$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/41E32C9852E411EC9E19AA2FC4F9AE02.roa File: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (raw, json) Hash identifier: VCY6VieVb7TG2U03HIBFTaPiwgKuFeeeP7S9R6dlJ6E= Subject key identifier: 11:B2:47:D6:22:FD:7D:EA:7F:78:A7:3B:82:24:BA:63:0F:8F:39:43 Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 0579 Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/41E32C9852E411EC9E19AA2FC4F9AE02.roa Signing time: Fri 17 Jul 2026 00:25:34 +0000 ROA not before: Fri 17 Jul 2026 00:25:34 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 16509 IP address blocks: 202.92.192.0/24 maxlen: 24 202.92.193.0/24 maxlen: 24 202.92.196.0/24 maxlen: 24 202.92.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: Jul 17 00:25:34 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a59767e-06c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:2d:59:a6:b3:40:d2:31:8d:53:6d:26:8b: 53:f6:4f:c3:30:9f:5a:b3:c0:5b:03:e9:13:bc:9f: 7c:b5:6a:a6:d4:b2:fe:98:31:f9:f1:60:96:21:d5: c5:12:ec:d0:01:b7:89:e3:8b:2c:c8:e1:57:de:e9: 95:28:71:2e:48:6f:5f:f6:37:98:3a:88:a0:6e:58: 40:4d:5b:15:ee:10:7c:f9:eb:25:68:3f:a0:28:39: 00:b5:98:13:a9:2d:65:2b:06:cf:e1:3f:0e:64:11: 3a:de:6f:9a:c3:c9:60:8a:c9:37:21:04:0e:ca:1f: 46:c1:0b:66:2e:52:39:de:45:75:68:8c:b5:c9:5c: cb:9c:54:84:8a:53:02:9e:20:bf:b5:0f:f2:5b:29: a4:41:71:5d:c6:6e:fe:5a:d4:92:92:fe:74:97:81: 38:2c:f1:7f:51:7f:21:3f:0a:a4:ec:56:67:1c:f0: 8c:cd:e7:0a:b0:4f:e8:86:87:03:39:88:0b:e2:2a: dc:4c:3b:18:65:e4:01:08:9f:d9:29:ef:5e:b8:86: 11:41:e2:0f:45:23:b2:01:32:0f:76:cb:1e:3a:8c: 3f:7c:64:88:38:a4:e3:f8:be:f2:a6:1c:f6:ba:0c: 89:5e:73:e2:fa:98:5d:ce:77:d1:5c:c5:60:5a:47: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B2:47:D6:22:FD:7D:EA:7F:78:A7:3B:82:24:BA:63:0F:8F:39:43 X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/41E32C9852E411EC9E19AA2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.92.192.0/23 202.92.196.0/23 Signature Algorithm: sha256WithRSAEncryption 63:e7:34:14:46:41:d2:91:ba:35:51:19:32:68:30:f2:a3:9b: e8:28:24:70:96:87:66:96:09:1a:72:cc:8e:5a:29:a0:24:8b: f7:a9:d4:8d:2a:01:66:16:d4:48:b9:17:9c:3b:94:f5:80:54: 54:f1:a0:8b:e8:b7:99:5f:d6:7c:b6:3d:10:35:89:03:20:65: a0:c1:26:a2:b0:a2:86:72:91:fd:d8:12:1b:dc:b7:8a:91:15: df:ed:bf:a8:fb:38:02:cc:15:96:66:81:3d:ed:ad:ef:9a:1c: 57:67:84:86:21:14:61:d0:2d:7f:db:bf:a2:91:a0:78:02:38: 72:2a:65:99:7e:4e:8d:4f:ad:93:5f:9c:47:ca:34:c1:3f:2c: 85:8f:09:4e:a5:1a:9a:73:4c:4d:10:6a:83:6a:0a:d4:2d:f7: f1:3e:ca:4f:1f:05:d2:32:3e:81:3c:0a:53:ac:7a:c1:ca:b0: 08:2b:62:80:5b:07:f9:92:8e:ec:02:d4:c2:bc:7a:f4:28:46: cc:5f:3c:d9:85:c4:85:4c:17:0c:54:1b:08:bb:fe:bc:40:99: db:e0:ec:ff:b6:28:ea:df:ce:44:a4:23:44:01:aa:85:55:6b: 5d:f0:52:69:ad:5e:86:fa:7c:e3:4d:c1:2f:80:1b:34:25:33: 10:a1:e2:d9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjYwNzE3MDAyNTM0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU5NzY3ZS0wNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo0tWaazQNIxjVNtJotT9k/DMJ9as8BbA+kTvJ98tWqm1LL+mDH58WCWIdXF EuzQAbeJ44ssyOFX3umVKHEuSG9f9jeYOoigblhATVsV7hB8+eslaD+gKDkAtZgT qS1lKwbP4T8OZBE63m+aw8lgisk3IQQOyh9GwQtmLlI53kV1aIy1yVzLnFSEilMC niC/tQ/yWymkQXFdxm7+WtSSkv50l4E4LPF/UX8hPwqk7FZnHPCMzecKsE/ohocD OYgL4ircTDsYZeQBCJ/ZKe9euIYRQeIPRSOyATIPdsseOow/fGSIOKTj+L7yphz2 ugyJXnPi+phdznfRXMVgWkeO/QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBGyR9Yi /X3qf3inO4IkumMPjzlDMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNDRkYvOUE1RUMxNkM0NkZFMTFFQzk0RTNEMjRBQzRGOUFFMDIvNDFFMzJDOTg1 MkU0MTFFQzlFMTlBQTJGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBylzAAwQBylzEMA0GCSqGSIb3DQEBCwUAA4IBAQBj5zQURkHSkbo1 URkyaDDyo5voKCRwlodmlgkacsyOWimgJIv3qdSNKgFmFtRIuRecO5T1gFRU8aCL 6LeZX9Z8tj0QNYkDIGWgwSaisKKGcpH92BIb3LeKkRXf7b+o+zgCzBWWZoE97a3v mhxXZ4SGIRRh0C1/27+ikaB4AjhyKmWZfk6NT62TX5xHyjTBPyyFjwlOpRqac0xN EGqDagrULffxPspPHwXSMj6BPApTrHrByrAIK2KAWwf5ko7sAtTCvHr0KEbMXzzZ hcSFTBcMVBsIu/68QJnb4Oz/tijq385EpCNEAaqFVWtd8FJprV6G+nzjTcEvgBs0 JTMQoeLZ -----END CERTIFICATE-----Generated at Fri Jul 24 14:23:56 2026 by rpki-client