$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa File: 04CC562A444E11E88204061CC4F9AE02.roa (raw, json) Hash identifier: QOiY3hFrvBYW4moWHSGhx5zs4RYPw59BvTEOl9hZ6yg= Subject key identifier: 07:6C:67:C7:A8:D9:5F:43:05:43:EF:0B:41:33:20:6E:37:84:D4:5D Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 25EC Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa Signing time: Thu 06 Aug 2026 16:23:19 +0000 ROA not before: Thu 06 Aug 2026 16:23:19 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 58779 IP address blocks: 45.125.112.0/23 maxlen: 23 45.125.113.0/24 maxlen: 24 45.125.114.0/23 maxlen: 23 45.125.114.0/24 maxlen: 24 45.125.115.0/24 maxlen: 24 103.193.248.0/23 maxlen: 23 103.193.250.0/23 maxlen: 23 103.193.250.0/24 maxlen: 24 103.193.251.0/24 maxlen: 24 2402:b780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9708 (0x25ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Aug 6 16:23:19 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a74b4f7-674a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8c:87:7a:43:bb:bf:df:84:9c:48:cb:72:f1: ba:32:ff:fa:a0:be:72:c3:72:d5:5f:90:c5:95:07: 5d:5e:c1:e2:1d:5b:56:82:98:d3:81:2b:47:79:1a: 4a:36:86:13:14:2b:d1:f8:c2:0e:4e:e9:66:47:4b: d5:9f:78:0c:ae:59:94:f6:92:f3:a4:39:d9:9d:67: e8:fb:e8:63:44:9e:d2:9b:8c:8c:d1:4f:ed:2d:3d: 3d:97:c5:cd:5d:fc:7a:87:d8:99:b4:5e:5c:15:70: 68:9d:39:39:73:17:b2:0e:ba:ab:83:e8:be:33:0b: b0:d3:74:de:c5:c8:b1:d2:53:32:73:11:f4:84:eb: 9d:06:8d:a8:35:01:63:37:10:93:ca:b8:ec:c3:40: 1c:4f:d8:46:53:c3:16:25:90:15:c9:71:9f:a0:92: 61:84:9e:3e:28:71:28:cc:49:e8:3c:08:da:52:3d: df:64:7f:51:b6:ae:d6:d1:c6:fe:12:cc:d7:14:17: 89:88:1d:bd:6e:0d:63:4d:00:79:a5:47:ae:a9:4f: 0c:84:d5:d4:3c:de:2d:22:73:5e:c4:2a:d5:69:32: ba:8b:a1:34:01:2f:aa:5d:57:52:76:6e:1d:00:2b: 30:05:dd:53:b0:3f:51:44:76:86:9e:cb:f2:06:7f: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6C:67:C7:A8:D9:5F:43:05:43:EF:0B:41:33:20:6E:37:84:D4:5D X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.112.0/22 103.193.248.0/22 IPv6: 2402:b780::/32 Signature Algorithm: sha256WithRSAEncryption 95:f6:57:4b:dd:92:c5:7f:b7:5a:b9:2d:af:9c:26:5f:bd:7d: f9:1b:de:07:74:45:11:42:27:0c:b4:86:35:aa:5a:b9:43:05: 2f:56:fc:ff:6e:5e:1b:ab:77:c8:2e:90:2e:e3:4b:65:b8:cf: 16:8b:10:5a:6f:54:20:33:a6:2a:50:9f:ef:40:24:77:dc:b5: 34:c6:ea:de:8a:75:0d:ef:5a:2b:e6:ff:57:b8:0d:30:97:4a: fd:cd:eb:56:ac:c6:c2:bb:6a:da:c0:7e:84:71:6d:86:c0:4f: a3:cc:36:a5:57:da:f9:3f:47:c7:9b:28:58:c3:ed:f5:4e:5c: 0a:b7:76:f7:b7:27:02:33:b5:61:ce:1f:1e:f8:40:1d:37:83: a0:2d:43:44:be:e5:5f:07:7f:14:0e:fd:49:3c:f2:9b:a9:88: eb:2c:8f:06:17:f2:fc:46:81:da:f0:ad:d6:5e:ec:8c:98:9b: b6:51:3b:70:e4:cf:7c:92:2b:cd:86:8f:42:fe:38:72:87:5f: 2f:52:61:a1:29:71:06:1a:91:2e:1b:a6:83:6c:30:e1:fa:ab: ea:e7:54:bd:d3:79:e2:e3:f4:db:f0:0d:77:d5:f1:8b:ba:2e: c9:4c:e6:c5:0d:ae:d7:48:e8:e4:1a:da:3e:f6:9c:0b:78:4f: 78:64:c1:c3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICJewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjYwODA2MTYyMzE5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0YjRmNy02NzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oyHekO7v9+EnEjLcvG6Mv/6oL5yw3LVX5DFlQddXsHiHVtWgpjTgStHeRpK NoYTFCvR+MIOTulmR0vVn3gMrlmU9pLzpDnZnWfo++hjRJ7Sm4yM0U/tLT09l8XN Xfx6h9iZtF5cFXBonTk5cxeyDrqrg+i+Mwuw03Texcix0lMycxH0hOudBo2oNQFj NxCTyrjsw0AcT9hGU8MWJZAVyXGfoJJhhJ4+KHEozEnoPAjaUj3fZH9Rtq7W0cb+ EszXFBeJiB29bg1jTQB5pUeuqU8MhNXUPN4tInNexCrVaTK6i6E0AS+qXVdSdm4d ACswBd1TsD9RRHaGnsvyBn+h2QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAdsZ8eo 2V9DBUPvC0EzIG43hNRdMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc0NTYvNjE1NEQxNjgzNzJFMTFFNTgxRjBGQjM5QzRGOUFFMDIvMDRDQzU2MkE0 NDRFMTFFODgyMDQwNjFDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLX1wAwQCZ8H4MA0EAgACMAcDBQAkAreAMA0GCSqGSIb3DQEBCwUA A4IBAQCV9ldL3ZLFf7dauS2vnCZfvX35G94HdEURQicMtIY1qlq5QwUvVvz/bl4b q3fILpAu40tluM8WixBab1QgM6YqUJ/vQCR33LU0xureinUN71or5v9XuA0wl0r9 zetWrMbCu2rawH6EcW2GwE+jzDalV9r5P0fHmyhYw+31TlwKt3b3tycCM7Vhzh8e +EAdN4OgLUNEvuVfB38UDv1JPPKbqYjrLI8GF/L8RoHa8K3WXuyMmJu2UTtw5M98 kivNho9C/jhyh18vUmGhKXEGGpEuG6aDbDDh+qvq51S903ni4/Tb8A131fGLui7J TObFDa7XSOjkGto+9pwLeE94ZMHD -----END CERTIFICATE-----Generated at Fri Sep 11 01:18:30 2026 by rpki-client