$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/2B340AEAC1CB11EF9CFC9509C4F9AE02.roa File: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (raw, json) Hash identifier: VNIdZquen1ZsLRARPe3kPWlMB6WGthA5XHhfvqdd6dM= Subject key identifier: C4:99:04:63:C4:CD:1E:C2:DE:C0:71:D8:0A:38:02:7A:07:51:12:AA Certificate issuer: /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1 Certificate serial: FF Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/2B340AEAC1CB11EF9CFC9509C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:48:25 +0000 ROA not before: Wed 01 Oct 2025 07:35:17 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17541 IP address blocks: 202.44.56.0/24 maxlen: 24 202.44.57.0/24 maxlen: 24 202.44.58.0/24 maxlen: 24 202.44.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1 Validity Not Before: Oct 1 07:35:17 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a59529-1f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:c0:66:9e:c2:53:ad:c4:7a:21:92:1b:2c: c9:f8:9d:9f:a4:0c:a8:54:01:81:eb:96:5b:90:68: 62:41:64:b7:0d:9b:e3:96:83:b4:a6:10:a4:9d:ba: 14:8c:01:9a:df:e2:ee:ef:25:56:2f:a8:aa:2f:82: 9b:cb:1f:60:64:4c:f9:69:b1:53:5f:5a:0e:ef:86: 96:42:16:1d:c4:95:32:b9:d5:cc:7a:f9:f2:d1:28: 5e:f3:64:4b:60:c8:3c:a1:ea:10:8a:14:a0:aa:a5: 6e:b8:37:3e:0c:96:36:99:06:9e:54:9e:b9:45:92: 27:ed:09:15:e7:a4:60:c7:6f:a4:a6:bf:b7:21:b9: 54:ea:fb:28:c4:9e:f7:7b:be:87:06:6b:41:cb:a7: f7:a8:b1:fb:9e:8e:b0:ce:74:5c:7e:a9:01:34:1f: e8:a1:80:87:d0:29:94:ae:02:b2:d1:30:5d:0c:66: 83:3b:9b:9f:c2:de:ea:c3:ca:ad:6c:fa:79:92:d2: 2f:32:93:94:8e:ee:3e:0d:60:a4:ee:ca:c3:ac:79: f7:00:74:9b:c9:70:6d:d2:f8:97:f1:d8:27:7f:f0: 68:2e:9a:79:8f:0c:8f:6d:82:1b:1b:b3:76:67:a6: 34:96:8c:5b:3d:31:f0:17:0d:84:a6:6f:78:74:93: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:04:63:C4:CD:1E:C2:DE:C0:71:D8:0A:38:02:7A:07:51:12:AA X509v3 Authority Key Identifier: keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/2B340AEAC1CB11EF9CFC9509C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.44.56.0/22 Signature Algorithm: sha256WithRSAEncryption 75:ee:f0:80:e8:40:75:4e:00:47:cf:12:5e:18:a9:fd:34:b1: 73:90:01:6b:41:71:0a:a8:ce:96:15:b7:91:cf:a7:5b:70:f1: 0a:37:06:f1:9f:90:6e:a1:4b:3c:cd:d6:4e:21:58:92:0d:63: ed:8b:e1:ac:96:95:8d:1e:e0:be:33:b2:62:ef:04:ea:14:70: c9:96:5b:1c:76:62:82:c4:ee:c2:11:8b:59:3c:aa:2d:0c:bd: 8e:02:6d:d4:0f:9f:a1:34:9f:42:f9:3d:f3:ef:ba:2f:bc:66: 66:71:b4:a3:c3:29:8a:c6:e0:a7:57:c7:e4:bc:8b:33:20:fb: 9b:0e:b7:6f:70:0f:01:c6:7a:d2:27:ee:95:6d:53:6d:ff:05: 33:4f:cf:bf:25:b6:a9:42:e4:0a:a8:75:59:df:73:74:ae:2a: 15:a2:1b:d9:44:d2:11:37:3d:96:d9:05:46:a3:a4:68:0b:c1: 83:61:84:8a:cf:e9:88:01:46:c9:52:d4:a5:f0:f4:c5:e5:40: 02:8b:48:76:ea:5d:2f:3a:62:c2:35:a0:33:d8:95:b4:f9:3e: 92:43:d9:f6:84:a4:6d:1d:6c:33:d7:9e:ea:a5:a6:4e:09:50: 10:9b:e5:a6:c2:7f:7f:1c:d7:cf:c8:61:b4:65:5f:25:8e:e5: 32:28:bb:05 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzNTgxMTAvBgNVBAUTKDdGQkZDRjE5NkJGRDJFRjA3MDYyNUJFRUM0MjZFODYw Njg4QUMyRjEwHhcNMjUxMDAxMDczNTE3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTUyOS0xZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXXAZp7CU63EeiGSGyzJ+J2fpAyoVAGB65ZbkGhiQWS3DZvjloO0phCknboU jAGa3+Lu7yVWL6iqL4Kbyx9gZEz5abFTX1oO74aWQhYdxJUyudXMevny0She82RL YMg8oeoQihSgqqVuuDc+DJY2mQaeVJ65RZIn7QkV56Rgx2+kpr+3IblU6vsoxJ73 e76HBmtBy6f3qLH7no6wznRcfqkBNB/ooYCH0CmUrgKy0TBdDGaDO5ufwt7qw8qt bPp5ktIvMpOUju4+DWCk7srDrHn3AHSbyXBt0viX8dgnf/BoLpp5jwyPbYIbG7N2 Z6Y0loxbPTHwFw2Epm94dJP2QQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMSZBGPE zR7C3sBx2Ao4AnoHURKqMB8GA1UdIwQYMBaAFH+/zxlr/S7wcGJb7sQm6GBoisLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzM1OC83RDQwNjQ3RUMx Q0ExMUVGQTNGMjRBODdDNEY5QUUwMi9mN19QR1d2OUx2QndZbHZ1eENib1lHaUt3 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y3X1BHV3Y5THZCd1lsdnV4Q2JvWUdpS3d2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjMzNTgvN0Q0MDY0N0VDMUNBMTFFRkEzRjI0QTg3QzRGOUFFMDIvMkIzNDBBRUFD MUNCMTFFRjlDRkM5NTA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyiw4MA0GCSqGSIb3DQEBCwUAA4IBAQB17vCA6EB1TgBHzxJeGKn9 NLFzkAFrQXEKqM6WFbeRz6dbcPEKNwbxn5BuoUs8zdZOIViSDWPti+GslpWNHuC+ M7Ji7wTqFHDJllscdmKCxO7CEYtZPKotDL2OAm3UD5+hNJ9C+T3z77ovvGZmcbSj wymKxuCnV8fkvIszIPubDrdvcA8BxnrSJ+6VbVNt/wUzT8+/JbapQuQKqHVZ33N0 rioVohvZRNIRNz2W2QVGo6RoC8GDYYSKz+mIAUbJUtSl8PTF5UACi0h26l0vOmLC NaAz2JW0+T6SQ9n2hKRtHWwz157qpaZOCVAQm+Wmwn9/HNfPyGG0ZV8ljuUyKLsF -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:32 2026 by rpki-client