$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/B683232C65AA11F1B5A6BBF27847A888.roa File: B683232C65AA11F1B5A6BBF27847A888.roa (raw, json) Hash identifier: Q1GcTAgf2nrtpktPJ+ZVkiLvWbDwB2IXx55xo1QNSIc= Subject key identifier: 60:EE:F6:A4:A9:E3:89:E2:42:F5:C8:AF:6E:F9:7B:B9:51:EC:DA:E5 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35DE Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/B683232C65AA11F1B5A6BBF27847A888.roa Signing time: Sun 04 Oct 2026 15:10:22 +0000 ROA not before: Sun 04 Oct 2026 15:10:22 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136030 IP address blocks: 103.255.150.0/24 maxlen: 24 180.149.214.0/24 maxlen: 24 180.149.215.0/24 maxlen: 24 180.149.216.0/24 maxlen: 24 180.149.217.0/24 maxlen: 24 180.149.218.0/24 maxlen: 24 180.149.220.0/24 maxlen: 24 180.149.221.0/24 maxlen: 24 180.149.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13790 (0x35de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Oct 4 15:10:22 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac26c5e-634e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:95:a2:94:05:88:60:d8:27:89:e7:43:e4: f0:26:3a:39:fc:06:fc:fc:42:c4:18:67:63:99:1c: b5:4d:3e:65:11:2b:02:73:08:ae:90:9f:94:f6:ff: 01:d7:a0:4b:b6:ff:2e:10:db:ce:a9:5c:90:d8:b8: cb:bc:f1:d7:a0:45:d9:d4:fb:08:30:68:de:9b:bb: 0d:ee:35:79:e0:ef:ee:21:3c:4e:7e:cc:32:c9:f0: d4:5c:b7:9f:d8:03:56:27:07:5e:d5:de:e7:fe:91: 7c:03:34:bc:2d:78:8d:61:52:51:bb:53:f4:65:45: 99:06:2c:69:17:55:8f:5e:85:03:f8:ca:f4:45:91: e6:df:51:0c:a1:9d:50:c1:fc:2e:d3:28:27:f1:84: 4c:b3:4c:98:2b:c7:ce:b0:69:54:91:56:9b:de:9d: cc:e5:f7:61:fc:f8:20:97:fa:20:d2:95:76:eb:31: 1e:9e:21:b3:08:26:4e:1c:9a:e7:b1:1d:ee:54:0e: 2e:68:e8:50:19:d4:e2:ca:da:06:c6:8d:27:8a:be: 67:72:1d:49:b8:22:e6:b1:a9:bc:ae:d3:84:55:31: 7c:e8:77:3f:bd:6c:71:fe:f9:bd:a4:58:5e:12:f7: dc:ed:ca:0e:db:a1:56:54:75:54:69:a9:29:fe:7d: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EE:F6:A4:A9:E3:89:E2:42:F5:C8:AF:6E:F9:7B:B9:51:EC:DA:E5 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/B683232C65AA11F1B5A6BBF27847A888.roa sbgp-ipAddrBlock: critical IPv4: 103.255.150.0/24 180.149.214.0-180.149.218.255 180.149.220.0-180.149.222.255 Signature Algorithm: sha256WithRSAEncryption 0c:3e:e0:cf:f5:2f:db:6c:05:3a:db:3b:86:78:9b:39:db:01: 35:44:29:08:e3:a0:31:3a:77:06:1a:12:5f:6e:26:30:04:f1: cc:67:86:eb:2e:fc:b4:f5:b6:36:54:e7:7f:cb:75:70:e5:50: de:6e:57:ad:d7:53:31:a1:a8:07:0c:f3:d2:70:09:18:0c:ff: e0:22:49:e4:68:c9:0c:4a:95:c2:02:61:ab:7b:80:f3:16:c7: b8:b4:17:84:0b:34:d1:59:ec:76:3d:93:d9:ee:57:93:22:ea: 76:8b:4a:4d:47:4b:09:c5:cb:a3:fe:7d:c0:85:b6:50:f4:ae: a6:81:dd:ec:ca:96:81:c0:97:19:82:4d:d3:3e:b1:14:d6:ac: 6b:73:92:e2:6b:3e:4d:a2:5b:d2:ab:d3:7c:a2:77:1d:4c:1c: 17:a2:8b:01:b0:dd:ca:15:d5:41:3c:11:7b:ef:3a:ce:9a:a2: 89:32:1e:1c:0c:56:d8:e5:d9:6a:1b:98:0e:c7:cb:11:25:32: bf:62:62:f9:fc:7a:07:19:11:4d:f4:3a:fb:08:fa:44:0b:51: 3b:67:7e:d8:92:ce:08:a5:92:a3:b9:d5:36:18:24:35:36:36: b2:b2:c3:86:44:23:2f:5b:b5:d2:4b:eb:06:1b:cb:f2:9a:13: f3:40:f8:1c -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICNd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYxMDA0MTUxMDIyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyNmM1ZS02MzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WqVopQFiGDYJ4nnQ+TwJjo5/Ab8/ELEGGdjmRy1TT5lESsCcwiukJ+U9v8B 16BLtv8uENvOqVyQ2LjLvPHXoEXZ1PsIMGjem7sN7jV54O/uITxOfswyyfDUXLef 2ANWJwde1d7n/pF8AzS8LXiNYVJRu1P0ZUWZBixpF1WPXoUD+Mr0RZHm31EMoZ1Q wfwu0ygn8YRMs0yYK8fOsGlUkVab3p3M5fdh/Pggl/og0pV26zEeniGzCCZOHJrn sR3uVA4uaOhQGdTiytoGxo0nir5nch1JuCLmsam8rtOEVTF86Hc/vWxx/vm9pFhe Evfc7coO26FWVHVUaakp/n15/QIDAQABo4ICfDCCAngwHQYDVR0OBBYEFGDu9qSp 44niQvXIr275e7lR7NrlMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ2NEQvRDkzMzNGRTQxRDZFMTFFMkE4NTA4MEIwMDhCMDJDRDIvQjY4MzIzMkM2 NUFBMTFGMUI1QTZCQkYyNzg0N0E4ODgucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAo BAIAATAiAwQAZ/+WMAwDBAG0ldYDBAC0ldowDAMEArSV3AMEALSV3jANBgkqhkiG 9w0BAQsFAAOCAQEADD7gz/Uv22wFOts7hnibOdsBNUQpCOOgMTp3BhoSX24mMATx zGeG6y78tPW2NlTnf8t1cOVQ3m5XrddTMaGoBwzz0nAJGAz/4CJJ5GjJDEqVwgJh q3uA8xbHuLQXhAs00Vnsdj2T2e5XkyLqdotKTUdLCcXLo/59wIW2UPSupoHd7MqW gcCXGYJN0z6xFNasa3OS4ms+TaJb0qvTfKJ3HUwcF6KLAbDdyhXVQTwRe+86zpqi iTIeHAxW2OXZahuYDsfLESUyv2Ji+fx6BxkRTfQ6+wj6RAtRO2d+2JLOCKWSo7nV NhgkNTY2srLDhkQjL1u10kvrBhvL8poT80D4HA== -----END CERTIFICATE-----Generated at Sun Oct 11 11:05:46 2026 by rpki-client