$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa File: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (raw, json) Hash identifier: FiJHpAVDCiECApC+uWUZuuQI3LOXME6riZr5S57mHVs= Subject key identifier: 80:8B:47:79:68:02:6F:AB:8C:3E:DE:B6:04:8F:4F:50:B3:63:0B:0D Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 2105 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:31:08 +0000 ROA not before: Wed 30 Sep 2026 16:31:08 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 141739 IP address blocks: 125.85.64.0/18 maxlen: 18 125.85.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8453 (0x2105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:31:08 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd394c-c305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:59:ab:46:47:5a:65:7d:9e:5c:49:44:81: 6c:91:95:03:a3:38:e1:0c:cc:4a:fb:e4:11:dd:a2: 30:b8:0b:3b:72:e4:aa:9f:e6:98:df:6f:b5:5b:ef: 85:45:72:8c:53:e6:54:f6:e1:d9:14:32:22:3f:06: ea:51:8a:f0:4a:dd:06:c0:aa:1b:f5:14:5f:b5:79: 5c:1c:0a:e7:13:d2:09:d9:38:d7:88:43:0e:25:fa: 9b:6a:2d:a4:08:2c:ae:40:34:0c:d8:5f:06:29:47: 64:78:0d:a6:4a:e1:1e:ed:0d:33:d5:82:9b:0e:6e: df:2c:c3:d2:4b:ce:80:68:cf:eb:24:45:e7:a5:5b: 45:d0:f5:91:10:0c:42:00:6a:e9:1c:84:3d:91:4e: e0:60:4e:b1:b2:9e:ba:b5:f5:ae:71:b0:27:d3:ef: 86:44:8e:65:60:60:98:52:9c:8f:4c:ed:a5:39:2a: 5a:04:82:66:05:16:d2:d8:68:9d:fa:eb:6f:5c:ba: 1b:3a:f1:30:7b:f2:ef:d4:32:49:de:05:70:11:61: 50:06:81:f1:19:54:01:2c:7d:bb:73:6d:b8:86:4c: 66:a7:9f:8e:12:bf:e9:e0:86:de:b7:b6:d7:bb:f2: 17:f7:1d:f7:6f:0f:49:4f:9b:94:75:76:2d:f0:5f: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8B:47:79:68:02:6F:AB:8C:3E:DE:B6:04:8F:4F:50:B3:63:0B:0D X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.85.64.0-125.85.159.255 Signature Algorithm: sha256WithRSAEncryption 20:d3:2d:cc:da:4e:d0:02:56:54:26:81:8e:65:d8:ca:9b:af: 47:f1:1f:5c:c3:6a:7f:c7:5f:27:e1:98:ff:84:c7:4a:b5:53: 2b:c4:3d:60:9f:e8:ed:de:c0:e8:9d:c8:b0:fd:45:e0:e0:13: d0:9d:d3:6c:77:d3:ee:61:22:5b:2c:9b:86:91:59:03:9d:a9: 26:2d:0f:e0:8d:6a:5a:c6:4d:a2:93:a1:cf:f8:35:53:93:76: 81:dc:a6:d9:4f:cd:b5:6b:24:9a:f1:55:b9:df:8b:c5:17:4e: 7f:d7:bb:ab:e0:57:d8:bf:fd:07:68:f5:3d:0d:a2:30:89:00: c4:29:32:75:85:28:2f:ce:14:b0:b8:c6:99:5a:f3:ba:df:c1: 1f:7e:37:e2:61:71:a1:fa:e2:67:d5:0b:11:19:b1:79:b8:5b: c9:57:96:23:06:45:e2:07:76:85:84:04:61:e0:12:6c:62:2b: 0a:c5:ef:d3:ca:8a:07:61:df:93:d2:42:01:9d:fb:aa:3f:81: 02:c5:4b:f2:89:72:a1:4d:08:88:8f:1c:13:73:c5:6e:3c:87: 78:68:a1:6b:b6:4f:e6:cf:f6:89:ed:78:a4:f5:27:eb:3d:db: a2:f3:8d:db:c6:53:84:38:99:36:ea:d5:f8:01:04:80:92:35: 73:77:e2:29 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICIQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMTA4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzk0Yy1jMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxNZq0ZHWmV9nlxJRIFskZUDozjhDMxK++QR3aIwuAs7cuSqn+aY32+1W++F RXKMU+ZU9uHZFDIiPwbqUYrwSt0GwKob9RRftXlcHArnE9IJ2TjXiEMOJfqbai2k CCyuQDQM2F8GKUdkeA2mSuEe7Q0z1YKbDm7fLMPSS86AaM/rJEXnpVtF0PWREAxC AGrpHIQ9kU7gYE6xsp66tfWucbAn0++GRI5lYGCYUpyPTO2lOSpaBIJmBRbS2Gid +utvXLobOvEwe/Lv1DJJ3gVwEWFQBoHxGVQBLH27c224hkxmp5+OEr/p4Ibet7bX u/IX9x33bw9JT5uUdXYt8F8qZwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFICLR3lo Am+rjD7etgSPT1CzYwsNMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNENEMkFCMkEw NjYwMTFFRUE1RjU5NjU3QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAZ9VUADBAV9VYAwDQYJKoZIhvcNAQELBQADggEBACDTLczaTtAC VlQmgY5l2Mqbr0fxH1zDan/HXyfhmP+Ex0q1UyvEPWCf6O3ewOidyLD9ReDgE9Cd 02x30+5hIlssm4aRWQOdqSYtD+CNalrGTaKToc/4NVOTdoHcptlPzbVrJJrxVbnf i8UXTn/Xu6vgV9i//Qdo9T0NojCJAMQpMnWFKC/OFLC4xpla87rfwR9+N+JhcaH6 4mfVCxEZsXm4W8lXliMGReIHdoWEBGHgEmxiKwrF79PKigdh35PSQgGd+6o/gQLF S/KJcqFNCIiPHBNzxW48h3hooWu2T+bP9onteKT1J+s926LzjdvGU4Q4mTbq1fgB BICSNXN34ik= -----END CERTIFICATE-----Generated at Mon Oct 26 21:15:27 2026 by rpki-client