$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa File: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (raw, json) Hash identifier: CSz19I4y5kF+WlyNFkJdkvlKJUnI/Eko4kr9Q3tcNIQ= Subject key identifier: ED:E8:38:72:E9:18:0D:66:D9:5A:CF:B1:7C:F5:9F:A6:B4:B3:0B:E7 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 0292 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa Signing time: Thu 09 Jul 2026 03:30:05 +0000 ROA not before: Thu 09 Jul 2026 03:30:05 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 37900 IP address blocks: 202.2.88.0/22 maxlen: 24 202.4.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Jul 9 03:30:05 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a4f15bd-ead4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:76:ef:67:77:e9:f8:cb:4c:3e:d6:d1:f3: 79:12:a4:a5:3c:17:44:c6:6b:c4:0f:7a:14:12:ff: 61:1b:33:b0:8a:84:81:86:ff:79:c2:3e:f4:6a:e6: 53:39:71:cb:1d:71:da:7f:82:c9:ed:8a:2f:dc:6c: fd:69:76:f2:93:72:e6:2c:cc:99:30:db:03:f7:b9: 95:c8:86:ef:92:68:75:d7:99:a0:ba:85:74:e4:d0: 2a:ab:9a:20:4d:5a:e9:8e:4b:3d:f7:8c:9b:15:91: fb:ee:e5:f7:8f:20:38:35:16:16:d0:2c:c7:d9:66: 17:14:9d:8c:56:05:27:bc:19:3a:a1:d5:79:93:c2: b3:a3:30:8c:2e:70:b3:f6:69:9e:fb:22:bf:13:11: 0f:f8:b9:54:51:70:e9:a7:b6:0f:db:08:36:a1:73: fd:31:8d:84:9e:12:b9:f5:68:9d:a7:f1:87:36:2b: a1:d1:96:58:91:43:5f:d4:2c:e8:de:ff:5d:5a:1d: 6f:ed:54:4f:86:fb:b6:a7:c5:d6:f8:aa:43:46:ac: a4:b2:da:85:11:3d:5b:4a:a1:2a:e8:e4:f7:d3:c7: 8f:1f:a2:75:eb:b2:90:8e:6d:d7:bb:40:1d:15:20: 93:66:dd:1d:c8:9e:27:54:d2:aa:fe:3a:9b:a1:0c: 6b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E8:38:72:E9:18:0D:66:D9:5A:CF:B1:7C:F5:9F:A6:B4:B3:0B:E7 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.2.88.0/22 202.4.244.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:f4:a4:39:43:3a:44:15:96:5c:8f:db:89:1b:94:c4:7b:93: 59:be:ca:5b:02:c5:58:41:48:56:3a:ed:68:d1:73:cb:11:d7: 17:a9:72:01:48:88:f9:a0:59:79:ff:02:15:83:60:4d:88:7e: d0:f4:41:f6:87:d7:9d:c1:33:33:b7:a7:59:c6:2c:b1:e7:e0: 89:06:ef:f5:d2:e4:9d:2b:78:13:22:5f:df:9f:2f:52:67:88: 10:9d:45:4c:9d:ed:41:db:87:b0:c7:84:32:34:e2:73:e8:ee: 7f:9b:ca:0c:26:85:08:ae:a8:4e:1d:67:5b:ef:0c:b9:16:df: dc:bf:ea:82:42:68:cb:76:88:1c:41:6e:e9:16:f1:92:22:89: 43:d7:20:69:38:4a:54:bc:70:ef:0d:b5:26:a1:b1:ee:73:59: 87:f7:98:5c:28:16:47:8c:79:9b:4c:84:a2:91:6d:dd:66:6a: 24:3a:75:86:36:73:d4:7d:79:39:38:a0:f1:e4:02:ef:2e:b0: 97:15:d3:f2:b5:a6:ce:87:43:13:40:84:68:43:70:5d:50:07: fb:37:b4:0a:e1:b6:39:a7:5c:92:f6:7a:a0:5d:42:cb:a3:56: 16:89:e5:cc:ed:2e:7c:32:d3:0a:f7:4c:31:ce:3f:8c:e1:88: 71:9f:2d:42 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjYwNzA5MDMzMDA1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmMTViZC1lYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ9272d36fjLTD7W0fN5EqSlPBdExmvED3oUEv9hGzOwioSBhv95wj70auZT OXHLHXHaf4LJ7Yov3Gz9aXbyk3LmLMyZMNsD97mVyIbvkmh115mguoV05NAqq5og TVrpjks994ybFZH77uX3jyA4NRYW0CzH2WYXFJ2MVgUnvBk6odV5k8KzozCMLnCz 9mme+yK/ExEP+LlUUXDpp7YP2wg2oXP9MY2EnhK59Widp/GHNiuh0ZZYkUNf1Czo 3v9dWh1v7VRPhvu2p8XW+KpDRqykstqFET1bSqEq6OT308ePH6J167KQjm3Xu0Ad FSCTZt0dyJ4nVNKq/jqboQxr/wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFO3oOHLp GA1m2VrPsXz1n6a0swvnMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDFCRUQvRkIyQUE4RUNCNzJBMTFFRDg4NEEwOTFEQzRGOUFFMDIvODVCQjdBNEUy QUIzMTFFRTk4RUEwMzE1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCygJYAwQCygT0MA0GCSqGSIb3DQEBCwUAA4IBAQAd9KQ5QzpEFZZc j9uJG5TEe5NZvspbAsVYQUhWOu1o0XPLEdcXqXIBSIj5oFl5/wIVg2BNiH7Q9EH2 h9edwTMzt6dZxiyx5+CJBu/10uSdK3gTIl/fny9SZ4gQnUVMne1B24ewx4QyNOJz 6O5/m8oMJoUIrqhOHWdb7wy5Ft/cv+qCQmjLdogcQW7pFvGSIolD1yBpOEpUvHDv DbUmobHuc1mH95hcKBZHjHmbTISikW3dZmokOnWGNnPUfXk5OKDx5ALvLrCXFdPy tabOh0MTQIRoQ3BdUAf7N7QK4bY5p1yS9nqgXULLo1YWieXM7S58MtMK90wxzj+M 4Yhxny1C -----END CERTIFICATE-----Generated at Fri Jul 24 00:23:00 2026 by rpki-client