$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/D01462D636E611F090C5647FC4F9AE02.roa File: D01462D636E611F090C5647FC4F9AE02.roa (raw, json) Hash identifier: mbvxUjNAkBKt/k41T28SEkJgkafLLWi3aDAamNnjXDI= Subject key identifier: E4:48:8D:F6:67:17:20:35:C6:07:5C:7C:39:FB:69:3F:44:2A:80:45 Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Certificate serial: C2 Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/D01462D636E611F090C5647FC4F9AE02.roa Signing time: Thu 07 May 2026 07:45:21 +0000 ROA not before: Thu 07 May 2026 07:45:21 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 9304 IP address blocks: 103.5.220.0/22 maxlen: 22 124.158.192.0/19 maxlen: 19 180.131.160.0/19 maxlen: 19 202.55.32.0/19 maxlen: 19 202.55.40.0/22 maxlen: 22 202.80.128.0/20 maxlen: 20 202.80.138.0/24 maxlen: 24 202.92.160.0/19 maxlen: 19 202.92.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Validity Not Before: May 7 07:45:21 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=69fc4311-6b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a9:76:01:d8:5b:5f:ed:43:96:b8:64:60:9d: fa:f1:e7:a4:f4:96:f8:7c:2c:3d:e4:f7:05:01:da: a1:3b:5f:fb:68:96:6f:2c:09:d4:10:52:22:70:21: f5:3d:cf:4a:52:aa:ba:dd:34:af:fa:a2:d9:fe:ef: 76:79:6e:ee:3c:42:83:20:9b:f4:d6:f0:19:e6:35: 6e:80:1c:b5:1c:9a:30:cf:60:14:ed:d4:a2:81:3a: 2e:ef:03:3e:a4:a2:06:16:9b:84:de:fc:52:ba:39: 16:91:fb:fc:0d:85:64:3f:15:3f:74:d6:18:82:44: 61:51:67:44:6b:20:85:33:c8:7b:98:7b:1a:15:c6: c3:2b:ce:77:6c:4e:7b:ae:15:af:00:ba:57:4b:05: ef:ce:23:8b:7e:3e:a1:87:d6:ec:53:ec:97:60:dd: a9:a6:1f:f6:fb:e7:bd:61:f2:ac:00:c8:23:74:96: 1a:53:8e:eb:83:31:89:ce:3f:bc:b6:0e:f0:75:b1: 64:ee:3b:3a:c7:03:8d:0a:3c:e9:df:37:18:fe:81: b8:31:08:9a:3a:47:e0:69:eb:da:3c:8e:78:f0:26: a5:db:4e:ab:70:1a:06:bd:f9:99:6a:9c:40:84:4a: f3:c5:bf:c1:1c:3e:50:70:03:09:52:fe:9a:ed:63: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:48:8D:F6:67:17:20:35:C6:07:5C:7C:39:FB:69:3F:44:2A:80:45 X509v3 Authority Key Identifier: keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/D01462D636E611F090C5647FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.220.0/22 124.158.192.0/19 180.131.160.0/19 202.55.32.0/19 202.80.128.0/20 202.92.160.0/19 Signature Algorithm: sha256WithRSAEncryption 47:ab:5a:98:12:78:97:83:63:3e:07:b8:86:17:31:60:9c:de: b1:3b:5b:a6:67:7e:c2:fc:b1:6d:a4:ed:32:bc:a8:d8:19:1b: 3c:e7:da:d6:02:45:f2:17:c5:00:ad:f1:bd:15:e8:f5:0e:b4: 63:e6:d8:37:b6:72:a4:31:3f:7d:d9:5b:5b:e0:e6:e6:e2:74: 86:48:5e:1c:ae:ac:29:f9:8c:98:22:58:98:72:90:50:7f:68: 19:7d:97:56:c0:7e:57:df:6e:8a:ff:b5:ed:1b:a9:6d:24:51: 17:a0:7c:f9:a3:fa:b5:bb:24:42:a5:fd:98:43:7e:65:36:d8: d2:de:45:f6:5b:f6:6d:8d:78:76:fc:65:cf:ea:f7:d9:74:29: 60:7e:d9:94:04:f9:2e:76:c1:6d:bb:30:e5:d6:0d:b2:22:04: 2e:f9:41:82:77:4d:01:6b:f0:6b:d7:15:35:2e:7f:34:4b:4f: 6d:2b:53:ef:10:03:e8:6e:d2:27:2c:c3:70:62:99:cb:bf:09: b4:d8:c3:07:e2:4f:76:ed:0a:e0:10:d4:5c:86:f1:9e:d5:b8: fe:4e:94:64:eb:a1:b2:a4:45:99:b4:af:0a:d0:01:fb:11:c3: 6a:66:c8:44:c8:9c:9d:5c:0f:9f:cc:87:ad:7f:a3:a0:36:7f: 43:2e:7e:24 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5NDkxMTAvBgNVBAUTKDVBMzU4QjQ4NEFEODdGRTAyOUMxMDFEQUU2RDJFRDgy OEQ4NjA1NTMwHhcNMjYwNTA3MDc0NTIxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZjNDMxMS02YjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Kl2AdhbX+1DlrhkYJ368eek9Jb4fCw95PcFAdqhO1/7aJZvLAnUEFIicCH1 Pc9KUqq63TSv+qLZ/u92eW7uPEKDIJv01vAZ5jVugBy1HJowz2AU7dSigTou7wM+ pKIGFpuE3vxSujkWkfv8DYVkPxU/dNYYgkRhUWdEayCFM8h7mHsaFcbDK853bE57 rhWvALpXSwXvziOLfj6hh9bsU+yXYN2pph/2++e9YfKsAMgjdJYaU47rgzGJzj+8 tg7wdbFk7js6xwONCjzp3zcY/oG4MQiaOkfgaevaPI548Cal206rcBoGvfmZapxA hErzxb/BHD5QcAMJUv6a7WMzUwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFORIjfZn FyA1xgdcfDn7aT9EKoBFMB8GA1UdIwQYMBaAFFo1i0hK2H/gKcEB2ubS7YKNhgVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk0OS82NjNCMjVGMjM2 RTYxMUYwOTUxRUI4N0VDNEY5QUUwMi9XaldMU0VyWWYtQXB3UUhhNXRMdGdvMkdC Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU5NDkvNjYzQjI1RjIzNkU2MTFGMDk1MUVCODdFQzRGOUFFMDIvRDAxNDYyRDYz NkU2MTFGMDkwQzU2NDdGQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQCZwXcAwQFfJ7AAwQFtIOgAwQFyjcgAwQEylCAAwQFylygMA0GCSqG SIb3DQEBCwUAA4IBAQBHq1qYEniXg2M+B7iGFzFgnN6xO1umZ37C/LFtpO0yvKjY GRs859rWAkXyF8UArfG9Fej1DrRj5tg3tnKkMT992Vtb4Obm4nSGSF4crqwp+YyY IliYcpBQf2gZfZdWwH5X326K/7XtG6ltJFEXoHz5o/q1uyRCpf2YQ35lNtjS3kX2 W/ZtjXh2/GXP6vfZdClgftmUBPkudsFtuzDl1g2yIgQu+UGCd00Ba/Br1xU1Ln80 S09tK1PvEAPobtInLMNwYpnLvwm02MMH4k927QrgENRchvGe1bj+TpRk66GypEWZ tK8K0AH7EcNqZshEyJydXA+fzIetf6OgNn9DLn4k -----END CERTIFICATE-----Generated at Wed May 13 01:16:12 2026 by rpki-client