$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E48E2E94017211EBA18CC269C4F9AE02.roa File: E48E2E94017211EBA18CC269C4F9AE02.roa (raw, json) Hash identifier: RcPbYS2Mm16Dad2keSZ4cdbUI7gVUL7UCpOgtTmht7o= Subject key identifier: 0B:29:A0:75:7A:FF:D1:AF:04:E3:E0:81:72:7B:68:D1:51:BB:1E:B6 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 35AF Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E48E2E94017211EBA18CC269C4F9AE02.roa Signing time: Thu 30 Oct 2025 15:31:28 +0000 ROA not before: Thu 30 Oct 2025 15:31:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 55847 IP address blocks: 14.139.1.0/24 maxlen: 24 14.139.2.0/24 maxlen: 24 14.139.7.0/24 maxlen: 24 14.139.40.0/24 maxlen: 24 14.139.43.0/24 maxlen: 24 14.139.45.0/24 maxlen: 24 14.139.46.0/24 maxlen: 24 14.139.47.0/24 maxlen: 24 14.139.128.0/24 maxlen: 24 14.139.196.0/24 maxlen: 24 180.149.50.0/24 maxlen: 24 180.149.53.0/24 maxlen: 24 180.149.57.0/24 maxlen: 24 180.149.58.0/24 maxlen: 24 2405:8a00:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13743 (0x35af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Oct 30 15:31:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=690384d0-84fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:1c:5e:37:2c:2b:2f:4b:ce:7c:04:0c:bf: 45:6e:2e:1e:ce:d5:c7:e1:4a:f1:4a:de:e6:41:93: fc:24:f9:29:04:c3:81:ef:4d:c5:07:e7:13:e8:42: c3:65:96:e1:e4:3b:1d:e3:77:01:ca:db:c4:35:bb: c2:1f:1f:11:e4:05:a4:17:72:d4:9a:a4:5e:bb:5d: f6:e2:22:77:45:5d:40:66:5d:22:38:34:0f:6d:3d: 14:8d:1f:cb:66:2c:25:f6:58:b3:72:9f:6f:59:c5: 54:c4:e5:e3:f9:9c:b3:58:30:51:bc:39:cf:75:8f: 97:7e:75:9a:d7:f4:cd:b2:4b:24:19:ac:df:74:38: b9:93:63:15:73:3a:ab:22:7b:f8:7d:b1:b2:fc:4e: 24:bf:ee:58:fd:45:da:b1:0d:f9:83:67:dc:7c:68: 97:27:93:5e:a3:e3:4b:9f:9b:ed:2f:2d:72:03:08: 04:a4:aa:da:8e:4c:eb:44:72:04:56:cf:cf:0f:b8: 6c:0c:44:23:30:fd:14:7b:2b:12:47:c6:f4:d7:8d: ea:26:3e:aa:6c:f8:27:a2:cd:05:21:a5:64:de:d6: 45:dc:97:b2:44:08:da:f0:e2:26:8f:cd:8a:3e:34: ea:fb:3b:00:df:45:54:cc:ea:c6:c9:97:89:62:ad: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:29:A0:75:7A:FF:D1:AF:04:E3:E0:81:72:7B:68:D1:51:BB:1E:B6 X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E48E2E94017211EBA18CC269C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.139.1.0-14.139.2.255 14.139.7.0/24 14.139.40.0/24 14.139.43.0/24 14.139.45.0-14.139.47.255 14.139.128.0/24 