$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/40E8489ED94411E98E28CD85C4F9AE02.roa File: 40E8489ED94411E98E28CD85C4F9AE02.roa (raw, json) Hash identifier: mbtIEwK/9P2Ak/Tfh/wKCxdKdssG2+5vHQb5udiNfP0= Subject key identifier: BB:B8:36:91:FF:EC:DA:D5:DB:F0:90:74:E6:6D:A1:59:B8:B7:82:29 Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 2977 Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/40E8489ED94411E98E28CD85C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:25:19 +0000 ROA not before: Tue 02 Sep 2025 16:03:54 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9256 IP address blocks: 125.5.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10615 (0x2977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Validity Not Before: Sep 2 16:03:54 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4929f-877f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:61:05:ec:1e:9a:f4:26:22:c0:a7:54:52: 02:4d:3b:f1:bb:88:74:2e:d4:64:71:c5:47:45:9e: 7c:11:13:17:49:3d:b2:62:3c:8c:4c:7f:e0:e8:9c: 79:9c:fe:59:22:c8:fc:40:ae:7e:2a:35:b0:4b:3b: 8c:8c:87:a8:49:79:e6:58:f7:3e:2f:ae:30:e6:6d: 23:08:63:5c:dd:2f:f8:f7:10:a0:0f:f3:d4:43:37: 0c:f9:71:07:da:ac:db:e2:cc:70:c6:8e:0a:d8:2c: 8d:68:1a:83:f0:33:29:e0:75:bc:de:d5:80:0b:cb: 4b:53:b3:65:72:8b:d9:ad:ca:54:93:40:aa:da:8d: 14:72:b8:fc:b8:f1:f2:be:b0:93:da:a0:62:b5:79: 6b:86:67:e7:bb:af:2a:c5:ef:e2:8c:6d:9e:bf:09: 56:34:69:da:8c:f8:da:11:75:1a:96:44:1e:3b:95: c6:31:6b:0f:a6:fc:a1:ed:08:53:6f:89:5c:8a:b7: 22:48:86:56:bd:a6:10:b6:97:8e:42:cc:ca:ec:ab: f1:9e:d3:f6:d2:5e:18:04:32:42:08:0d:cf:23:37: 6b:d1:c5:9b:43:e7:3d:89:c2:88:1e:be:ea:3b:74: 60:92:82:73:c7:09:6b:10:00:18:1b:41:82:33:e4: f4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B8:36:91:FF:EC:DA:D5:DB:F0:90:74:E6:6D:A1:59:B8:B7:82:29 X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/40E8489ED94411E98E28CD85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.5.99.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:41:7a:f3:16:da:56:f4:7a:48:04:8e:d8:8e:de:53:d3:a4: e7:5f:ce:22:c3:7a:80:6a:59:3d:87:b8:54:3a:45:14:2c:4b: b8:ca:e7:6d:b4:42:3a:e5:35:ac:f8:2e:92:c7:f9:b6:d9:c1: 0c:04:e8:80:b1:c2:ef:99:8e:a5:1e:f1:28:8f:32:02:f6:bc: 8d:ea:6a:9a:01:37:28:88:ae:6f:74:20:31:42:6f:c5:17:5a: da:7f:d6:f1:bf:fa:17:72:95:4a:85:1a:2b:0d:4f:b3:e5:d5: dc:89:68:9e:51:ad:e3:75:06:56:6c:ef:05:7a:ad:25:17:74: 6f:37:05:7e:ee:5f:f2:c3:2a:13:ca:c9:30:8e:89:6c:e4:1d: 8e:b8:d2:1c:b7:7b:23:ca:b8:00:7c:db:7d:80:c1:c1:31:e6: 02:64:23:c6:f3:cf:fa:d0:0c:8e:6d:25:40:16:4b:74:87:d3: 0d:f1:c9:fb:88:27:3c:47:33:1e:2e:07:5f:7f:cc:33:f3:1a: 91:f9:cd:37:9b:5a:97:d6:ce:d9:9d:6c:ee:1d:bf:9c:60:a1: eb:06:d5:b1:66:da:24:f3:f1:34:39:4c:19:0b:1c:21:f8:66: 96:9a:30:10:61:be:f8:c3:4f:0d:16:6e:13:ad:62:63:a0:64: 9f:13:43:71 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjUwOTAyMTYwMzU0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTI5Zi04NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlithBewemvQmIsCnVFICTTvxu4h0LtRkccVHRZ58ERMXST2yYjyMTH/g6Jx5 nP5ZIsj8QK5+KjWwSzuMjIeoSXnmWPc+L64w5m0jCGNc3S/49xCgD/PUQzcM+XEH 2qzb4sxwxo4K2CyNaBqD8DMp4HW83tWAC8tLU7NlcovZrcpUk0Cq2o0Ucrj8uPHy vrCT2qBitXlrhmfnu68qxe/ijG2evwlWNGnajPjaEXUalkQeO5XGMWsPpvyh7QhT b4lcirciSIZWvaYQtpeOQszK7KvxntP20l4YBDJCCA3PIzdr0cWbQ+c9icKIHr7q O3RgkoJzxwlrEAAYG0GCM+T0TwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLu4NpH/ 7NrV2/CQdOZtoVm4t4IpMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvNDBFODQ4OUVE OTQ0MTFFOThFMjhDRDg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAfQVjMA0GCSqGSIb3DQEBCwUAA4IBAQAuQXrzFtpW9HpIBI7Yjt5T 06TnX84iw3qAalk9h7hUOkUULEu4yudttEI65TWs+C6Sx/m22cEMBOiAscLvmY6l HvEojzIC9ryN6mqaATcoiK5vdCAxQm/FF1raf9bxv/oXcpVKhRorDU+z5dXciWie Ua3jdQZWbO8Feq0lF3RvNwV+7l/ywyoTyskwjols5B2OuNIct3sjyrgAfNt9gMHB MeYCZCPG88/60AyObSVAFkt0h9MN8cn7iCc8RzMeLgdff8wz8xqR+c03m1qX1s7Z nWzuHb+cYKHrBtWxZtok8/E0OUwZCxwh+GaWmjAQYb74w08NFm4TrWJjoGSfE0Nx -----END CERTIFICATE-----Generated at Mon Mar 2 06:16:16 2026 by rpki-client