$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/4F8D63203EBF11EBA940A946C4F9AE02.roa File: 4F8D63203EBF11EBA940A946C4F9AE02.roa (raw, json) Hash identifier: DXWSF+G0kGa+VEDlKy2hdpflWmhisw8t2tP7/dHJlWk= Subject key identifier: 8B:2C:51:C3:E3:3C:9B:E1:4B:18:C5:5D:F2:6A:24:AE:2A:6A:C1:24 Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 296D Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/4F8D63203EBF11EBA940A946C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:25:11 +0000 ROA not before: Tue 02 Sep 2025 16:03:45 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 24071 IP address blocks: 125.5.6.0/24 maxlen: 24 125.5.17.0/24 maxlen: 24 125.5.25.0/24 maxlen: 24 125.5.26.0/24 maxlen: 24 125.5.254.0/27 maxlen: 27 202.57.108.0/24 maxlen: 24 202.163.206.0/24 maxlen: 24 203.131.76.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10605 (0x296d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Validity Not Before: Sep 2 16:03:45 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a49296-72f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:7f:45:71:2a:9b:e9:c8:7d:5c:f0:44:38: f8:c2:e6:d0:2c:91:e9:69:d6:21:01:c0:af:7b:98: a0:df:f8:af:be:98:ca:d5:90:8f:5f:12:91:19:2e: c0:40:83:a3:a0:4e:e6:6b:e8:4a:ef:18:6c:f3:6c: e7:90:17:08:d8:d0:ae:c0:b1:bc:5d:5c:1a:76:dc: 5d:6e:41:0a:d1:52:36:49:27:1a:be:93:01:38:ed: b1:2a:20:15:53:ea:a3:66:be:1d:3a:53:61:87:76: 98:00:b7:97:29:68:07:3a:92:b4:10:c7:11:9d:64: 08:e6:64:93:d1:fa:1d:6c:e8:58:02:2f:68:60:2a: 13:2c:a0:ec:57:37:ae:a7:c7:c4:8f:2a:37:cd:94: e1:e7:18:f1:87:35:d4:88:95:57:1e:e3:09:d8:52: 5a:03:d7:20:a7:26:01:dd:12:52:a6:f8:7e:41:f2: af:f5:53:1e:04:67:ad:c5:82:47:1e:a7:1c:9f:b4: 4d:a1:23:44:ca:c9:42:aa:6a:17:2c:1d:56:b9:09: 80:68:4f:98:34:3a:37:45:1a:1c:f6:47:67:a9:9b: 7a:91:64:2e:a2:87:bb:41:bd:ff:2a:1c:ca:fe:80: d4:79:d4:1e:1a:45:35:e9:08:e2:a8:c1:52:ea:63: b6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2C:51:C3:E3:3C:9B:E1:4B:18:C5:5D:F2:6A:24:AE:2A:6A:C1:24 X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/4F8D63203EBF11EBA940A946C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.5.6.0/24 125.5.17.0/24 125.5.25.0-125.5.26.255 125.5.254.0/27 202.57.108.0/24 202.163.206.0/24 203.131.76.0/27 Signature Algorithm: sha256WithRSAEncryption 61:b2:45:e8:eb:95:95:13:c1:7b:17:85:f2:03:8a:7f:cf:7a: 4e:0d:eb:7c:c1:0f:3b:37:cb:1f:9e:79:36:39:c7:09:08:1e: be:83:15:13:60:4a:09:08:63:d7:74:db:2e:bf:55:8f:0f:6f: 5d:b9:3e:67:f9:a2:59:ab:d3:29:ca:a5:20:af:bc:e0:e2:1f: 1b:3f:22:cb:cc:ad:a2:58:82:5b:5e:20:d9:19:ef:4e:eb:cc: fa:e2:60:bd:fa:30:ce:cc:d6:88:b2:a8:26:f8:3e:b7:63:a8: 2a:2f:44:a2:0b:c3:16:0d:1a:27:d9:d7:ff:b9:9f:55:c3:af: 79:7e:f7:b4:6b:b9:2f:d3:7a:66:65:81:7d:11:6c:4c:f6:81: 23:ff:30:2a:a9:a7:d2:ee:28:77:11:a1:ff:ee:b5:63:ca:41: 4e:b2:a0:31:db:a0:fe:7b:70:a8:31:09:52:66:d9:4c:d3:d9: 2b:8f:2e:b9:09:b3:8d:0d:a4:4f:97:f8:a4:b0:23:3d:73:8a: d8:98:b1:9d:c4:62:e9:2a:da:67:8c:88:16:c5:8b:be:5d:1e: 8e:3e:c7:bc:61:c6:60:fb:8c:4f:70:1f:c1:10:e8:5e:ae:06: 88:05:16:38:52:70:ac:d2:86:6e:ef:34:29:53:fa:73:e1:b3: 7c:87:3b:de -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICKW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjUwOTAyMTYwMzQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTI5Ni03MmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdF/RXEqm+nIfVzwRDj4wubQLJHpadYhAcCve5ig3/ivvpjK1ZCPXxKRGS7A QIOjoE7ma+hK7xhs82znkBcI2NCuwLG8XVwadtxdbkEK0VI2SScavpMBOO2xKiAV U+qjZr4dOlNhh3aYALeXKWgHOpK0EMcRnWQI5mST0fodbOhYAi9oYCoTLKDsVzeu p8fEjyo3zZTh5xjxhzXUiJVXHuMJ2FJaA9cgpyYB3RJSpvh+QfKv9VMeBGetxYJH Hqccn7RNoSNEyslCqmoXLB1WuQmAaE+YNDo3RRoc9kdnqZt6kWQuooe7Qb3/KhzK /oDUedQeGkU16QjiqMFS6mO2rQIDAQABo4ICjjCCAoowHQYDVR0OBBYEFIssUcPj PJvhSxjFXfJqJK4qasEkMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvNEY4RDYzMjAz RUJGMTFFQkE5NDBBOTQ2QzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDA6 BAIAATA0AwQAfQUGAwQAfQURMAwDBAB9BRkDBAB9BRoDBQV9Bf4AAwQAyjlsAwQA yqPOAwUFy4NMADANBgkqhkiG9w0BAQsFAAOCAQEAYbJF6OuVlRPBexeF8gOKf896 Tg3rfMEPOzfLH555NjnHCQgevoMVE2BKCQhj13TbLr9Vjw9vXbk+Z/miWavTKcql IK+84OIfGz8iy8ytoliCW14g2RnvTuvM+uJgvfowzszWiLKoJvg+t2OoKi9EogvD Fg0aJ9nX/7mfVcOveX73tGu5L9N6ZmWBfRFsTPaBI/8wKqmn0u4odxGh/+61Y8pB TrKgMdug/ntwqDEJUmbZTNPZK48uuQmzjQ2kT5f4pLAjPXOK2JixncRi6SraZ4yI FsWLvl0ejj7HvGHGYPuMT3AfwRDoXq4GiAUWOFJwrNKGbu80KVP6c+GzfIc73g== -----END CERTIFICATE-----Generated at Mon Mar 2 06:17:59 2026 by rpki-client