$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/4583DDACDAEA11EA8773CC58C4F9AE02.roa File: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (raw, json) Hash identifier: dby0+4Qsp5/x8ZaPPfeNBBuHCuW1xM9rOg7ow1mi7Ss= Subject key identifier: DB:13:AF:91:03:CE:FD:F6:29:E7:0C:18:95:C2:35:97:C7:D4:0A:95 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 08AE Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/4583DDACDAEA11EA8773CC58C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:55:05 +0000 ROA not before: Tue 20 May 2025 20:58:37 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 133444 IP address blocks: 45.120.128.0/22 maxlen: 24 103.229.112.0/22 maxlen: 24 2400:df80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: May 20 20:58:37 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42919-5d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:42:c1:f0:ed:bf:58:cb:47:58:a2:45:4a:d1: 4c:86:5f:3f:cb:b8:fb:0d:f3:ce:b4:b0:be:55:1b: b0:98:94:0d:57:68:4e:2f:74:27:69:df:b0:b0:10: 8e:ec:e7:89:eb:fa:39:c6:68:b3:44:43:43:e6:e9: 70:f6:56:0d:20:67:4c:50:af:6f:4d:d9:04:f7:eb: 75:93:84:e1:75:4d:27:68:d9:e4:08:59:8a:54:ab: e3:9d:e0:7c:cc:cb:c5:dc:51:8d:50:bb:04:22:cd: 61:43:6b:5b:ac:ae:b6:7a:6a:74:ea:61:d8:93:6f: 7c:71:ec:6f:8f:f7:6a:35:da:10:b6:51:de:26:df: f0:49:6d:b9:0d:fc:38:d6:c7:16:87:af:cb:03:4e: 0f:5e:f7:93:30:e4:00:d6:c2:3c:3f:9d:95:76:cd: f2:0f:e5:f8:6e:17:f4:38:72:d4:71:d5:21:f4:0d: f3:e7:02:fd:56:f2:0f:f4:c9:aa:28:c8:d2:1f:15: 84:03:73:21:ee:7e:32:08:a6:09:26:9b:b7:50:79: a8:8d:cf:ec:27:64:24:9b:9b:d8:a4:38:e3:e4:56: 13:64:40:1d:7b:56:af:fd:ae:1c:2a:88:09:06:bc: 82:f4:36:07:1e:3c:1c:65:90:19:32:91:37:4d:19: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:13:AF:91:03:CE:FD:F6:29:E7:0C:18:95:C2:35:97:C7:D4:0A:95 X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/4583DDACDAEA11EA8773CC58C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.128.0/22 103.229.112.0/22 IPv6: 2400:df80::/32 Signature Algorithm: sha256WithRSAEncryption 3c:e5:d7:a2:2c:ee:ab:0a:91:14:ac:ad:57:94:80:cf:22:1f: c0:ca:a5:e5:15:44:c9:45:92:69:83:26:5b:ce:25:4b:60:c0: 67:27:16:42:3f:3b:59:9c:72:3f:40:e9:21:f3:9b:2a:99:f2: 4a:ca:05:e3:ae:36:dd:09:e5:be:80:98:48:35:b8:93:fc:e7: 55:12:44:dc:41:72:00:86:3c:cf:3e:c6:9f:b9:9c:fc:f2:98: b2:7c:ee:c6:9a:f0:46:5a:70:c7:26:a9:7d:b8:7c:3a:96:12: d0:db:bb:ab:08:46:ed:f2:b2:c2:7d:c8:e3:5a:5e:9e:fc:d5: 59:68:d4:0b:36:30:3f:d8:b6:1b:ee:57:21:e0:2e:b3:22:fa: 55:f9:6b:bb:5d:54:19:61:83:34:6c:98:d3:22:60:9c:41:00: 26:13:31:0f:3e:22:b8:83:7f:83:40:35:ce:cb:36:5d:66:ec: e9:e8:ce:3a:2b:0f:02:71:fd:8f:a9:5f:10:72:77:47:19:b5: 15:85:3f:50:de:86:5d:bf:34:85:04:bf:6a:5f:3a:17:6a:7d: 0c:fe:7e:f9:50:01:5c:fe:22:f8:b9:60:30:07:7a:13:75:58: 6f:0a:e7:ad:60:c7:50:45:98:92:6d:2a:63:cf:60:14:fc:ee: 02:09:04:73 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUwNTIwMjA1ODM3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjkxOS01ZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ULB8O2/WMtHWKJFStFMhl8/y7j7DfPOtLC+VRuwmJQNV2hOL3Qnad+wsBCO 7OeJ6/o5xmizREND5ulw9lYNIGdMUK9vTdkE9+t1k4ThdU0naNnkCFmKVKvjneB8 zMvF3FGNULsEIs1hQ2tbrK62emp06mHYk298cexvj/dqNdoQtlHeJt/wSW25Dfw4 1scWh6/LA04PXveTMOQA1sI8P52Vds3yD+X4bhf0OHLUcdUh9A3z5wL9VvIP9Mmq KMjSHxWEA3Mh7n4yCKYJJpu3UHmojc/sJ2Qkm5vYpDjj5FYTZEAde1av/a4cKogJ BryC9DYHHjwcZZAZMpE3TRkbEQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNsTr5ED zv32KecMGJXCNZfH1AqVMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRDREIvQkRBRjYwRTREQUU1MTFFQThBMjU1QTREQzRGOUFFMDIvNDU4M0REQUNE QUVBMTFFQTg3NzNDQzU4QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXiAAwQCZ+VwMA0EAgACMAcDBQAkAN+AMA0GCSqGSIb3DQEBCwUA A4IBAQA85deiLO6rCpEUrK1XlIDPIh/AyqXlFUTJRZJpgyZbziVLYMBnJxZCPztZ nHI/QOkh85sqmfJKygXjrjbdCeW+gJhINbiT/OdVEkTcQXIAhjzPPsafuZz88piy fO7GmvBGWnDHJql9uHw6lhLQ27urCEbt8rLCfcjjWl6e/NVZaNQLNjA/2LYb7lch 4C6zIvpV+Wu7XVQZYYM0bJjTImCcQQAmEzEPPiK4g3+DQDXOyzZdZuzp6M46Kw8C cf2PqV8QcndHGbUVhT9Q3oZdvzSFBL9qXzoXan0M/n75UAFc/iL4uWAwB3oTdVhv CuetYMdQRZiSbSpjz2AU/O4CCQRz -----END CERTIFICATE-----Generated at Mon Mar 2 12:36:29 2026 by rpki-client