$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/A8306EA22D6911EC9F557316C4F9AE02.roa File: A8306EA22D6911EC9F557316C4F9AE02.roa (raw, json) Hash identifier: ZwuiPwaKzSHb9GFHEeCHoUF+QiDrRdpicRchEv+sgGU= Subject key identifier: 4A:A3:FE:C8:A8:B0:8B:7E:27:C0:92:B2:F8:76:1C:A7:5A:4C:5A:86 Certificate issuer: /CN=A9180323/serialNumber=D70E8EF80F3587EF902896D8B30DCB0B6EB339AF Certificate serial: 3586 Authority key identifier: D7:0E:8E:F8:0F:35:87:EF:90:28:96:D8:B3:0D:CB:0B:6E:B3:39:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/A8306EA22D6911EC9F557316C4F9AE02.roa Signing time: Sat 12 Sep 2026 15:16:51 +0000 ROA not before: Sat 12 Sep 2026 15:16:50 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 38325 IP address blocks: 113.20.144.0/21 maxlen: 22 113.20.144.0/24 maxlen: 24 113.20.145.0/24 maxlen: 24 113.20.146.0/24 maxlen: 24 113.20.147.0/24 maxlen: 24 113.20.148.0/24 maxlen: 24 113.20.149.0/24 maxlen: 24 113.20.150.0/24 maxlen: 24 113.20.151.0/24 maxlen: 24 122.252.24.0/21 maxlen: 22 122.252.24.0/24 maxlen: 24 122.252.25.0/24 maxlen: 24 122.252.26.0/24 maxlen: 24 122.252.27.0/24 maxlen: 24 122.252.28.0/24 maxlen: 24 122.252.29.0/24 maxlen: 24 122.252.30.0/24 maxlen: 24 122.252.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.crl rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13702 (0x3586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180323, serialNumber=D70E8EF80F3587EF902896D8B30DCB0B6EB339AF Validity Not Before: Sep 12 15:16:50 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa56ce2-63e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:b7:d7:91:8f:7e:9c:8a:3c:5a:88:cf:52: 14:1c:cd:95:ed:98:53:b1:47:c3:f7:6e:4c:75:11: 4e:4b:51:8d:f0:a9:0b:a6:27:2f:d3:05:bb:87:27: 42:c3:d9:2a:f7:6a:66:cc:1a:56:dd:3c:ac:31:cb: 69:b1:f4:cc:fb:c4:8d:88:74:e7:d5:e0:c3:e3:a8: 13:15:0e:21:4b:63:7a:1d:86:cc:2e:8d:38:91:4c: 81:a8:92:96:e2:3a:b9:62:83:bb:00:2a:3f:bd:4e: 12:1c:65:36:f6:e0:e3:de:1c:f8:c7:b0:90:d2:b7: c9:b1:2f:e3:10:eb:23:ad:33:dc:c1:b9:5d:f7:0a: 02:80:d2:96:a5:f9:9d:95:c4:04:64:f4:86:09:39: 1f:d3:da:54:bc:72:5f:17:7d:f5:ac:10:00:ed:9e: 14:e6:23:a9:40:c3:13:eb:bc:16:53:2f:53:9d:38: de:38:34:88:e1:e5:a3:a1:80:b4:af:9f:19:a6:34: 3e:83:4d:32:25:8f:98:fd:2c:eb:31:c6:ee:2f:b1: 27:45:af:32:cf:d3:44:83:9e:eb:f9:4b:c3:4e:1b: d4:f6:37:54:20:7d:9f:d0:bd:c8:85:b8:fb:88:09: d4:4d:73:e7:67:18:c7:da:3c:27:4d:0e:69:53:c4: fb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:FE:C8:A8:B0:8B:7E:27:C0:92:B2:F8:76:1C:A7:5A:4C:5A:86 X509v3 Authority Key Identifier: keyid:D7:0E:8E:F8:0F:35:87:EF:90:28:96:D8:B3:0D:CB:0B:6E:B3:39:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/A8306EA22D6911EC9F557316C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 113.20.144.0/21 122.252.24.