$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/5B694A50EAD711F0B1E9CBE6646F56BC.roa File: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (raw, json) Hash identifier: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg= Subject key identifier: A8:C9:B6:43:9E:E1:0B:FD:58:50:46:E7:0A:05:A7:5E:22:D0:F7:87 Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Certificate serial: 36 Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/5B694A50EAD711F0B1E9CBE6646F56BC.roa Signing time: Sun 01 Mar 2026 05:57:36 +0000 ROA not before: Fri 13 Feb 2026 06:25:48 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 152450 IP address blocks: 45.146.112.0/24 maxlen: 24 45.146.113.0/24 maxlen: 24 45.146.114.0/24 maxlen: 24 45.146.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Validity Not Before: Feb 13 06:25:48 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a3d550-53e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:33:9f:4f:13:ac:f6:cd:7c:46:b9:c9:bd: 2a:7b:64:a8:9f:4c:6b:78:5a:b2:06:83:75:54:70: 9d:19:ad:4b:47:d9:82:cc:f1:da:64:4e:a5:26:05: 18:15:f5:ff:67:d3:4e:b6:0b:a8:dd:b6:ff:a3:b6: 47:cc:b8:09:05:ea:65:0b:74:ac:25:c8:59:f6:7b: 58:b4:81:5e:12:aa:4e:3a:71:b3:39:e7:36:b4:e3: 11:d6:24:6c:ed:fc:49:38:21:bc:96:55:fd:d7:6e: 96:ca:c9:0b:de:15:1c:37:99:ad:20:86:17:67:7c: 10:10:a8:b4:45:3c:8e:89:1c:79:fa:2c:8a:ca:a6: f3:c3:30:a5:de:c3:f9:ab:1d:9b:e3:be:93:27:50: 91:16:f3:cb:36:8b:c1:92:2a:39:99:ec:a9:cc:9e: 89:64:0f:ae:fa:43:d8:bc:fa:95:c2:5e:8f:b2:e8: 09:3c:d4:02:26:ee:32:5b:c8:c5:18:df:a1:2f:4d: 83:dd:c1:f6:59:6f:42:d4:12:35:a5:28:5b:a2:e0: 58:d5:35:cb:bc:a9:e3:0e:21:7b:9a:ee:54:80:14: 71:12:cc:5d:00:c1:0e:c6:2f:f6:a4:61:46:a1:b0: 3e:1a:8c:1f:a5:f1:17:59:f9:5a:82:11:ab:e2:74: b3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C9:B6:43:9E:E1:0B:FD:58:50:46:E7:0A:05:A7:5E:22:D0:F7:87 X509v3 Authority Key Identifier: keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/5B694A50EAD711F0B1E9CBE6646F56BC.roa sbgp-ipAddrBlock: critical IPv4: 45.146.112.0/22 Signature Algorithm: sha256WithRSAEncryption 36:47:3f:9c:ef:f5:84:6a:30:27:f9:90:5d:59:ca:c3:7f:cb: 7a:4b:21:27:43:86:67:6d:2c:5b:1e:25:d8:de:9e:47:b2:09: 7d:1c:29:4a:f5:dd:8c:0a:78:65:95:d9:f8:85:02:47:04:9c: 0f:eb:ab:a0:a6:33:4e:7c:a9:3f:41:f4:ee:57:05:d7:e1:ab: ca:33:6e:b4:fc:f6:2b:04:b0:07:3d:d5:b5:de:b2:a9:8b:0f: 85:e7:53:b6:63:08:36:b3:19:ea:49:47:f8:c2:39:73:cd:51: cb:c6:d0:25:a3:fe:63:d3:7a:26:f8:d2:bb:af:dd:dc:9d:98: 8e:4a:8f:e1:e8:ab:da:1b:4e:ce:50:0c:08:30:03:dc:1a:d3: 1a:fa:a6:5f:35:ea:5d:65:aa:2a:82:1d:f0:19:58:4d:a3:5a: 3b:25:cd:1d:dc:81:c9:9b:90:1f:d0:43:0d:fc:30:c9:7d:88: 15:03:43:64:9c:d2:5b:2a:32:5c:96:f7:68:64:50:a4:0a:b3: b9:9d:cc:1b:c1:02:3c:7b:12:34:2d:90:29:f1:09:45:af:b2: e9:11:4e:0e:05:87:76:f9:a3:c8:c6:3f:b8:c8:06:f1:b2:19: 7d:20:0c:1d:0f:48:56:c1:de:8f:06:56:26:eb:7f:7c:bf:aa: b1:65:42:c5 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoMEM1OEM2OTY5RUU2NEM0MTkxQUFCNjY5NjNGNDA5RDQ1 QUVBRjY5ODAeFw0yNjAyMTMwNjI1NDhaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNTUwLTUzZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9ATOfTxOs9s18RrnJvSp7ZKifTGt4WrIGg3VUcJ0ZrUtH2YLM8dpkTqUmBRgV 9f9n0062C6jdtv+jtkfMuAkF6mULdKwlyFn2e1i0gV4Sqk46cbM55za04xHWJGzt /Ek4IbyWVf3XbpbKyQveFRw3ma0ghhdnfBAQqLRFPI6JHHn6LIrKpvPDMKXew/mr HZvjvpMnUJEW88s2i8GSKjmZ7KnMnolkD676Q9i8+pXCXo+y6Ak81AIm7jJbyMUY 36EvTYPdwfZZb0LUEjWlKFui4FjVNcu8qeMOIXua7lSAFHESzF0AwQ7GL/akYUah sD4ajB+l8RdZ+VqCEavidLMFAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUqMm2Q57h C/1YUEbnCgWnXiLQ94cwHwYDVR0jBBgwFoAUDFjGlp7mTEGRqrZpY/QJ1Frq9pgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0ZCMjhEOUYwREM5 QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREZqR2xwN21URUdScXJacFlfUUoxRnJxOXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9GQjI4RDlGMERDOUMxMUYwODE3RTg5NjFBMkVFNTI4RS81QjY5NEE1MEVB RDcxMUYwQjFFOUNCRTY2NDZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAItknAwDQYJKoZIhvcNAQELBQADggEBADZHP5zv9YRqMCf5kF1ZysN/ y3pLISdDhmdtLFseJdjenkeyCX0cKUr13YwKeGWV2fiFAkcEnA/rq6CmM058qT9B 9O5XBdfhq8ozbrT89isEsAc91bXesqmLD4XnU7ZjCDazGepJR/jCOXPNUcvG0CWj /mPTeib40ruv3dydmI5Kj+Hoq9obTs5QDAgwA9wa0xr6pl816l1lqiqCHfAZWE2j WjslzR3cgcmbkB/QQw38MMl9iBUDQ2Sc0lsqMlyW92hkUKQKs7mdzBvBAjx7EjQt kCnxCUWvsukRTg4Fh3b5o8jGP7jIBvGyGX0gDB0PSFbB3o8GVibrf3y/qrFlQsU= -----END CERTIFICATE-----Generated at Mon Mar 2 16:03:23 2026 by rpki-client