$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/4F1B63805A0A11ECAEA43C36C4F9AE02.roa File: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (raw, json) Hash identifier: sKIEQFup2pY2IoC6lEOvKO7QQSr/rpcUDVmTH6bK2Zk= Subject key identifier: F8:B8:D4:74:4B:57:32:BF:29:9D:0B:05:ED:9C:13:BD:05:41:5A:ED Certificate issuer: /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Certificate serial: 059A Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/4F1B63805A0A11ECAEA43C36C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:41:44 +0000 ROA not before: Wed 08 Oct 2025 23:28:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134677 IP address blocks: 45.127.32.0/22 maxlen: 22 45.127.32.0/24 maxlen: 24 45.127.33.0/24 maxlen: 24 45.127.34.0/24 maxlen: 24 45.127.35.0/24 maxlen: 24 103.195.188.0/22 maxlen: 22 103.195.188.0/24 maxlen: 24 103.195.189.0/24 maxlen: 24 103.195.190.0/24 maxlen: 24 103.195.191.0/24 maxlen: 24 2001:df4:c140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A Validity Not Before: Oct 8 23:28:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a43408-4297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:a4:b0:9b:17:82:17:a9:eb:6e:82:74:87: c7:05:b1:ba:94:31:ba:0c:e1:7e:8e:e3:ea:8a:b5: b5:24:41:7c:c3:e8:94:6a:bf:87:29:67:6c:49:b5: fa:4e:3c:f1:1c:f9:98:8b:e3:27:ab:f1:1c:fd:75: aa:e2:31:a9:08:98:d1:ae:4e:5f:d5:95:66:8d:b5: 87:40:a3:f4:44:31:cb:45:c7:c1:4d:f7:5a:73:73: a0:11:a4:8d:f0:b3:a1:18:dd:46:9d:d1:55:fe:9e: 88:3f:0f:96:b0:40:0f:8b:de:fe:1a:9f:72:51:94: 0e:96:b1:d5:78:11:d1:62:15:c6:ee:97:aa:a4:ad: f9:88:94:fa:36:a4:6e:53:87:fb:9f:ec:7f:81:63: c1:3a:a8:a6:49:44:0d:9b:c3:56:72:1b:97:40:08: c3:6f:d2:ae:14:7e:7c:da:18:03:c3:a2:7f:75:21: 15:4c:a4:0e:96:da:94:57:51:d8:00:b3:8a:3c:bf: 76:e1:5a:70:50:41:52:90:5b:c1:b0:e2:9c:ff:ee: 3c:1a:c7:06:8c:82:c1:72:f3:6f:d6:5b:38:b9:80: da:84:c7:7a:a5:99:3d:45:bd:82:ea:8d:72:83:29: de:bc:1a:bb:b3:ef:c5:c9:9a:a3:db:e1:7d:3f:df: 46:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B8:D4:74:4B:57:32:BF:29:9D:0B:05:ED:9C:13:BD:05:41:5A:ED X509v3 Authority Key Identifier: keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/4F1B63805A0A11ECAEA43C36C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.127.32.0/22 103.195.188.0/22 IPv6: 2001:df4:c140::/48 Signature Algorithm: sha256WithRSAEncryption 12:42:0b:79:67:bc:0a:40:4c:17:3e:9d:ba:c4:ba:84:31:05: 44:8a:23:57:ac:7c:4d:bc:76:4d:cb:2d:e6:86:e6:f7:2b:a1: 1f:9b:16:53:64:e6:1d:98:fa:76:dd:40:f9:f9:4c:f9:c4:78: 88:69:e8:05:89:ba:62:9d:f4:a7:f9:ae:a6:09:f8:2f:0c:1f: 51:bc:63:15:a6:cd:92:a2:70:b5:9c:4b:48:95:2c:08:d6:71: 9a:b5:65:78:b3:74:77:bf:bc:90:0d:7d:4a:bd:a0:0c:0f:2d: a8:da:fe:26:bd:b6:30:07:bb:9e:89:37:55:ae:20:63:94:60: 10:e4:2e:d4:89:3e:10:d4:d0:3f:6f:49:ab:d5:53:71:56:14: 2a:09:7a:3b:b1:bd:d2:52:ef:1c:7b:a1:cf:f7:b4:b8:b4:c4: b5:79:79:c5:29:59:3c:b1:d3:7a:e5:89:3c:e9:63:de:40:e1: d4:75:25:66:b5:85:4a:05:d8:f5:38:81:25:3a:c1:ea:72:f9: e0:d4:fc:d1:77:b6:88:46:a7:5e:85:ef:b9:bf:6d:f0:4a:d8: 3c:f6:b7:18:56:23:92:27:7c:ae:1e:f0:22:3d:55:37:34:7c: 83:99:9e:48:71:db:7a:e4:8a:29:cb:33:ac:ef:d7:b8:ec:08: b2:48:b3:9e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTUxMTAvBgNVBAUTKEYzODU4OUY4NDY0QUE1QTkxNjk5RjgwODY0OUVDNTM2 ODMxQjAwNEEwHhcNMjUxMDA4MjMyODE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzQwOC00Mjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2eksJsXghep626CdIfHBbG6lDG6DOF+juPqirW1JEF8w+iUar+HKWdsSbX6 TjzxHPmYi+Mnq/Ec/XWq4jGpCJjRrk5f1ZVmjbWHQKP0RDHLRcfBTfdac3OgEaSN 8LOhGN1GndFV/p6IPw+WsEAPi97+Gp9yUZQOlrHVeBHRYhXG7peqpK35iJT6NqRu U4f7n+x/gWPBOqimSUQNm8NWchuXQAjDb9KuFH582hgDw6J/dSEVTKQOltqUV1HY ALOKPL924VpwUEFSkFvBsOKc/+48GscGjILBcvNv1ls4uYDahMd6pZk9Rb2C6o1y gynevBq7s+/FyZqj2+F9P99G9wIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFPi41HRL VzK/KZ0LBe2cE70FQVrtMB8GA1UdIwQYMBaAFPOFifhGSqWpFpn4CGSexTaDGwBK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1NS9DQ0JFMUJBNjE3 NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bha1dtZmdJWko3Rk5vTWJB RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0V0otRVpLcGFrV21mZ0laSjdGTm9NYkFFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERDNTUvQ0NCRTFCQTYxNzYyMTFFQzgxQTBEMTFFQzRGOUFFMDIvNEYxQjYzODA1 QTBBMTFFQ0FFQTQzQzM2QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCLX8gAwQCZ8O8MA8EAgACMAkDBwAgAQ30wUAwDQYJKoZIhvcNAQEL BQADggEBABJCC3lnvApATBc+nbrEuoQxBUSKI1esfE28dk3LLeaG5vcroR+bFlNk 5h2Y+nbdQPn5TPnEeIhp6AWJumKd9Kf5rqYJ+C8MH1G8YxWmzZKicLWcS0iVLAjW cZq1ZXizdHe/vJANfUq9oAwPLaja/ia9tjAHu56JN1WuIGOUYBDkLtSJPhDU0D9v SavVU3FWFCoJejuxvdJS7xx7oc/3tLi0xLV5ecUpWTyx03rliTzpY95A4dR1JWa1 hUoF2PU4gSU6wepy+eDU/NF3tohGp16F77m/bfBK2Dz2txhWI5InfK4e8CI9VTc0 fIOZnkhx23rkiinLM6zv17jsCLJIs54= -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:04 2026 by rpki-client