$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/FD4056EC7CC411F0BAFA214CC4F9AE02.roa File: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (raw, json) Hash identifier: gyl8LKflFHTBaQXJC874/YdVBr+pHDAsrgRU8hn35pg= Subject key identifier: 37:B8:06:70:3E:82:CF:44:03:C1:F8:A1:66:16:42:1F:13:EE:6E:4E Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: F9 Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/FD4056EC7CC411F0BAFA214CC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:28:15 +0000 ROA not before: Fri 10 Oct 2025 10:27:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138915 IP address blocks: 45.158.180.0/24 maxlen: 24 45.158.181.0/24 maxlen: 24 45.158.182.0/24 maxlen: 24 45.158.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 19:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Oct 10 10:27:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4772f-7ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:64:1e:99:6e:9f:e1:3a:f1:ca:08:68:45: e8:e6:93:c5:1a:06:3a:39:df:e4:ca:bf:6f:32:37: dc:4d:64:b9:78:47:11:17:24:2c:a2:9e:f8:7c:4e: b1:3e:ed:f8:02:24:bc:29:d0:b5:b5:03:7d:1d:b3: 2a:a8:70:85:0a:d1:70:5c:31:cc:70:a6:48:73:21: ea:dd:9d:db:67:47:2b:8c:5b:27:3c:14:45:1f:40: 68:f6:3f:14:fe:b7:09:73:8c:a3:36:37:1b:ad:fc: 61:c8:74:58:c1:e2:8f:f8:0b:e5:05:92:fd:18:05: 12:6f:a2:6b:81:38:0f:3e:14:ef:02:eb:16:55:b9: c4:6c:ce:7f:59:89:a2:e3:df:af:5f:a0:e7:b7:1e: 4f:64:d6:69:2d:3d:41:05:e5:27:03:99:e0:87:7d: 22:ac:a9:d6:44:eb:57:d2:7e:f9:fd:3b:38:8a:1c: 87:04:c5:6f:da:ee:4c:cf:17:8e:4a:5c:7e:a8:f6: 3f:a1:c4:2e:6d:98:9a:35:f8:49:26:f3:c6:69:f4: 7b:c0:81:4f:54:f2:90:93:48:7a:fe:93:f5:bf:55: d1:aa:94:ba:2e:ec:8c:f9:e0:40:72:e4:33:92:3d: 7a:34:50:d8:c9:1d:bc:93:10:54:67:97:5e:70:46: 8f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B8:06:70:3E:82:CF:44:03:C1:F8:A1:66:16:42:1F:13:EE:6E:4E X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/FD4056EC7CC411F0BAFA214CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.158.180.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:b4:8b:50:d6:1c:5a:97:a8:7c:c0:ec:18:d8:12:83:e5:36: d8:f8:5a:09:f0:95:d2:9d:1b:42:76:ef:e3:fa:2c:3c:6e:24: e6:47:64:4f:a9:ff:06:d7:57:cb:06:cb:3b:4a:d2:78:8b:03: 2c:7c:b2:ae:1e:66:7f:49:a0:00:ec:6f:ac:db:4d:68:62:a5: 0b:f0:91:d1:06:44:28:be:d2:a8:e5:27:ea:03:64:ee:3c:3f: e2:40:7f:cb:c5:ab:7a:f2:16:fc:b8:b2:44:58:e4:a9:8c:48: 4c:5c:8d:68:dc:20:a9:14:e3:84:6e:4e:38:0e:b1:0f:e8:c9: 0e:d9:79:45:c7:39:00:49:f9:49:1c:c1:74:1a:7a:24:e2:c8: db:fd:d2:a6:6f:57:51:00:c5:ab:18:cf:ea:ba:ee:eb:d3:92: d3:60:b0:74:6d:7d:a2:a8:b8:3f:3a:34:64:2f:77:47:76:53: 69:93:41:f9:6b:4a:1b:dd:30:dd:6f:26:bc:6d:14:a4:ad:80: fa:d1:38:52:d9:1e:1e:3b:7f:9d:78:d9:b8:6e:fb:95:c4:67: c3:14:20:93:3c:5b:e5:45:3b:22:09:eb:90:f4:47:46:6d:01: ea:c6:e3:01:d5:7c:0a:47:dc:0f:c7:0d:00:0f:c4:fc:c1:c7: 5e:ba:82:cb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjUxMDEwMTAyNzQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzcyZi03ZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozRkHplun+E68coIaEXo5pPFGgY6Od/kyr9vMjfcTWS5eEcRFyQsop74fE6x Pu34AiS8KdC1tQN9HbMqqHCFCtFwXDHMcKZIcyHq3Z3bZ0crjFsnPBRFH0Bo9j8U /rcJc4yjNjcbrfxhyHRYweKP+AvlBZL9GAUSb6JrgTgPPhTvAusWVbnEbM5/WYmi 49+vX6Dntx5PZNZpLT1BBeUnA5ngh30irKnWROtX0n75/Ts4ihyHBMVv2u5MzxeO Slx+qPY/ocQubZiaNfhJJvPGafR7wIFPVPKQk0h6/pP1v1XRqpS6LuyM+eBAcuQz kj16NFDYyR28kxBUZ5decEaPPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDe4BnA+ gs9EA8H4oWYWQh8T7m5OMB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM4QUYvMTk3RkY3QTJCNDA5MTFFRjk0RTY3NDVEQzRGOUFFMDIvRkQ0MDU2RUM3 Q0M0MTFGMEJBRkEyMTRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCLZ60MA0GCSqGSIb3DQEBCwUAA4IBAQAatItQ1hxal6h8wOwY2BKD 5TbY+FoJ8JXSnRtCdu/j+iw8biTmR2RPqf8G11fLBss7StJ4iwMsfLKuHmZ/SaAA 7G+s201oYqUL8JHRBkQovtKo5SfqA2TuPD/iQH/Lxat68hb8uLJEWOSpjEhMXI1o 3CCpFOOEbk44DrEP6MkO2XlFxzkASflJHMF0Gnok4sjb/dKmb1dRAMWrGM/quu7r 05LTYLB0bX2iqLg/OjRkL3dHdlNpk0H5a0ob3TDdbya8bRSkrYD60ThS2R4eO3+d eNm4bvuVxGfDFCCTPFvlRTsiCeuQ9EdGbQHqxuMB1XwKR9wPxw0AD8T8wcdeuoLL -----END CERTIFICATE-----Generated at Thu Mar 5 19:11:07 2026 by rpki-client