$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa File: 04CC562A444E11E88204061CC4F9AE02.roa (raw, json) Hash identifier: wmIlAIzm5QzVVCvvxLGcZrrzi/YZeMwXo33dKH+RNko= Subject key identifier: 2E:E8:35:F5:DA:64:CD:C0:8A:5A:48:7B:DD:1A:5E:9D:CF:36:43:FA Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 25DE Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa Signing time: Thu 23 Jul 2026 23:53:59 +0000 ROA not before: Tue 12 Aug 2025 15:53:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 58779 IP address blocks: 45.125.112.0/23 maxlen: 23 45.125.113.0/24 maxlen: 24 45.125.114.0/23 maxlen: 23 45.125.114.0/24 maxlen: 24 45.125.115.0/24 maxlen: 24 103.193.248.0/23 maxlen: 23 103.193.250.0/23 maxlen: 23 103.193.250.0/24 maxlen: 24 103.193.251.0/24 maxlen: 24 2402:b780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 01:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9694 (0x25de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Aug 12 15:53:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a62a997-5433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:bf:b7:9b:71:b0:19:51:6f:39:2c:99:50: ae:e2:68:5c:28:9d:c9:8d:03:72:eb:50:62:55:de: 08:17:cb:36:a9:47:7f:24:8d:51:b9:7f:d3:e9:53: 56:b4:a0:f2:59:85:98:e9:f4:63:95:98:7d:ed:3a: cf:20:bd:ec:26:c4:6c:6e:7d:8b:18:87:80:19:17: 1e:e3:c3:86:26:6d:89:d3:d7:d1:ad:e3:0a:b6:65: 78:61:c0:ee:c1:42:51:68:4e:0f:0e:24:5f:71:46: 6a:b1:03:46:33:e5:84:d6:e5:03:94:fb:b3:2c:89: 98:7a:6e:08:0e:86:21:0f:80:3d:31:9c:0d:75:43: 57:32:3a:50:c3:5d:0f:93:56:8e:66:03:d8:2f:72: e4:6d:a3:38:d8:f5:f0:6c:36:52:cf:9a:6b:05:54: 58:a2:f7:0f:c0:5c:0a:96:1e:20:12:ec:a9:c3:44: 65:2b:d2:8d:2f:f4:24:e6:78:83:d5:3f:9a:a6:8e: f9:5a:b7:66:a6:19:09:db:cd:e3:2a:3a:e4:6f:bc: 97:55:ee:d9:db:c2:36:2f:dd:05:4a:8a:60:c6:c2: 5e:60:29:f7:a1:65:44:8d:07:6f:1b:f8:1f:d2:f7: bb:31:67:48:a9:4c:9a:22:6b:b7:3e:6a:3e:e5:ee: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E8:35:F5:DA:64:CD:C0:8A:5A:48:7B:DD:1A:5E:9D:CF:36:43:FA X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.112.0/22 103.193.248.0/22 IPv6: 2402:b780::/32 Signature Algorithm: sha256WithRSAEncryption 09:12:aa:d1:f3:d7:89:0b:47:23:6c:80:31:7c:e1:5c:77:45: a5:fb:a1:ba:bf:4f:d6:f6:91:a2:84:b1:25:72:3d:2c:67:57: 7f:b8:eb:8b:b0:2c:3d:60:d6:6f:2a:d2:76:85:73:10:cc:f1: fb:37:59:47:8f:16:74:6e:2a:7f:c7:0f:26:db:16:ec:59:fe: 27:4a:d1:53:a7:3e:f9:80:35:68:cd:cd:ce:ed:6e:10:13:0b: f5:75:81:22:19:f3:4e:5a:66:8e:0a:94:5a:25:a6:1f:2e:c8: c7:7e:18:4b:8e:9e:19:92:25:22:f8:fb:32:ff:c7:d7:c6:e9: 1b:ef:89:27:be:02:cd:d3:6a:f8:71:a1:72:4f:df:e2:97:4d: 14:e2:ff:e1:f4:66:fc:fa:bc:29:b0:bf:38:03:d9:61:eb:0d: d1:ef:da:7d:9a:78:25:75:0b:1c:55:97:22:84:9d:1e:d7:3b: 54:a1:47:da:60:9b:2c:19:24:17:52:64:20:35:b2:20:57:8c: d7:83:55:7b:94:05:7e:93:98:40:49:b1:da:7a:f6:7c:41:c2: 2c:45:b1:2c:77:d8:7a:14:8c:85:50:74:41:2f:d8:f7:75:19: 1c:c3:c8:4a:5e:ba:e6:6c:f4:67:89:72:6a:89:38:b8:a9:63: 28:26:ef:c4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICJd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUwODEyMTU1MzE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTk5Ny01NDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTu/t5txsBlRbzksmVCu4mhcKJ3JjQNy61BiVd4IF8s2qUd/JI1RuX/T6VNW tKDyWYWY6fRjlZh97TrPIL3sJsRsbn2LGIeAGRce48OGJm2J09fRreMKtmV4YcDu wUJRaE4PDiRfcUZqsQNGM+WE1uUDlPuzLImYem4IDoYhD4A9MZwNdUNXMjpQw10P k1aOZgPYL3LkbaM42PXwbDZSz5prBVRYovcPwFwKlh4gEuypw0RlK9KNL/Qk5niD 1T+apo75WrdmphkJ283jKjrkb7yXVe7Z28I2L90FSopgxsJeYCn3oWVEjQdvG/gf 0ve7MWdIqUyaImu3Pmo+5e4OfwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFC7oNfXa ZM3AilpIe90aXp3PNkP6MB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc0NTYvNjE1NEQxNjgzNzJFMTFFNTgxRjBGQjM5QzRGOUFFMDIvMDRDQzU2MkE0 NDRFMTFFODgyMDQwNjFDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLX1wAwQCZ8H4MA0EAgACMAcDBQAkAreAMA0GCSqGSIb3DQEBCwUA A4IBAQAJEqrR89eJC0cjbIAxfOFcd0Wl+6G6v0/W9pGihLElcj0sZ1d/uOuLsCw9 YNZvKtJ2hXMQzPH7N1lHjxZ0bip/xw8m2xbsWf4nStFTpz75gDVozc3O7W4QEwv1 dYEiGfNOWmaOCpRaJaYfLsjHfhhLjp4ZkiUi+Psy/8fXxukb74knvgLN02r4caFy T9/il00U4v/h9Gb8+rwpsL84A9lh6w3R79p9mngldQscVZcihJ0e1ztUoUfaYJss GSQXUmQgNbIgV4zXg1V7lAV+k5hASbHaevZ8QcIsRbEsd9h6FIyFUHRBL9j3dRkc w8hKXrrmbPRniXJqiTi4qWMoJu/E -----END CERTIFICATE-----Generated at Fri Jul 24 16:20:28 2026 by rpki-client