$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/C3DFE8E48A4311F1B869C3203411F970.roa File: C3DFE8E48A4311F1B869C3203411F970.roa (raw, json) Hash identifier: EhCaL1leBykbYZWxG9405+W3f7XM7uKqg5KaoxRKZ1g= Subject key identifier: 78:DC:37:03:F7:58:2F:95:16:A7:55:45:D8:FB:40:17:10:2E:17:38 Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 3529 Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/C3DFE8E48A4311F1B869C3203411F970.roa Signing time: Tue 28 Jul 2026 05:18:28 +0000 ROA not before: Tue 28 Jul 2026 05:18:28 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 119.2.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13609 (0x3529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Jul 28 05:18:28 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a683ba4-ed53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:ee:a6:a5:58:ea:cb:06:77:e1:0f:1a:d3: 85:e8:8d:ea:0f:17:b3:80:5c:e5:5c:1b:be:96:32: 16:ab:5c:fd:6e:fa:b3:f4:d0:42:0d:dd:6a:f1:9c: 85:58:76:77:74:7f:71:71:b7:17:bd:36:0a:d2:26: 5c:87:b2:b0:0d:d3:d0:b8:de:b5:01:4c:6a:9f:3c: 86:85:a2:14:7a:67:e0:27:97:c9:e2:b7:49:8b:c8: e3:1c:f0:c6:1b:85:f6:86:7c:7c:d5:88:84:a5:0a: ec:d5:81:2d:54:35:c5:a0:aa:c8:7c:ed:8a:cc:69: 89:da:97:ac:fd:af:4a:81:19:1c:ff:52:4b:05:88: 7a:02:fb:3c:36:b9:da:91:4d:a7:60:8b:65:3f:f9: fd:95:21:f0:f0:73:08:ed:3e:d3:42:be:c8:37:73: ff:7e:0e:d9:ce:16:f0:ed:b5:bf:e2:f0:5a:a5:77: 7a:00:4e:b4:ca:87:76:70:54:9e:11:40:5a:21:51: 04:f4:2b:4e:ca:8d:dc:1d:c9:0c:96:8f:10:c6:46: d3:c8:9a:eb:16:92:b5:91:3d:e0:a4:6e:ba:d8:78: 97:41:c4:de:65:9e:03:4d:bc:73:20:a1:f4:da:c5: a7:99:4e:27:87:6e:1b:6a:99:36:f1:fb:47:04:46: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DC:37:03:F7:58:2F:95:16:A7:55:45:D8:FB:40:17:10:2E:17:38 X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/C3DFE8E48A4311F1B869C3203411F970.roa sbgp-ipAddrBlock: critical IPv4: 119.2.57.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:93:5e:dc:a3:82:b7:fd:59:1f:af:9c:f5:6b:66:c9:07:f3: 3a:ec:a7:9d:7e:9e:6e:f9:44:9b:c9:12:7d:51:fc:4d:7a:62: 9c:f1:90:15:99:cc:26:f2:f2:81:f2:6a:64:95:fb:5b:49:fd: a9:4a:55:eb:a4:4f:16:43:46:17:4e:f9:4d:81:db:26:7c:e0: 3e:9b:9a:65:f2:cd:6a:cf:aa:07:fc:6b:e0:be:a7:84:e1:bc: 8d:cf:3c:a4:bf:22:0f:12:db:a2:a9:26:2a:33:b2:f3:9f:64: ec:4a:2c:6a:d5:97:6c:6a:6b:4d:54:05:9d:b8:d4:aa:b9:f1: d4:ea:f4:ea:15:6e:52:b2:82:36:5c:8d:5a:c1:48:de:ff:44: 77:a5:34:f2:a3:80:56:88:71:e9:c2:4b:4e:80:52:34:da:cf: 7e:b8:0b:a8:b9:c2:5e:68:b0:c6:f7:fb:45:40:46:e6:97:26: b8:39:6f:6c:f8:cf:d6:5f:b9:3b:98:e3:5c:3c:25:02:93:27: 0b:be:9e:0c:a1:06:96:4a:ff:f8:42:21:7b:68:0e:04:00:5f: 2f:86:3a:3f:4b:8b:af:13:b6:89:a6:81:0d:d6:fb:48:b5:36: f2:e3:60:49:51:3d:cd:bd:b6:9a:5d:9d:6d:bc:9f:6a:d7:50: cb:90:e6:c1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjYwNzI4MDUxODI4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4M2JhNC1lZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLTupqVY6ssGd+EPGtOF6I3qDxezgFzlXBu+ljIWq1z9bvqz9NBCDd1q8ZyF WHZ3dH9xcbcXvTYK0iZch7KwDdPQuN61AUxqnzyGhaIUemfgJ5fJ4rdJi8jjHPDG G4X2hnx81YiEpQrs1YEtVDXFoKrIfO2KzGmJ2pes/a9KgRkc/1JLBYh6Avs8Nrna kU2nYItlP/n9lSHw8HMI7T7TQr7IN3P/fg7Zzhbw7bW/4vBapXd6AE60yod2cFSe EUBaIVEE9CtOyo3cHckMlo8QxkbTyJrrFpK1kT3gpG662HiXQcTeZZ4DTbxzIKH0 2sWnmU4nh24bapk28ftHBEZa/wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHjcNwP3 WC+VFqdVRdj7QBcQLhc4MB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNGQzQvQjE2NUEzQTgyOTU4MTFFMkIzOEQ1OEZCMDhCMDJDRDIvQzNERkU4RTQ4 QTQzMTFGMUI4NjlDMzIwMzQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdwI5MA0GCSqGSIb3DQEBCwUAA4IBAQBqk17co4K3/Vkfr5z1a2bJ B/M67Kedfp5u+USbyRJ9UfxNemKc8ZAVmcwm8vKB8mpklftbSf2pSlXrpE8WQ0YX TvlNgdsmfOA+m5pl8s1qz6oH/GvgvqeE4byNzzykvyIPEtuiqSYqM7Lzn2TsSixq 1ZdsamtNVAWduNSqufHU6vTqFW5SsoI2XI1awUje/0R3pTTyo4BWiHHpwktOgFI0 2s9+uAuoucJeaLDG9/tFQEbmlya4OW9s+M/WX7k7mONcPCUCkycLvp4MoQaWSv/4 QiF7aA4EAF8vhjo/S4uvE7aJpoEN1vtItTby42BJUT3NvbaaXZ1tvJ9q11DLkObB -----END CERTIFICATE-----Generated at Tue Jul 28 19:01:27 2026 by rpki-client