$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3C670256D94411E98E28CD85C4F9AE02.roa File: 3C670256D94411E98E28CD85C4F9AE02.roa (raw, json) Hash identifier: lWPghbeHPWLZN5Rcf9MFVvpTomN2lzTDAf8ZB3yAJEg= Subject key identifier: 95:93:73:C4:ED:30:4A:71:8A:EF:69:75:FD:3B:91:64:AB:C1:09:96 Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 2968 Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3C670256D94411E98E28CD85C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:25:07 +0000 ROA not before: Tue 02 Sep 2025 16:03:40 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132156 IP address blocks: 125.5.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10600 (0x2968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Validity Not Before: Sep 2 16:03:40 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a49292-ae53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:48:52:ec:8f:31:99:9a:14:c4:b9:1e:65: ff:e0:0b:d5:61:9e:f8:34:ba:48:e0:69:2f:3f:21: 1e:a2:ce:ac:dc:ea:ff:a8:0c:43:07:63:11:ba:91: c6:2a:21:6a:0f:f9:f3:5a:be:db:99:8e:5e:70:77: 0d:3c:00:7c:fc:64:de:03:df:31:58:88:4c:76:d3: 94:75:c5:38:c5:c6:09:66:aa:95:5d:1f:42:aa:31: 1b:10:09:f9:ab:d3:b9:ea:6b:9d:81:03:5a:44:e7: 0e:8f:58:da:3e:c3:47:a1:42:66:88:ac:06:18:38: 79:8e:e7:35:e1:b4:38:59:09:b5:1b:2f:9c:5c:59: 45:01:b4:b2:75:03:6e:ed:2d:bc:e1:b4:b0:f1:18: ec:01:f7:73:37:47:e4:0a:bb:2b:6e:82:5b:1e:ff: 72:fa:0b:f9:24:23:9b:d6:17:80:f5:e2:78:84:41: ce:fa:82:8a:2c:a8:9b:34:0b:42:90:c2:97:2c:a6: 1c:42:00:bb:e0:e0:db:ea:84:72:58:54:41:95:57: cc:6d:86:ff:ad:b8:77:12:9e:d0:18:54:82:50:b9: 79:cb:7b:d5:94:60:e0:dd:3e:83:68:10:e1:22:9c: b6:cc:d4:76:02:20:af:83:9c:57:12:f2:3e:71:63: 53:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:93:73:C4:ED:30:4A:71:8A:EF:69:75:FD:3B:91:64:AB:C1:09:96 X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3C670256D94411E98E28CD85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.5.11.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:a5:70:6e:17:ed:71:b0:3b:7a:e4:40:f3:31:be:6f:c7:09: 15:6f:fa:e2:08:2d:e9:19:d2:e2:fb:26:0c:2a:d2:56:49:a0: 37:22:79:99:af:72:d1:3f:b8:95:8b:8d:b0:ed:43:1e:ca:a0: 99:d1:25:6e:3a:35:64:d0:e3:1a:1f:ba:b7:19:a4:5e:f3:0a: 67:d1:92:b8:14:6e:a9:e8:ca:ed:cd:51:fe:6d:87:ff:0a:16: 6b:01:3d:df:70:c4:ed:3c:6a:fe:0f:01:31:f9:b9:7c:1b:97: c0:57:a2:5a:e3:3b:b2:28:b9:da:02:48:76:56:47:cb:94:d9: 0e:ee:01:c4:1a:1e:51:a0:81:35:4d:64:09:40:bb:28:b3:27: 86:04:e1:fc:56:6f:70:1a:31:05:da:a9:ad:f4:19:9b:3f:87: 49:bf:95:b2:f0:4c:05:49:f9:49:5c:8c:af:fe:e0:d0:bb:a9: 9c:1f:9f:42:8f:c1:db:cd:e4:bf:ef:23:bb:a6:53:dd:1c:d3: 4c:e8:70:9e:35:d6:ab:7f:f2:f0:29:d3:29:e6:2b:d1:49:76: db:42:ab:05:4c:4b:a2:be:51:92:ef:9c:77:41:c7:30:71:33: c4:83:4e:ae:cb:1b:52:49:9d:b6:3f:1e:50:76:92:4e:f6:2a: 53:ff:87:ed -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjUwOTAyMTYwMzQwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTI5Mi1hZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSFIUuyPMZmaFMS5HmX/4AvVYZ74NLpI4GkvPyEeos6s3Or/qAxDB2MRupHG KiFqD/nzWr7bmY5ecHcNPAB8/GTeA98xWIhMdtOUdcU4xcYJZqqVXR9CqjEbEAn5 q9O56mudgQNaROcOj1jaPsNHoUJmiKwGGDh5juc14bQ4WQm1Gy+cXFlFAbSydQNu 7S284bSw8RjsAfdzN0fkCrsrboJbHv9y+gv5JCOb1heA9eJ4hEHO+oKKLKibNAtC kMKXLKYcQgC74ODb6oRyWFRBlVfMbYb/rbh3Ep7QGFSCULl5y3vVlGDg3T6DaBDh Ipy2zNR2AiCvg5xXEvI+cWNTPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJWTc8Tt MEpxiu9pdf07kWSrwQmWMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvM0M2NzAyNTZE OTQ0MTFFOThFMjhDRDg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAfQULMA0GCSqGSIb3DQEBCwUAA4IBAQBspXBuF+1xsDt65EDzMb5v xwkVb/riCC3pGdLi+yYMKtJWSaA3InmZr3LRP7iVi42w7UMeyqCZ0SVuOjVk0OMa H7q3GaRe8wpn0ZK4FG6p6MrtzVH+bYf/ChZrAT3fcMTtPGr+DwEx+bl8G5fAV6Ja 4zuyKLnaAkh2VkfLlNkO7gHEGh5RoIE1TWQJQLsosyeGBOH8Vm9wGjEF2qmt9Bmb P4dJv5Wy8EwFSflJXIyv/uDQu6mcH59Cj8HbzeS/7yO7plPdHNNM6HCeNdarf/Lw KdMp5ivRSXbbQqsFTEuivlGS75x3QccwcTPEg06uyxtSSZ22Px5QdpJO9ipT/4ft -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:03 2026 by rpki-client