6VtEnfDnmtAoUXQC UDhSKNDcB6Ac5t79GNaLeFwW1uv0SvSgfrN4vDDImfHFtk1rxuLEuU4HnKgoiMJ1 OUtF12eVq30yKPXX63/gkKBVqYZOHcqquIXO8BPGpyrNYF/OErY+UxifgGNYe+B6 gGFnRM8E/NZOhIFDuTGfU0hyYUaqftsD8d44p0P+cz0wN+ZukPzczEza7uXyOOjR 6hz1QY1aL95BYq/XEwtoygcGUowfW1ZB/2YooA2p002mb6LS4nHDErYdZgFA5CA6 b6raRhVAwAWu2UG6VHKeVYbgQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKwM0STM zPeXe4I9mBvxld7HyaLpMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMDU4Qjk3NkVD QTk4MTFGMEEyOTVCMzYwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK/k/MA0GCSqGSIb3DQEBCwUAA4IBAQBdHU9a+8IBIL2DjgaLkHsi R40050EEXIJUpgcIJhYHOLui/gbAIaeK+Hb1GOJAm8l6KqCATkvrcNyp1OA89oJa JdwmD/ZXN2fuU6UuTFFlOmhel57QEz4nNDg1yjSzuGTAYD+CTHSM6QjYBHRN2Eoz SRryte6HvcBAd2IxMemEpT16wdobAL0K1ROGM67X/SgS7p1Wzosw3PLUqL0zUZLK kDPDVvuyPZb/o2bwa8JUBkjJZqvyIlM6RyAdqhl9AUDqmo9W+fOJ7wuMqC3w7vdb WI3IuBTiC5QqKgZan2dIPkz1NVoF/xpy5uIbZ1OGTwQqdomn9C8VX8/k9Wi/WzkP -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:15 2026 by rpki-client