$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/4ED5A00CFE2611EAA4F3424DC4F9AE02.roa File: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (raw, json) Hash identifier: JI2Y4J6EIn1uWFB8nwUdnofquITm7Yx3KS03ihwD+yc= Subject key identifier: DF:D3:B0:0E:AB:51:88:72:B0:C3:54:37:83:5C:00:84:E8:C4:45:B4 Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Certificate serial: 084F Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/4ED5A00CFE2611EAA4F3424DC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:36:56 +0000 ROA not before: Mon 28 Jul 2025 21:32:07 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 24226 IP address blocks: 45.126.128.0/22 maxlen: 22 103.152.188.0/23 maxlen: 23 103.195.8.0/22 maxlen: 22 103.197.60.0/22 maxlen: 22 2406:33c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Validity Not Before: Jul 28 21:32:07 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a408b7-f4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:dc:be:33:1d:27:14:bb:04:9f:a2:bf:cd: 58:61:88:5d:54:e1:72:b4:e0:8e:2b:10:5a:b3:cd: 42:4e:57:1c:9e:41:d7:c7:30:25:5d:82:83:de:f6: f4:2e:68:f0:ee:03:cc:2d:a2:3b:4b:a4:de:c3:7d: 1d:f4:c1:3e:b6:b0:14:32:7e:5b:94:60:53:6d:3d: 8a:78:8c:4a:4a:36:b3:ff:53:87:57:e7:09:9a:09: 18:56:55:db:34:9c:09:89:84:ed:fd:66:a4:96:bc: f2:b6:9e:0d:e9:29:59:05:b4:ab:c1:56:d6:7a:00: 13:0b:55:0f:6b:0e:e3:27:5b:c6:53:3d:7c:75:5f: 23:df:62:91:4b:32:f0:61:27:bc:34:cf:32:ab:9b: 3a:1d:a8:7d:ce:c4:9f:0f:52:8c:40:33:49:77:08: 52:cc:6d:d6:89:1a:d1:e6:15:0e:ac:47:b5:84:ae: 0c:93:c5:1d:c9:96:09:f5:51:84:06:1c:c5:eb:fd: af:f8:28:1c:83:ee:54:dd:37:f9:95:0d:92:2f:4d: 4e:5b:f2:fb:c7:bd:8e:23:09:9f:a3:f5:cf:7d:d4: 9e:97:4f:dd:d6:03:66:3f:ef:43:66:e9:6e:80:92: 14:4c:59:7a:dd:cc:69:1e:09:ca:ff:8e:f5:c7:1f: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D3:B0:0E:AB:51:88:72:B0:C3:54:37:83:5C:00:84:E8:C4:45:B4 X509v3 Authority Key Identifier: keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/4ED5A00CFE2611EAA4F3424DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.126.128.0/22 103.152.188.0/23 103.195.8.0/22 103.197.60.0/22 IPv6: 2406:33c0::/32 Signature Algorithm: sha256WithRSAEncryption c7:98:67:e5:33:b5:01:58:6a:2a:12:f0:5f:2c:48:3c:d0:bb: 62:d8:73:85:7a:e2:55:81:f3:18:83:39:b6:99:42:70:c6:88: e6:9e:2e:57:d0:02:73:93:f3:76:ea:a0:4f:07:f9:63:02:85: bd:69:ca:14:62:5d:4a:f1:c1:6e:d6:c4:7f:34:c2:e4:c2:f1: fd:d1:2d:21:fc:e0:42:d1:c9:32:98:a3:16:28:37:4e:13:72: af:73:22:60:46:96:51:3a:95:c2:bb:6d:21:b5:42:52:90:9e: f4:c0:8d:12:b9:41:bf:2c:a2:3e:8e:e2:10:de:a8:97:5d:42: 31:72:71:3a:73:32:06:b9:d1:32:c6:e5:8f:df:d8:66:3b:e4: 7d:ad:26:38:11:21:29:ec:c5:5c:cd:19:a8:02:4d:6f:91:f4: a6:90:67:d7:ff:cf:f8:22:0a:6c:27:87:ab:b3:0c:99:6f:c1: 59:34:d7:2d:1c:ba:b9:94:48:25:2c:fe:60:18:5a:a4:12:ac: 72:6c:10:ba:0c:57:c1:79:60:b4:7f:fa:fc:17:bb:38:68:b5: 18:a4:a1:b6:3c:91:51:f7:52:e0:ea:b7:5f:92:c1:56:1b:f9: 92:e3:24:f2:4e:04:c6:1b:48:6b:97:30:db:66:58:2e:eb:64: a6:8a:d1:12 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4OEYxMTAvBgNVBAUTKDNGRTYwMzFGMjU1NjdBNDU0N0NERTE3MzFBMkQ4MTRE Qjg2RTIwOTQwHhcNMjUwNzI4MjEzMjA3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDhiNy1mNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBPcvjMdJxS7BJ+iv81YYYhdVOFytOCOKxBas81CTlccnkHXxzAlXYKD3vb0 Lmjw7gPMLaI7S6Tew30d9ME+trAUMn5blGBTbT2KeIxKSjaz/1OHV+cJmgkYVlXb NJwJiYTt/Waklrzytp4N6SlZBbSrwVbWegATC1UPaw7jJ1vGUz18dV8j32KRSzLw YSe8NM8yq5s6Hah9zsSfD1KMQDNJdwhSzG3WiRrR5hUOrEe1hK4Mk8UdyZYJ9VGE BhzF6/2v+Cgcg+5U3Tf5lQ2SL01OW/L7x72OIwmfo/XPfdSel0/d1gNmP+9DZulu gJIUTFl63cxpHgnK/471xx97AQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFN/TsA6r UYhysMNUN4NcAIToxEW0MB8GA1UdIwQYMBaAFD/mAx8lVnpFR83hcxotgU24biCU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTg4Ri8xOTI0N0ZCQUZF MjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2VrVkh6ZUZ6R2kyQlRiaHVJ SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtWURIeVZXZWtWSHplRnpHaTJCVGJodUlKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDk4OEYvMTkyNDdGQkFGRTI1MTFFQTlDQzEwQzRDQzRGOUFFMDIvNEVENUEwMENG RTI2MTFFQUE0RjM0MjREQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCLX6AAwQBZ5i8AwQCZ8MIAwQCZ8U8MA0EAgACMAcDBQAkBjPAMA0G CSqGSIb3DQEBCwUAA4IBAQDHmGflM7UBWGoqEvBfLEg80Lti2HOFeuJVgfMYgzm2 mUJwxojmni5X0AJzk/N26qBPB/ljAoW9acoUYl1K8cFu1sR/NMLkwvH90S0h/OBC 0ckymKMWKDdOE3KvcyJgRpZROpXCu20htUJSkJ70wI0SuUG/LKI+juIQ3qiXXUIx cnE6czIGudEyxuWP39hmO+R9rSY4ESEp7MVczRmoAk1vkfSmkGfX/8/4IgpsJ4er swyZb8FZNNctHLq5lEglLP5gGFqkEqxybBC6DFfBeWC0f/r8F7s4aLUYpKG2PJFR 91Lg6rdfksFWG/mS4yTyTgTGG0hrlzDbZlgu62SmitES -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:48 2026 by rpki-client