$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/4F1B63805A0A11ECAEA43C36C4F9AE02.roa File: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (raw, json) Hash identifier: ksNFagOfVMmNunRnOoSWeJDWRZC4HhFsn1AY5q9lcGY= Subject key identifier: 4D:BF:58:5C:5F:4D:04:06:DB:EB:FD:DC:B6:65:89:5B:06:73:BD:CC Certificate issuer: /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Certificate serial: 054E Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/4F1B63805A0A11ECAEA43C36C4F9AE02.roa Signing time: Wed 08 Oct 2025 23:28:17 +0000 ROA not before: Wed 08 Oct 2025 23:28:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134677 IP address blocks: 45.127.32.0/22 maxlen: 22 45.127.32.0/24 maxlen: 24 45.127.33.0/24 maxlen: 24 45.127.34.0/24 maxlen: 24 45.127.35.0/24 maxlen: 24 103.195.188.0/22 maxlen: 22 103.195.188.0/24 maxlen: 24 103.195.189.0/24 maxlen: 24 103.195.190.0/24 maxlen: 24 103.195.191.0/24 maxlen: 24 2001:df4:c140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A Validity Not Before: Oct 8 23:28:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e6f390-5c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:39:d2:8a:c8:54:4f:8f:ec:52:4b:60:14: b2:60:7c:f6:c9:13:01:3f:15:79:0a:1b:1f:54:99: 73:e1:a0:56:76:9e:11:b4:99:ce:1f:0c:4c:cd:52: 43:7e:78:d3:ed:91:7e:a3:f4:65:69:65:46:47:08: 5a:c7:98:bc:4a:ea:81:6c:45:b8:9c:7d:c0:54:de: 11:53:a0:ca:6f:a8:42:aa:4a:0d:03:b2:92:d8:b8: 18:1c:34:3f:fe:72:31:e6:e2:e1:25:1e:5a:57:e9: 47:3f:9e:0e:bc:dd:ba:a2:2d:e1:2e:f9:84:90:4f: 55:b6:6d:8a:44:de:12:77:f4:51:96:46:02:b9:83: 31:02:9e:4d:c7:34:b4:4d:27:20:a5:55:e9:5c:72: 77:ba:da:8c:5f:09:52:29:7a:4f:33:b6:8f:90:f7: d1:17:b2:09:95:97:0b:fc:97:ec:16:34:64:8d:ee: 87:c0:dd:4b:6d:f5:1d:28:fc:0d:cc:7e:29:4f:8f: 74:2c:7b:a2:5e:f0:57:06:69:c9:0a:b5:38:88:62: 45:3c:dc:12:74:f2:df:00:9f:a8:46:22:73:bd:d8: 5f:67:ae:1b:f3:0e:d6:79:bd:8c:64:1e:af:21:8e: 44:78:70:ea:2e:e7:c1:75:db:97:3d:1c:1c:f2:2e: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BF:58:5C:5F:4D:04:06:DB:EB:FD:DC:B6:65:89:5B:06:73:BD:CC X509v3 Authority Key Identifier: keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/4F1B63805A0A11ECAEA43C36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.32.0/22 103.195.188.0/22 IPv6: 2001:df4:c140::/48 Signature Algorithm: sha256WithRSAEncryption 1c:b8:3b:12:ef:bb:96:c9:c1:80:c4:4a:aa:76:3c:13:31:ca: 1e:0f:15:cf:e2:3e:a8:e6:e1:0b:a0:ab:4a:2a:1c:24:bd:f1: 3e:2c:71:9a:0b:b8:1a:d6:99:26:2c:d4:02:ad:b7:16:ef:9e: 58:9d:18:2d:da:c0:47:72:1e:0b:75:06:ce:aa:ca:24:15:b2: 2f:d3:66:d1:ee:bd:b3:8c:d3:40:9f:ba:c4:22:28:0b:56:ef: 27:bb:c2:b9:56:25:d7:73:61:b1:a0:eb:02:ce:94:be:79:a4: 33:5d:0b:f0:63:ca:b0:df:bb:1e:a1:4b:6c:04:b9:92:77:9f: 05:f9:b3:d7:fe:a1:b0:33:e1:47:a6:d9:ae:f9:e1:94:4c:a7: b5:f4:cf:c6:ce:a8:41:1e:98:ec:85:72:d1:34:59:19:15:8e: 83:ad:2c:0c:10:17:1e:7a:80:ef:83:95:a4:65:65:dd:02:af: 3f:dc:c7:c6:4a:6d:0d:4c:61:c0:dc:03:c5:7a:70:51:92:5b: 72:71:34:6f:07:3b:18:60:5e:15:ee:9c:54:67:41:4f:20:44: b6:3b:2a:24:1e:c9:8c:83:72:16:1f:91:96:bf:9e:90:ff:ee: 68:cd:d2:00:d5:0c:fa:18:d2:28:44:0a:8c:d5:33:ee:6f:cb: a0:ff:76:e7 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTUxMTAvBgNVBAUTKEYzODU4OUY4NDY0QUE1QTkxNjk5RjgwODY0OUVDNTM2 ODMxQjAwNEEwHhcNMjUxMDA4MjMyODE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZjM5MC01YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskI50orIVE+P7FJLYBSyYHz2yRMBPxV5ChsfVJlz4aBWdp4RtJnOHwxMzVJD fnjT7ZF+o/RlaWVGRwhax5i8SuqBbEW4nH3AVN4RU6DKb6hCqkoNA7KS2LgYHDQ/ /nIx5uLhJR5aV+lHP54OvN26oi3hLvmEkE9Vtm2KRN4Sd/RRlkYCuYMxAp5NxzS0 TScgpVXpXHJ3utqMXwlSKXpPM7aPkPfRF7IJlZcL/JfsFjRkje6HwN1LbfUdKPwN zH4pT490LHuiXvBXBmnJCrU4iGJFPNwSdPLfAJ+oRiJzvdhfZ64b8w7Web2MZB6v IY5EeHDqLufBdduXPRwc8i7AswIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFE2/WFxf TQQG2+v93LZliVsGc73MMB8GA1UdIwQYMBaAFPOFifhGSqWpFpn4CGSexTaDGwBK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1NS9DQ0JFMUJBNjE3 NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bha1dtZmdJWko3Rk5vTWJB RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0V0otRVpLcGFrV21mZ0laSjdGTm9NYkFFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERDNTUvQ0NCRTFCQTYxNzYyMTFFQzgxQTBEMTFFQzRGOUFFMDIvNEYxQjYzODA1 QTBBMTFFQ0FFQTQzQzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAItfyADBAJnw7wwDwQCAAIwCQMHACABDfTBQDANBgkqhkiG 9w0BAQsFAAOCAQEAHLg7Eu+7lsnBgMRKqnY8EzHKHg8Vz+I+qObhC6CrSiocJL3x Pixxmgu4GtaZJizUAq23Fu+eWJ0YLdrAR3IeC3UGzqrKJBWyL9Nm0e69s4zTQJ+6 xCIoC1bvJ7vCuVYl13NhsaDrAs6UvnmkM10L8GPKsN+7HqFLbAS5knefBfmz1/6h sDPhR6bZrvnhlEyntfTPxs6oQR6Y7IVy0TRZGRWOg60sDBAXHnqA74OVpGVl3QKv P9zHxkptDUxhwNwDxXpwUZJbcnE0bwc7GGBeFe6cVGdBTyBEtjsqJB7JjINyFh+R lr+ekP/uaM3SANUM+hjSKEQKjNUz7m/LoP925w== -----END CERTIFICATE-----Generated at Mon Oct 20 05:39:36 2025 by rpki-client