$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CCD290E767411F0B22A7D0FC4F9AE02.roa File: 8CCD290E767411F0B22A7D0FC4F9AE02.roa (raw, json) Hash identifier: qG3gvnGDuYkLfyP/ZFiJkhTbT4YpAKgTVlqF77D7BdE= Subject key identifier: EF:DF:28:F6:A6:50:DD:CF:20:D5:24:AF:57:14:1D:D7:CF:17:EC:22 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D9B5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CCD290E767411F0B22A7D0FC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:00:33 +0000 ROA not before: Mon 11 Aug 2025 05:32:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151684 IP address blocks: 43.231.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55733 (0xd9b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 11 05:32:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c510-0ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:ba:fc:fa:47:5d:5b:8b:d8:c6:0f:29:bf: 45:93:c7:ea:2d:59:eb:0d:c6:83:eb:ae:41:8b:eb: 29:09:aa:00:a7:99:e2:7a:1d:9c:a1:c8:c0:3d:65: 3c:79:5e:b9:34:ac:5f:aa:47:27:c9:94:7a:2b:f8: 3b:7e:60:87:f5:c4:eb:0e:40:a4:c6:5f:61:d4:22: 40:aa:dc:04:95:96:da:ec:5a:b1:ae:38:53:06:ad: 90:19:66:67:c5:a9:1a:6d:a8:81:d1:c2:80:d8:30: 7d:a6:a2:0e:00:86:c8:71:b9:5b:79:1c:0d:be:41: 54:85:c9:00:ab:13:db:4e:4e:5d:0c:00:09:0e:82: 5f:b7:ac:fc:31:a0:f5:91:fe:1f:54:30:77:ab:12: 9c:4c:cb:9e:40:b4:48:da:1a:90:10:2d:a8:6e:12: 3f:16:d6:a2:93:38:16:2f:ae:46:cb:af:32:d3:7f: fa:1e:f0:b4:2c:38:51:c3:ed:fc:64:06:32:66:06: 4d:bb:f7:94:92:01:8a:2b:24:0d:5c:07:2c:2b:46: 1a:68:44:cb:67:ee:87:81:84:aa:6e:34:04:18:92: 24:90:e1:85:2b:f4:9b:94:5b:e2:0c:d6:38:9e:62: ea:29:cd:6e:9e:af:16:ad:02:38:07:0e:a1:d0:61: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DF:28:F6:A6:50:DD:CF:20:D5:24:AF:57:14:1D:D7:CF:17:EC:22 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CCD290E767411F0B22A7D0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.130.0/24 Signature Algorithm: sha256WithRSAEncryption b1:90:cc:78:bf:40:e0:4a:a2:b3:95:4f:c6:1d:65:40:de:a2: 0d:b6:08:07:c5:61:e3:32:2b:a4:93:3f:d0:83:28:c4:d8:e1: 01:eb:49:a7:ef:91:c3:dd:6e:ae:6e:5f:02:0f:7e:9e:21:04: c3:07:0f:10:ac:da:8c:53:2e:86:9b:77:ad:cc:aa:ac:8c:e6: fe:28:a3:01:4b:76:79:72:31:15:cf:ea:c2:fd:d8:34:98:7e: 19:c2:72:08:7f:84:21:3f:5a:a8:ed:26:cb:ad:d6:de:23:5b: 93:27:97:ba:6d:9c:65:07:3b:5d:65:ae:0e:7b:3a:7d:86:0f: a1:42:8a:b8:0a:5b:4c:bd:3f:53:bc:0c:1f:7e:92:4c:54:53: 56:9f:82:b0:ac:fe:91:f9:e6:da:39:90:67:a6:d8:54:f1:83: d7:16:11:1c:dd:01:47:75:7e:55:db:86:06:a1:d1:da:78:ec: bc:de:87:19:8d:e5:41:4d:85:7d:d3:38:5f:96:fa:94:a2:fa: c9:b3:57:70:d2:46:f4:81:e5:68:ee:13:84:8f:0e:7e:e2:41: 72:0c:2a:2a:c5:4a:05:da:16:a1:26:80:86:40:ee:3c:2b:c7: 89:4b:b8:aa:70:0b:d3:db:fd:1d:df:e5:92:49:ec:f0:14:31: a2:89:20:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANm1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgxMTA1MzIyMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1MTAtMGFjMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK54uvz6R11bi9jGDym/RZPH6i1Z6w3Gg+uuQYvrKQmqAKeZ4nodnKHIwD1l PHleuTSsX6pHJ8mUeiv4O35gh/XE6w5ApMZfYdQiQKrcBJWW2uxasa44UwatkBlm Z8WpGm2ogdHCgNgwfaaiDgCGyHG5W3kcDb5BVIXJAKsT205OXQwACQ6CX7es/DGg 9ZH+H1Qwd6sSnEzLnkC0SNoakBAtqG4SPxbWopM4Fi+uRsuvMtN/+h7wtCw4UcPt /GQGMmYGTbv3lJIBiiskDVwHLCtGGmhEy2fuh4GEqm40BBiSJJDhhSv0m5Rb4gzW OJ5i6inNbp6vFq0COAcOodBhtSUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTv3yj2 plDdzyDVJK9XFB3XzxfsIjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhDQ0QyOTBF NzY3NDExRjBCMjJBN0QwRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACvngjANBgkqhkiG9w0BAQsFAAOCAQEAsZDMeL9A4Eqis5VPxh1l QN6iDbYIB8Vh4zIrpJM/0IMoxNjhAetJp++Rw91urm5fAg9+niEEwwcPEKzajFMu hpt3rcyqrIzm/iijAUt2eXIxFc/qwv3YNJh+GcJyCH+EIT9aqO0my63W3iNbkyeX um2cZQc7XWWuDns6fYYPoUKKuApbTL0/U7wMH36STFRTVp+CsKz+kfnm2jmQZ6bY VPGD1xYRHN0BR3V+VduGBqHR2njsvN6HGY3lQU2FfdM4X5b6lKL6ybNXcNJG9IHl aO4ThI8OfuJBcgwqKsVKBdoWoSaAhkDuPCvHiUu4qnAL09v9Hd/lkkns8BQxookg Hg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:00 2026 by rpki-client