$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7CA593102A2811F0819D8C13C4F9AE02.roa File: 7CA593102A2811F0819D8C13C4F9AE02.roa (raw, json) Hash identifier: dd0CGQKg2qsZFHW0r2NsR/ySJbalRdUFAJqYcFNJaEc= Subject key identifier: A2:4C:F9:D3:7E:50:59:30:0D:0E:4E:18:A6:7D:4A:2C:E0:DB:88:02 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 0309 Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7CA593102A2811F0819D8C13C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:19:32 +0000 ROA not before: Tue 05 Aug 2025 02:40:32 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 14618 IP address blocks: 203.4.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 777 (0x309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Aug 5 02:40:32 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a59c74-088c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:cb:56:a1:50:cf:e7:40:9e:8f:9c:08:95: 0f:6d:23:83:34:fb:31:a7:b2:61:56:52:89:dc:e8: aa:a4:87:b7:f2:99:c8:35:b2:aa:17:a0:ff:9f:f4: 3c:63:55:6e:9c:5f:e1:5f:ef:bb:d5:11:ae:3e:48: 7f:c5:62:f1:49:6b:f2:82:67:9b:60:e6:af:57:9f: 05:77:d9:42:ef:8e:7b:f0:0b:3b:70:25:bb:30:c1: c3:24:bc:05:83:7c:f9:5b:b9:20:a9:d4:8e:ec:9a: fb:e3:51:45:1b:46:53:4c:e7:21:68:40:7e:7f:ff: 40:42:b3:3f:c4:be:81:83:d2:13:1f:7c:5d:21:10: 97:89:b8:18:d1:8b:14:f1:a4:fb:ec:65:0b:f6:ea: 43:59:07:f7:4c:0b:86:09:ed:38:23:6c:17:f4:c8: 57:12:e4:50:ed:cf:58:d0:0f:5b:ce:86:8b:24:f2: a1:26:c2:d9:57:58:92:ce:a4:14:2f:ac:79:90:72: 89:62:83:e3:95:e4:e6:a4:cd:17:4e:ea:44:6f:70: 19:26:4b:c8:f8:1c:09:75:0e:cf:37:d9:46:2d:25: 95:ae:bf:48:77:7e:9f:80:b2:df:2d:3f:fd:09:60: 39:29:82:07:ea:56:33:06:56:f9:ea:6b:d5:09:1e: 1e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4C:F9:D3:7E:50:59:30:0D:0E:4E:18:A6:7D:4A:2C:E0:DB:88:02 X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7CA593102A2811F0819D8C13C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.4.146.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:a1:7b:7c:89:4a:58:bb:fd:41:2b:4e:af:2c:8b:86:ad:89: 2c:9b:7f:11:9f:fd:e7:7a:dd:6c:13:07:fb:a3:e0:a3:8c:e2: 5f:cf:5c:60:be:ec:d4:d9:0f:dc:d5:a6:08:f8:8f:2a:0d:15: fb:3e:9d:78:ba:2a:43:68:a4:09:7e:ea:e3:69:48:de:04:25: 45:c2:cb:22:91:2f:fb:dc:9e:f6:87:15:fb:d2:c5:0a:7a:d4: c7:48:51:80:3b:d5:e7:ff:ea:d7:50:14:3c:48:88:96:95:65: ea:22:f1:ae:a8:a9:dd:ab:61:ad:67:e3:df:9d:2f:47:e7:cf: fe:8b:93:ac:e5:09:e5:19:01:e2:08:74:bf:8b:e6:62:1d:28: be:b1:81:0b:af:02:3b:53:54:f8:04:07:30:52:2c:a1:42:c2: c9:50:aa:ab:df:7c:d1:cb:90:27:ec:3e:a7:03:0e:19:82:65: 4b:e2:2c:09:fa:a2:61:7a:66:6c:5e:2b:be:15:73:4b:0d:02: de:ad:ef:ce:b6:e2:89:59:c4:c5:c6:7e:f6:1b:3d:c6:b9:7b: b9:00:02:9b:ff:12:7b:79:e3:af:b1:b5:94:0b:f8:66:43:34: 05:12:58:1b:7e:84:51:a6:8d:e6:a1:d1:ca:f6:cc:8a:3b:32: 2f:0c:9a:d7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUwODA1MDI0MDMyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWM3NC0wODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZ/LVqFQz+dAno+cCJUPbSODNPsxp7JhVlKJ3OiqpIe38pnINbKqF6D/n/Q8 Y1VunF/hX++71RGuPkh/xWLxSWvygmebYOavV58Fd9lC74578As7cCW7MMHDJLwF g3z5W7kgqdSO7Jr741FFG0ZTTOchaEB+f/9AQrM/xL6Bg9ITH3xdIRCXibgY0YsU 8aT77GUL9upDWQf3TAuGCe04I2wX9MhXEuRQ7c9Y0A9bzoaLJPKhJsLZV1iSzqQU L6x5kHKJYoPjleTmpM0XTupEb3AZJkvI+BwJdQ7PN9lGLSWVrr9Id36fgLLfLT/9 CWA5KYIH6lYzBlb56mvVCR4ezwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKJM+dN+ UFkwDQ5OGKZ9Sizg24gCMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVEQjEvNUE0OTZGODgwRTE3MTFFRDhFM0JEOTE1QzRGOUFFMDIvN0NBNTkzMTAy QTI4MTFGMDgxOUQ4QzEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAywSSMA0GCSqGSIb3DQEBCwUAA4IBAQANoXt8iUpYu/1BK06vLIuG rYksm38Rn/3net1sEwf7o+CjjOJfz1xgvuzU2Q/c1aYI+I8qDRX7Pp14uipDaKQJ furjaUjeBCVFwssikS/73J72hxX70sUKetTHSFGAO9Xn/+rXUBQ8SIiWlWXqIvGu qKndq2GtZ+PfnS9H58/+i5Os5QnlGQHiCHS/i+ZiHSi+sYELrwI7U1T4BAcwUiyh QsLJUKqr33zRy5An7D6nAw4ZgmVL4iwJ+qJhemZsXiu+FXNLDQLere/OtuKJWcTF xn72Gz3GuXu5AAKb/xJ7eeOvsbWUC/hmQzQFElgbfoRRpo3modHK9syKOzIvDJrX -----END CERTIFICATE-----Generated at Thu Mar 26 03:45:16 2026 by rpki-client