$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A5F4A536933D11EEA6B4A653C4F9AE02.roa File: A5F4A536933D11EEA6B4A653C4F9AE02.roa (raw, json) Hash identifier: 0KtoQs3ZoY6PT4dwxV6hf2YTYqT+rVXqQSGuTHbMQFg= Subject key identifier: C5:0C:41:B3:3C:98:62:63:FA:A8:59:97:E6:81:FF:10:21:5A:F6:B2 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 01AC Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A5F4A536933D11EEA6B4A653C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:06:04 +0000 ROA not before: Wed 29 Oct 2025 03:48:43 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 55832 IP address blocks: 45.64.16.0/24 maxlen: 24 45.64.17.0/24 maxlen: 24 45.64.18.0/24 maxlen: 24 45.64.19.0/24 maxlen: 24 103.14.181.0/24 maxlen: 24 103.14.182.0/24 maxlen: 24 103.14.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Oct 29 03:48:43 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a439bc-13ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:94:a4:28:b9:1b:26:5b:df:45:38:cc:01: 25:c8:f7:61:d9:73:d6:ed:8d:f3:cd:c8:71:1d:1a: e6:07:be:79:df:b8:84:dd:90:43:0b:a1:0a:40:a1: 5b:76:6c:fa:10:e9:56:7d:0a:ab:fe:ea:f5:86:ee: c1:6f:a8:08:d2:83:8d:d6:d4:0a:a4:cb:cf:d0:5a: ae:e7:cc:85:a1:55:8d:26:22:48:42:38:08:26:53: 2e:c7:f0:b3:f1:c0:99:11:c8:4f:a8:5a:fa:89:da: 36:0e:86:6c:05:94:ce:c1:03:5f:09:89:67:85:f4: 3f:a2:af:1a:35:2c:43:f7:49:93:f9:3e:58:27:e5: a4:e2:76:f5:74:0b:2a:e0:62:e8:f5:10:6b:28:c3: 73:6e:11:ce:c8:33:e3:4b:c0:06:0b:27:ee:b9:df: a0:f0:e9:33:f5:09:a9:07:fb:cf:6e:fe:f7:38:38: 47:e9:b7:49:54:62:2e:76:62:22:9d:d6:61:e4:b1: 4f:f3:24:fc:9c:94:b9:2a:17:b4:fe:4a:db:4e:aa: 8d:2f:0e:c8:df:20:e9:23:84:af:a9:e4:1e:6b:fe: 1f:54:cf:8a:6b:a4:d2:b1:1d:fd:e3:c2:ac:a5:52: c5:c2:1d:39:70:f6:06:f8:8c:c8:25:ee:49:b6:15: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0C:41:B3:3C:98:62:63:FA:A8:59:97:E6:81:FF:10:21:5A:F6:B2 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A5F4A536933D11EEA6B4A653C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.16.0/22 103.14.181.0-103.14.183.255 Signature Algorithm: sha256WithRSAEncryption 12:fb:77:51:5b:2b:ae:1f:5e:47:5f:2b:d6:8c:a2:28:0b:82: 21:92:99:72:fb:55:01:3e:22:61:4d:52:c0:b7:68:7e:45:40: ed:3a:a0:6b:66:fa:25:9a:76:85:51:64:7f:dd:31:e0:5d:09: fb:b6:9f:ef:75:2e:15:dd:98:90:db:96:15:84:d4:e6:bc:70: ab:c8:1c:9e:5a:40:08:c8:b8:12:1b:e7:58:17:62:27:41:aa: 1a:54:74:56:67:d7:79:1f:54:46:54:b0:04:d3:88:c5:07:ff: 1b:ab:df:34:15:86:1a:56:a8:fb:d2:61:cf:5d:fa:f7:a7:aa: f3:dd:72:66:56:ca:79:ec:50:ec:7a:51:68:b9:50:5f:7a:1e: 58:62:fe:dc:54:63:6e:74:7a:06:85:05:d9:6e:b6:a7:c3:24: 46:71:4b:e5:0d:bf:34:a6:8b:f5:25:8e:fb:61:af:74:97:9f: c7:3d:0a:e1:39:fe:ae:b3:97:47:51:50:3f:5f:91:49:25:4a: 88:31:db:75:28:4b:00:53:f2:fb:b3:10:f4:5d:66:06:6f:60: 26:f8:a7:e1:74:be:2a:79:3d:77:e0:c7:2f:6f:ca:78:47:ca: 36:82:d9:e2:1d:4b:e5:22:91:53:13:76:c7:e5:1f:6d:8e:d5: 49:48:91:c2 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUxMDI5MDM0ODQzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzliYy0xM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGaUpCi5GyZb30U4zAElyPdh2XPW7Y3zzchxHRrmB75537iE3ZBDC6EKQKFb dmz6EOlWfQqr/ur1hu7Bb6gI0oON1tQKpMvP0Fqu58yFoVWNJiJIQjgIJlMux/Cz 8cCZEchPqFr6ido2DoZsBZTOwQNfCYlnhfQ/oq8aNSxD90mT+T5YJ+Wk4nb1dAsq 4GLo9RBrKMNzbhHOyDPjS8AGCyfuud+g8Okz9QmpB/vPbv73ODhH6bdJVGIudmIi ndZh5LFP8yT8nJS5Khe0/krbTqqNLw7I3yDpI4SvqeQea/4fVM+Ka6TSsR3948Ks pVLFwh05cPYG+IzIJe5JthUZTQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFMUMQbM8 mGJj+qhZl+aB/xAhWvayMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIxMjkvNEIzQ0VFQjQ5MzNEMTFFRThBOTUwMjUzQzRGOUFFMDIvQTVGNEE1MzY5 MzNEMTFFRUE2QjRBNjUzQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQCLUAQMAwDBABnDrUDBANnDrAwDQYJKoZIhvcNAQELBQADggEBABL7 d1FbK64fXkdfK9aMoigLgiGSmXL7VQE+ImFNUsC3aH5FQO06oGtm+iWadoVRZH/d MeBdCfu2n+91LhXdmJDblhWE1Oa8cKvIHJ5aQAjIuBIb51gXYidBqhpUdFZn13kf VEZUsATTiMUH/xur3zQVhhpWqPvSYc9d+venqvPdcmZWynnsUOx6UWi5UF96Hlhi /txUY250egaFBdlutqfDJEZxS+UNvzSmi/Uljvthr3SXn8c9CuE5/q6zl0dRUD9f kUklSogx23UoSwBT8vuzEPRdZgZvYCb4p+F0vip5PXfgxy9vynhHyjaC2eIdS+Ui kVMTdsflH22O1UlIkcI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:56:31 2026 by rpki-client