$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/02B9688489EF11F0850AA959C4F9AE02.roa File: 02B9688489EF11F0850AA959C4F9AE02.roa (raw, json) Hash identifier: MRdoatbtZlX/j+oJmCCGU4llhQwpqKqYYTJACIb/OaA= Subject key identifier: 9F:77:FD:3C:48:0C:B4:F7:6B:EF:CD:CB:E0:89:54:CD:DC:BA:2C:71 Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Certificate serial: 0179 Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/02B9688489EF11F0850AA959C4F9AE02.roa Signing time: Sat 19 Sep 2026 05:55:05 +0000 ROA not before: Sat 19 Sep 2026 05:55:04 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 4658 IP address blocks: 202.89.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Validity Not Before: Sep 19 05:55:04 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aae23b8-234e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:c7:de:22:e9:6d:5e:c8:cb:86:59:64:dd: 99:85:40:bb:73:a5:d0:e6:a5:04:c9:b2:41:96:9c: f3:58:c3:95:90:4d:db:b1:29:e6:2e:b1:9f:07:66: d0:5b:58:9d:6a:f9:b5:4f:4c:a9:2c:75:c2:ca:e7: 3a:0a:ed:e0:a4:12:07:e5:ed:78:2f:51:bd:6f:78: 60:d0:22:6d:c8:bc:1e:52:0b:9e:66:42:ad:94:eb: 9d:00:4f:fb:d3:07:20:86:ef:38:21:c7:4d:c0:cc: 21:e1:36:8b:c4:d5:61:ac:1a:0c:96:6b:98:be:5e: c9:28:a8:07:75:c5:ef:c9:10:ba:40:d2:7a:9a:d6: 1e:a9:12:a3:4f:63:b7:0f:c6:a2:5b:33:8f:01:68: 7b:e5:dc:91:11:e4:0d:09:3b:d5:c3:fc:7b:b2:4c: eb:bd:3f:77:32:04:5c:fa:07:4e:25:0e:fa:63:e3: 10:be:39:04:e0:fb:f9:ba:82:b0:09:ee:ed:8c:13: d7:8f:e2:ef:ff:cf:bc:4c:37:1f:3c:7f:f0:03:20: fd:33:df:bb:f2:e3:75:91:b7:4a:4f:1c:d2:76:f2: 03:47:b8:0f:f0:58:9d:78:6b:28:f4:bf:e3:c9:94: 55:f7:76:70:eb:2e:c3:94:99:ef:ff:06:78:3c:d0: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:77:FD:3C:48:0C:B4:F7:6B:EF:CD:CB:E0:89:54:CD:DC:BA:2C:71 X509v3 Authority Key Identifier: keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/02B9688489EF11F0850AA959C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.89.253.0/24 Signature Algorithm: sha256WithRSAEncryption bc:b7:85:da:0c:ee:3d:91:18:ab:02:e6:3a:7e:38:12:5a:54: ce:10:98:70:c0:ee:84:23:94:5a:eb:b0:a3:c7:32:c3:06:c2: be:b5:94:51:10:03:38:36:b5:3a:6f:e3:d4:63:8d:96:87:21: 84:ab:c4:fa:38:b4:73:54:88:ad:36:ec:6a:e3:b9:e5:ae:6b: 9d:93:be:17:70:e2:a4:d1:bc:e2:de:e4:75:fd:fd:c0:3d:c2: 44:2f:1e:19:ab:d1:75:2b:14:2e:02:d2:63:9b:84:fd:59:23: 99:11:49:b8:65:71:8c:f0:26:81:3e:6c:42:c5:3f:53:d0:27: 36:af:9e:45:33:cd:1c:4a:92:ef:2b:aa:ea:e6:65:25:a3:0b: 83:58:99:c4:d5:51:2d:7b:ff:41:8b:2d:8c:b9:2f:8d:2b:ea: 49:f3:86:fc:d6:c2:e0:d8:24:8e:f0:33:af:5a:1b:3c:f1:a9: a8:74:26:26:bf:81:40:4b:b6:b1:44:9a:c3:8b:12:6a:c7:6e: ba:8d:90:62:65:a9:58:ff:e0:f6:4c:0a:49:f2:30:99:0a:33: fa:7e:81:57:42:3a:c6:ce:fc:04:dd:4f:80:fb:62:a6:11:6b: 42:89:7c:56:1e:a7:16:a8:46:f6:13:a2:97:aa:c0:a9:37:70: 10:6c:9e:2c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzODgxMTAvBgNVBAUTKDNDMzc3NUQ5Rjg3RjBFQUEyOTY4NjY3NzRFQTYyRjYy NzREMDY2Q0IwHhcNMjYwOTE5MDU1NTA0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFlMjNiOC0yMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOrH3iLpbV7Iy4ZZZN2ZhUC7c6XQ5qUEybJBlpzzWMOVkE3bsSnmLrGfB2bQ W1idavm1T0ypLHXCyuc6Cu3gpBIH5e14L1G9b3hg0CJtyLweUgueZkKtlOudAE/7 0wcghu84IcdNwMwh4TaLxNVhrBoMlmuYvl7JKKgHdcXvyRC6QNJ6mtYeqRKjT2O3 D8aiWzOPAWh75dyREeQNCTvVw/x7skzrvT93MgRc+gdOJQ76Y+MQvjkE4Pv5uoKw Ce7tjBPXj+Lv/8+8TDcfPH/wAyD9M9+78uN1kbdKTxzSdvIDR7gP8FideGso9L/j yZRV93Zw6y7DlJnv/wZ4PNDvqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ93/TxI DLT3a+/Ny+CJVM3cuixxMB8GA1UdIwQYMBaAFDw3ddn4fw6qKWhmd06mL2J00GbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM4OC9FMEU3MzYwQTg5 RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rxb3BhR1ozVHFZdlluVFFa c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BEZDEyZmhfRHFvcGFHWjNUcVl2WW5UUVpzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTMzODgvRTBFNzM2MEE4OUY0MTFFRkE5MTNCOTUyQzRGOUFFMDIvMDJCOTY4ODQ4 OUVGMTFGMDg1MEFBOTU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyln9MA0GCSqGSIb3DQEBCwUAA4IBAQC8t4XaDO49kRirAuY6fjgS WlTOEJhwwO6EI5Ra67CjxzLDBsK+tZRREAM4NrU6b+PUY42WhyGEq8T6OLRzVIit Nuxq47nlrmudk74XcOKk0bzi3uR1/f3APcJELx4Zq9F1KxQuAtJjm4T9WSOZEUm4 ZXGM8CaBPmxCxT9T0Cc2r55FM80cSpLvK6rq5mUlowuDWJnE1VEte/9Biy2MuS+N K+pJ84b81sLg2CSO8DOvWhs88amodCYmv4FAS7axRJrDixJqx266jZBiZalY/+D2 TApJ8jCZCjP6foFXQjrGzvwE3U+A+2KmEWtCiXxWHqcWqEb2E6KXqsCpN3AQbJ4s -----END CERTIFICATE-----Generated at Sun Sep 27 02:39:31 2026 by rpki-client