$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa File: 1D77B4081BD911EAB49CC840C4F9AE02.roa (raw, json) Hash identifier: zOF4QktWpAoJjg+z+k1IG8J7iOxGbLDrjxqR7aiYkLA= Subject key identifier: 5F:D3:5A:7B:29:06:9A:63:1D:D8:CF:E2:1D:3B:A0:48:72:2E:69:57 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C77 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:43:04 +0000 ROA not before: Sat 26 Jul 2025 18:57:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135600 IP address blocks: 45.114.4.0/23 maxlen: 23 45.114.6.0/23 maxlen: 23 103.67.170.0/24 maxlen: 24 103.67.171.0/24 maxlen: 24 202.133.192.0/20 maxlen: 20 202.133.208.0/20 maxlen: 20 203.17.180.0/24 maxlen: 24 203.17.181.0/24 maxlen: 24 203.17.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3191 (0xc77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Jul 26 18:57:37 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a45078-f6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:0d:e9:a1:a4:24:de:bb:62:39:1a:43:3c: ae:53:4d:0a:6e:e4:b5:c9:ec:cf:c0:bd:55:cd:ef: 42:63:11:4c:34:e1:16:85:06:2e:67:74:39:70:b1: f6:4a:2d:0b:27:07:5f:7e:d6:92:b7:da:00:9a:f3: 0c:8a:79:41:6c:d0:5c:a0:38:7a:f8:ff:29:1d:20: 17:e3:db:85:14:29:fc:03:f9:fd:3d:c1:60:3d:1d: 60:82:ae:27:46:69:80:bc:1d:51:af:1c:a9:7d:26: d7:49:89:a1:4f:3a:4e:45:69:a8:f3:3a:da:6a:66: e6:36:a8:0a:bc:d4:77:ab:4c:69:f3:df:55:d2:bb: 39:3b:0e:da:ec:82:21:5f:7c:e8:92:ac:80:84:80: 04:51:f6:f5:9c:64:03:ee:18:81:a4:19:43:8a:9b: df:e6:d5:6e:74:5b:5b:6e:ea:f4:ec:6e:a2:82:05: 97:23:2f:34:fb:46:7f:3d:20:4f:6b:9a:2a:5c:8a: 82:58:be:6f:73:4c:b1:a5:16:b5:32:dc:43:a0:47: ca:10:1e:fb:ef:1a:35:1f:50:e1:c5:b1:c5:66:08: 34:5c:62:bd:8f:1b:90:5c:d1:57:9d:e7:0e:d9:a8: d9:c0:07:06:51:e5:91:89:61:ea:ad:90:b0:88:69: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D3:5A:7B:29:06:9A:63:1D:D8:CF:E2:1D:3B:A0:48:72:2E:69:57 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.4.0/22 103.67.170.0/23 202.133.192.0/19 203.17.180.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:eb:04:e7:1f:d6:83:e7:59:a5:87:32:fa:d6:9f:32:9d:19: 49:f7:33:3d:2a:75:fa:7e:91:09:20:59:8f:65:01:98:da:64: 00:20:f4:e8:ee:e9:5e:32:0f:b0:f4:07:ab:06:09:56:c9:3e: 0c:f9:1d:ab:1c:c5:1f:c5:96:05:6b:86:73:e7:75:ae:5d:ad: fe:ab:da:ce:e6:2c:c4:b4:76:14:f5:f4:e6:ce:0a:8a:7c:14: 2d:1a:44:2b:ff:d6:e7:4f:1f:ed:a6:a4:3a:b5:9d:d5:b4:14: 85:38:d7:8b:9f:0e:e1:88:ff:9a:07:4f:ec:9c:a3:db:58:cc: b5:42:d1:60:b7:11:d2:34:d7:eb:37:6e:78:70:e2:5f:1b:00: 60:b9:12:94:fb:ed:7d:fc:4f:e8:3e:d4:f6:11:90:7b:2a:09: d4:81:71:19:64:2f:8e:99:19:a2:42:77:50:bf:16:d4:1d:45: ba:e5:3b:c2:d7:33:76:6b:4c:74:d1:89:89:9b:13:71:43:f8: 23:b9:37:9f:e1:94:23:4f:fc:da:b8:4c:70:de:cd:12:7a:e0: 82:74:17:bc:c2:e1:d2:b7:20:a6:1e:8d:26:5d:74:a8:79:d9: 25:2b:12:5b:df:1c:31:41:44:d9:a7:51:77:2a:25:20:92:37: c1:1d:2a:a9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwNzI2MTg1NzM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTA3OC1mNmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplAN6aGkJN67YjkaQzyuU00KbuS1yezPwL1Vze9CYxFMNOEWhQYuZ3Q5cLH2 Si0LJwdfftaSt9oAmvMMinlBbNBcoDh6+P8pHSAX49uFFCn8A/n9PcFgPR1ggq4n RmmAvB1RrxypfSbXSYmhTzpORWmo8zraambmNqgKvNR3q0xp899V0rs5Ow7a7IIh X3zokqyAhIAEUfb1nGQD7hiBpBlDipvf5tVudFtbbur07G6iggWXIy80+0Z/PSBP a5oqXIqCWL5vc0yxpRa1MtxDoEfKEB777xo1H1DhxbHFZgg0XGK9jxuQXNFXnecO 2ajZwAcGUeWRiWHqrZCwiGkvXwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFF/TWnsp BppjHdjP4h07oEhyLmlXMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhERTkvRDY5QjQ1RTgxQkQ1MTFFQTgwQ0JDRjM2QzRGOUFFMDIvMUQ3N0I0MDgx QkQ5MTFFQUI0OUNDODQwQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCLXIEAwQBZ0OqAwQFyoXAAwQCyxG0MA0GCSqGSIb3DQEBCwUAA4IB AQAr6wTnH9aD51mlhzL61p8ynRlJ9zM9KnX6fpEJIFmPZQGY2mQAIPTo7uleMg+w 9AerBglWyT4M+R2rHMUfxZYFa4Zz53WuXa3+q9rO5izEtHYU9fTmzgqKfBQtGkQr /9bnTx/tpqQ6tZ3VtBSFONeLnw7hiP+aB0/snKPbWMy1QtFgtxHSNNfrN254cOJf GwBguRKU++19/E/oPtT2EZB7KgnUgXEZZC+OmRmiQndQvxbUHUW65TvC1zN2a0x0 0YmJmxNxQ/gjuTef4ZQjT/zauExw3s0SeuCCdBe8wuHStyCmHo0mXXSoedklKxJb 3xwxQUTZp1F3KiUgkjfBHSqp -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:09 2026 by rpki-client