$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/297BC4140D4611E794585E2FC4F9AE02.roa File: 297BC4140D4611E794585E2FC4F9AE02.roa (raw, json) Hash identifier: /APSJPO1WwUNbNz10EJn94BnFWAnDuB94L0jk/7YJvM= Subject key identifier: F6:04:B1:54:FB:01:F7:A3:F8:47:5D:34:50:D0:C8:42:93:63:4C:AB Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 258B Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/297BC4140D4611E794585E2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:28:06 +0000 ROA not before: Tue 12 Aug 2025 15:53:18 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 64047 IP address blocks: 45.125.112.0/22 maxlen: 22 45.125.112.0/23 maxlen: 23 45.125.112.0/24 maxlen: 24 45.125.113.0/24 maxlen: 24 45.125.114.0/23 maxlen: 23 45.125.114.0/24 maxlen: 24 45.125.115.0/24 maxlen: 24 103.193.248.0/22 maxlen: 22 103.193.248.0/23 maxlen: 24 103.193.250.0/23 maxlen: 24 2402:b780::/32 maxlen: 32 2402:b780::/32 maxlen: 48 2402:b780:53::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9611 (0x258b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Aug 12 15:53:18 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a45b06-c950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:16:b3:14:f4:85:86:a7:86:64:18:92:07: 19:ec:d3:d9:70:53:b2:89:d6:09:72:b1:02:f8:e6: 24:7f:d4:0d:67:4e:14:89:c3:cf:d7:93:6b:78:48: 25:0a:60:da:34:60:81:58:7e:94:5a:f4:13:8e:86: 9f:99:92:e5:8d:c2:f4:71:c8:d4:d5:03:dc:ed:ba: 59:62:a9:b2:b0:32:8b:0b:33:7e:c4:64:f7:75:05: 2e:4d:be:07:81:b7:e6:9d:80:73:f3:4e:bf:d9:8e: 08:07:15:80:49:65:a9:88:6a:c6:e8:1a:36:ef:9a: a4:13:f7:cd:78:fd:f4:35:4a:b7:67:2f:7c:47:f9: a4:e3:d5:20:86:e3:19:1d:a1:92:d2:3c:53:bc:ef: 14:c9:4a:dd:e1:b4:57:b7:d4:5e:61:19:33:6e:a8: 1c:35:5e:17:b8:1b:3d:fd:5b:2b:b9:35:a9:5a:72: 20:60:7f:0c:54:f6:60:53:a0:4b:65:22:f1:7b:bc: 31:78:c4:e3:85:7f:b6:3a:36:c0:c1:45:d1:c9:4d: a5:81:a0:e6:b5:25:60:be:12:95:69:44:e5:9f:82: da:c5:1f:dc:1e:4a:4d:95:0f:f4:4a:fa:de:61:e6: 0b:91:eb:f1:3d:9f:f6:92:05:99:3e:62:dd:19:0e: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:04:B1:54:FB:01:F7:A3:F8:47:5D:34:50:D0:C8:42:93:63:4C:AB X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/297BC4140D4611E794585E2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.112.0/22 103.193.248.0/22 IPv6: 2402:b780::/32 Signature Algorithm: sha256WithRSAEncryption 6d:37:74:2e:cb:33:cb:ab:09:a8:7f:80:0a:f1:c4:8e:50:d2: 73:c7:30:54:7b:80:f3:2a:5a:3b:96:32:cd:66:0b:3c:a6:a0: be:e5:0a:42:ce:ec:63:6a:49:ef:8a:9e:c4:22:3c:45:7e:c3: 2d:db:76:39:67:74:31:fc:98:9e:65:14:95:de:41:08:bb:a7: 8e:44:ec:b8:46:db:5b:4b:01:18:25:7c:c2:e0:c1:0f:9a:76: 57:75:ed:d8:fb:03:4d:83:a4:ea:c4:1d:2e:eb:c5:31:d2:74: 7e:49:a9:77:42:30:c8:bc:ca:e9:d2:9f:98:38:e7:1e:93:26: 6c:3e:f0:22:d2:df:cc:74:eb:b3:23:3e:4c:8b:c9:9d:b1:f3: 93:a3:47:9f:f2:a7:3e:32:3f:cc:ef:10:56:b8:e9:a9:77:2a: ea:4b:c9:e8:ec:72:cd:59:94:cf:82:52:e1:d9:cf:8d:b1:be: 05:74:05:ed:d0:50:cb:25:27:16:c8:9a:d3:16:f0:4f:05:a5: 45:b0:4f:c3:4c:cb:85:c5:57:ca:8d:71:85:9f:87:ce:8b:d6: 44:0c:05:56:b7:8c:7d:f9:2c:34:55:21:7b:4c:64:a2:ce:df: f5:ec:24:48:f5:f1:70:70:f6:77:5c:89:fb:e9:60:3f:28:bd: 7a:df:42:1e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICJYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUwODEyMTU1MzE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWIwNi1jOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlcWsxT0hYanhmQYkgcZ7NPZcFOyidYJcrEC+OYkf9QNZ04UicPP15NreEgl CmDaNGCBWH6UWvQTjoafmZLljcL0ccjU1QPc7bpZYqmysDKLCzN+xGT3dQUuTb4H gbfmnYBz806/2Y4IBxWASWWpiGrG6Bo275qkE/fNeP30NUq3Zy98R/mk49UghuMZ HaGS0jxTvO8UyUrd4bRXt9ReYRkzbqgcNV4XuBs9/VsruTWpWnIgYH8MVPZgU6BL ZSLxe7wxeMTjhX+2OjbAwUXRyU2lgaDmtSVgvhKVaUTln4LaxR/cHkpNlQ/0Svre YeYLkevxPZ/2kgWZPmLdGQ7Q+QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPYEsVT7 Afej+EddNFDQyEKTY0yrMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc0NTYvNjE1NEQxNjgzNzJFMTFFNTgxRjBGQjM5QzRGOUFFMDIvMjk3QkM0MTQw RDQ2MTFFNzk0NTg1RTJGQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLX1wAwQCZ8H4MA0EAgACMAcDBQAkAreAMA0GCSqGSIb3DQEBCwUA A4IBAQBtN3QuyzPLqwmof4AK8cSOUNJzxzBUe4DzKlo7ljLNZgs8pqC+5QpCzuxj aknvip7EIjxFfsMt23Y5Z3Qx/JieZRSV3kEIu6eOROy4RttbSwEYJXzC4MEPmnZX de3Y+wNNg6TqxB0u68Ux0nR+Sal3QjDIvMrp0p+YOOcekyZsPvAi0t/MdOuzIz5M i8mdsfOTo0ef8qc+Mj/M7xBWuOmpdyrqS8no7HLNWZTPglLh2c+Nsb4FdAXt0FDL JScWyJrTFvBPBaVFsE/DTMuFxVfKjXGFn4fOi9ZEDAVWt4x9+Sw0VSF7TGSizt/1 7CRI9fFwcPZ3XIn76WA/KL1630Ie -----END CERTIFICATE-----Generated at Mon Mar 2 20:14:51 2026 by rpki-client