$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/8C2774CA0F3511EF93020023C4F9AE02.roa File: 8C2774CA0F3511EF93020023C4F9AE02.roa (raw, json) Hash identifier: ks6ZHeQSlWbDyKZP3PDWWDRvxvqWjlQTJpFGHN+LCL4= Subject key identifier: BC:63:48:37:F9:97:28:DA:79:64:D9:B8:E9:01:EF:D0:96:0B:A5:B2 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 34F4 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/8C2774CA0F3511EF93020023C4F9AE02.roa Signing time: Mon 22 Sep 2025 14:30:14 +0000 ROA not before: Mon 22 Sep 2025 14:30:14 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9937 IP address blocks: 103.255.148.0/22 maxlen: 22 103.255.148.0/24 maxlen: 24 103.255.149.0/24 maxlen: 24 180.149.208.0/20 maxlen: 20 180.149.208.0/24 maxlen: 24 180.149.209.0/24 maxlen: 24 180.149.210.0/24 maxlen: 24 180.149.211.0/24 maxlen: 24 180.149.212.0/24 maxlen: 24 180.149.213.0/24 maxlen: 24 180.149.223.0/24 maxlen: 24 182.255.50.0/24 maxlen: 24 182.255.51.0/24 maxlen: 24 2402:7c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13556 (0x34f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Sep 22 14:30:14 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d15d76-3ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:0d:41:4e:73:d5:3d:0b:d4:1f:3a:e6:1b: a8:ab:05:d2:0f:1c:46:97:bf:29:7d:b9:ac:52:8b: f7:4e:21:54:6e:90:ac:06:90:3d:e9:e5:e7:ea:e2: 97:87:db:94:f3:ae:2e:01:de:7e:01:ea:68:c3:c2: 10:90:8c:50:2d:ee:85:0b:c9:15:82:34:db:d3:7a: ee:b4:45:72:8b:9a:45:4a:4b:3e:bb:a2:20:44:4d: ca:26:f0:df:c8:f5:8b:fa:fa:44:9c:49:78:5b:9a: d1:f6:ae:db:10:2e:83:f9:e1:78:57:7c:7b:6e:66: 86:f6:fe:e5:b2:69:46:d7:1f:59:5d:db:f8:f5:fe: 97:48:7e:09:66:7b:1c:0a:bf:b1:a3:11:27:20:b3: ca:77:71:11:bf:ec:0d:c3:bc:c0:ad:7a:a6:18:66: a7:92:54:be:5c:96:35:f2:68:ed:18:ae:04:ae:c5: 32:43:a0:9f:4e:a4:66:fe:1c:55:fe:8f:7f:c9:a6: 88:d5:f4:ae:a9:6d:bc:d8:3a:7e:28:5d:e6:d9:af: 74:7a:d6:63:15:2e:60:83:3f:08:bf:b2:54:76:e4: 68:31:59:64:3b:67:24:ed:5b:de:ab:23:74:6d:c9: 12:62:8b:30:70:b8:38:80:95:52:83:71:c3:6d:ee: f8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:63:48:37:F9:97:28:DA:79:64:D9:B8:E9:01:EF:D0:96:0B:A5:B2 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/8C2774CA0F3511EF93020023C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.255.148.0/22 180.149.208.0/20 182.255.50.0/23 IPv6: 2402:7c00::/32 Signature Algorithm: sha256WithRSAEncryption 45:37:91:f5:7b:11:69:47:d5:4a:de:a8:3f:64:8b:f6:30:76: 04:9b:42:17:65:ea:0d:05:37:bc:ac:fb:22:c8:17:39:02:42: 03:4b:1b:75:12:9f:a4:50:45:92:2a:1b:87:79:82:9d:10:ed: 7e:63:11:45:73:08:bd:23:5c:03:2c:57:fc:c3:23:2f:4e:aa: 6a:83:f1:9b:61:ec:8d:a3:11:e4:e6:f6:37:1b:9f:2b:8e:a9: 58:1d:28:f7:ba:c1:49:a5:54:54:20:10:72:b7:49:b8:31:50: 11:b1:60:69:fe:58:02:e9:de:ff:fd:ca:ac:b6:fd:00:54:91: e4:6e:79:44:89:a4:ff:aa:7b:51:3c:05:2d:6d:81:bf:f9:a7: 16:68:cc:d6:3b:8c:34:22:d7:4c:29:f4:eb:9e:99:98:4e:4d: 3e:47:07:f3:79:37:f4:10:3a:fe:3d:6d:a7:2b:4b:8e:db:62: 82:24:bb:1c:41:64:32:10:ad:e5:4d:ad:8b:da:b6:87:f9:75: 52:24:13:2d:22:54:54:19:be:58:6d:b5:3c:9f:c6:a5:ca:45: e8:71:62:a0:dd:3e:dd:0e:04:1e:d8:da:31:bf:bb:6f:ca:fe: e3:66:9b:68:65:84:05:30:73:bd:ef:bb:94:b4:ae:d0:27:26: 2b:f0:31:c5 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICNPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjUwOTIyMTQzMDE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxNWQ3Ni0zYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwysNQU5z1T0L1B865huoqwXSDxxGl78pfbmsUov3TiFUbpCsBpA96eXn6uKX h9uU864uAd5+Aepow8IQkIxQLe6FC8kVgjTb03rutEVyi5pFSks+u6IgRE3KJvDf yPWL+vpEnEl4W5rR9q7bEC6D+eF4V3x7bmaG9v7lsmlG1x9ZXdv49f6XSH4JZnsc Cr+xoxEnILPKd3ERv+wNw7zArXqmGGanklS+XJY18mjtGK4ErsUyQ6CfTqRm/hxV /o9/yaaI1fSuqW282Dp+KF3m2a90etZjFS5ggz8Iv7JUduRoMVlkO2ck7VveqyN0 bckSYoswcLg4gJVSg3HDbe74JQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLxjSDf5 lyjaeWTZuOkB79CWC6WyMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ2NEQvRDkzMzNGRTQxRDZFMTFFMkE4NTA4MEIwMDhCMDJDRDIvOEMyNzc0Q0Ew RjM1MTFFRjkzMDIwMDIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJn/5QDBAS0ldADBAG2/zIwDQQCAAIwBwMFACQCfAAwDQYJ KoZIhvcNAQELBQADggEBAEU3kfV7EWlH1UreqD9ki/YwdgSbQhdl6g0FN7ys+yLI FzkCQgNLG3USn6RQRZIqG4d5gp0Q7X5jEUVzCL0jXAMsV/zDIy9OqmqD8Zth7I2j EeTm9jcbnyuOqVgdKPe6wUmlVFQgEHK3SbgxUBGxYGn+WALp3v/9yqy2/QBUkeRu eUSJpP+qe1E8BS1tgb/5pxZozNY7jDQi10wp9OuemZhOTT5HB/N5N/QQOv49bacr S47bYoIkuxxBZDIQreVNrYvatof5dVIkEy0iVFQZvlhttTyfxqXKRehxYqDdPt0O BB7Y2jG/u2/K/uNmm2hlhAUwc73vu5S0rtAnJivwMcU= -----END CERTIFICATE-----Generated at Thu Oct 23 01:27:11 2025 by rpki-client