$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/2DFEDC68A39711ED936DC309C4F9AE02.roa File: 2DFEDC68A39711ED936DC309C4F9AE02.roa (raw, json) Hash identifier: yPQ68Wi4BYWR2BigdVLY6aIZpd03CRX9NxKeTmERqZc= Subject key identifier: 7A:52:FC:B1:61:81:98:C8:7E:0D:7E:B3:8D:51:89:0E:5F:B7:6C:39 Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Certificate serial: 09C9 Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/2DFEDC68A39711ED936DC309C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:03:24 +0000 ROA not before: Thu 14 Aug 2025 21:00:52 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 149282 IP address blocks: 202.43.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2505 (0x9c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Validity Not Before: Aug 14 21:00:52 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4472c-5d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:83:97:01:f8:a0:be:f8:9e:a0:18:00:35: 8d:da:2a:eb:b4:1b:40:b5:39:c3:fc:40:a7:be:a6: 1b:29:5c:f8:af:94:fa:80:6e:77:53:33:7f:5a:57: ed:2c:d8:83:c5:08:d6:03:29:5a:df:83:d8:ba:69: 7e:ed:cb:ba:6c:cd:3e:98:f0:50:1f:3a:77:74:24: 65:9f:18:49:8e:d5:d1:15:ab:ff:b3:dc:40:1a:83: 9c:78:6f:9b:57:88:c1:2b:a6:2a:1e:8c:d5:77:4c: 38:8d:fe:af:c6:7d:1c:a1:4d:ac:7e:24:33:b9:47: ff:ae:71:83:07:f0:cd:7d:16:c2:d2:d2:74:14:df: 30:a3:50:87:40:ab:28:33:49:d6:64:a5:cf:e4:77: 04:9a:64:85:0a:f7:a7:23:8a:65:33:03:19:16:15: ec:60:b6:b0:0a:e4:ec:50:10:61:93:45:ec:99:51: 0e:33:64:89:38:22:d2:d5:76:a2:21:0d:b4:83:95: 9f:87:a1:37:ea:0a:4d:ab:38:3d:8e:d1:d0:0a:6a: bf:a8:6c:3a:1c:75:3f:91:9a:d1:51:48:d8:6b:30: 96:00:c7:0a:e1:8d:c2:07:6e:43:9d:ec:4b:fe:2d: 59:84:0d:9e:30:ed:26:58:67:21:b9:b9:dd:53:bb: e0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:52:FC:B1:61:81:98:C8:7E:0D:7E:B3:8D:51:89:0E:5F:B7:6C:39 X509v3 Authority Key Identifier: keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/2DFEDC68A39711ED936DC309C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.43.227.0/24 Signature Algorithm: sha256WithRSAEncryption 77:3e:a0:92:27:f9:ee:02:c5:c8:99:18:dd:0d:bd:ef:0a:07: 5e:a6:d4:c5:db:d6:f7:48:b2:ce:8e:4d:9a:9d:d5:fb:fa:89: ac:72:d7:b1:80:4a:8c:82:aa:ff:35:78:ca:db:c4:0e:6e:4b: 7b:5a:13:c3:e8:8e:f7:75:18:9b:9c:18:7b:9b:3e:41:34:db: 51:f0:43:51:98:c1:28:e4:79:52:ec:47:72:58:ae:b9:6b:2c: 02:60:5d:d4:b4:b5:71:ca:ae:33:11:d4:ca:98:2e:73:39:57: fd:72:1d:2b:07:55:86:13:80:f8:1d:96:fd:40:f6:52:b2:f2: 89:63:39:9d:6c:17:e9:5f:43:0b:c8:fa:11:26:2d:3a:80:42: 7e:80:f1:86:4f:73:58:ca:92:24:1a:c5:8b:f6:c4:80:83:ce: d6:13:e4:83:93:ca:9a:3d:f6:8b:2e:d1:07:df:45:53:c3:d4: d0:75:14:61:b6:a7:c1:fc:4e:40:b1:43:3f:7f:bd:ca:4c:54: 9a:e9:06:a1:9c:28:ae:5a:fc:7f:11:89:b5:77:4a:36:6e:25: 29:98:ec:22:d7:6d:05:25:d5:8d:9b:fa:55:37:3e:82:05:82: 9f:70:09:38:59:5c:08:1c:0b:69:0e:70:08:c2:1b:10:21:94: 45:65:bc:92 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOTAxMTAvBgNVBAUTKDNERTdFRkMwNDZBNjdCOTkyNUJCQkJEQzYxMzJCMTI5 NzVEQjRBNkQwHhcNMjUwODE0MjEwMDUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDcyYy01ZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnN+DlwH4oL74nqAYADWN2irrtBtAtTnD/ECnvqYbKVz4r5T6gG53UzN/Wlft LNiDxQjWAyla34PYuml+7cu6bM0+mPBQHzp3dCRlnxhJjtXRFav/s9xAGoOceG+b V4jBK6YqHozVd0w4jf6vxn0coU2sfiQzuUf/rnGDB/DNfRbC0tJ0FN8wo1CHQKso M0nWZKXP5HcEmmSFCvenI4plMwMZFhXsYLawCuTsUBBhk0XsmVEOM2SJOCLS1Xai IQ20g5Wfh6E36gpNqzg9jtHQCmq/qGw6HHU/kZrRUUjYazCWAMcK4Y3CB25DnexL /i1ZhA2eMO0mWGchubndU7vg6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHpS/LFh gZjIfg1+s41RiQ5ft2w5MB8GA1UdIwQYMBaAFD3n78BGpnuZJbu73GEysSl120pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE5MC9DMzczMDBFOEFF MTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1a2x1N3ZjWVRLeEtYWGJT bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlZnZ3RWFtZTVrbHU3dmNZVEt4S1hYYlNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzYxOTAvQzM3MzAwRThBRTE4MTFFQUE1MDkwMDcyQzRGOUFFMDIvMkRGRURDNjhB Mzk3MTFFRDkzNkRDMzA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyivjMA0GCSqGSIb3DQEBCwUAA4IBAQB3PqCSJ/nuAsXImRjdDb3v CgdeptTF29b3SLLOjk2andX7+omsctexgEqMgqr/NXjK28QObkt7WhPD6I73dRib nBh7mz5BNNtR8ENRmMEo5HlS7EdyWK65aywCYF3UtLVxyq4zEdTKmC5zOVf9ch0r B1WGE4D4HZb9QPZSsvKJYzmdbBfpX0MLyPoRJi06gEJ+gPGGT3NYypIkGsWL9sSA g87WE+SDk8qaPfaLLtEH30VTw9TQdRRhtqfB/E5AsUM/f73KTFSa6QahnCiuWvx/ EYm1d0o2biUpmOwi120FJdWNm/pVNz6CBYKfcAk4WVwIHAtpDnAIwhsQIZRFZbyS -----END CERTIFICATE-----Generated at Thu Mar 26 23:26:08 2026 by rpki-client