$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/FD4056EC7CC411F0BAFA214CC4F9AE02.roa File: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (raw, json) Hash identifier: dPEhTQP3qeAR4yGjatb5GQPGEIi2y0rBsSN9VqRiVX4= Subject key identifier: 8C:E0:E4:0F:13:6A:37:0A:59:B6:CF:A3:5D:D5:FA:0C:88:C1:B3:B9 Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: 0111 Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/FD4056EC7CC411F0BAFA214CC4F9AE02.roa Signing time: Sat 04 Apr 2026 19:24:58 +0000 ROA not before: Sat 04 Apr 2026 19:24:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138915 IP address blocks: 45.158.180.0/24 maxlen: 24 45.158.181.0/24 maxlen: 24 45.158.182.0/24 maxlen: 24 45.158.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Apr 4 19:24:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d16589-651f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:f0:08:9b:d2:3f:36:72:da:b0:61:0b:69: c5:06:10:09:10:3a:d9:fa:33:65:39:22:f2:7e:35: 3f:79:3d:eb:4e:c7:25:43:b0:99:e6:68:90:4c:b8: ea:41:ab:1c:26:47:71:fb:12:85:16:94:11:39:ae: 72:7f:42:36:52:cc:f0:bc:50:1d:c0:ad:37:c4:28: 60:c8:87:c5:ed:b6:15:08:eb:11:94:75:ff:8c:90: fe:7d:df:7b:ad:90:81:41:a2:48:94:db:e3:26:48: 41:b5:1b:a4:87:9f:97:5c:3f:dd:d3:a1:e8:80:40: 81:a5:91:cd:31:b9:23:ce:78:18:c8:a9:53:2d:64: ec:87:14:69:2a:9e:b1:eb:f7:5b:e4:b4:5c:13:0d: 24:a3:4f:5d:d0:d1:73:eb:5c:f1:90:0c:89:ca:8a: d7:c8:ec:f5:bc:74:42:1f:39:2f:f8:4c:46:5c:c5: 21:71:78:a6:b3:00:a3:ae:84:be:ce:5c:66:61:dc: ff:fc:84:27:e5:d5:b4:41:08:12:f2:45:52:da:54: f4:09:a7:98:7d:bf:46:83:e8:bc:57:d0:ed:4e:5d: cb:63:ff:2a:cb:52:e6:b2:b7:88:7c:1d:8a:c9:bd: e7:ea:df:31:59:31:b0:90:0c:3c:09:80:29:80:34: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:E4:0F:13:6A:37:0A:59:B6:CF:A3:5D:D5:FA:0C:88:C1:B3:B9 X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/FD4056EC7CC411F0BAFA214CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.158.180.0/22 Signature Algorithm: sha256WithRSAEncryption 53:b0:e9:5c:98:4e:01:01:26:20:d0:d2:40:4d:d0:42:47:77: 70:1c:14:df:02:97:e0:64:8b:fe:ee:39:49:c7:2b:f5:2d:d1: ab:cd:c5:57:b2:d6:ce:fd:56:57:66:13:74:c4:2f:a5:56:23: 8a:8a:73:55:ad:11:db:79:bb:d3:d1:a1:81:7c:5f:92:5b:4f: b1:c7:50:2e:2b:c8:91:8e:c1:5f:34:3f:dc:c5:b9:ed:76:09: 6e:a1:75:79:6c:e6:d1:66:69:6d:de:6f:d2:c6:c1:53:54:3b: d5:0b:5d:67:41:61:57:d2:89:98:77:4e:a7:0d:95:c1:dc:0e: 69:b6:1e:de:2f:42:bd:08:34:ed:ba:b1:d2:83:eb:7e:5c:fa: b6:73:00:87:78:d8:3c:3c:77:a2:31:c4:2d:7f:7b:45:89:ce: c7:09:c2:c0:f2:9e:cd:ed:84:81:e0:3a:02:40:ad:ca:40:90: d5:95:6a:83:c7:b9:5e:98:a2:64:0c:b9:d2:0e:69:30:54:a7: 1f:ae:e3:a7:ca:09:af:ea:a9:0c:76:49:7f:bf:c4:97:da:d1: f1:c9:fd:32:84:08:9e:56:a6:aa:97:42:b6:96:95:48:01:c6: 8e:cc:91:0a:c8:e1:4e:e9:7a:d9:0a:ae:28:d8:1d:84:90:f6: c5:d3:de:e1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjYwNDA0MTkyNDU3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQxNjU4OS02NTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVHwCJvSPzZy2rBhC2nFBhAJEDrZ+jNlOSLyfjU/eT3rTsclQ7CZ5miQTLjq QascJkdx+xKFFpQROa5yf0I2UszwvFAdwK03xChgyIfF7bYVCOsRlHX/jJD+fd97 rZCBQaJIlNvjJkhBtRukh5+XXD/d06HogECBpZHNMbkjzngYyKlTLWTshxRpKp6x 6/db5LRcEw0ko09d0NFz61zxkAyJyorXyOz1vHRCHzkv+ExGXMUhcXimswCjroS+ zlxmYdz//IQn5dW0QQgS8kVS2lT0CaeYfb9Gg+i8V9DtTl3LY/8qy1LmsreIfB2K yb3n6t8xWTGwkAw8CYApgDRb4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIzg5A8T ajcKWbbPo13V+gyIwbO5MB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM4QUYvMTk3RkY3QTJCNDA5MTFFRjk0RTY3NDVEQzRGOUFFMDIvRkQ0MDU2RUM3 Q0M0MTFGMEJBRkEyMTRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCLZ60MA0GCSqGSIb3DQEBCwUAA4IBAQBTsOlcmE4BASYg0NJATdBC R3dwHBTfApfgZIv+7jlJxyv1LdGrzcVXstbO/VZXZhN0xC+lViOKinNVrRHbebvT 0aGBfF+SW0+xx1AuK8iRjsFfND/cxbntdgluoXV5bObRZmlt3m/SxsFTVDvVC11n QWFX0omYd06nDZXB3A5pth7eL0K9CDTturHSg+t+XPq2cwCHeNg8PHeiMcQtf3tF ic7HCcLA8p7N7YSB4DoCQK3KQJDVlWqDx7lemKJkDLnSDmkwVKcfruOnygmv6qkM dkl/v8SX2tHxyf0yhAieVqaql0K2lpVIAcaOzJEKyOFO6XrZCq4o2B2EkPbF097h -----END CERTIFICATE-----Generated at Sun Apr 19 10:04:03 2026 by rpki-client