14.139.196.0/24 180.149.50.0/24 180.149.53.0/24 180.149.57.0-180.149.58.255 IPv6: 2405:8a00:8000::/48 Signature Algorithm: sha256WithRSAEncryption 53:9e:d3:38:fb:a0:d2:11:bd:5a:73:e6:a9:04:fe:88:83:68: 81:56:31:48:88:2c:30:7c:63:26:8e:54:e8:91:16:3f:d4:76: 74:a9:12:ad:f7:fa:48:26:d9:b1:29:e3:fd:b4:79:06:86:ac: 78:6c:a1:fc:cf:ec:72:fb:b6:48:3a:a5:52:c6:f3:16:33:0d: 41:37:04:4e:7c:55:26:88:9b:99:fe:82:05:3e:3b:a7:7e:bb: d6:fb:ce:76:40:2c:05:31:90:45:95:d7:cf:5a:4b:30:2a:3b: d0:b3:3b:6e:8a:d4:8f:17:9b:43:d3:76:78:8d:4e:5a:45:b9: 87:1a:d2:31:62:6b:99:cc:30:6e:ae:8e:9e:72:17:25:c0:fd: ca:9f:22:ed:40:57:76:53:e3:0b:38:32:87:fc:f2:ae:42:c3: bf:6c:5c:8f:fa:36:09:72:74:f6:12:b3:7a:32:11:ba:71:f6: 28:8a:63:a5:13:3a:2e:fc:a4:eb:81:14:c1:fa:c2:83:4e:fb: 28:cd:32:6f:35:cd:96:ca:60:d5:d2:30:ee:76:69:47:80:db: bf:26:82:ee:06:05:30:12:ef:86:b0:98:21:3a:64:1c:fe:6d: 09:5d:20:d9:51:63:fa:48:11:89:05:85:f2:43:fc:9f:d5:db: 1a:23:ed:d3 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgICNa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjUxMDMwMTUzMTI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzODRkMC04NGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkQcXjcsKy9LznwEDL9Fbi4eztXH4UrxSt7mQZP8JPkpBMOB703FB+cT6ELD ZZbh5Dsd43cBytvENbvCHx8R5AWkF3LUmqReu1324iJ3RV1AZl0iODQPbT0UjR/L Ziwl9lizcp9vWcVUxOXj+ZyzWDBRvDnPdY+XfnWa1/TNskskGazfdDi5k2MVczqr Inv4fbGy/E4kv+5Y/UXasQ35g2fcfGiXJ5Neo+NLn5vtLy1yAwgEpKrajkzrRHIE Vs/PD7hsDEQjMP0UeysSR8b0143qJj6qbPgnos0FIaVk3tZF3JeyRAja8OImj82K PjTq+zsA30VUzOrGyZeJYq1LzQIDAQABo4IC9DCCAvAwHQYDVR0OBBYEFAspoHV6 /9GvBOPggXJ7aNFRux62MB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvRTQ4RTJFOTQw MTcyMTFFQkExOENDMjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwfgYIKwYBBQUHAQcBAf8E bzBtMFoEAgABMFQwDAMEAA6LAQMEAA6LAgMEAA6LBwMEAA6LKAMEAA6LKzAMAwQA DostAwQEDosgAwQADouAAwQADovEAwQAtJUyAwQAtJU1MAwDBAC0lTkDBAC0lTow DwQCAAIwCQMHACQFigCAADANBgkqhkiG9w0BAQsFAAOCAQEAU57TOPug0hG9WnPm qQT+iINogVYxSIgsMHxjJo5U6JEWP9R2dKkSrff6SCbZsSnj/bR5BoaseGyh/M/s cvu2SDqlUsbzFjMNQTcETnxVJoibmf6CBT47p3671vvOdkAsBTGQRZXXz1pLMCo7 0LM7borUjxebQ9N2eI1OWkW5hxrSMWJrmcwwbq6OnnIXJcD9yp8i7UBXdlPjCzgy h/zyrkLDv2xcj/o2CXJ09hKzejIRunH2KIpjpRM6Lvyk64EUwfrCg077KM0ybzXN lspg1dIw7nZpR4DbvyaC7gYFMBLvhrCYITpkHP5tCV0g2VFj+kgRiQWF8kP8n9Xb GiPt0w== -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:40 2025 by rpki-client