$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/920D7BD0549211EFB6D69465C4F9AE02.roa File: 920D7BD0549211EFB6D69465C4F9AE02.roa (raw, json) Hash identifier: gHndO2psRdsLz2dDuYnrptktBb4xTbMabDZZkDs+3FU= Subject key identifier: 36:9A:8C:90:F4:5B:67:70:4B:B0:46:9B:8F:AB:29:B4:0D:8D:F1:AA Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 0416 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/920D7BD0549211EFB6D69465C4F9AE02.roa Signing time: Thu 11 Sep 2025 01:08:26 +0000 ROA not before: Thu 11 Sep 2025 01:08:26 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 10022 IP address blocks: 202.14.20.0/22 maxlen: 22 202.14.24.0/21 maxlen: 21 202.36.8.0/22 maxlen: 22 202.36.8.0/24 maxlen: 24 202.36.9.0/24 maxlen: 24 202.36.10.0/24 maxlen: 24 202.36.11.0/24 maxlen: 24 202.36.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Sep 11 01:08:26 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c2210a-2c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:4c:7d:71:ef:f3:1f:37:d9:04:ee:33:19: 0c:eb:6c:b4:bb:77:2b:c5:02:0e:7b:e8:c3:8d:f3: 91:9c:60:0c:db:1c:2e:dc:d7:6f:9f:b9:77:62:69: 0d:06:aa:b3:d6:2f:5d:2a:29:ae:87:88:49:b0:29: f9:e9:76:be:ea:c6:b3:c1:39:2e:60:60:0d:61:96: 15:cb:5f:a9:30:ae:e2:e2:ae:69:fa:09:06:00:f0: 26:38:a4:6e:5e:d3:e4:77:1c:8e:91:22:e4:f0:6a: 70:f9:a7:b1:be:2b:d2:15:3b:d0:6f:07:2b:9c:c1: 5d:f8:77:b3:a9:09:ad:05:db:8b:66:c1:a0:02:8f: 32:93:35:f8:83:6a:68:63:a6:da:e3:e0:99:bb:0d: 48:85:40:e8:25:06:5a:a9:8b:b5:4e:d3:60:e4:bd: ae:94:f4:1a:c6:a9:f6:48:ab:8c:e3:3c:08:a5:10: cf:b7:23:59:88:ef:f7:cf:91:c6:b8:de:a1:62:9a: 67:2b:b2:6d:ab:f2:82:be:45:79:6d:a1:37:35:38: 5b:fa:ed:07:77:a8:09:cb:1e:b7:f2:6a:39:23:f4: 32:09:97:7f:c5:cd:0f:01:de:09:0d:69:ce:9a:1a: 2e:24:7a:a5:cc:03:f9:c2:9f:15:55:b3:90:91:07: d9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9A:8C:90:F4:5B:67:70:4B:B0:46:9B:8F:AB:29:B4:0D:8D:F1:AA X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/920D7BD0549211EFB6D69465C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.14.20.0-202.14.31.255 202.36.8.0-202.36.12.255 Signature Algorithm: sha256WithRSAEncryption 08:f0:14:da:a9:6c:c1:b3:af:9f:32:51:38:03:bd:28:b4:2d: a3:16:5d:d5:56:0a:6f:28:9a:91:e6:18:20:36:a6:19:a8:44: 42:c8:3b:6a:cb:73:97:0a:b4:41:87:da:04:4d:ed:88:fe:fc: fb:6d:a5:81:f0:ee:9b:cf:24:e3:5b:f5:1a:9e:dd:ec:f3:aa: 2b:fa:2b:8a:6b:d4:20:63:b4:98:96:66:07:36:8e:ec:f4:a2: c9:77:bf:2c:51:2f:0a:89:c6:b8:65:b3:fb:67:a6:f8:88:80: e4:6d:89:52:e3:1c:69:dd:79:07:ef:86:cf:f4:72:69:ec:8e: 99:66:e8:b4:6e:11:de:06:ac:91:82:1c:e7:43:ef:9e:48:e2: 4f:b8:89:60:74:08:0a:dd:86:89:57:0f:11:fa:32:4b:a4:94: b2:e9:b8:14:1d:3d:ff:e1:d2:0d:ae:e8:d8:34:24:76:dc:ce: 4f:df:b3:6c:f0:58:dc:a1:83:e5:99:cd:44:1c:76:2b:97:c7: 4f:70:f8:c3:6a:44:c3:4b:a6:91:0b:56:45:a1:83:a8:81:99: 28:3d:9e:b5:68:c4:9f:8b:b0:82:8d:76:80:f5:38:d5:8e:ae: 62:74:eb:7b:8e:7e:39:cc:86:8a:95:d5:a3:0e:c6:e7:8d:8f: f7:92:03:11 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUwOTExMDEwODI2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMyMjEwYS0yYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDJMfXHv8x832QTuMxkM62y0u3crxQIOe+jDjfORnGAM2xwu3Ndvn7l3YmkN Bqqz1i9dKimuh4hJsCn56Xa+6sazwTkuYGANYZYVy1+pMK7i4q5p+gkGAPAmOKRu XtPkdxyOkSLk8Gpw+aexvivSFTvQbwcrnMFd+HezqQmtBduLZsGgAo8ykzX4g2po Y6ba4+CZuw1IhUDoJQZaqYu1TtNg5L2ulPQaxqn2SKuM4zwIpRDPtyNZiO/3z5HG uN6hYppnK7Jtq/KCvkV5baE3NThb+u0Hd6gJyx638mo5I/QyCZd/xc0PAd4JDWnO mhouJHqlzAP5wp8VVbOQkQfZuQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFDaajJD0 W2dwS7BGm4+rKbQNjfGqMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCMTkvMTEwMzBBRjQ4NTU2MTFFQzlBQjgyRTIxQzRGOUFFMDIvOTIwRDdCRDA1 NDkyMTFFRkI2RDY5NDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAsoOFAMEBcoOADAMAwQDyiQIAwQAyiQMMA0GCSqGSIb3 DQEBCwUAA4IBAQAI8BTaqWzBs6+fMlE4A70otC2jFl3VVgpvKJqR5hggNqYZqERC yDtqy3OXCrRBh9oETe2I/vz7baWB8O6bzyTjW/Uant3s86or+iuKa9QgY7SYlmYH No7s9KLJd78sUS8Kica4ZbP7Z6b4iIDkbYlS4xxp3XkH74bP9HJp7I6ZZui0bhHe BqyRghznQ++eSOJPuIlgdAgK3YaJVw8R+jJLpJSy6bgUHT3/4dINrujYNCR23M5P 37Ns8FjcoYPlmc1EHHYrl8dPcPjDakTDS6aRC1ZFoYOogZkoPZ61aMSfi7CCjXaA 9TjVjq5idOt7jn45zIaKldWjDsbnjY/3kgMR -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:50 2025 by rpki-client