$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/920D7BD0549211EFB6D69465C4F9AE02.roa File: 920D7BD0549211EFB6D69465C4F9AE02.roa (raw, json) Hash identifier: VWdUzB6vXIKkRn/XdO/qNXY7fvd6Iad/udykpaussds= Subject key identifier: 9F:11:53:95:53:51:A5:DB:57:53:DC:3B:B6:6A:E2:A7:8A:AE:3E:4B Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 04F1 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/920D7BD0549211EFB6D69465C4F9AE02.roa Signing time: Thu 24 Sep 2026 23:48:19 +0000 ROA not before: Thu 24 Sep 2026 23:48:19 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 10022 IP address blocks: 202.14.20.0/22 maxlen: 22 202.14.24.0/21 maxlen: 21 202.36.8.0/22 maxlen: 22 202.36.8.0/24 maxlen: 24 202.36.9.0/24 maxlen: 24 202.36.10.0/24 maxlen: 24 202.36.11.0/24 maxlen: 24 202.36.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Sep 24 23:48:19 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab5b6c2-ca5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:2b:14:c7:d0:5b:ab:e5:21:88:03:23:70: e2:7c:44:ba:48:c2:db:8d:ac:2e:22:06:b5:39:87: 19:6e:46:c3:e1:05:81:15:fd:c0:1f:d3:5c:9f:1e: d5:63:93:a6:09:65:e5:42:75:c2:5f:d1:d3:62:8e: 57:7f:37:26:62:37:57:d0:18:a1:bb:75:d1:e4:e6: 44:06:c0:0c:c7:40:6b:d5:3f:4f:e7:ee:07:bf:85: 65:f8:d5:02:f8:97:14:86:fe:c9:51:b8:d7:35:8c: ff:af:d6:06:ff:2f:da:d2:b9:fa:ea:b0:b0:60:86: 34:78:61:85:61:9a:60:7b:12:7f:fa:f2:8f:fc:6e: d0:34:f9:27:fd:4d:6a:67:de:bb:fc:9d:ff:19:f9: 06:40:68:5e:33:51:9b:2a:4e:40:16:90:0e:e5:79: 8d:ed:27:b5:4f:f1:02:7b:30:a3:92:fa:f7:6f:3b: 47:83:c3:96:8c:87:75:fa:bc:06:1d:32:af:1c:13: 94:cc:16:b3:d2:25:57:db:11:a6:a2:d2:21:8d:a8: da:fe:6a:90:28:c6:e2:2c:53:40:55:bc:2d:0c:0c: e1:95:15:1b:9d:a2:b6:e7:d3:38:89:5b:ab:ed:05: 95:90:8f:5e:61:23:2c:c0:88:7b:74:dc:d6:f4:e1: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:11:53:95:53:51:A5:DB:57:53:DC:3B:B6:6A:E2:A7:8A:AE:3E:4B X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/920D7BD0549211EFB6D69465C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.14.20.0-202.14.31.255 202.36.8.0-202.36.12.255 Signature Algorithm: sha256WithRSAEncryption 8a:6c:32:e9:8b:b3:98:5c:ab:1a:11:b7:5e:8f:6b:10:a4:80: 05:2a:cb:b5:1c:df:c0:45:0b:90:2d:45:c3:36:50:72:fe:8f: 79:79:d0:f9:b4:a8:eb:0a:0d:c1:e0:41:1a:e6:f9:e3:b4:17: fe:59:ad:52:57:3d:a6:cb:8e:0c:7f:5a:48:1d:41:68:e5:7e: 68:ad:3e:d1:e2:d6:8b:77:a4:31:4a:f4:d0:3c:2b:9b:58:3e: 0b:e0:9c:b3:77:b1:4d:33:79:1e:4a:03:8f:f6:8e:ef:8d:bb: 5d:c3:a4:3e:8d:c7:68:df:2d:3c:ec:3a:13:27:b0:09:18:e2: 56:84:6a:c2:19:c2:b9:1e:d5:ea:ae:87:5e:92:d1:31:66:f0: c3:1a:68:8f:5d:d4:30:55:e8:c9:8e:e0:ad:8d:95:3f:8d:54: 38:1c:8d:a7:26:95:61:5a:a2:38:c3:97:91:e0:86:5d:88:6e: 5f:64:e5:06:3c:06:f3:a2:55:a1:c8:7c:03:d1:90:15:37:5e: c6:89:85:82:6e:c1:66:55:7d:11:29:6f:ed:1c:a3:df:bd:8e: a3:50:b4:16:7e:fb:cd:a4:64:35:f6:fa:7d:78:80:36:30:28: 82:e0:f5:86:ad:ec:d1:fc:46:18:ac:a4:a2:3b:57:ca:4a:a2: b9:b1:0a:3b -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjYwOTI0MjM0ODE5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1YjZjMi1jYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs60rFMfQW6vlIYgDI3DifES6SMLbjawuIga1OYcZbkbD4QWBFf3AH9Ncnx7V Y5OmCWXlQnXCX9HTYo5XfzcmYjdX0Bihu3XR5OZEBsAMx0Br1T9P5+4Hv4Vl+NUC +JcUhv7JUbjXNYz/r9YG/y/a0rn66rCwYIY0eGGFYZpgexJ/+vKP/G7QNPkn/U1q Z967/J3/GfkGQGheM1GbKk5AFpAO5XmN7Se1T/ECezCjkvr3bztHg8OWjId1+rwG HTKvHBOUzBaz0iVX2xGmotIhjaja/mqQKMbiLFNAVbwtDAzhlRUbnaK259M4iVur 7QWVkI9eYSMswIh7dNzW9OGxcwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFJ8RU5VT UaXbV1PcO7Zq4qeKrj5LMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCMTkvMTEwMzBBRjQ4NTU2MTFFQzlBQjgyRTIxQzRGOUFFMDIvOTIwRDdCRDA1 NDkyMTFFRkI2RDY5NDY1QzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi BAIAATAcMAwDBALKDhQDBAXKDgAwDAMEA8okCAMEAMokDDANBgkqhkiG9w0BAQsF AAOCAQEAimwy6YuzmFyrGhG3Xo9rEKSABSrLtRzfwEULkC1FwzZQcv6PeXnQ+bSo 6woNweBBGub547QX/lmtUlc9psuODH9aSB1BaOV+aK0+0eLWi3ekMUr00Dwrm1g+ C+Ccs3exTTN5HkoDj/aO7427XcOkPo3HaN8tPOw6EyewCRjiVoRqwhnCuR7V6q6H XpLRMWbwwxpoj13UMFXoyY7grY2VP41UOByNpyaVYVqiOMOXkeCGXYhuX2TlBjwG 86JVoch8A9GQFTdexomFgm7BZlV9ESlv7Ryj372Oo1C0Fn77zaRkNfb6fXiANjAo guD1hq3s0fxGGKykojtXykqiubEKOw== -----END CERTIFICATE-----Generated at Sun Sep 27 10:47:49 2026 by rpki-client