$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/4F1B63805A0A11ECAEA43C36C4F9AE02.roa File: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (raw, json) Hash identifier: Pt2E1qcEivT3ie4YYr9N64XHvkTRfhTRzBSZhrIsVPw= Subject key identifier: 31:A0:68:90:AD:70:86:01:43:8E:EE:92:DB:DD:FF:2F:ED:90:30:F4 Certificate issuer: /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Certificate serial: 0605 Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/4F1B63805A0A11ECAEA43C36C4F9AE02.roa Signing time: Fri 18 Sep 2026 23:44:45 +0000 ROA not before: Fri 18 Sep 2026 23:44:45 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134677 IP address blocks: 45.127.32.0/22 maxlen: 22 45.127.32.0/24 maxlen: 24 45.127.33.0/24 maxlen: 24 45.127.34.0/24 maxlen: 24 45.127.35.0/24 maxlen: 24 103.195.188.0/22 maxlen: 22 103.195.188.0/24 maxlen: 24 103.195.189.0/24 maxlen: 24 103.195.190.0/24 maxlen: 24 103.195.191.0/24 maxlen: 24 2001:df4:c140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A Validity Not Before: Sep 18 23:44:45 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aadcced-1881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:b6:fd:da:e8:ea:78:91:03:a5:e9:be:c0: 46:1c:0e:4a:d7:fc:ab:54:95:f6:38:f8:c1:9b:9c: dc:23:76:c1:2f:5b:9c:01:f7:d7:36:14:5b:ee:9d: 44:fe:5e:04:35:ca:9a:21:af:a7:c0:21:c9:a6:25: b5:bc:c5:00:04:ba:25:7b:29:31:02:2a:7c:64:07: c4:64:40:d3:6f:56:6c:56:25:19:03:45:31:1c:c8: ba:4d:23:78:10:cb:e0:bd:a8:66:49:d6:54:5c:5f: ce:21:83:d4:b6:7e:23:53:2b:da:2d:90:63:3b:45: 37:e0:67:96:fa:e6:60:1b:f7:2c:8a:6f:18:d0:6a: 1a:96:2a:0f:da:96:cb:52:ca:97:8d:82:34:7a:11: f4:0e:4e:26:02:19:c3:77:7e:ef:fc:24:47:80:cb: 0d:df:83:fc:e4:10:d7:60:43:b5:07:8e:83:72:73: c4:3d:90:f5:50:2f:06:e4:41:0b:5f:f3:98:96:16: ca:a2:f1:c1:b9:33:9d:91:39:e2:27:6b:76:fc:43: 1a:22:a7:63:9d:fd:fd:3d:9a:02:04:35:73:6b:33: e4:0b:f3:03:3b:af:8f:33:20:f2:2a:bc:82:e6:4b: 2b:35:15:bf:bf:3e:d4:a3:74:72:5e:d7:e5:82:13: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A0:68:90:AD:70:86:01:43:8E:EE:92:DB:DD:FF:2F:ED:90:30:F4 X509v3 Authority Key Identifier: keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/4F1B63805A0A11ECAEA43C36C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.127.32.0/22 103.195.188.0/22 IPv6: 2001:df4:c140::/48 Signature Algorithm: sha256WithRSAEncryption 3e:a9:4a:0f:2f:36:b8:6b:c8:1d:98:7c:a1:84:5a:b1:d2:76: 9c:59:ea:08:78:fb:63:e4:a4:bc:36:25:0b:41:76:13:3d:99: f7:70:fc:4c:54:09:12:92:db:60:b7:00:14:4b:a1:87:c2:1d: 95:f3:86:f9:56:08:8c:a4:f2:83:6c:fb:58:09:66:96:d1:85: 60:98:24:ef:06:ff:12:9c:0e:f0:86:d8:92:97:cc:40:fc:dd: 3f:52:5c:79:29:ee:68:1a:fd:17:64:80:68:d7:14:76:c1:43: e7:44:29:9e:d3:8b:8b:c5:dc:fb:ec:e7:98:7b:4b:35:25:89: d5:c3:c1:28:d7:3f:b1:9b:5b:c0:ca:17:ad:58:54:f6:f5:92: d4:2f:27:cf:15:a4:4e:16:0f:b1:d4:8b:ee:ab:57:78:62:a9: ea:4c:91:7d:46:c0:c6:a9:6c:80:20:64:1f:53:de:ba:c3:53: 96:68:da:b9:93:b2:8a:aa:ca:ba:62:9b:cf:ce:66:5a:6e:da: e3:dc:43:fe:ec:c1:ab:2c:d7:fc:50:1e:c6:cb:c0:7a:40:80: 27:77:2f:65:72:a3:a4:a1:d8:36:ed:04:17:6a:fc:dc:b3:b5: 45:64:63:71:54:e7:87:95:c4:c5:ce:0b:83:47:1d:2f:51:68: 02:d1:7c:65 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTUxMTAvBgNVBAUTKEYzODU4OUY4NDY0QUE1QTkxNjk5RjgwODY0OUVDNTM2 ODMxQjAwNEEwHhcNMjYwOTE4MjM0NDQ1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFkY2NlZC0xODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4eG2/dro6niRA6XpvsBGHA5K1/yrVJX2OPjBm5zcI3bBL1ucAffXNhRb7p1E /l4ENcqaIa+nwCHJpiW1vMUABLoleykxAip8ZAfEZEDTb1ZsViUZA0UxHMi6TSN4 EMvgvahmSdZUXF/OIYPUtn4jUyvaLZBjO0U34GeW+uZgG/csim8Y0GoalioP2pbL UsqXjYI0ehH0Dk4mAhnDd37v/CRHgMsN34P85BDXYEO1B46DcnPEPZD1UC8G5EEL X/OYlhbKovHBuTOdkTniJ2t2/EMaIqdjnf39PZoCBDVzazPkC/MDO6+PMyDyKryC 5ksrNRW/vz7Uo3RyXtflghOh9wIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFDGgaJCt cIYBQ47uktvd/y/tkDD0MB8GA1UdIwQYMBaAFPOFifhGSqWpFpn4CGSexTaDGwBK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1NS9DQ0JFMUJBNjE3 NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bha1dtZmdJWko3Rk5vTWJB RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0V0otRVpLcGFrV21mZ0laSjdGTm9NYkFFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERDNTUvQ0NCRTFCQTYxNzYyMTFFQzgxQTBEMTFFQzRGOUFFMDIvNEYxQjYzODA1 QTBBMTFFQ0FFQTQzQzM2QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCLX8gAwQCZ8O8MA8EAgACMAkDBwAgAQ30wUAwDQYJKoZIhvcNAQEL BQADggEBAD6pSg8vNrhryB2YfKGEWrHSdpxZ6gh4+2PkpLw2JQtBdhM9mfdw/ExU CRKS22C3ABRLoYfCHZXzhvlWCIyk8oNs+1gJZpbRhWCYJO8G/xKcDvCG2JKXzED8 3T9SXHkp7mga/RdkgGjXFHbBQ+dEKZ7Ti4vF3Pvs55h7SzUlidXDwSjXP7GbW8DK F61YVPb1ktQvJ88VpE4WD7HUi+6rV3hiqepMkX1GwMapbIAgZB9T3rrDU5Zo2rmT soqqyrpim8/OZlpu2uPcQ/7swass1/xQHsbLwHpAgCd3L2Vyo6Sh2DbtBBdq/Nyz tUVkY3FU54eVxMXOC4NHHS9RaALRfGU= -----END CERTIFICATE-----Generated at Mon Sep 21 20:36:47 2026 by rpki-client