$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/DD55266E1E5611EFAFFD4839C4F9AE02.roa File: DD55266E1E5611EFAFFD4839C4F9AE02.roa (raw, json) Hash identifier: VPeYgnZiEB4ELbri8V0Cwxs0FIp8Fv0nuy1iKLYCpO4= Subject key identifier: 8B:4D:49:EE:B6:E9:34:FF:94:E1:20:08:E7:0C:4B:D0:F6:C4:27:7D Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Certificate serial: 1C8B Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/DD55266E1E5611EFAFFD4839C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:14:33 +0000 ROA not before: Sat 26 Apr 2025 16:24:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149535 IP address blocks: 45.125.152.0/24 maxlen: 24 45.248.18.0/24 maxlen: 24 45.248.19.0/24 maxlen: 24 157.119.176.0/24 maxlen: 24 157.119.178.0/24 maxlen: 24 183.87.185.0/24 maxlen: 24 183.87.209.0/24 maxlen: 24 183.87.210.0/24 maxlen: 24 183.87.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7307 (0x1c8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Validity Not Before: Apr 26 16:24:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42da9-44b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:21:78:f0:03:fa:fd:c0:35:ae:35:95:bb: fe:5f:d7:a6:4f:7c:71:1b:ab:b4:ed:55:a3:17:8b: f4:10:85:a3:e0:be:d0:2f:4d:57:16:8e:7a:49:38: b8:3f:14:72:ba:65:fd:92:81:58:b9:96:37:3c:a4: 7a:f8:61:e3:58:ac:8b:f2:a0:dc:47:ca:97:15:8a: 62:dd:8b:b6:e6:3a:f9:bf:65:59:c5:21:3a:41:5a: 68:59:6d:66:9c:3a:12:43:33:3a:6e:6a:e3:4c:db: 96:53:38:0f:4d:39:49:6a:52:f7:b3:fe:f8:86:4c: 65:a8:14:78:bc:4d:e7:d4:59:c8:17:10:dd:47:35: 3b:08:cc:2e:6d:d3:55:6a:b8:64:d4:75:85:29:02: b7:e6:77:cc:33:e3:fb:75:30:14:9e:7d:33:15:69: df:b6:91:92:a1:7d:cf:3e:50:07:90:54:40:03:ee: 2b:0b:47:80:f0:f4:72:d5:ae:64:85:1e:5c:b9:5e: 95:36:b4:dd:f6:bc:98:db:52:a6:a6:06:95:43:5a: 56:cc:bf:30:a1:a1:cd:2c:df:e2:59:81:9d:65:7a: bd:ab:6a:34:27:9a:f7:51:fb:1a:f6:80:10:9b:cd: 99:14:3c:6e:ca:23:2b:72:e9:47:c8:08:cc:1a:b1: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4D:49:EE:B6:E9:34:FF:94:E1:20:08:E7:0C:4B:D0:F6:C4:27:7D X509v3 Authority Key Identifier: keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/DD55266E1E5611EFAFFD4839C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.152.0/24 45.248.18.0/23 157.119.176.0/24 157.119.178.0/24 183.87.185.0/24 183.87.209.0-183.87.211.255 Signature Algorithm: sha256WithRSAEncryption 6e:3e:f8:2b:95:6b:95:df:a6:07:2f:0f:73:77:da:22:c3:e9: cf:15:e7:bc:04:3f:27:fd:4d:e4:c5:99:21:4a:1b:dd:7a:de: 1c:18:01:10:0f:7d:0c:bd:8c:f2:48:18:63:42:87:3a:37:08: c5:ea:6c:c9:70:9f:0d:c7:e7:fd:c2:25:82:d2:33:98:e5:d7: 8c:9f:0b:be:a7:e3:09:77:b2:8e:31:49:1c:2d:dc:2d:05:54: 49:60:d5:95:11:ba:e1:64:a5:95:f1:8f:42:f8:fb:f2:66:4a: 06:7d:e6:ca:29:c6:62:08:b2:2e:91:f7:d8:c9:cd:08:29:a3: 46:4c:26:3c:d0:06:e2:2e:82:a7:fe:1c:a1:0f:6d:02:62:88: af:80:0e:d7:59:b4:62:c0:7b:19:17:3b:d7:63:52:16:37:7b: 59:53:9d:ef:7c:ef:69:99:6d:7c:5f:f2:0e:09:53:aa:ab:56: 44:99:c3:d8:07:7d:bb:0d:47:22:01:de:f1:7e:14:67:88:2d: e8:4a:c3:de:13:19:73:b1:c8:b6:d4:b7:07:28:30:7a:47:2d: 9a:29:e5:64:ec:a1:b4:da:5c:72:9d:3b:46:7f:f9:41:e1:4d: 98:72:01:2e:49:72:83:58:95:fb:4e:0b:ac:e9:8b:0f:9d:48: ef:18:3f:9f -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICHIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB OEE0QjdERUEwHhcNMjUwNDI2MTYyNDA2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmRhOS00NGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/khePAD+v3ANa41lbv+X9emT3xxG6u07VWjF4v0EIWj4L7QL01XFo56STi4 PxRyumX9koFYuZY3PKR6+GHjWKyL8qDcR8qXFYpi3Yu25jr5v2VZxSE6QVpoWW1m nDoSQzM6bmrjTNuWUzgPTTlJalL3s/74hkxlqBR4vE3n1FnIFxDdRzU7CMwubdNV arhk1HWFKQK35nfMM+P7dTAUnn0zFWnftpGSoX3PPlAHkFRAA+4rC0eA8PRy1a5k hR5cuV6VNrTd9ryY21KmpgaVQ1pWzL8woaHNLN/iWYGdZXq9q2o0J5r3Ufsa9oAQ m82ZFDxuyiMrculHyAjMGrH7SwIDAQABo4IChjCCAoIwHQYDVR0OBBYEFItNSe62 6TT/lOEgCOcMS9D2xCd9MB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODJGNzUvM0M4Q0Y2M0VGQ0JEMTFFNjg4RDMxMjVFQzRGOUFFMDIvREQ1NTI2NkUx RTU2MTFFRkFGRkQ0ODM5QzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQALX2YAwQBLfgSAwQAnXewAwQAnXeyAwQAt1e5MAwDBAC3V9EDBAK3 V9AwDQYJKoZIhvcNAQELBQADggEBAG4++CuVa5XfpgcvD3N32iLD6c8V57wEPyf9 TeTFmSFKG9163hwYARAPfQy9jPJIGGNChzo3CMXqbMlwnw3H5/3CJYLSM5jl14yf C76n4wl3so4xSRwt3C0FVElg1ZURuuFkpZXxj0L4+/JmSgZ95sopxmIIsi6R99jJ zQgpo0ZMJjzQBuIugqf+HKEPbQJiiK+ADtdZtGLAexkXO9djUhY3e1lTne9872mZ bXxf8g4JU6qrVkSZw9gHfbsNRyIB3vF+FGeILehKw94TGXOxyLbUtwcoMHpHLZop 5WTsobTaXHKdO0Z/+UHhTZhyAS5JcoNYlftOC6zpiw+dSO8YP58= -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:27 2026 by rpki-client