$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8B58F72A7BF511F0BEBF8326C4F9AE02.roa File: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (raw, json) Hash identifier: qpSDoTipwbn3qmlJo9kOaWOWyQWNuZBEXvzsDRT1K7I= Subject key identifier: 32:71:08:63:C5:CB:10:78:AC:88:8E:9A:42:FF:16:CF:D9:38:9C:48 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: E0 Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8B58F72A7BF511F0BEBF8326C4F9AE02.roa Signing time: Mon 07 Sep 2026 00:09:42 +0000 ROA not before: Mon 07 Sep 2026 00:09:42 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 64098 IP address blocks: 59.153.8.0/22 maxlen: 24 103.55.132.0/24 maxlen: 24 103.55.135.0/24 maxlen: 24 103.61.129.0/24 maxlen: 24 103.79.4.0/22 maxlen: 22 103.79.4.0/24 maxlen: 24 103.116.170.0/24 maxlen: 24 103.197.232.0/22 maxlen: 22 103.197.232.0/24 maxlen: 24 103.197.233.0/24 maxlen: 24 160.202.140.0/22 maxlen: 22 203.189.126.0/24 maxlen: 24 221.120.164.0/22 maxlen: 22 221.120.164.0/24 maxlen: 24 221.120.165.0/24 maxlen: 24 221.120.166.0/24 maxlen: 24 221.120.167.0/24 maxlen: 24 2400:1240::/32 maxlen: 32 2403:780::/32 maxlen: 32 2403:780:f::/48 maxlen: 48 2403:780:e300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 06:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Sep 7 00:09:42 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9e00c6-0c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:62:c9:f5:e7:d1:a3:65:2f:fe:a1:97:3b: bd:94:00:a8:2a:3a:d6:70:01:c2:af:08:08:6a:d3: 78:b6:f0:ae:e0:01:86:8f:82:59:29:6e:c6:fd:0a: 19:3e:d7:99:ba:14:bb:b3:7f:9e:61:f0:61:62:52: 25:e0:8a:28:b4:02:5b:1b:70:db:06:7f:85:f5:42: 7b:5d:96:c7:1e:49:38:ec:97:d9:66:29:0f:2c:31: dd:5e:dc:c8:c9:d8:fe:7a:c3:9b:38:34:83:e8:17: 2a:87:dd:15:f4:3d:c9:7a:aa:43:0d:dc:55:d9:4e: 66:bc:e8:60:af:97:33:82:45:05:47:87:44:d0:e8: 50:bb:0c:a8:56:d0:b6:b9:f3:7e:f8:df:ea:f0:6d: c1:31:bd:ff:72:08:8d:58:96:20:e9:84:0e:50:3a: 92:75:a8:ee:9c:9f:dc:d8:8c:49:6f:9c:73:6f:ff: 32:7a:5a:9e:5e:46:b9:4e:21:7b:0c:37:de:67:50: cd:12:fa:f7:1e:b4:27:de:e7:6f:86:81:31:c2:22: 5e:51:6c:5f:9b:d8:29:66:e3:b0:2d:19:d0:4e:2e: a1:07:39:a7:bc:19:7d:cb:06:2b:06:d5:77:19:bd: 83:99:df:68:9b:9e:19:d4:0e:e0:e4:32:05:c8:64: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:08:63:C5:CB:10:78:AC:88:8E:9A:42:FF:16:CF:D9:38:9C:48 X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8B58F72A7BF511F0BEBF8326C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.153.8.0/22 