$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/8278D8E004CF11E9BA917C34C4F9AE02.roa File: 8278D8E004CF11E9BA917C34C4F9AE02.roa (raw, json) Hash identifier: PvAIRSJxFib2VdmxvpQbxmrQM1YG62T8ZNCr6kVDAuY= Subject key identifier: 29:96:7F:89:41:77:0B:43:C1:9E:B3:F9:36:B7:CE:09:66:5C:25:57 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 20F8 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/8278D8E004CF11E9BA917C34C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:30:40 +0000 ROA not before: Wed 30 Sep 2026 16:30:40 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 133774 IP address blocks: 125.77.16.0/20 maxlen: 20 125.77.178.0/23 maxlen: 23 125.77.180.0/22 maxlen: 22 125.77.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8440 (0x20f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:30:40 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd3930-c63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:f6:9c:de:80:de:e8:68:31:68:a4:e7:88: 9d:82:81:30:2d:ef:d6:71:55:96:d5:23:64:8a:1d: 93:c9:04:3d:c4:0a:5a:5b:94:07:ce:5c:fa:53:61: 1e:b8:37:71:3c:c0:51:5f:df:42:d9:d1:9c:40:8e: 07:38:ce:5d:d3:98:13:dd:6e:a6:c4:c2:b4:97:22: cb:08:32:4f:11:0b:32:de:9e:86:12:79:bd:58:bf: 6b:29:c6:2c:ad:4f:24:67:2b:bd:11:6a:6f:6e:d6: ee:8e:e0:a6:48:71:06:ea:d8:c1:6c:34:9c:21:0a: 4c:a8:67:50:ac:0e:7d:87:a2:cf:ff:a1:bf:f4:d7: 74:98:db:fe:a9:45:52:b3:e2:71:71:37:54:94:47: 07:45:58:2e:e8:77:59:fd:8f:5f:89:22:2b:ec:ca: 7a:c1:17:78:61:6e:76:d5:79:e5:b6:70:85:9f:5d: 51:04:d0:61:cc:c4:61:35:85:3e:22:79:aa:1a:fa: ae:a6:c5:bf:67:a0:6e:fb:9f:88:92:00:c3:69:1f: c1:08:1a:13:88:33:00:6d:a0:70:d5:dc:bf:40:df: ee:1f:44:44:6a:54:9f:32:28:02:2f:02:56:c8:d9: fd:5c:65:41:86:f1:2b:c5:6b:26:44:51:9f:ae:95: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:96:7F:89:41:77:0B:43:C1:9E:B3:F9:36:B7:CE:09:66:5C:25:57 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/8278D8E004CF11E9BA917C34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.77.16.0/20 125.77.178.0-125.77.187.255 Signature Algorithm: sha256WithRSAEncryption 04:57:0b:1c:36:95:cd:94:bd:28:26:7a:18:4b:06:2f:b6:04: 44:bc:0f:8d:13:6d:38:c5:c9:e2:5e:85:61:ce:8a:a3:f1:69: 1a:36:85:34:9b:a7:3a:8f:39:df:b3:2c:eb:3f:4d:e1:d5:8f: fb:d2:74:1b:16:e5:ed:08:f1:ec:bd:3b:38:40:5e:92:51:2c: 8a:84:7a:f0:90:93:e0:40:cf:a4:e1:36:75:7a:a7:bc:b4:2f: 45:b7:d4:3a:22:d9:95:2d:c3:cf:fa:fc:cf:81:17:ae:3a:49: 24:d3:b6:f8:df:fb:58:f5:06:de:4b:a4:e2:2d:a4:8c:15:1a: 43:75:7f:c5:09:2d:9d:b9:e8:9b:98:4d:9e:6d:f8:a3:4b:2b: 0a:61:95:75:90:0a:62:d9:6f:5d:54:6f:ff:74:6d:ea:73:7a: 03:46:c4:bd:a0:57:54:93:96:23:e5:c9:fd:be:4d:00:8c:a6: 84:d8:e4:8c:5a:7f:23:ec:ef:1b:e0:65:82:c5:31:c7:f5:b7: 5f:7e:2c:37:77:b9:c0:02:80:95:dc:aa:38:18:84:00:ca:97: 5d:ff:f3:eb:a3:3f:99:b2:31:63:88:bf:a5:c7:b3:5e:4d:5c: 5f:05:2d:7b:91:fc:6b:d6:1a:e9:ed:45:44:cb:59:ad:33:15: 69:f9:74:61 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICIPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMDQwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzkzMC1jNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnML2nN6A3uhoMWik54idgoEwLe/WcVWW1SNkih2TyQQ9xApaW5QHzlz6U2Ee uDdxPMBRX99C2dGcQI4HOM5d05gT3W6mxMK0lyLLCDJPEQsy3p6GEnm9WL9rKcYs rU8kZyu9EWpvbtbujuCmSHEG6tjBbDScIQpMqGdQrA59h6LP/6G/9Nd0mNv+qUVS s+JxcTdUlEcHRVgu6HdZ/Y9fiSIr7Mp6wRd4YW521XnltnCFn11RBNBhzMRhNYU+ InmqGvqupsW/Z6Bu+5+IkgDDaR/BCBoTiDMAbaBw1dy/QN/uH0REalSfMigCLwJW yNn9XGVBhvErxWsmRFGfrpXsywIDAQABo4ICbjCCAmowHQYDVR0OBBYEFCmWf4lB dwtDwZ6z+Ta3zglmXCVXMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvODI3OEQ4RTAw NENGMTFFOUJBOTE3QzM0QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQEfU0QMAwDBAF9TbIDBAJ9TbgwDQYJKoZIhvcNAQELBQADggEBAARX Cxw2lc2UvSgmehhLBi+2BES8D40TbTjFyeJehWHOiqPxaRo2hTSbpzqPOd+zLOs/ TeHVj/vSdBsW5e0I8ey9OzhAXpJRLIqEevCQk+BAz6ThNnV6p7y0L0W31Doi2ZUt w8/6/M+BF646SSTTtvjf+1j1Bt5LpOItpIwVGkN1f8UJLZ256JuYTZ5t+KNLKwph lXWQCmLZb11Ub/90bepzegNGxL2gV1STliPlyf2+TQCMpoTY5IxafyPs7xvgZYLF Mcf1t19+LDd3ucACgJXcqjgYhADKl13/8+ujP5myMWOIv6XHs15NXF8FLXuR/GvW GuntRUTLWa0zFWn5dGE= -----END CERTIFICATE-----Generated at Tue Oct 27 11:19:22 2026 by rpki-client