$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa File: 04CC562A444E11E88204061CC4F9AE02.roa (raw, json) Hash identifier: UvaAhwggzxiP5BreIlqS+S/h5B1PMRbtiBEtDey1XLE= Subject key identifier: D8:21:F3:BB:DA:6F:C6:FC:29:6C:E8:6F:7E:F0:57:7E:35:95:F3:D8 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 258A Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:28:05 +0000 ROA not before: Tue 12 Aug 2025 15:53:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 58779 IP address blocks: 45.125.112.0/23 maxlen: 23 45.125.113.0/24 maxlen: 24 45.125.114.0/23 maxlen: 23 45.125.114.0/24 maxlen: 24 45.125.115.0/24 maxlen: 24 103.193.248.0/23 maxlen: 23 103.193.250.0/23 maxlen: 23 103.193.250.0/24 maxlen: 24 103.193.251.0/24 maxlen: 24 2402:b780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9610 (0x258a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Aug 12 15:53:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a45b05-1c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:f3:f0:2a:4b:83:3b:53:6b:99:39:19:18: b1:8b:e2:40:55:6c:8b:09:0f:de:97:d4:1f:bf:24: 86:a2:f2:22:16:53:08:5f:29:ae:e8:05:ba:a9:ee: 0c:85:31:e5:50:28:fe:60:76:d4:08:62:0a:bd:79: e6:a1:eb:9b:85:00:08:ef:d9:fa:4e:14:8b:42:14: e0:08:db:0c:d3:9b:fc:74:4a:32:fb:6b:1c:ca:64: 49:69:6a:ba:df:c3:9d:3e:60:85:d4:4e:c0:f5:da: 0c:08:0f:dc:12:5a:5f:69:e6:5b:db:a7:ef:73:5b: 9f:a3:a9:3c:a2:c6:b8:cd:56:8e:ba:e1:a5:32:6e: 9f:f0:ad:e7:e5:90:c5:e7:8c:de:a2:57:76:b3:b1: 85:ca:f5:e9:ab:aa:ce:22:d3:d2:66:1a:6c:77:39: 31:57:47:cd:53:37:ab:c4:9e:6d:68:33:16:f3:af: 3c:f3:c4:c8:8a:a5:61:cc:de:33:04:84:fb:e1:61: 76:4a:51:85:82:b3:11:97:50:ed:dd:ed:c4:49:07: 0a:db:9d:39:1d:f8:98:a2:6c:56:e0:c8:2b:63:cb: 2b:87:c7:f0:8a:a5:a7:23:9a:b7:37:71:78:02:aa: a1:26:82:ee:9a:97:6c:b9:3b:5a:61:88:5a:da:5d: e8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:21:F3:BB:DA:6F:C6:FC:29:6C:E8:6F:7E:F0:57:7E:35:95:F3:D8 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.112.0/22 103.193.248.0/22 IPv6: 2402:b780::/32 Signature Algorithm: sha256WithRSAEncryption 19:60:ec:47:56:6e:58:ad:1e:8a:8f:45:5a:1e:fb:6d:99:0c: 16:58:57:46:7d:3a:ae:b7:ca:2f:6f:7f:03:d5:e2:ae:c8:e0: 09:99:0f:cd:77:f0:98:57:ef:86:9f:d8:30:07:28:32:fe:a2: 88:7a:f6:bf:ec:84:b2:cc:f9:4e:33:01:e8:d0:ed:e1:a2:66: 7a:5a:6d:08:04:71:66:5a:bf:9c:76:8f:00:7a:f1:51:51:91: c3:77:43:81:bc:7a:38:53:82:e3:6e:3c:04:25:e6:f8:4c:ab: 61:dc:47:ed:9d:87:b3:03:4d:50:98:0a:09:3f:94:cf:03:01: cd:97:0e:f5:a8:56:09:58:cf:16:28:69:9d:4b:8e:c8:39:45: ec:cc:44:92:f9:09:d9:b7:80:90:8e:66:2c:02:9a:f8:72:f4: 72:d7:1c:5f:03:33:63:63:f0:9f:20:e7:7c:0e:06:52:16:2a: 05:ff:07:dc:b9:a2:00:94:c9:34:3f:58:b3:8a:b1:61:14:58: 16:1b:1a:ce:cf:b5:6b:99:2b:a4:9b:ce:66:aa:e6:fc:a8:50: 6a:49:fb:70:8f:6b:0d:2c:aa:7c:c6:7f:08:26:4c:4c:fa:51: 24:fe:60:a6:ec:bd:84:6b:b3:38:65:d3:04:73:6f:88:7a:28: d0:00:9c:7d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICJYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUwODEyMTU1MzE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWIwNS0xYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwInz8CpLgztTa5k5GRixi+JAVWyLCQ/el9QfvySGovIiFlMIXymu6AW6qe4M hTHlUCj+YHbUCGIKvXnmoeubhQAI79n6ThSLQhTgCNsM05v8dEoy+2scymRJaWq6 38OdPmCF1E7A9doMCA/cElpfaeZb26fvc1ufo6k8osa4zVaOuuGlMm6f8K3n5ZDF 54zeold2s7GFyvXpq6rOItPSZhpsdzkxV0fNUzerxJ5taDMW868888TIiqVhzN4z BIT74WF2SlGFgrMRl1Dt3e3ESQcK2505HfiYomxW4MgrY8srh8fwiqWnI5q3N3F4 AqqhJoLumpdsuTtaYYha2l3omwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNgh87va b8b8KWzob37wV341lfPYMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc0NTYvNjE1NEQxNjgzNzJFMTFFNTgxRjBGQjM5QzRGOUFFMDIvMDRDQzU2MkE0 NDRFMTFFODgyMDQwNjFDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLX1wAwQCZ8H4MA0EAgACMAcDBQAkAreAMA0GCSqGSIb3DQEBCwUA A4IBAQAZYOxHVm5YrR6Kj0VaHvttmQwWWFdGfTqut8ovb38D1eKuyOAJmQ/Nd/CY V++Gn9gwBygy/qKIeva/7ISyzPlOMwHo0O3homZ6Wm0IBHFmWr+cdo8AevFRUZHD d0OBvHo4U4LjbjwEJeb4TKth3EftnYezA01QmAoJP5TPAwHNlw71qFYJWM8WKGmd S47IOUXszESS+QnZt4CQjmYsApr4cvRy1xxfAzNjY/CfIOd8DgZSFioF/wfcuaIA lMk0P1izirFhFFgWGxrOz7VrmSukm85mqub8qFBqSftwj2sNLKp8xn8IJkxM+lEk /mCm7L2Ea7M4ZdMEc2+IeijQAJx9 -----END CERTIFICATE-----Generated at Mon Mar 2 18:35:01 2026 by rpki-client