$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/6C2E2E523E6311F18F888BA6CC833773.roa File: 6C2E2E523E6311F18F888BA6CC833773.roa (raw, json) Hash identifier: BUOSxTEZ7OWcdj1bV0BugkWpidvwLAckKu5X3d9/h+A= Subject key identifier: 98:70:66:0E:6C:18:5E:03:15:C3:F2:EE:30:95:43:9B:1E:2A:7C:CC Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1DDC Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/6C2E2E523E6311F18F888BA6CC833773.roa Signing time: Wed 29 Jul 2026 12:41:22 +0000 ROA not before: Wed 29 Jul 2026 12:41:22 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 149765 IP address blocks: 45.125.223.0/24 maxlen: 24 103.239.254.0/24 maxlen: 24 103.239.255.0/24 maxlen: 24 2404:4580:10::/48 maxlen: 48 2404:4580:11::/48 maxlen: 48 2404:4580:12::/48 maxlen: 48 2404:4580:13::/48 maxlen: 48 2404:4580:14::/48 maxlen: 48 2404:4580:15::/48 maxlen: 48 2404:4580:16::/48 maxlen: 48 2404:4580:17::/48 maxlen: 48 2404:4580:18::/48 maxlen: 48 2404:4580:19::/48 maxlen: 48 2404:4580:1a::/48 maxlen: 48 2404:4580:1b::/48 maxlen: 48 2404:4580:1c::/48 maxlen: 48 2404:4580:1d::/48 maxlen: 48 2404:4580:1e::/48 maxlen: 48 2404:4580:1f::/48 maxlen: 48 2404:4580:20::/48 maxlen: 48 2404:4580:21::/48 maxlen: 48 2404:4580:22::/48 maxlen: 48 2404:4580:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7644 (0x1ddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: Jul 29 12:41:22 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a69f4f2-a0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:3e:f5:d3:d7:6b:1f:77:6b:23:45:c7:bf: 07:88:f2:f8:76:1c:f7:a1:bd:25:67:b6:58:c7:b3: 6c:cd:3a:1e:19:87:fa:73:88:f1:1d:a4:d0:20:50: 97:28:25:a5:f0:d1:05:b6:5b:60:66:ee:c0:07:cb: f2:fd:0f:f2:3e:2b:8a:e8:12:3c:85:52:6d:14:8e: 8e:c5:3b:bc:40:26:e6:0c:25:be:c8:fc:1a:6b:e0: 65:92:92:91:c1:4c:0f:39:18:90:c7:08:8d:ca:23: 1a:05:70:4e:52:8c:5a:9d:48:b5:04:a6:70:85:58: bf:f8:48:29:2c:39:f1:57:25:cd:20:f8:45:ca:ce: 08:f0:19:85:22:f3:8d:14:be:de:37:84:88:1d:62: 53:80:9e:b5:b4:20:ce:3a:df:d2:87:17:3a:7a:70: 1d:87:ca:12:bd:4b:a4:44:b5:63:14:2a:92:b1:1d: 7b:44:ed:90:d9:1e:31:43:79:f2:17:78:d3:6b:b4: c2:3e:d4:a5:00:9d:a0:20:1e:c3:9a:fb:4a:76:62: 2d:92:6c:c9:92:57:f4:f0:5f:b1:2e:8e:04:07:95: 10:2c:aa:e2:20:32:2a:65:8b:39:4b:f7:72:dc:00: b2:23:9e:42:b8:ea:e1:d5:46:1b:1c:3f:45:e0:6c: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:70:66:0E:6C:18:5E:03:15:C3:F2:EE:30:95:43:9B:1E:2A:7C:CC