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:58:be:bf:9d:a0:85:16:53:ed:99:f9:6b:0b:05:57:15:5b: a9:e8:90:4f:d6:02:44:1a:5b:13:dd:a0:82:7a:d4:ff:c7:a7: c1:70:4b:3b:f2:8b:1a:38:07:00:60:35:d8:f5:5a:24:1c:77: 2e:57:73:ee:a4:5c:eb:ea:e4:67:d3:56:11:56:f0:75:13:38: 78:b6:c2:17:56:f5:1d:4e:ec:f8:3b:c5:14:0b:90:f3:12:73: 30:08:78:90:54:14:ff:7d:b3:6f:13:97:11:a0:52:59:7f:6b: 92:4d:61:3c:b3:f0:be:c4:52:0d:22:c4:52:75:41:24:f8:da: 52:ec:36:d3:8b:2b:30:77:e0:83:d5:56:2b:6b:0e:e3:b2:a9: 4e:7e:54:62:b8:31:70:ab:a0:28:c6:25:db:ec:7f:5d:6d:d5: bc:d5:8b:a1:d6:56:21:22:23:e4:a3:33:82:59:bf:52:4f:b7: 04:c7:d8:34:37:d0:a0:b2:37:7f:e5:e6:70:cd:c3:1d:f3:80: 2f:ac:ee:b6:d7:e9:b8:c2:13:04:30:7e:bf:32:1f:c1:97:4b: 1d:99:bc:a8:1e:c1:c6:89:30:fd:b4:ea:2e:04:63:a9:a8:e3: e2:98:09:e2:87:7f:dc:2a:67:85:d0:67:fd:60:4a:0a:2b:e8: dc:76:f6:fc -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICNYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMjMxMTAvBgNVBAUTKEQ3MEU4RUY4MEYzNTg3RUY5MDI4OTZEOEIzMERDQjBC NkVCMzM5QUYwHhcNMjYwOTEyMTUxNjUwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE1NmNlMi02M2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaq315GPfpyKPFqIz1IUHM2V7ZhTsUfD925MdRFOS1GN8KkLpicv0wW7hydC w9kq92pmzBpW3TysMctpsfTM+8SNiHTn1eDD46gTFQ4hS2N6HYbMLo04kUyBqJKW 4jq5YoO7ACo/vU4SHGU29uDj3hz4x7CQ0rfJsS/jEOsjrTPcwbld9woCgNKWpfmd lcQEZPSGCTkf09pUvHJfF331rBAA7Z4U5iOpQMMT67wWUy9TnTjeODSI4eWjoYC0 r58ZpjQ+g00yJY+Y/SzrMcbuL7EnRa8yz9NEg57r+UvDThvU9jdUIH2f0L3Ihbj7 iAnUTXPnZxjH2jwnTQ5pU8T7pQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEqj/sio sIt+J8CSsvh2HKdaTFqGMB8GA1UdIwQYMBaAFNcOjvgPNYfvkCiW2LMNywtuszmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMyMy80RUI5NDI2QzFE OTMxMUUyQkY3OEQ4RjYwOEIwMkNEMi8xdzZPLUE4MWgtLVFLSmJZc3czTEMyNnpP YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF3Nk8tQTgxaC0tUUtKYllzdzNMQzI2ek9hOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzMjMvNEVCOTQyNkMxRDkzMTFFMkJGNzhEOEY2MDhCMDJDRDIvQTgzMDZFQTIy RDY5MTFFQzlGNTU3MzE2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQDcRSQAwQDevwYMA0GCSqGSIb3DQEBCwUAA4IBAQCMWL6/naCFFlPt mflrCwVXFVup6JBP1gJEGlsT3aCCetT/x6fBcEs78osaOAcAYDXY9VokHHcuV3Pu pFzr6uRn01YRVvB1Ezh4tsIXVvUdTuz4O8UUC5DzEnMwCHiQVBT/fbNvE5cRoFJZ f2uSTWE8s/C+xFINIsRSdUEk+NpS7DbTiyswd+CD1VYraw7jsqlOflRiuDFwq6Ao xiXb7H9dbdW81Yuh1lYhIiPkozOCWb9ST7cEx9g0N9Cgsjd/5eZwzcMd84AvrO62 1+m4whMEMH6/Mh/Bl0sdmbyoHsHGiTD9tOouBGOpqOPimAnih3/cKmeF0Gf9YEoK K+jcdvb8 -----END CERTIFICATE-----Generated at Tue Sep 22 10:49:08 2026 by rpki-client