103.55.132.0/24 103.55.135.0/24 103.61.129.0/24 103.79.4.0/22 103.116.170.0/24 103.197.232.0/22 160.202.140.0/22 203.189.126.0/24 221.120.164.0/22 IPv6: 2400:1240::/32 2403:780::/32 Signature Algorithm: sha256WithRSAEncryption 7e:d2:0c:63:cd:43:7a:dc:9d:b2:fb:62:51:42:21:2b:6f:0c: 9b:54:ed:0e:08:95:39:ed:22:b0:fb:3f:2d:27:26:22:5b:45: 88:29:e3:dc:0e:dd:76:cb:ed:cd:7c:cc:37:93:b2:33:a3:b4: fa:9f:00:a7:e6:bf:1e:ea:61:a8:32:9b:4c:80:eb:2a:e1:2e: 4e:06:da:dc:0d:34:39:a3:76:9f:0a:d8:9c:de:9f:07:8f:10: 7d:90:86:c4:e8:32:b4:62:c6:60:5b:fe:ce:d2:83:7e:a0:c6: 82:77:6e:68:1a:e9:43:83:3f:e9:f3:f0:52:62:6d:28:c0:f7: 06:da:cc:1c:19:62:9c:99:5c:75:82:29:7a:f5:35:0a:24:bd: af:f4:46:02:4d:40:02:be:f7:59:d9:0f:18:b6:96:96:4a:f1: 7a:5a:9c:54:fb:2d:4a:15:4e:28:95:ed:2d:b3:07:6d:81:3e: 33:9c:c2:95:f0:f5:5c:6e:ae:3b:ba:20:cb:01:36:99:7f:34: 6f:95:fc:49:dd:01:24:20:f2:21:1f:04:ce:a6:60:fb:29:a4: 86:59:6e:a0:e4:9d:14:ce:ee:62:7a:d7:84:a6:91:00:da:ca: e5:b6:7a:e1:0c:8c:3f:53:15:e4:a8:4c:3a:ce:d2:9e:e3:e9: 90:26:61:3b -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw NzVFMDlBOTgwHhcNMjYwOTA3MDAwOTQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTllMDBjNi0wYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/JiyfXn0aNlL/6hlzu9lACoKjrWcAHCrwgIatN4tvCu4AGGj4JZKW7G/QoZ PteZuhS7s3+eYfBhYlIl4IootAJbG3DbBn+F9UJ7XZbHHkk47JfZZikPLDHdXtzI ydj+esObODSD6Bcqh90V9D3JeqpDDdxV2U5mvOhgr5czgkUFR4dE0OhQuwyoVtC2 ufN++N/q8G3BMb3/cgiNWJYg6YQOUDqSdajunJ/c2IxJb5xzb/8yelqeXka5TiF7 DDfeZ1DNEvr3HrQn3udvhoExwiJeUWxfm9gpZuOwLRnQTi6hBzmnvBl9ywYrBtV3 Gb2Dmd9om54Z1A7g5DIFyGQzoQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDJxCGPF yxB4rIiOmkL/Fs/ZOJxIMB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ1ODgvQkY3RDVFNzY3QkYzMTFGMEEwNUZBRDgyQzRGOUFFMDIvOEI1OEY3MkE3 QkY1MTFGMEJFQkY4MzI2QzRGOUFFMDIucm9hMGsGCCsGAQUFBwEHAQH/BFwwWjBC BAIAATA8AwQCO5kIAwQAZzeEAwQAZzeHAwQAZz2BAwQCZ08EAwQAZ3SqAwQCZ8Xo AwQCoMqMAwQAy71+AwQC3XikMBQEAgACMA4DBQAkABJAAwUAJAMHgDANBgkqhkiG 9w0BAQsFAAOCAQEAftIMY81DetydsvtiUUIhK28Mm1TtDgiVOe0isPs/LScmIltF iCnj3A7ddsvtzXzMN5OyM6O0+p8Ap+a/HuphqDKbTIDrKuEuTgba3A00OaN2nwrY nN6fB48QfZCGxOgytGLGYFv+ztKDfqDGgnduaBrpQ4M/6fPwUmJtKMD3BtrMHBli nJlcdYIpevU1CiS9r/RGAk1AAr73WdkPGLaWlkrxelqcVPstShVOKJXtLbMHbYE+ M5zClfD1XG6uO7ogywE2mX80b5X8Sd0BJCDyIR8EzqZg+ymkhlluoOSdFM7uYnrX hKaRANrK5bZ64QyMP1MV5KhMOs7SnuPpkCZhOw== -----END CERTIFICATE-----Generated at Mon Sep 21 07:59:26 2026 by rpki-client