$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa File: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (raw, json) Hash identifier: vWKr1Rb5j0WsRfVPtEeWa6i2XIByoovEuuozrTTGTMw= Subject key identifier: 75:E8:4F:D7:07:5C:FE:A2:B6:50:21:85:62:B5:52:4F:6C:74:6D:69 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 0393 Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa Signing time: Mon 07 Sep 2026 00:50:44 +0000 ROA not before: Mon 07 Sep 2026 00:50:44 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 4648 IP address blocks: 202.27.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: Sep 7 00:50:44 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9e0a64-44be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:1d:95:56:a0:2f:21:74:71:80:6a:bf:ab: f2:0c:32:d3:ac:87:dd:6b:7c:9d:31:6b:3e:3b:7e: b7:ee:58:b8:a0:b3:1b:18:56:cb:81:23:72:b9:3f: 9b:a6:df:e8:15:e4:47:95:66:66:95:c1:21:d5:e6: e6:f9:90:74:4a:22:98:41:46:c8:79:df:2d:18:e4: 14:30:2a:ae:fe:5d:9c:2a:59:c1:47:60:25:96:8c: 87:8b:a0:c7:08:f3:c0:d3:be:c2:91:20:23:34:d5: 1d:32:36:b7:ff:69:e7:85:4e:31:84:24:56:f2:54: 82:80:08:2f:b0:02:21:3c:9a:e2:c0:ef:06:76:65: 16:41:fd:75:8a:53:a5:08:d7:7e:be:33:50:8e:46: 5c:07:03:17:49:12:59:b4:a7:23:24:eb:bb:86:dc: e2:9a:87:e0:05:5e:fc:86:27:15:e1:b4:57:9d:56: 9a:7a:21:10:eb:b2:70:15:81:1a:1a:aa:b5:6b:ea: 3d:1b:ff:6d:dd:b1:f0:de:12:68:ef:3c:47:4b:0a: de:ce:25:b3:2a:4e:02:f2:a0:5e:3d:79:59:7a:0e: 30:9b:c0:1a:76:c8:f2:bf:21:8e:a5:d5:81:cc:a4: 4e:a8:d4:44:e0:7e:8c:2f:18:65:2c:bb:3d:db:a6: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E8:4F:D7:07:5C:FE:A2:B6:50:21:85:62:B5:52:4F:6C:74:6D:69 X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.27.146.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:b1:5e:50:7c:98:63:61:4d:77:8c:0e:d5:e0:53:f2:4b:10: d5:52:a2:d9:8c:03:bf:62:dd:d5:75:c5:0f:23:80:11:19:3f: 53:a6:61:c7:f8:44:c5:85:54:e3:59:a4:fb:0b:d2:8d:1e:3f: fa:c3:d7:8b:df:56:4a:43:9c:46:ea:8c:29:3c:70:62:6a:ec: 7f:25:94:f2:44:29:83:1f:00:ae:cd:0e:da:e4:5e:31:bb:f5: 88:30:37:92:78:fd:de:e9:f6:54:18:ba:46:7a:29:f9:52:f7: 80:4b:d3:6c:cb:65:93:f3:91:d9:46:c9:dc:3a:c8:a8:73:5d: 68:52:81:cf:3e:5b:36:a2:b2:f0:11:2f:a6:7b:b7:39:47:56: f9:4e:ea:e4:7b:2b:5a:25:a0:3e:02:f5:87:44:7e:ff:3d:0f: 50:aa:80:12:be:23:e9:ec:96:bf:ca:9d:0d:0c:01:47:93:4d: d6:1b:2c:00:6f:1b:45:c6:e7:b8:37:48:9f:b4:77:34:1e:67: 2e:eb:bb:d7:74:7e:06:53:2c:e6:80:71:e6:f8:3f:8e:0d:27: dd:ae:4f:b2:22:6c:66:14:d9:8a:b6:fb:11:ec:e2:ea:89:84: 78:e7:c1:0e:95:5a:62:c0:cd:b5:3a:44:b2:d6:69:12:f2:9b: f4:33:55:29 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjYwOTA3MDA1MDQ0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTllMGE2NC00NGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlAIdlVagLyF0cYBqv6vyDDLTrIfda3ydMWs+O3637li4oLMbGFbLgSNyuT+b pt/oFeRHlWZmlcEh1ebm+ZB0SiKYQUbIed8tGOQUMCqu/l2cKlnBR2AlloyHi6DH CPPA077CkSAjNNUdMja3/2nnhU4xhCRW8lSCgAgvsAIhPJriwO8GdmUWQf11ilOl CNd+vjNQjkZcBwMXSRJZtKcjJOu7htzimofgBV78hicV4bRXnVaaeiEQ67JwFYEa Gqq1a+o9G/9t3bHw3hJo7zxHSwreziWzKk4C8qBePXlZeg4wm8AadsjyvyGOpdWB zKROqNRE4H6MLxhlLLs926YK0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHXoT9cH XP6itlAhhWK1Uk9sdG1pMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY3NDAvMzUyOEIwQ0MxNkMwMTFFRDgwMDg5QTIxQzRGOUFFMDIvQkJGMERENTIx NkNEMTFFREJCMDQ2Qzc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyhuSMA0GCSqGSIb3DQEBCwUAA4IBAQBLsV5QfJhjYU13jA7V4FPy SxDVUqLZjAO/Yt3VdcUPI4ARGT9TpmHH+ETFhVTjWaT7C9KNHj/6w9eL31ZKQ5xG 6owpPHBiaux/JZTyRCmDHwCuzQ7a5F4xu/WIMDeSeP3e6fZUGLpGein5UveAS9Ns y2WT85HZRsncOsioc11oUoHPPls2orLwES+me7c5R1b5TurkeytaJaA+AvWHRH7/ PQ9QqoASviPp7Ja/yp0NDAFHk03WGywAbxtFxue4N0iftHc0Hmcu67vXdH4GUyzm gHHm+D+ODSfdrk+yImxmFNmKtvsR7OLqiYR458EOlVpiwM21OkSy1mkS8pv0M1Up -----END CERTIFICATE-----Generated at Wed Sep 23 22:37:20 2026 by rpki-client