$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/52F3327C86FF11F194514C90ABEE528E.roa File: 52F3327C86FF11F194514C90ABEE528E.roa (raw, json) Hash identifier: 1w8W/4m7mLE7LxDR59hH2lCRVs2OIycHF+NjBW+Eagc= Subject key identifier: 01:BB:84:04:0D:E5:D9:24:5F:7D:92:E3:E0:E6:0C:61:7C:04:38:0C Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1DD7 Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/52F3327C86FF11F194514C90ABEE528E.roa Signing time: Fri 24 Jul 2026 01:30:59 +0000 ROA not before: Fri 24 Jul 2026 01:30:59 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 63526 IP address blocks: 45.125.220.0/22 maxlen: 24 103.239.252.0/22 maxlen: 24 103.239.252.0/25 maxlen: 25 103.239.252.128/25 maxlen: 25 103.239.253.0/25 maxlen: 25 103.239.253.128/25 maxlen: 25 103.239.254.0/25 maxlen: 25 103.239.254.128/25 maxlen: 25 103.239.255.0/25 maxlen: 25 103.239.255.128/25 maxlen: 25 2404:4580::/32 maxlen: 32 2404:4580::/48 maxlen: 48 2404:4580:1::/48 maxlen: 48 2404:4580:2::/48 maxlen: 48 2404:4580:3::/48 maxlen: 48 2404:4580:4::/48 maxlen: 48 2404:4580:5::/48 maxlen: 48 2404:4580:6::/48 maxlen: 48 2404:4580:7::/48 maxlen: 48 2404:4580:ca::/48 maxlen: 48 2404:4580:cd10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 01:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7639 (0x1dd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: Jul 24 01:30:59 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a62c053-a98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:85:23:a2:9a:08:83:d2:61:d9:7d:f6:ef: f3:de:1f:a0:9e:97:c1:c4:db:90:e5:a6:66:55:bf: 23:4a:67:45:d2:23:5d:93:68:03:ac:a5:c5:96:82: b7:8c:3b:82:9e:b2:e2:ff:0f:8e:61:89:ce:55:04: b9:76:45:95:ee:b2:8c:31:e1:b3:36:e6:7a:41:ec: ef:b5:9a:3c:28:68:ae:1d:d8:f2:40:19:2c:a5:69: bb:ee:d8:53:e0:b5:c5:70:a0:a2:8c:7c:ca:9a:49: 41:05:78:32:4f:69:93:75:1e:c3:e2:05:71:9f:2d: 01:30:1e:a8:cb:3c:c1:48:65:92:ad:68:e0:f4:9a: 50:46:58:70:48:59:bd:b2:0e:27:a1:83:1d:88:d0: bc:7f:60:68:9d:2f:70:e7:00:87:6e:49:e5:c2:3e: bb:e6:98:32:c6:9f:82:54:8e:a3:9f:6d:28:a0:57: b1:bb:2e:d6:98:fa:d7:e8:04:14:c3:0c:8c:29:bf: b1:62:4e:64:58:3e:78:2e:45:66:3f:66:92:82:df: 40:53:17:35:63:76:46:93:de:2c:0b:c1:1a:68:bc: 04:f7:27:4b:7c:b3:ca:99:d4:69:46:be:31:dd:dd: c6:ae:58:54:03:d7:45:80:11:78:79:e6:48:ec:b4: ab:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BB:84:04:0D:E5:D9:24:5F:7D:92:E3:E0:E6:0C:61:7C:04:38:0C