$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/FD4056EC7CC411F0BAFA214CC4F9AE02.roa File: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (raw, json) Hash identifier: 0lZOVOfd15vpeG++w5mAWXS/YLQjKe0BETzMm0Ic6h8= Subject key identifier: 24:24:43:3A:3A:69:03:FB:F2:C9:DF:C5:A1:A4:CD:11:39:6C:B8:59 Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: A4 Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/FD4056EC7CC411F0BAFA214CC4F9AE02.roa Signing time: Fri 10 Oct 2025 10:27:40 +0000 ROA not before: Fri 10 Oct 2025 10:27:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138915 IP address blocks: 45.158.180.0/24 maxlen: 24 45.158.181.0/24 maxlen: 24 45.158.182.0/24 maxlen: 24 45.158.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Oct 10 10:27:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68e8df9b-ec2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:34:11:ff:fe:9e:4e:aa:79:1e:95:b9:f8: b0:14:93:64:56:dc:a7:e6:de:3a:46:33:80:56:63: ac:39:a8:dc:ca:8a:19:5c:87:b9:fc:05:f8:4e:16: 70:67:45:77:d3:38:4c:eb:7c:38:0d:f1:66:b3:49: de:92:60:fa:ac:93:89:d4:76:7e:d0:0a:4b:7d:fb: a1:30:2a:47:a1:92:e4:40:67:19:28:f2:6a:13:89: 8d:cb:0b:a3:1f:46:b4:b2:3a:4f:d6:c6:73:45:7e: 01:4a:ac:80:8d:77:b6:fd:77:9b:1e:0b:56:67:c3: 1b:1d:3b:6c:f1:3d:71:5e:42:16:bf:f3:ab:fe:13: 2d:62:15:75:48:54:88:b2:2c:cb:b7:a1:6d:53:52: 13:58:16:6d:73:ac:27:1d:f1:9f:f9:88:01:d8:78: 8c:d0:7d:d3:f3:43:80:8e:80:88:76:34:68:9a:83: 8f:de:c0:ef:0a:b5:8d:5c:7b:a6:7b:2d:16:72:b0: e5:60:57:c0:26:dd:8b:79:ec:53:f0:f3:d3:51:d0: 14:85:fc:32:4e:ec:f5:ba:e7:8a:03:6b:b7:7f:52: 88:32:9f:3a:32:79:ad:2c:6b:f5:76:8f:c9:34:43: 6d:80:0b:85:48:e1:62:fa:4b:ad:64:a1:f4:b1:db: 58:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:24:43:3A:3A:69:03:FB:F2:C9:DF:C5:A1:A4:CD:11:39:6C:B8:59 X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/FD4056EC7CC411F0BAFA214CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.158.180.0/22 Signature Algorithm: sha256WithRSAEncryption 74:e3:bd:79:f7:c7:f5:fe:db:7c:09:91:9a:30:b1:9a:08:ee: 30:98:68:b8:56:9d:40:9c:30:57:15:e2:6d:f2:db:a3:11:37: bb:23:1e:0d:64:8d:17:c4:94:d6:2d:6d:82:27:ee:27:39:f7: a9:7c:3f:2e:ea:cf:07:fc:d9:dd:f6:69:2e:58:e2:c7:40:52: 5c:cb:11:5b:21:af:de:04:91:2d:e7:4c:cf:df:86:f8:f5:af: 30:b7:8f:25:f9:df:a3:59:b4:db:3d:21:58:85:ad:af:03:f2: fa:45:d5:ac:a3:1b:ac:1e:06:d6:4e:ae:15:fd:aa:3e:0d:e6: a9:71:61:96:5e:9b:97:62:b1:d4:bc:3a:dd:88:bb:9c:9b:13: 66:72:41:f7:4e:8e:58:21:3b:7f:60:57:08:1c:b1:21:64:5b: bc:39:9b:a6:3e:75:3a:fc:f9:0d:37:74:54:29:ab:e9:e6:d1: 3d:f4:bf:dd:47:92:33:b8:f1:60:04:7f:5e:e8:78:c3:9b:26: 2d:bc:87:a5:65:a0:af:4b:b6:15:67:4b:4e:0b:d8:41:f4:87: 08:3d:ed:5f:de:42:aa:28:d7:a9:58:0e:92:01:e6:d3:cd:41: 98:c1:43:28:6a:a2:76:7f:9a:c4:b0:9c:58:16:38:f8:8a:c1: 07:af:25:41 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjUxMDEwMTAyNzQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU4ZGY5Yi1lYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcM0Ef/+nk6qeR6VufiwFJNkVtyn5t46RjOAVmOsOajcyooZXIe5/AX4ThZw Z0V30zhM63w4DfFms0nekmD6rJOJ1HZ+0ApLffuhMCpHoZLkQGcZKPJqE4mNywuj H0a0sjpP1sZzRX4BSqyAjXe2/XebHgtWZ8MbHTts8T1xXkIWv/Or/hMtYhV1SFSI sizLt6FtU1ITWBZtc6wnHfGf+YgB2HiM0H3T80OAjoCIdjRomoOP3sDvCrWNXHum ey0WcrDlYFfAJt2LeexT8PPTUdAUhfwyTuz1uueKA2u3f1KIMp86MnmtLGv1do/J NENtgAuFSOFi+kutZKH0sdtYlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCQkQzo6 aQP78snfxaGkzRE5bLhZMB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM4QUYvMTk3RkY3QTJCNDA5MTFFRjk0RTY3NDVEQzRGOUFFMDIvRkQ0MDU2RUM3 Q0M0MTFGMEJBRkEyMTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAItnrQwDQYJKoZIhvcNAQELBQADggEBAHTjvXn3x/X+23wJ kZowsZoI7jCYaLhWnUCcMFcV4m3y26MRN7sjHg1kjRfElNYtbYIn7ic596l8Py7q zwf82d32aS5Y4sdAUlzLEVshr94EkS3nTM/fhvj1rzC3jyX536NZtNs9IViFra8D 8vpF1ayjG6weBtZOrhX9qj4N5qlxYZZem5disdS8Ot2Iu5ybE2ZyQfdOjlghO39g VwgcsSFkW7w5m6Y+dTr8+Q03dFQpq+nm0T30v91HkjO48WAEf17oeMObJi28h6Vl oK9LthVnS04L2EH0hwg97V/eQqoo16lYDpIB5tPNQZjBQyhqonZ/msSwnFgWOPiK wQevJUE= -----END CERTIFICATE-----Generated at Mon Oct 20 00:12:06 2025 by rpki-client