$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/DD1070A286EE11F19E006003A7EE528E.roa File: DD1070A286EE11F19E006003A7EE528E.roa (raw, json) Hash identifier: QPNTaIBBW5Pm+ub/7yqeRjvgU5bEwV0xP9GlYoD4++M= Subject key identifier: E1:0E:82:66:BD:68:B5:70:88:CA:58:BB:6E:5A:A4:ED:40:2C:46:A1 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 25D9 Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/DD1070A286EE11F19E006003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:33:09 +0000 ROA not before: Thu 23 Jul 2026 23:33:09 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 64047 IP address blocks: 45.125.112.0/22 maxlen: 22 45.125.112.0/23 maxlen: 23 45.125.112.0/24 maxlen: 24 45.125.113.0/24 maxlen: 24 45.125.114.0/23 maxlen: 23 45.125.114.0/24 maxlen: 24 45.125.115.0/24 maxlen: 24 103.193.248.0/22 maxlen: 22 103.193.248.0/23 maxlen: 24 103.193.250.0/23 maxlen: 24 2402:b780::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 01:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9689 (0x25d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Jul 23 23:33:09 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a62a4b5-2d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e1:10:3a:d4:47:77:d0:21:aa:c7:7e:49:12: 8a:cc:55:7b:11:a5:c8:15:90:01:ab:e5:9c:b4:77: c6:90:7b:31:87:c6:f0:26:07:35:dc:8f:47:79:5a: 3c:8d:35:78:7e:1e:8f:a6:bf:09:88:be:43:9b:6b: cb:f5:90:9e:b0:31:8a:a1:c0:2a:36:84:b6:94:4e: b9:e0:bd:2c:34:6b:ff:c0:11:3e:c7:e9:d9:cb:42: 34:11:17:ae:d5:f4:59:e9:2b:db:0f:fd:39:c9:4e: 60:76:e6:0d:d4:ac:a0:0a:2f:02:4b:bc:65:28:d3: b3:07:70:28:9e:39:19:b7:c3:29:03:37:3c:77:ef: 62:f0:5d:84:5c:43:07:cf:34:0b:5a:6e:24:b9:a6: 58:49:87:b6:b8:4f:d6:bf:55:d8:1e:31:2c:1a:ff: 03:a9:8b:d6:c3:d5:f6:0b:73:dd:e4:c5:b3:55:2f: 98:75:ab:3d:30:6e:e1:19:79:77:89:fa:9e:ff:a6: 7f:ff:3b:8c:49:d8:13:51:5c:51:d1:a5:b5:b2:6d: e4:53:a4:9e:21:53:e9:f3:b8:c2:2b:79:49:92:9f: 05:f8:7e:27:af:d7:fd:dd:48:8a:21:1e:43:5d:6d: ed:3b:3e:b6:69:ef:50:e3:d9:98:5f:29:b8:09:f4: ba:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0E:82:66:BD:68:B5:70:88:CA:58:BB:6E:5A:A4:ED:40:2C:46:A1 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/DD1070A286EE11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 45.125.112.0/22 103.193.248.0/22 IPv6: 2402:b780::/32 Signature Algorithm: sha256WithRSAEncryption 06:a8:91:ea:bb:23:a3:ea:43:e0:2c:15:79:c0:87:e2:c5:6d: 55:9b:37:02:24:5e:22:8e:7d:60:ef:76:07:27:7d:78:86:e8: 5a:cc:32:13:5c:e8:36:68:07:c1:3a:02:ba:e4:9b:48:b1:bb: c0:2f:64:ea:42:6b:92:cc:f7:8c:78:38:ae:70:14:21:ef:03: 48:2e:0b:c6:74:c2:2a:2d:e7:a0:82:e4:10:3d:d5:2b:fe:ab: 5e:c0:19:93:f1:8c:4d:42:70:f3:76:d7:65:58:7f:b8:3d:1c: e2:76:14:57:b4:0a:cc:65:b5:4e:f3:bf:dd:a3:2b:27:1c:48: 1b:47:7e:cc:24:fd:38:f6:31:33:96:36:b4:fc:96:b6:2d:8d: 80:5a:7b:51:80:e6:b6:54:6f:7a:d9:65:38:90:fb:16:4d:8d: 78:1c:83:79:f8:4a:f3:aa:c8:81:00:7c:3c:ae:f0:f4:c2:f6: 51:21:5a:41:7f:dd:e8:8e:9d:b2:37:a3:c7:68:d5:db:ee:cb: 59:90:2f:87:11:74:12:a6:d9:85:be:2c:2d:aa:6b:27:13:08: 42:3a:25:ff:ef:70:dc:21:e0:f7:e1:91:61:b0:bc:2a:ed:9e: 98:2b:8a:97:37:5b:9c:bf:9e:ff:9b:fe:4d:73:d4:7d:cb:f9: 2c:63:64:d7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICJdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjYwNzIzMjMzMzA5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTRiNS0yZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteEQOtRHd9Ahqsd+SRKKzFV7EaXIFZABq+WctHfGkHsxh8bwJgc13I9HeVo8 jTV4fh6Ppr8JiL5Dm2vL9ZCesDGKocAqNoS2lE654L0sNGv/wBE+x+nZy0I0EReu 1fRZ6SvbD/05yU5gduYN1KygCi8CS7xlKNOzB3AonjkZt8MpAzc8d+9i8F2EXEMH zzQLWm4kuaZYSYe2uE/Wv1XYHjEsGv8DqYvWw9X2C3Pd5MWzVS+Ydas9MG7hGXl3 ifqe/6Z//zuMSdgTUVxR0aW1sm3kU6SeIVPp87jCK3lJkp8F+H4nr9f93UiKIR5D XW3tOz62ae9Q49mYXym4CfS6VQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFOEOgma9 aLVwiMpYu25apO1ALEahMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc0NTYvNjE1NEQxNjgzNzJFMTFFNTgxRjBGQjM5QzRGOUFFMDIvREQxMDcwQTI4 NkVFMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLX1wAwQCZ8H4MA0EAgACMAcDBQAkAreAMA0GCSqGSIb3DQEBCwUA A4IBAQAGqJHquyOj6kPgLBV5wIfixW1VmzcCJF4ijn1g73YHJ314huhazDITXOg2 aAfBOgK65JtIsbvAL2TqQmuSzPeMeDiucBQh7wNILgvGdMIqLeegguQQPdUr/qte wBmT8YxNQnDzdtdlWH+4PRzidhRXtArMZbVO87/doysnHEgbR37MJP049jEzlja0 /Ja2LY2AWntRgOa2VG962WU4kPsWTY14HIN5+ErzqsiBAHw8rvD0wvZRIVpBf93o jp2yN6PHaNXb7stZkC+HEXQSptmFviwtqmsnEwhCOiX/73DcIeD34ZFhsLwq7Z6Y K4qXN1ucv57/m/5Nc9R9y/ksY2TX -----END CERTIFICATE-----Generated at Fri Jul 24 18:06:22 2026 by rpki-client