$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3E054AE6D94411E98E28CD85C4F9AE02.roa File: 3E054AE6D94411E98E28CD85C4F9AE02.roa (raw, json) Hash identifier: MAE8ECa4ZU9VCcKLBdECegfw7kX7IzX15XxZ/Gyafc0= Subject key identifier: A0:39:E3:DF:4B:40:C4:77:76:C7:FE:9C:64:39:1B:C2:55:0E:86:82 Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 296F Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3E054AE6D94411E98E28CD85C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:25:12 +0000 ROA not before: Tue 02 Sep 2025 16:03:47 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 24221 IP address blocks: 125.5.125.0/24 maxlen: 24 125.5.126.0/24 maxlen: 24 202.57.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10607 (0x296f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Validity Not Before: Sep 2 16:03:47 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a49298-b1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:50:20:de:62:92:58:97:6f:d6:48:3a:79: 0c:10:31:bf:5a:fc:cf:70:e3:59:05:cb:07:c1:33: 51:a7:37:f5:9a:05:4d:bd:fc:6e:2e:de:e5:24:ba: 34:b6:5d:b2:73:cd:9f:b6:dc:59:66:a1:0d:6d:95: 53:0b:5b:f4:8c:77:8d:ca:43:3b:7d:c6:d5:5a:91: 68:10:a7:70:1c:56:b8:7c:df:d2:7d:9d:f4:96:f1: 19:ab:8a:18:a5:0e:58:85:54:2f:e4:08:34:e7:49: 11:38:f0:f5:a5:30:d6:61:01:31:44:76:e7:25:6a: 1b:21:e3:af:51:c1:0f:0e:51:0c:aa:10:54:a7:c8: eb:73:d9:1e:d5:fb:19:62:d9:f1:ac:ee:00:6d:78: a6:16:f2:b5:ac:ac:13:2c:c1:09:17:e3:21:f1:e9: ff:05:65:d8:30:a3:a8:c0:83:85:8a:10:77:02:c7: b2:1c:d8:df:d1:47:de:14:13:f7:a5:76:22:ed:14: dc:d1:70:fa:27:48:18:38:cc:e0:8f:c1:c7:86:10: 16:2a:37:00:e2:24:ab:2c:d4:2f:03:c9:a4:fb:8a: 55:2d:4a:52:50:b1:90:ef:65:d4:58:fd:ef:f5:a7: 6d:45:a3:85:c9:5a:2a:27:96:b1:e4:3a:ce:d6:9c: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:39:E3:DF:4B:40:C4:77:76:C7:FE:9C:64:39:1B:C2:55:0E:86:82 X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3E054AE6D94411E98E28CD85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.5.125.0-125.5.126.255 202.57.109.0/24 Signature Algorithm: sha256WithRSAEncryption 50:40:0a:e3:e9:bd:f5:90:a9:3a:b3:df:fa:a4:8f:cf:b8:bd: 08:3e:60:68:df:a9:dc:69:38:bd:8c:17:50:43:b9:1e:ce:e3: 79:0c:62:a2:f4:18:09:6b:8d:61:f6:be:93:e9:16:e8:19:65: 3a:7d:c8:5c:ff:53:59:3d:9b:99:de:b4:92:e0:0d:1a:c8:24: 9a:c2:72:99:03:8a:77:b9:2e:b5:43:07:b4:9a:67:97:c6:3b: 65:00:b9:e7:70:42:41:24:cc:2e:41:7e:2e:f4:c4:b6:32:9d: 89:71:ce:66:6c:69:eb:17:60:c5:2f:4f:b0:d9:00:c0:6f:bc: 42:7b:1c:9f:8f:be:d4:e3:f4:c0:04:34:e6:4d:36:33:94:03: 13:cd:ef:1c:7e:ca:c1:c1:eb:0e:c9:04:75:c0:b6:40:c2:3e: 05:8d:7a:81:fd:a4:bf:17:3c:be:cf:96:b8:b7:85:56:d0:d7: db:c9:bd:5d:0c:64:a7:5f:3c:ab:c4:68:92:9d:57:b8:13:f0: e0:60:07:7e:af:42:0b:68:1d:f4:7b:52:77:18:13:ee:67:bf: 78:0e:f1:9a:fc:fe:3e:dd:48:4a:d7:2c:aa:3f:27:1e:28:84: de:63:d6:56:a0:07:ea:93:b2:47:a1:d4:9f:a0:cc:0b:f8:d1: 6b:37:c2:86 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICKW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjUwOTAyMTYwMzQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTI5OC1iMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoJQIN5ikliXb9ZIOnkMEDG/WvzPcONZBcsHwTNRpzf1mgVNvfxuLt7lJLo0 tl2yc82fttxZZqENbZVTC1v0jHeNykM7fcbVWpFoEKdwHFa4fN/SfZ30lvEZq4oY pQ5YhVQv5Ag050kROPD1pTDWYQExRHbnJWobIeOvUcEPDlEMqhBUp8jrc9ke1fsZ YtnxrO4AbXimFvK1rKwTLMEJF+Mh8en/BWXYMKOowIOFihB3AseyHNjf0UfeFBP3 pXYi7RTc0XD6J0gYOMzgj8HHhhAWKjcA4iSrLNQvA8mk+4pVLUpSULGQ72XUWP3v 9adtRaOFyVoqJ5ax5DrO1pzqowIDAQABo4ICbjCCAmowHQYDVR0OBBYEFKA5499L QMR3dsf+nGQ5G8JVDoaCMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvM0UwNTRBRTZE OTQ0MTFFOThFMjhDRDg1QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAB9BX0DBAB9BX4DBADKOW0wDQYJKoZIhvcNAQELBQADggEBAFBA CuPpvfWQqTqz3/qkj8+4vQg+YGjfqdxpOL2MF1BDuR7O43kMYqL0GAlrjWH2vpPp FugZZTp9yFz/U1k9m5netJLgDRrIJJrCcpkDine5LrVDB7SaZ5fGO2UAuedwQkEk zC5Bfi70xLYynYlxzmZsaesXYMUvT7DZAMBvvEJ7HJ+PvtTj9MAENOZNNjOUAxPN 7xx+ysHB6w7JBHXAtkDCPgWNeoH9pL8XPL7Plri3hVbQ19vJvV0MZKdfPKvEaJKd V7gT8OBgB36vQgtoHfR7UncYE+5nv3gO8Zr8/j7dSErXLKo/Jx4ohN5j1lagB+qT skeh1J+gzAv40Ws3woY= -----END CERTIFICATE-----Generated at Mon Mar 2 06:16:14 2026 by rpki-client