X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/6C2E2E523E6311F18F888BA6CC833773.roa sbgp-ipAddrBlock: critical IPv4: 45.125.223.0/24 103.239.254.0/23 IPv6: 2404:4580:10::-2404:4580:23:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 38:14:df:57:c8:11:3b:34:a7:9e:28:11:dd:35:8d:38:f9:53: 20:9c:13:49:68:09:ab:c1:cd:9f:56:b2:c0:e6:ff:02:97:88: a0:2f:48:c1:fb:8c:d5:8e:30:13:6c:4b:5e:dd:7b:bd:5c:98: 6d:46:cb:a4:bb:6b:69:01:c5:70:bf:f4:85:42:5e:96:b9:ab: e3:76:58:0d:57:6e:c4:80:e0:46:46:5f:26:da:b0:1b:ba:9b: b6:09:a4:59:e3:be:18:b8:13:32:9d:b9:e5:9d:b7:21:69:7e: 22:95:f1:39:2d:ac:28:df:6d:b6:7e:f5:15:48:c6:57:a2:ff: bc:2f:f0:46:b0:7b:fc:f7:1f:9e:5a:6b:4a:ed:e5:3c:92:09: 8d:f0:50:04:84:7a:ca:33:e6:a3:f6:3f:ab:5d:9c:2a:ff:ab: 7d:d8:1b:68:0e:5d:05:4a:5f:68:b1:bd:34:cd:43:ce:c9:3a: c4:ef:3f:f7:5a:be:d7:57:ae:c3:79:bf:c0:91:60:c4:1b:71: 1c:92:2a:3a:77:e2:f8:64:2e:5e:c9:20:de:77:4b:77:e2:e1: 55:00:e6:1c:5b:df:11:7c:a7:7f:3c:6b:a5:cb:6e:e4:23:52: 16:52:bc:7c:91:70:47:00:72:53:6d:e7:42:97:4d:5f:c2:9e: 4c:45:e9:ec -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICHdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjYwNzI5MTI0MTIyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5ZjRmMi1hMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+w+9dPXax93ayNFx78HiPL4dhz3ob0lZ7ZYx7NszToeGYf6c4jxHaTQIFCX KCWl8NEFtltgZu7AB8vy/Q/yPiuK6BI8hVJtFI6OxTu8QCbmDCW+yPwaa+BlkpKR wUwPORiQxwiNyiMaBXBOUoxanUi1BKZwhVi/+EgpLDnxVyXNIPhFys4I8BmFIvON FL7eN4SIHWJTgJ61tCDOOt/Shxc6enAdh8oSvUukRLVjFCqSsR17RO2Q2R4xQ3ny F3jTa7TCPtSlAJ2gIB7DmvtKdmItkmzJklf08F+xLo4EB5UQLKriIDIqZYs5S/dy 3ACyI55CuOrh1UYbHD9F4Gx5/wIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFJhwZg5s GF4DFcPy7jCVQ5seKnzMMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEExNDAvQ0MxRENDRThDNzc0MTFFNjk4MTZCMDY4QzRGOUFFMDIvNkMyRTJFNTIz RTYzMTFGMThGODg4QkE2Q0M4MzM3NzMucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAS BAIAATAMAwQALX3fAwQBZ+/+MBoEAgACMBQwEgMHBCQERYAAEAMHAiQERYAAIDAN BgkqhkiG9w0BAQsFAAOCAQEAOBTfV8gROzSnnigR3TWNOPlTIJwTSWgJq8HNn1ay wOb/ApeIoC9IwfuM1Y4wE2xLXt17vVyYbUbLpLtraQHFcL/0hUJelrmr43ZYDVdu xIDgRkZfJtqwG7qbtgmkWeO+GLgTMp255Z23IWl+IpXxOS2sKN9ttn71FUjGV6L/ vC/wRrB7/PcfnlprSu3lPJIJjfBQBIR6yjPmo/Y/q12cKv+rfdgbaA5dBUpfaLG9 NM1Dzsk6xO8/91q+11euw3m/wJFgxBtxHJIqOnfi+GQuXskg3ndLd+LhVQDmHFvf EXynfzxrpctu5CNSFlK8fJFwRwByU23nQpdNX8KeTEXp7A== -----END CERTIFICATE-----Generated at Fri Sep 11 08:38:43 2026 by rpki-client