$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F180E2B24FD011EFBC17A55DC4F9AE02.roa File: F180E2B24FD011EFBC17A55DC4F9AE02.roa (raw, json) Hash identifier: GKPeCAs7yCzcTtRwWFCku8oUh6Rtkvw9ICbK+vHtQ5Y= Subject key identifier: 33:E8:AD:F1:19:BA:44:AA:7E:A5:37:EA:FF:74:10:C8:14:DD:F8:6F Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 354C Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F180E2B24FD011EFBC17A55DC4F9AE02.roa Signing time: Fri 10 Oct 2025 08:05:02 +0000 ROA not before: Fri 10 Oct 2025 08:05:02 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 6079 IP address blocks: 122.8.36.0/22 maxlen: 22 122.8.96.0/22 maxlen: 22 122.8.100.0/22 maxlen: 22 122.8.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13644 (0x354c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Validity Not Before: Oct 10 08:05:02 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68e8be2d-104b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:09:eb:83:46:0e:10:89:ca:8e:9b:95:ff: 10:3f:c7:74:db:93:dd:43:69:a6:27:02:35:7c:f7: a4:ac:57:d0:76:ae:e9:97:a6:46:17:5a:b0:65:2b: bc:e4:62:b3:0d:c0:46:3f:32:e5:1f:e4:f5:68:de: b5:1c:93:15:ec:eb:79:0b:d5:6b:c6:ad:0b:7d:07: b2:ad:9a:ad:d8:7b:82:00:bb:1d:ea:71:0d:3b:83: 25:59:95:52:3d:81:da:c1:f9:ef:e8:6d:84:7a:22: b6:f1:96:57:36:4c:c4:71:5f:9e:4e:db:b0:a4:f5: ae:1a:a9:97:73:e0:de:28:3b:73:68:af:f0:8a:2e: 9a:0b:5a:e5:51:27:96:92:fc:e9:76:2d:7e:29:8a: a4:14:47:fb:e0:e8:be:cf:fb:e4:43:ed:34:7b:2a: b0:bb:67:9f:c2:31:b1:4f:21:53:9d:d6:e6:40:ef: 2b:2a:7d:b1:f2:d1:7c:e8:69:00:3f:8e:a8:c4:bb: f3:26:a6:bc:94:11:cf:3e:c8:0a:cf:21:a3:6b:e7: ca:d7:fe:01:e7:c3:62:31:b8:a4:f1:cb:0d:e6:39: 1e:21:03:2d:6e:10:23:fd:ed:98:ee:77:de:32:db: 21:83:75:d9:e5:cf:6e:69:08:aa:3a:a0:46:67:69: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E8:AD:F1:19:BA:44:AA:7E:A5:37:EA:FF:74:10:C8:14:DD:F8:6F X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/F180E2B24FD011EFBC17A55DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.8.36.0/22 122.8.96.0/21 122.8.108.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:e3:d6:cd:0a:f1:a2:19:fc:6a:45:ec:79:c7:72:71:18:d6: bb:a4:e9:b9:28:aa:0c:cc:8e:9a:e7:ea:dc:cd:17:6c:42:78: 79:f3:15:4a:db:ef:f8:4a:4c:97:32:d3:d8:20:74:98:77:60: 51:f1:e0:b6:d2:b3:5a:a3:6c:45:04:0f:22:a3:ce:66:ed:35: b6:4d:3a:5a:2b:92:39:31:11:7e:93:88:3b:a6:08:fb:87:fb: ee:20:d4:de:ff:75:e0:30:44:de:57:3b:d4:53:94:45:15:4c: 28:a9:f6:d3:b4:32:fe:95:6c:9d:ed:63:8b:be:1b:e5:35:d3: d8:0f:e6:21:66:5e:59:69:a7:7b:e6:c0:7d:d7:ef:91:22:6f: 93:25:eb:98:63:89:b7:68:41:4c:43:b1:7f:a5:f4:bb:da:de: 6b:04:cd:bf:91:0f:dc:9b:19:ec:e2:a0:6a:ec:bb:95:16:c0: 2f:aa:1b:bd:10:08:aa:1a:05:f4:52:da:78:be:5c:fa:71:60: 49:11:94:97:11:3c:db:98:b0:08:71:e7:ce:39:fd:f5:13:ec: f5:4b:ea:55:ab:fa:e2:1d:e4:f3:80:51:8a:1a:1b:2a:3d:8b: 31:b1:57:42:2b:fd:bd:c4:87:b6:27:b6:30:1a:a3:cd:f6:6d: 77:28:3f:18 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUxMDEwMDgwNTAyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGU4YmUyZC0xMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4AJ64NGDhCJyo6blf8QP8d025PdQ2mmJwI1fPekrFfQdq7pl6ZGF1qwZSu8 5GKzDcBGPzLlH+T1aN61HJMV7Ot5C9Vrxq0LfQeyrZqt2HuCALsd6nENO4MlWZVS PYHawfnv6G2EeiK28ZZXNkzEcV+eTtuwpPWuGqmXc+DeKDtzaK/wii6aC1rlUSeW kvzpdi1+KYqkFEf74Oi+z/vkQ+00eyqwu2efwjGxTyFTndbmQO8rKn2x8tF86GkA P46oxLvzJqa8lBHPPsgKzyGja+fK1/4B58NiMbik8csN5jkeIQMtbhAj/e2Y7nfe Mtshg3XZ5c9uaQiqOqBGZ2nNsQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDPorfEZ ukSqfqU36v90EMgU3fhvMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvRjE4MEUyQjI0 RkQwMTFFRkJDMTdBNTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJ6CCQDBAN6CGADBAJ6CGwwDQYJKoZIhvcNAQELBQADggEB ABrj1s0K8aIZ/GpF7HnHcnEY1ruk6bkoqgzMjprn6tzNF2xCeHnzFUrb7/hKTJcy 09ggdJh3YFHx4LbSs1qjbEUEDyKjzmbtNbZNOlorkjkxEX6TiDumCPuH++4g1N7/ deAwRN5XO9RTlEUVTCip9tO0Mv6VbJ3tY4u+G+U109gP5iFmXllpp3vmwH3X75Ei b5Ml65hjibdoQUxDsX+l9Lva3msEzb+RD9ybGezioGrsu5UWwC+qG70QCKoaBfRS 2ni+XPpxYEkRlJcRPNuYsAhx5845/fUT7PVL6lWr+uId5POAUYoaGyo9izGxV0Ir /b3Eh7YntjAao832bXcoPxg= -----END CERTIFICATE-----Generated at Mon Oct 20 04:45:23 2025 by rpki-client