X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/52F3327C86FF11F194514C90ABEE528E.roa sbgp-ipAddrBlock: critical IPv4: 45.125.220.0/22 103.239.252.0/22 IPv6: 2404:4580::/32 Signature Algorithm: sha256WithRSAEncryption 63:3d:15:a8:c3:48:41:5f:3c:ee:1c:36:f5:17:2c:ef:8d:e3: 55:98:08:31:63:65:c6:16:b4:c5:8e:c5:7a:3c:47:68:fe:ca: f5:95:b0:92:da:18:ca:a4:ac:34:ca:17:f4:39:c6:04:34:98: e5:a5:2f:ff:cb:60:77:cf:be:19:75:c6:8a:0b:a0:5f:fe:39: ae:3e:9f:87:5e:1f:d6:e7:8e:e3:bc:b0:d3:be:a3:df:f6:81: 0d:17:f1:cb:c0:48:a1:36:b1:24:54:2f:48:bb:fb:e6:10:8c: 56:cf:6f:bf:3e:49:d1:1c:63:47:9a:86:bf:17:f7:d4:62:1e: 25:09:37:6d:55:77:71:00:e5:82:b5:c1:68:c0:28:fb:cc:a1: 34:ad:8f:0f:a7:a6:5a:a5:e8:22:22:1a:72:4a:7f:b2:ef:cf: e7:ca:0d:80:8a:a6:22:a9:af:1d:1b:8c:34:6b:96:02:8c:05: ae:dc:4b:b1:42:ca:98:d8:ee:9e:5a:3b:6e:f8:55:f2:0e:06: bb:77:9a:33:4d:ae:e3:9b:27:b6:2f:f9:12:2b:18:ae:4f:00: e3:dc:cb:ac:b0:07:43:72:5d:11:26:9e:06:0e:05:83:18:8b: 7f:eb:34:bc:54:fa:97:e6:ed:c7:28:e6:74:c2:d3:70:99:51: 9b:ba:c6:25 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjYwNzI0MDEzMDU5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYzA1My1hOThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKiFI6KaCIPSYdl99u/z3h+gnpfBxNuQ5aZmVb8jSmdF0iNdk2gDrKXFloK3 jDuCnrLi/w+OYYnOVQS5dkWV7rKMMeGzNuZ6QezvtZo8KGiuHdjyQBkspWm77thT 4LXFcKCijHzKmklBBXgyT2mTdR7D4gVxny0BMB6oyzzBSGWSrWjg9JpQRlhwSFm9 sg4noYMdiNC8f2BonS9w5wCHbknlwj675pgyxp+CVI6jn20ooFexuy7WmPrX6AQU wwyMKb+xYk5kWD54LkVmP2aSgt9AUxc1Y3ZGk94sC8EaaLwE9ydLfLPKmdRpRr4x 3d3GrlhUA9dFgBF4eeZI7LSrVQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAG7hAQN 5dkkX32S4+DmDGF8BDgMMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEExNDAvQ0MxRENDRThDNzc0MTFFNjk4MTZCMDY4QzRGOUFFMDIvNTJGMzMyN0M4 NkZGMTFGMTk0NTE0QzkwQUJFRTUyOEUucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLX3cAwQCZ+/8MA0EAgACMAcDBQAkBEWAMA0GCSqGSIb3DQEBCwUA A4IBAQBjPRWow0hBXzzuHDb1FyzvjeNVmAgxY2XGFrTFjsV6PEdo/sr1lbCS2hjK pKw0yhf0OcYENJjlpS//y2B3z74ZdcaKC6Bf/jmuPp+HXh/W547jvLDTvqPf9oEN F/HLwEihNrEkVC9Iu/vmEIxWz2+/PknRHGNHmoa/F/fUYh4lCTdtVXdxAOWCtcFo wCj7zKE0rY8Pp6ZapegiIhpySn+y78/nyg2AiqYiqa8dG4w0a5YCjAWu3EuxQsqY 2O6eWjtu+FXyDga7d5ozTa7jmye2L/kSKxiuTwDj3MussAdDcl0RJp4GDgWDGIt/ 6zS8VPqX5u3HKOZ0wtNwmVGbusYl -----END CERTIFICATE-----Generated at Fri Jul 24 05:24:21 2026 by rpki-client