$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/C78E4E640BC111F19AB158B3293D8C67.roa File: C78E4E640BC111F19AB158B3293D8C67.roa (raw, json) Hash identifier: UHpdeBy1a2ejJJBR1Oum4bKcILEQ59Ie3ax0oFfhz0Q= Subject key identifier: E9:01:6B:C5:73:E2:82:2B:10:6A:BF:B9:CB:EF:70:D8:78:B9:3D:13 Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Certificate serial: 1E5E Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/C78E4E640BC111F19AB158B3293D8C67.roa Signing time: Tue 30 Jun 2026 16:19:08 +0000 ROA not before: Tue 30 Jun 2026 16:19:08 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 135407 IP address blocks: 45.249.8.0/22 maxlen: 24 103.217.176.0/22 maxlen: 24 2407:aa80::/32 maxlen: 40 2407:aa80:110::/44 maxlen: 48 2407:aa80:120::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 16:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7774 (0x1e5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Validity Not Before: Jun 30 16:19:08 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a43ec7b-b600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:d7:34:12:89:ae:c6:b1:11:42:31:e3:0e: 2d:d1:09:eb:5b:84:d1:5b:ee:d4:f4:dc:a1:91:05: 93:eb:15:ae:84:32:11:bd:c5:91:8e:b9:d9:61:f9: ef:9d:47:50:27:df:2f:02:d1:b5:c6:c4:28:b3:a2: d4:11:c2:de:e8:52:7b:29:fa:db:04:8d:ed:45:58: 3d:bb:29:74:ea:d5:cf:e6:ae:3c:69:0e:e4:0b:9e: c9:92:23:3f:3f:93:2e:1a:ba:c3:9a:d3:53:fe:aa: fc:29:e0:91:87:7e:28:d5:9f:6e:1b:ba:99:5e:70: e8:31:49:7c:8e:10:41:54:ca:fa:ac:b0:49:9b:93: 28:7f:49:21:9e:b3:c5:5f:e4:d0:fc:93:bb:20:d1: 94:a8:5a:c9:2b:b9:4f:d9:fe:54:32:84:28:3a:95: 93:dc:96:f3:04:0c:7f:b2:02:7b:bb:0f:a6:cf:3f: 39:d3:63:d7:a8:c9:85:1d:2b:59:bd:23:c8:25:8c: 80:3f:c6:2d:c7:2a:c9:34:8f:c9:71:14:b4:39:51: 15:68:e9:e2:57:c3:d4:b4:b1:c8:5f:06:ac:b3:96: fa:b9:36:7c:ec:e2:9c:ee:99:e3:c5:43:17:fb:63: 7c:66:b1:12:7f:5d:14:77:ff:3c:80:bf:20:2e:a0: f0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:01:6B:C5:73:E2:82:2B:10:6A:BF:B9:CB:EF:70:D8:78:B9:3D:13 X509v3 Authority Key Identifier: keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/C78E4E640BC111F19AB158B3293D8C67.roa sbgp-ipAddrBlock: critical IPv4: 45.249.8.0/22 103.217.176.0/22 IPv6: 2407:aa80::/32 Signature Algorithm: sha256WithRSAEncryption b1:fc:d3:03:d1:c9:91:46:ee:57:e1:b0:a2:53:92:2c:6e:ab: 51:68:e1:9b:19:5e:5f:13:89:80:fe:b1:d6:11:f4:6c:9b:de: 2c:d7:59:34:54:06:53:52:4c:e4:2a:cc:bb:82:6b:f6:5c:92: 85:ef:ae:51:b5:3e:9f:93:10:dc:41:5e:70:f4:07:40:aa:a4: e4:b0:51:ca:e6:3e:6d:f8:e1:f9:0e:a4:ab:4f:83:43:94:37: 79:84:46:e1:aa:f9:01:58:de:56:53:5d:c9:ed:23:7d:9b:89: 0c:6f:bb:09:11:ed:09:4c:df:8f:d4:05:06:9c:99:b0:5c:b9: da:ca:7a:37:d5:71:35:7b:e1:3e:6d:ad:1a:64:37:6c:77:b3: 22:90:d8:0e:03:d0:4d:88:c7:22:bb:ab:3e:5e:4a:c2:6a:7a: 69:bf:90:f3:9c:c0:8b:3d:bc:a7:50:94:86:8e:3b:73:aa:4c: 7d:33:a3:dc:20:09:62:02:a5:e3:8b:1d:ac:d8:e6:b4:e8:13: 50:1c:35:a1:a2:d3:de:c6:03:d7:8b:f9:47:6d:e9:ba:d2:d2: 21:20:36:8d:08:40:10:b1:7b:a2:ba:83:2d:47:90:83:fe:ec: a9:59:5a:97:0f:08:20:dd:5d:d6:01:71:b2:50:cd:8e:e9:60: 91:46:c1:1d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw N0ZBQTkwNzIwHhcNMjYwNjMwMTYxOTA4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQzZWM3Yi1iNjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudDXNBKJrsaxEUIx4w4t0QnrW4TRW+7U9NyhkQWT6xWuhDIRvcWRjrnZYfnv nUdQJ98vAtG1xsQos6LUEcLe6FJ7KfrbBI3tRVg9uyl06tXP5q48aQ7kC57JkiM/ P5MuGrrDmtNT/qr8KeCRh34o1Z9uG7qZXnDoMUl8jhBBVMr6rLBJm5Mof0khnrPF X+TQ/JO7INGUqFrJK7lP2f5UMoQoOpWT3JbzBAx/sgJ7uw+mzz8502PXqMmFHStZ vSPIJYyAP8YtxyrJNI/JcRS0OVEVaOniV8PUtLHIXwass5b6uTZ87OKc7pnjxUMX +2N8ZrESf10Ud/88gL8gLqDw6QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFOkBa8Vz 4oIrEGq/ucvvcNh4uT0TMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjVGOTUvQ0UyQUZDNDZBMjc1MTFFNjlFQjE3Nzc0QzRGOUFFMDIvQzc4RTRFNjQw QkMxMTFGMTlBQjE1OEIzMjkzRDhDNjcucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLfkIAwQCZ9mwMA0EAgACMAcDBQAkB6qAMA0GCSqGSIb3DQEBCwUA A4IBAQCx/NMD0cmRRu5X4bCiU5IsbqtRaOGbGV5fE4mA/rHWEfRsm94s11k0VAZT UkzkKsy7gmv2XJKF765RtT6fkxDcQV5w9AdAqqTksFHK5j5t+OH5DqSrT4NDlDd5 hEbhqvkBWN5WU13J7SN9m4kMb7sJEe0JTN+P1AUGnJmwXLnayno31XE1e+E+ba0a ZDdsd7MikNgOA9BNiMciu6s+XkrCanppv5DznMCLPbynUJSGjjtzqkx9M6PcIAli AqXjix2s2Oa06BNQHDWhotPexgPXi/lHbem60tIhIDaNCEAQsXuiuoMtR5CD/uyp WVqXDwgg3V3WAXGyUM2O6WCRRsEd -----END CERTIFICATE-----Generated at Sat Jul 18 11:10:03 2026 by rpki-client