$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa File: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (raw, json) Hash identifier: BIzBeRHSXIHJpaMGUUMIhd1vdyZQQ9V+boyg36LdwKI= Subject key identifier: 16:16:8C:03:E8:F3:46:86:7D:54:6C:2F:E1:BA:33:31:69:B4:16:E3 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 2038 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:12:33 +0000 ROA not before: Sat 30 Aug 2025 16:35:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141739 IP address blocks: 125.85.64.0/18 maxlen: 18 125.85.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8248 (0x2038) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Aug 30 16:35:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48fa1-f2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:9e:fc:98:b5:fa:9a:7d:4e:3d:98:3f:07: b5:75:3b:56:b0:36:b8:6c:c1:32:b6:b6:99:0f:62: f7:b7:6a:9f:df:ae:94:48:ee:fd:d2:4b:8d:69:cd: aa:b4:e0:de:77:f1:04:27:10:ed:db:e9:18:d8:15: a2:1a:8d:aa:ec:da:32:ca:ac:cd:3a:61:a4:f2:33: f1:28:7c:6e:f2:b3:74:f1:cf:f3:4a:6b:23:a6:58: ff:0b:5f:e4:24:b2:ca:c7:9e:26:e4:11:2a:b2:41: fd:c4:64:e9:27:cc:90:07:66:c7:4a:f3:c2:0e:e5: 49:03:32:71:f8:eb:0e:56:30:f1:8f:bc:09:c0:0c: 0e:47:d8:bc:d0:70:3c:6c:ca:65:2d:5c:70:87:b3: f4:93:77:d4:41:d8:69:6c:c1:94:6c:a3:ab:70:05: a0:e8:9f:73:58:0c:a6:55:af:81:9f:f6:2b:ea:e3: 36:e8:47:4a:23:27:8c:87:c1:ca:29:84:0b:e1:ca: 44:4d:d3:2b:d1:7b:e4:ae:fa:51:8c:3f:40:2f:20: b1:62:8a:d8:4b:2f:77:29:a7:4b:d9:3f:4b:10:49: 69:de:91:ea:db:68:59:53:a0:b6:5c:d9:09:6f:ce: aa:52:9d:6a:ef:b5:23:89:79:de:ae:49:43:cd:8d: 7d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:16:8C:03:E8:F3:46:86:7D:54:6C:2F:E1:BA:33:31:69:B4:16:E3 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.85.64.0-125.85.159.255 Signature Algorithm: sha256WithRSAEncryption 25:45:d5:00:f2:22:18:ce:6c:71:48:61:aa:5f:0b:6b:68:e7: ce:f7:4b:8e:ec:43:91:c6:6d:26:29:63:d1:f9:72:14:d8:e1: b6:b9:a5:c7:2f:fa:79:5b:46:a7:84:16:07:61:44:34:81:50: 4a:5a:75:22:a1:36:b4:a0:5f:88:c7:a1:ca:bc:c6:b4:89:4f: ea:7d:09:bf:77:1c:35:e6:01:a1:88:27:5b:b9:6f:58:39:e9: a2:e1:13:7c:7f:cd:c8:05:48:7c:a1:26:72:bf:4d:1e:64:77: c3:9d:63:12:59:9a:4c:ed:35:98:39:ae:aa:33:fc:70:98:56: 24:a1:d5:5b:1d:c4:25:4b:cf:64:48:53:e1:25:ef:e3:7c:67: 8a:30:ce:d3:b4:b4:a9:97:2f:4b:6a:fa:1d:b3:4b:dd:ef:b8: 3b:0b:64:91:3c:fb:c8:1e:b2:54:51:00:5d:2d:9d:07:11:6f: 82:a3:3c:42:51:75:3a:ed:63:67:dd:79:f3:61:7f:4a:e9:15: 4e:71:8b:93:87:14:dd:7b:15:b4:20:2d:8e:5f:cf:06:a9:48: 02:be:49:3b:a7:de:27:b4:28:7b:c0:88:52:c3:43:7b:f2:bb: 72:53:11:45:bd:31:b2:8f:a2:ef:23:4e:33:ee:89:7f:63:cc: 94:fa:c1:56 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICIDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjUwODMwMTYzNTI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGZhMS1mMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aye/Ji1+pp9Tj2YPwe1dTtWsDa4bMEytraZD2L3t2qf366USO790kuNac2q tODed/EEJxDt2+kY2BWiGo2q7NoyyqzNOmGk8jPxKHxu8rN08c/zSmsjplj/C1/k JLLKx54m5BEqskH9xGTpJ8yQB2bHSvPCDuVJAzJx+OsOVjDxj7wJwAwOR9i80HA8 bMplLVxwh7P0k3fUQdhpbMGUbKOrcAWg6J9zWAymVa+Bn/Yr6uM26EdKIyeMh8HK KYQL4cpETdMr0XvkrvpRjD9ALyCxYorYSy93KadL2T9LEElp3pHq22hZU6C2XNkJ b86qUp1q77UjiXnerklDzY19IwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFBYWjAPo 80aGfVRsL+G6MzFptBbjMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNENEMkFCMkEw NjYwMTFFRUE1RjU5NjU3QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAZ9VUADBAV9VYAwDQYJKoZIhvcNAQELBQADggEBACVF1QDyIhjO bHFIYapfC2to5873S47sQ5HGbSYpY9H5chTY4ba5pccv+nlbRqeEFgdhRDSBUEpa dSKhNrSgX4jHocq8xrSJT+p9Cb93HDXmAaGIJ1u5b1g56aLhE3x/zcgFSHyhJnK/ TR5kd8OdYxJZmkztNZg5rqoz/HCYViSh1VsdxCVLz2RIU+El7+N8Z4owztO0tKmX L0tq+h2zS93vuDsLZJE8+8geslRRAF0tnQcRb4KjPEJRdTrtY2fdefNhf0rpFU5x i5OHFN17FbQgLY5fzwapSAK+STun3ie0KHvAiFLDQ3vyu3JTEUW9MbKPou8jTjPu iX9jzJT6wVY= -----END CERTIFICATE-----Generated at Thu Mar 12 22:44:43 2026 by rpki-client