$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3D7A10E8D94411E98E28CD85C4F9AE02.roa File: 3D7A10E8D94411E98E28CD85C4F9AE02.roa (raw, json) Hash identifier: Tf4Y3IEFlgzkdN+VQKmY7om/f7fRT2uQg57Npx45GaM= Subject key identifier: FD:E9:9F:AF:20:6E:7A:22:B3:08:B2:9C:12:F3:4A:3C:68:B3:56:5D Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 2B28 Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3D7A10E8D94411E98E28CD85C4F9AE02.roa Signing time: Fri 14 Aug 2026 16:23:21 +0000 ROA not before: Fri 14 Aug 2026 16:23:21 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 24131 IP address blocks: 125.5.109.0/24 maxlen: 24 125.5.123.0/24 maxlen: 24 125.5.124.0/24 maxlen: 24 125.5.127.0/24 maxlen: 24 202.163.204.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11048 (0x2b28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Validity Not Before: Aug 14 16:23:21 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a7f40f9-8a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6c:ca:e9:65:a8:25:d2:5d:91:f4:df:ff:5b: 90:cb:ef:8b:a7:fe:99:7c:5e:bb:0e:3f:a8:f5:70: 96:bb:35:4a:9b:67:08:38:d7:09:8c:9b:de:d0:91: 86:e0:4a:cc:d0:a2:fe:be:fe:56:c5:38:ee:59:7f: 4e:b0:6c:ff:0c:b4:db:8d:0a:ba:e1:82:a9:f1:20: 30:ab:9e:7c:80:37:de:9d:16:34:dd:34:03:5f:f2: 57:1b:4e:e7:4c:68:94:be:83:66:29:bc:ea:6e:38: 21:38:e2:68:b4:66:56:35:66:86:ab:f3:f4:cb:35: c2:05:f6:af:d0:75:ed:fd:1c:05:51:96:f7:d8:c5: 4e:59:6d:bf:34:92:cb:23:aa:77:fd:b0:f8:c0:74: 46:bc:91:02:6c:07:17:d1:76:a7:ad:8e:19:bd:06: 19:43:45:69:bc:fb:80:c1:de:ac:7e:85:e3:44:48: 8c:b2:ee:92:f1:6a:10:87:99:08:8c:cc:e2:14:50: 3a:d8:e1:ad:08:4c:d1:bd:c5:4a:ee:ae:26:ac:c0: 89:b8:a8:a8:e0:70:14:06:83:da:b2:dd:35:bd:df: 39:ed:30:58:44:59:78:22:b9:ad:1a:a1:fc:5e:26: c4:3d:a6:07:b6:f8:c2:cf:62:b0:a9:8d:39:17:cf: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E9:9F:AF:20:6E:7A:22:B3:08:B2:9C:12:F3:4A:3C:68:B3:56:5D X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3D7A10E8D94411E98E28CD85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.5.109.0/24 125.5.123.0-125.5.124.255 125.5.127.0/24 202.163.204.64/26 Signature Algorithm: sha256WithRSAEncryption 5d:1c:a8:31:c2:fe:70:12:2c:c8:bc:e1:67:b6:f7:b3:73:3e: 36:a4:1a:f0:89:2a:57:54:cd:8a:72:14:47:6d:2f:fc:a5:e4: 79:44:34:2d:e9:17:4b:d6:94:db:e3:80:00:8e:35:04:7f:cd: 2f:52:9e:3b:2c:79:ba:ca:9d:c0:2a:3c:80:b3:a0:ce:76:84: ee:12:f5:40:c5:65:98:fd:d3:23:14:66:ad:dd:ad:9d:01:2c: cf:d6:45:94:4e:09:fb:7d:e3:07:b9:ad:f5:d4:c9:b7:47:08: eb:4d:31:91:ea:08:de:2b:08:26:65:c8:3e:ec:07:91:00:b5: af:4f:23:2a:7b:de:a9:80:85:65:48:08:00:e4:fd:e1:90:8b: 0e:35:4b:e8:b1:65:10:52:7a:a6:ef:7c:9a:a8:08:7d:bb:c1: 57:23:db:28:67:ed:64:90:70:fe:b2:a7:0f:3e:9c:e6:a6:a7: 61:a2:b9:aa:a6:99:98:d3:3b:a8:1a:17:f3:81:37:34:5d:3e: 84:4d:f0:76:d3:6f:fd:d3:06:1e:4a:f1:2d:f6:30:6d:91:05: 0f:2d:45:c3:28:14:02:18:7f:2d:98:aa:a1:b5:36:e1:d3:c5: e5:ba:71:c8:34:70:ee:0a:5b:cd:fe:0e:59:41:13:33:dc:76: bc:8d:ed:29 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICKygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjYwODE0MTYyMzIxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdmNDBmOS04YTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WzK6WWoJdJdkfTf/1uQy++Lp/6ZfF67Dj+o9XCWuzVKm2cIONcJjJve0JGG 4ErM0KL+vv5WxTjuWX9OsGz/DLTbjQq64YKp8SAwq558gDfenRY03TQDX/JXG07n TGiUvoNmKbzqbjghOOJotGZWNWaGq/P0yzXCBfav0HXt/RwFUZb32MVOWW2/NJLL I6p3/bD4wHRGvJECbAcX0XanrY4ZvQYZQ0VpvPuAwd6sfoXjREiMsu6S8WoQh5kI jMziFFA62OGtCEzRvcVK7q4mrMCJuKio4HAUBoPast01vd857TBYRFl4IrmtGqH8 XibEPaYHtvjCz2KwqY05F8/1QQIDAQABo4ICezCCAncwHQYDVR0OBBYEFP3pn68g bnoiswiynBLzSjxos1ZdMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvM0Q3QTEwRThE OTQ0MTFFOThFMjhDRDg1QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAn BAIAATAhAwQAfQVtMAwDBAB9BXsDBAB9BXwDBAB9BX8DBQbKo8xAMA0GCSqGSIb3 DQEBCwUAA4IBAQBdHKgxwv5wEizIvOFntvezcz42pBrwiSpXVM2KchRHbS/8peR5 RDQt6RdL1pTb44AAjjUEf80vUp47LHm6yp3AKjyAs6DOdoTuEvVAxWWY/dMjFGat 3a2dASzP1kWUTgn7feMHua311Mm3RwjrTTGR6gjeKwgmZcg+7AeRALWvTyMqe96p gIVlSAgA5P3hkIsONUvosWUQUnqm73yaqAh9u8FXI9soZ+1kkHD+sqcPPpzmpqdh ormqppmY0zuoGhfzgTc0XT6ETfB202/90wYeSvEt9jBtkQUPLUXDKBQCGH8tmKqh tTbh08XlunHINHDuClvN/g5ZQRMz3Ha8je0p -----END CERTIFICATE-----Generated at Fri Aug 21 03:31:03 2026 by rpki-client