$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/2DFF5E4A450611F1937F277491833773.roa File: 2DFF5E4A450611F1937F277491833773.roa (raw, json) Hash identifier: 47kNyS4a2pq8B+k+t2a9vj5unLrgCE/8MJzFAm97XS0= Subject key identifier: 36:CE:39:FE:C0:71:A6:43:04:F8:E1:96:FF:6E:75:E3:B5:56:1E:56 Certificate issuer: /CN=A91A6AB7/serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Certificate serial: 04 Authority key identifier: 84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/2DFF5E4A450611F1937F277491833773.roa Signing time: Fri 01 May 2026 02:35:56 +0000 ROA not before: Fri 01 May 2026 02:35:56 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133139 IP address blocks: 43.251.29.0/24 maxlen: 24 43.251.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6AB7, serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Validity Not Before: May 1 02:35:56 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69f4118b-f2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8d:9c:1b:27:b0:92:a5:b3:60:97:1d:a8:6f: 18:a7:99:50:cc:b3:14:d1:1d:14:a1:c1:90:10:e7: 0d:b0:ad:c3:e3:2d:f1:3d:07:28:5a:d7:14:32:26: d7:9f:69:88:a6:a4:02:49:27:78:ca:c0:f6:d6:f3: 4f:7a:f6:d7:f0:a6:d3:e4:08:99:62:a4:40:c1:60: 76:5c:ca:e3:a4:cc:a3:d2:73:1b:df:23:1c:4e:a9: c2:19:fa:bb:95:e4:d1:f7:95:43:28:f1:ab:8b:46: b4:28:cc:d0:8b:31:4c:8f:b0:7b:fe:82:d4:08:67: 2f:70:50:8d:a5:fe:2b:9a:32:87:6b:6c:fc:8c:ff: 9c:56:8c:ef:21:d0:4f:1f:36:f2:95:a2:75:b7:f7: 2a:d5:2e:25:12:87:5d:0b:9e:c9:3f:7b:d9:83:f5: 3d:bb:d2:5b:fb:e5:16:be:ce:dd:ab:d5:3a:63:e5: 5c:01:f4:45:2b:d1:dc:87:a8:58:88:20:a7:ec:fb: 66:97:9d:d4:f2:7b:4c:63:0c:4c:e9:ed:5d:0a:cc: a4:d1:a2:7b:ce:11:0d:34:20:7c:93:56:b7:72:e7: 71:ef:f1:07:d7:bc:89:07:c3:09:a0:ab:21:84:1b: d1:51:3f:98:ae:a8:67:58:b2:8b:8a:dc:d5:ef:12: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CE:39:FE:C0:71:A6:43:04:F8:E1:96:FF:6E:75:E3:B5:56:1E:56 X509v3 Authority Key Identifier: keyid:84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/2DFF5E4A450611F1937F277491833773.roa sbgp-ipAddrBlock: critical IPv4: 43.251.29.0-43.251.30.255 Signature Algorithm: sha256WithRSAEncryption 97:42:c3:cd:ab:9f:7a:9c:8b:d2:4c:36:60:7b:37:03:c9:51: d3:19:58:1c:dc:db:68:c8:8b:26:7a:e8:05:70:02:8c:f1:ee: 42:76:c9:cb:46:d8:a2:09:ca:1e:41:fb:b7:4f:39:60:b2:de: f3:38:52:f0:fb:b4:8e:31:5e:54:8b:03:90:66:19:b2:09:be: a3:40:7f:5b:c8:bf:33:01:dc:3f:64:98:59:0e:b7:f9:1d:6e: 14:a4:04:46:d0:1a:07:29:61:3b:e8:32:d5:9b:d3:1b:0c:f6: 1c:6b:2c:b3:12:f3:b7:17:46:ec:ac:88:f2:b9:b3:44:47:76: 05:0a:fc:61:5b:d4:ae:92:2e:85:e4:b9:d6:a1:96:f9:87:c2: ec:2f:1b:3f:57:ce:04:8e:b7:31:d4:ed:0f:19:fc:43:d0:db: 28:8b:d0:d7:0b:b7:b4:c7:e8:e0:0e:3f:a9:0c:45:f1:64:b5: 50:d7:b7:dd:25:a8:8a:b5:50:67:ae:ff:bb:7f:51:be:91:fd: 5b:7d:3c:5e:88:d7:7c:8d:2f:3d:d3:07:20:ee:e9:11:f8:b5: 3d:48:96:50:bf:47:c0:84:e6:7f:04:4e:51:94:7f:4e:92:dd: 5b:42:0b:c4:1c:b9:a8:09:ed:48:3f:03:ff:78:4d:d3:42:0e: 19:d6:94:a5 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCNzExMC8GA1UEBRMoODQ5QjBEOTkwMjBCRjFEOUQ2RjhEM0YwMjhDOTRGMEFB MDExRjZBNjAeFw0yNjA1MDEwMjM1NTZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZjQxMThiLWYyZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDojZwbJ7CSpbNglx2obxinmVDMsxTRHRShwZAQ5w2wrcPjLfE9Byha1xQyJtef aYimpAJJJ3jKwPbW80969tfwptPkCJlipEDBYHZcyuOkzKPScxvfIxxOqcIZ+ruV 5NH3lUMo8auLRrQozNCLMUyPsHv+gtQIZy9wUI2l/iuaModrbPyM/5xWjO8h0E8f NvKVonW39yrVLiUSh10Lnsk/e9mD9T270lv75Ra+zt2r1Tpj5VwB9EUr0dyHqFiI IKfs+2aXndTye0xjDEzp7V0KzKTRonvOEQ00IHyTVrdy53Hv8QfXvIkHwwmgqyGE G9FRP5iuqGdYsouK3NXvEpRZAgMBAAGjggJoMIICZDAdBgNVHQ4EFgQUNs45/sBx pkME+OGW/25147VWHlYwHwYDVR0jBBgwFoAUhJsNmQIL8dnW+NPwKMlPCqAR9qYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUI3L0M2REMxRDVDNDUw NTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRuVy1OUHdLTWxQQ3FBUjlx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEpzTm1RSUw4ZG5XLU5Qd0tNbFBDcUFSOXFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkFCNy9DNkRDMUQ1QzQ1MDUxMUYxODMwRDYyRjQ5MDgzMzc3My8yREZGNUU0QTQ1 MDYxMUYxOTM3RjI3NzQ5MTgzMzc3My5yb2EwJwYIKwYBBQUHAQcBAf8EGDAWMBQE AgABMA4wDAMEACv7HQMEACv7HjANBgkqhkiG9w0BAQsFAAOCAQEAl0LDzaufepyL 0kw2YHs3A8lR0xlYHNzbaMiLJnroBXACjPHuQnbJy0bYognKHkH7t085YLLe8zhS 8Pu0jjFeVIsDkGYZsgm+o0B/W8i/MwHcP2SYWQ63+R1uFKQERtAaBylhO+gy1ZvT Gwz2HGsssxLztxdG7KyI8rmzREd2BQr8YVvUrpIuheS51qGW+YfC7C8bP1fOBI63 MdTtDxn8Q9DbKIvQ1wu3tMfo4A4/qQxF8WS1UNe33SWoirVQZ67/u39RvpH9W308 XojXfI0vPdMHIO7pEfi1PUiWUL9HwITmfwROUZR/TpLdW0ILxBy5qAntSD8D/3hN 00IOGdaUpQ== -----END CERTIFICATE-----Generated at Wed May 13 03:51:41 2026 by rpki-client