$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/1566F532B1C111F1A50EDCAD3B11F970.roa File: 1566F532B1C111F1A50EDCAD3B11F970.roa (raw, json) Hash identifier: nZ5rLJSZK3TF2d6vh1wECL/1VzHDHGkITXzUvm/ljz4= Subject key identifier: FE:B9:41:F1:3B:68:F9:6C:FB:04:0E:19:FA:83:2E:19:CD:4D:72:DE Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35CB Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/1566F532B1C111F1A50EDCAD3B11F970.roa Signing time: Wed 16 Sep 2026 11:23:47 +0000 ROA not before: Wed 16 Sep 2026 11:23:47 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9937 IP address blocks: 103.255.148.0/22 maxlen: 22 103.255.148.0/24 maxlen: 24 103.255.149.0/24 maxlen: 24 180.149.208.0/20 maxlen: 20 180.149.208.0/24 maxlen: 24 180.149.209.0/24 maxlen: 24 180.149.210.0/24 maxlen: 24 180.149.211.0/24 maxlen: 24 180.149.212.0/24 maxlen: 24 180.149.213.0/24 maxlen: 24 180.149.223.0/24 maxlen: 24 2402:7c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13771 (0x35cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Sep 16 11:23:47 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6aaa7c43-1db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:02:b5:9d:f7:6f:5c:0e:1d:5f:7b:ba:b3: 6b:23:60:71:3d:b9:15:5b:fa:a7:b4:a6:0a:ee:dd: c3:dc:7a:37:71:7b:45:06:d2:9c:e7:fb:fa:8d:a9: 3f:66:90:cf:5f:79:98:ec:b4:19:41:66:0d:1b:59: 84:53:e5:11:07:ca:3e:e0:80:cd:ff:17:fc:a3:65: 41:c5:37:5e:5b:19:40:32:9a:9f:8d:25:2c:ba:07: 91:e7:71:19:d2:fe:b5:7d:e6:ba:4f:35:14:45:77: 61:e7:92:43:0c:b3:23:6c:cb:0e:5f:a6:bf:e8:9e: 1c:12:a2:fa:c2:be:79:de:75:be:bd:e5:e0:7a:55: 98:22:5b:d0:5e:69:d5:97:3d:4c:f3:5a:ee:17:e4: 31:08:3f:8b:08:7c:d7:04:cb:58:89:8d:7e:02:2d: 45:69:ad:65:63:6e:55:23:69:d6:e2:a0:a9:47:b1: 02:09:53:03:c9:a1:9c:45:fc:72:60:a2:0f:aa:7e: bc:11:e8:59:3f:e0:c7:25:be:7c:4e:76:cb:1e:18: 8e:49:c0:a4:f4:3c:4e:89:9f:10:ce:6f:e0:2f:6d: 08:00:94:78:3a:78:42:e3:23:0e:99:2a:fb:b6:4a: 18:d9:6b:94:05:09:29:85:e9:39:38:92:e2:bd:c8: 12:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B9:41:F1:3B:68:F9:6C:FB:04:0E:19:FA:83:2E:19:CD:4D:72:DE X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/1566F532B1C111F1A50EDCAD3B11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.255.148.0/22 180.149.208.0/20 IPv6: 2402:7c00::/32 Signature Algorithm: sha256WithRSAEncryption 40:a2:00:ad:a2:39:e2:46:bb:79:5f:21:33:ff:5a:97:a0:93: e1:01:0c:f7:f1:0e:ac:41:9b:e4:37:dc:60:9c:d1:ba:9c:50: e1:3d:dd:da:97:26:76:f6:46:9d:58:93:1e:d2:51:70:5a:45: 2f:8a:c8:46:76:bf:fd:9d:90:06:17:02:11:50:90:eb:3f:76: 9b:0f:1d:3d:51:fe:1a:3d:8a:36:7f:00:80:03:8a:e6:25:4d: 05:98:96:30:f4:84:f2:2d:39:8c:a7:e7:39:8b:ef:14:e7:35: d9:23:16:6e:9c:07:7b:3c:d7:5b:b3:35:f3:71:15:b6:00:f3: ab:5d:ab:95:f2:bf:fc:ca:24:26:77:48:35:b8:77:c2:c7:e9: 5b:03:a9:b4:5e:0c:15:ec:c9:53:ff:57:9d:fe:8f:0d:e3:4f: 51:36:43:b2:33:fb:0a:bc:92:14:69:40:a5:92:af:d2:1e:4e: 80:86:c8:e1:2f:1e:71:5a:ba:a2:75:ea:a8:6c:58:c5:89:00: bc:50:91:ac:f4:2a:c9:4b:52:88:f2:19:a4:40:36:4d:00:bc: b5:ba:9f:d4:5d:70:e2:88:03:15:30:7d:fe:6e:c8:00:d4:4c: 0e:53:2d:a7:09:07:e2:38:ac:96:2c:6e:a2:96:de:f9:6e:d8: 26:50:6d:a4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICNcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYwOTE2MTEyMzQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhN2M0My0xZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZoCtZ33b1wOHV97urNrI2BxPbkVW/qntKYK7t3D3Ho3cXtFBtKc5/v6jak/ ZpDPX3mY7LQZQWYNG1mEU+URB8o+4IDN/xf8o2VBxTdeWxlAMpqfjSUsugeR53EZ 0v61fea6TzUURXdh55JDDLMjbMsOX6a/6J4cEqL6wr553nW+veXgelWYIlvQXmnV lz1M81ruF+QxCD+LCHzXBMtYiY1+Ai1Faa1lY25VI2nW4qCpR7ECCVMDyaGcRfxy YKIPqn68EehZP+DHJb58TnbLHhiOScCk9DxOiZ8Qzm/gL20IAJR4OnhC4yMOmSr7 tkoY2WuUBQkphek5OJLivcgS3QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFP65QfE7 aPls+wQOGfqDLhnNTXLeMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ2NEQvRDkzMzNGRTQxRDZFMTFFMkE4NTA4MEIwMDhCMDJDRDIvMTU2NkY1MzJC MUMxMTFGMUE1MEVEQ0FEM0IxMUY5NzAucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ/+UAwQEtJXQMA0EAgACMAcDBQAkAnwAMA0GCSqGSIb3DQEBCwUA A4IBAQBAogCtojniRrt5XyEz/1qXoJPhAQz38Q6sQZvkN9xgnNG6nFDhPd3alyZ2 9kadWJMe0lFwWkUvishGdr/9nZAGFwIRUJDrP3abDx09Uf4aPYo2fwCAA4rmJU0F mJYw9ITyLTmMp+c5i+8U5zXZIxZunAd7PNdbszXzcRW2APOrXauV8r/8yiQmd0g1 uHfCx+lbA6m0XgwV7MlT/1ed/o8N409RNkOyM/sKvJIUaUClkq/SHk6AhsjhLx5x WrqideqobFjFiQC8UJGs9CrJS1KI8hmkQDZNALy1up/UXXDiiAMVMH3+bsgA1EwO Uy2nCQfiOKyWLG6ilt75btgmUG2k -----END CERTIFICATE-----Generated at Tue Sep 22 19:22:08 2026 by rpki-client