$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/089CB7F8E41C11E9AD4A8D16C4F9AE02.roa File: 089CB7F8E41C11E9AD4A8D16C4F9AE02.roa (raw, json) Hash identifier: aceo4H/fTyvQQUJzj6yg5k3I5+edhLSx3DC/7yUMScg= Subject key identifier: 87:25:3D:59:89:BE:B6:EF:52:48:97:A3:48:E0:87:CE:95:7F:4A:41 Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 2973 Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/089CB7F8E41C11E9AD4A8D16C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:25:16 +0000 ROA not before: Tue 02 Sep 2025 16:03:50 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38575 IP address blocks: 125.5.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10611 (0x2973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Validity Not Before: Sep 2 16:03:50 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4929b-3a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:f4:dc:92:d7:98:cb:84:ef:65:d5:7c:f0: 88:ce:79:76:f2:4a:82:78:3e:f7:10:0d:03:eb:ba: 88:45:c0:e1:57:4b:a9:cc:0f:82:fd:93:64:54:e4: d7:be:79:04:da:85:cf:4a:5f:35:e7:11:06:3f:37: d4:2f:8a:6e:11:4e:4d:c0:5e:f8:55:3f:12:c0:5d: c8:8f:aa:fc:7e:8e:84:72:09:b6:e7:fe:a4:9d:f5: ad:b4:dc:86:7b:3a:4f:72:21:b6:af:40:f1:ea:ec: 9a:f3:74:ee:c3:68:00:a1:db:08:be:2e:27:fe:87: 32:78:d9:f7:f3:e9:44:18:cc:7a:c4:a3:ec:9b:89: 2d:c5:0e:65:3b:48:2b:2c:5d:46:93:b1:24:b8:85: 87:7f:36:99:5f:5f:32:05:60:30:25:25:7f:31:68: 6b:56:41:dc:d3:8b:0a:64:04:2d:c1:3a:2b:e4:c3: d5:c0:73:e2:0b:c7:84:1a:05:9e:87:0c:a1:bd:85: bb:53:9f:3a:eb:fd:f9:41:e4:85:82:e3:8e:5a:53: 6a:10:d4:37:64:ad:99:04:c7:82:fc:c1:93:5b:8c: 8a:65:25:24:46:14:d5:5a:15:e9:68:8b:74:d6:a7: 63:f5:11:37:4a:1c:d2:97:34:3b:11:9a:55:41:e1: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:25:3D:59:89:BE:B6:EF:52:48:97:A3:48:E0:87:CE:95:7F:4A:41 X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/089CB7F8E41C11E9AD4A8D16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.5.8.0/24 Signature Algorithm: sha256WithRSAEncryption a3:55:b2:30:77:7e:ab:58:8c:b0:f7:44:dd:14:0c:81:bb:91: b0:6e:a1:02:81:cd:a4:28:55:3c:05:a0:ae:16:ca:e2:dd:73: 44:7d:4f:9a:2a:a0:b5:6d:94:78:13:0f:c8:60:3f:f0:cc:15: 97:bd:3a:13:2d:9b:70:62:a6:e8:8c:cd:12:38:41:9a:37:9b: da:0c:94:e4:b4:bd:c5:fb:fa:bf:59:8a:8d:42:e4:17:f3:ba: d7:81:89:1e:f3:42:ab:43:4e:c5:4b:93:e2:c8:d5:9d:fd:53: b1:b3:95:4f:4a:f5:b4:75:8a:13:c6:66:c2:dc:bd:d7:ec:e7: d0:62:7a:ce:21:b9:e9:0e:73:7d:c5:8b:13:ab:a8:e8:bb:ae: 3c:35:a2:a9:4b:55:e2:3b:23:22:17:3d:87:01:80:ee:29:ff: d1:c0:6a:2e:9e:a3:49:90:60:5e:0f:5e:af:f6:23:85:4f:b5: 97:50:cf:8a:2d:92:48:0f:23:cf:20:a9:cc:de:1a:52:fe:26: e3:b1:b4:45:0a:d2:0c:c8:8a:9c:71:2e:59:a0:43:a4:6b:37: 76:3e:33:3f:2a:72:58:b8:53:c5:ef:b7:d4:86:34:83:d6:ff: e6:33:e7:eb:26:31:1e:3c:49:20:b1:2c:69:74:76:56:56:06: 76:c8:65:65 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjUwOTAyMTYwMzUwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTI5Yi0zYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskr03JLXmMuE72XVfPCIznl28kqCeD73EA0D67qIRcDhV0upzA+C/ZNkVOTX vnkE2oXPSl815xEGPzfUL4puEU5NwF74VT8SwF3Ij6r8fo6Ecgm25/6knfWttNyG ezpPciG2r0Dx6uya83Tuw2gAodsIvi4n/ocyeNn38+lEGMx6xKPsm4ktxQ5lO0gr LF1Gk7EkuIWHfzaZX18yBWAwJSV/MWhrVkHc04sKZAQtwTor5MPVwHPiC8eEGgWe hwyhvYW7U5866/35QeSFguOOWlNqENQ3ZK2ZBMeC/MGTW4yKZSUkRhTVWhXpaIt0 1qdj9RE3ShzSlzQ7EZpVQeGAwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIclPVmJ vrbvUkiXo0jgh86Vf0pBMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvMDg5Q0I3RjhF NDFDMTFFOUFENEE4RDE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAfQUIMA0GCSqGSIb3DQEBCwUAA4IBAQCjVbIwd36rWIyw90TdFAyB u5GwbqECgc2kKFU8BaCuFsri3XNEfU+aKqC1bZR4Ew/IYD/wzBWXvToTLZtwYqbo jM0SOEGaN5vaDJTktL3F+/q/WYqNQuQX87rXgYke80KrQ07FS5PiyNWd/VOxs5VP SvW0dYoTxmbC3L3X7OfQYnrOIbnpDnN9xYsTq6jou648NaKpS1XiOyMiFz2HAYDu Kf/RwGounqNJkGBeD16v9iOFT7WXUM+KLZJIDyPPIKnM3hpS/ibjsbRFCtIMyIqc cS5ZoEOkazd2PjM/KnJYuFPF77fUhjSD1v/mM+frJjEePEkgsSxpdHZWVgZ2yGVl -----END CERTIFICATE-----Generated at Mon Mar 2 04:33:50 2026 by rpki-client