$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/CD145D246E4E11EDBE02B065C4F9AE02.roa File: CD145D246E4E11EDBE02B065C4F9AE02.roa (raw, json) Hash identifier: XKDSZPzMqa5QorcvgY8yeybuV/ov43f+onvjmQy64ko= Subject key identifier: 45:AF:29:2D:2A:28:BC:EB:67:3B:78:B9:7B:0E:28:A6:63:8B:CC:A7 Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0BC4 Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/CD145D246E4E11EDBE02B065C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:44:11 +0000 ROA not before: Wed 16 Jul 2025 19:29:30 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38744 IP address blocks: 49.0.32.0/20 maxlen: 24 49.0.48.0/21 maxlen: 24 117.58.240.0/21 maxlen: 24 2404:b580::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: Jul 16 19:29:30 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4268b-03a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cb:da:87:d5:5c:95:ac:bd:b6:a4:1a:3b:0f: 6c:14:62:55:96:24:c9:37:e8:26:e5:ce:41:e7:b8: a9:15:d0:c8:14:d3:62:4c:33:bd:61:23:56:ef:b8: 70:e0:63:77:dc:80:c2:03:22:f9:53:1d:03:86:6d: 2c:19:1a:bd:22:7f:6e:f2:45:6b:29:a4:6a:77:70: 11:b2:4f:bb:c9:39:50:58:36:27:7a:91:e2:3d:b3: 64:05:55:8b:8e:79:63:44:94:d6:96:23:e3:c5:83: 77:04:b5:ee:bd:9d:46:1b:08:21:b8:8c:6d:86:de: 2b:3e:24:ae:4a:d8:6d:30:94:d6:f0:a6:b9:7c:c7: c1:65:d5:9e:18:7b:88:9d:89:6b:b2:9d:69:b9:6f: 07:5b:44:3c:d4:cd:a4:79:11:87:70:e8:06:4f:b2: 81:70:3d:42:c8:ab:bb:ee:be:b7:9b:5b:bf:32:87: 95:2e:92:7c:da:23:35:9d:cc:08:0c:28:8d:70:ac: ee:9c:f1:bb:5a:52:d1:49:bb:b8:f1:29:6a:f6:3a: 79:4c:ac:87:c5:83:c9:45:e8:94:d2:80:a9:7f:e4: b8:39:f2:d7:17:87:85:2d:8c:c3:6e:e3:28:55:b8: ee:31:82:ec:8c:21:03:2a:6f:c4:e5:af:30:f1:ee: 2a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AF:29:2D:2A:28:BC:EB:67:3B:78:B9:7B:0E:28:A6:63:8B:CC:A7 X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/CD145D246E4E11EDBE02B065C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.0.32.0-49.0.55.255 117.58.240.0/21 IPv6: 2404:b580::/32 Signature Algorithm: sha256WithRSAEncryption 98:20:de:ee:fe:a5:24:e0:99:82:f0:0a:86:7b:93:e0:20:5e: db:98:0f:95:18:47:de:41:55:78:d9:6b:54:17:13:18:f7:b9: af:fb:03:8d:d1:17:34:90:2a:15:04:46:f6:eb:b3:b3:b1:bd: b4:14:43:1e:48:e6:44:5e:17:3d:d5:e0:1e:be:af:8a:e1:53: cd:7f:90:d2:78:bc:43:8e:fb:14:d4:6d:83:51:02:2e:e8:22: 54:83:45:ca:66:a4:82:37:4a:d0:b1:2d:7e:c3:d2:26:75:e0: 78:74:65:03:45:86:16:c6:08:9f:9f:e3:4d:43:ff:1e:a3:9a: 96:39:ea:a5:85:42:c3:90:36:74:2c:38:b4:28:b9:e0:a1:6a: e3:ae:4a:b9:6d:cb:fe:b3:a3:69:8e:3c:3a:e4:dc:e0:60:f5: 30:05:54:f0:47:71:0d:28:8c:f6:b5:35:3e:53:e8:62:fe:99: 5e:e7:08:3d:9c:b1:3e:11:f2:41:07:c9:db:0e:91:7b:db:75: 27:3d:1d:0a:65:78:2b:ae:e4:30:a4:3b:03:f3:6e:3c:5e:a3: 4d:61:b3:37:82:59:13:b1:79:7f:0e:53:8d:28:6a:d0:a5:cd: 18:6f:7f:c1:73:62:fb:59:b6:b9:4d:92:1c:f8:fd:ec:e0:2b: 3d:63:c9:ac -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjUwNzE2MTkyOTMwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjY4Yi0wM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cvah9Vclay9tqQaOw9sFGJVliTJN+gm5c5B57ipFdDIFNNiTDO9YSNW77hw 4GN33IDCAyL5Ux0Dhm0sGRq9In9u8kVrKaRqd3ARsk+7yTlQWDYnepHiPbNkBVWL jnljRJTWliPjxYN3BLXuvZ1GGwghuIxtht4rPiSuSthtMJTW8Ka5fMfBZdWeGHuI nYlrsp1puW8HW0Q81M2keRGHcOgGT7KBcD1CyKu77r63m1u/MoeVLpJ82iM1ncwI DCiNcKzunPG7WlLRSbu48Slq9jp5TKyHxYPJReiU0oCpf+S4OfLXF4eFLYzDbuMo VbjuMYLsjCEDKm/E5a8w8e4qpQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFEWvKS0q KLzrZzt4uXsOKKZji8ynMB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjIyMTkvODJGRTg5Q0MzQzM3MTFFQTg3M0UxNDYwQzRGOUFFMDIvQ0QxNDVEMjQ2 RTRFMTFFREJFMDJCMDY1QzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAa BAIAATAUMAwDBAUxACADBAMxADADBAN1OvAwDQQCAAIwBwMFACQEtYAwDQYJKoZI hvcNAQELBQADggEBAJgg3u7+pSTgmYLwCoZ7k+AgXtuYD5UYR95BVXjZa1QXExj3 ua/7A43RFzSQKhUERvbrs7OxvbQUQx5I5kReFz3V4B6+r4rhU81/kNJ4vEOO+xTU bYNRAi7oIlSDRcpmpII3StCxLX7D0iZ14Hh0ZQNFhhbGCJ+f401D/x6jmpY56qWF QsOQNnQsOLQoueChauOuSrlty/6zo2mOPDrk3OBg9TAFVPBHcQ0ojPa1NT5T6GL+ mV7nCD2csT4R8kEHydsOkXvbdSc9HQpleCuu5DCkOwPzbjxeo01hszeCWROxeX8O U40oatClzRhvf8FzYvtZtrlNkhz4/ezgKz1jyaw= -----END CERTIFICATE-----Generated at Mon Mar 2 06:49:07 2026 by rpki-client