$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2A9845DE691411EF8D868864C4F9AE02.roa File: 2A9845DE691411EF8D868864C4F9AE02.roa (raw, json) Hash identifier: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM= Subject key identifier: A0:A2:E5:E6:7A:A4:57:5E:40:02:5F:68:97:53:5D:6D:E8:F1:3E:F8 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 0442 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2A9845DE691411EF8D868864C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:49:50 +0000 ROA not before: Tue 02 Dec 2025 23:59:06 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151780 IP address blocks: 202.94.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Dec 2 23:59:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48a4e-b849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9c:18:2f:53:65:05:a4:cc:3b:ab:05:bd:b1: fe:e0:8d:fb:6e:37:81:ae:9f:ae:7b:d7:57:ac:35: 52:2c:13:04:fe:43:ad:87:d4:a9:ab:43:75:fb:e0: e0:ce:f5:2d:ca:6f:41:b5:51:59:47:24:f3:53:4e: f5:22:cb:21:53:ac:ad:7c:6a:24:fa:b1:b1:8f:f3: a2:8a:6e:57:f3:70:4c:41:fe:ab:ed:a5:24:06:c6: 41:66:fe:b7:4e:2e:b8:1c:60:88:fc:be:e0:4a:e0: 08:7c:8b:22:8e:67:a5:9f:9f:5f:70:89:04:6c:c4: 2a:47:dd:8f:90:da:f3:86:d2:fe:cd:8a:3b:a8:6f: cf:63:0e:3d:36:63:b5:fe:a7:83:c3:56:63:28:f5: 9b:fb:f6:0b:f6:17:e5:50:83:8e:d9:f6:ee:66:63: e7:62:9d:2f:e7:67:31:db:6d:00:e6:7b:78:13:dc: 37:c1:1b:9e:58:e7:4d:b1:c2:b7:15:40:01:c8:22: 12:18:5c:d7:14:72:59:03:b6:31:3f:65:40:a6:4b: 4a:57:94:8d:65:b8:60:4e:11:9f:e8:93:83:5e:98: d1:e5:67:88:f5:f6:89:aa:92:8c:ab:80:1c:6c:26: a1:a3:e2:9d:b1:f6:b9:a3:4a:b8:2a:23:bb:29:98: 1f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A2:E5:E6:7A:A4:57:5E:40:02:5F:68:97:53:5D:6D:E8:F1:3E:F8 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2A9845DE691411EF8D868864C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.94.247.0/24 Signature Algorithm: sha256WithRSAEncryption 25:27:6b:09:e2:7b:97:94:a2:17:78:9f:8d:c0:3a:8c:fe:90: 9e:ab:0a:96:07:61:e9:27:b6:7b:6b:9f:89:3c:1a:0d:09:5a: 7c:d3:5b:91:35:74:35:f2:e6:f0:c8:ec:85:9d:dc:02:26:23: f3:ce:02:ac:31:5c:47:2e:ac:f9:a3:67:e4:6a:a8:bd:23:97: e5:29:a8:57:af:e0:75:ca:28:58:39:45:78:54:85:9a:9b:d1: b8:31:8d:5e:19:48:56:63:d9:02:e9:fe:25:a8:96:3c:f4:14: ff:ff:11:87:3c:81:bb:0e:ac:77:3b:56:e6:e4:37:91:19:19: e2:b2:48:f1:0c:7d:f0:b1:b1:22:be:fb:ff:ff:bb:47:5e:a5: cf:09:ab:e8:1c:04:0f:55:da:86:e5:a5:a7:e7:71:a3:3a:50: 90:a3:7b:f5:8c:4c:73:23:d0:b1:73:1a:57:a5:3e:c6:55:9e: 84:a3:47:47:9b:4a:1d:e4:ae:8b:dc:ca:67:28:16:d9:4f:10: 80:16:16:06:a4:29:7a:8c:ec:5c:e2:5d:4a:dd:45:e5:70:25: f3:d8:57:03:6f:32:47:c7:16:ae:cf:4d:ae:2a:be:81:a3:b5: 20:eb:7a:87:8b:26:77:75:6e:d4:cd:87:81:99:95:8d:2f:47: fb:fb:b1:f9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMjAyMjM1OTA2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGE0ZS1iODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZwYL1NlBaTMO6sFvbH+4I37bjeBrp+ue9dXrDVSLBME/kOth9Spq0N1++Dg zvUtym9BtVFZRyTzU071IsshU6ytfGok+rGxj/Oiim5X83BMQf6r7aUkBsZBZv63 Ti64HGCI/L7gSuAIfIsijmeln59fcIkEbMQqR92PkNrzhtL+zYo7qG/PYw49NmO1 /qeDw1ZjKPWb+/YL9hflUIOO2fbuZmPnYp0v52cx220A5nt4E9w3wRueWOdNscK3 FUAByCISGFzXFHJZA7YxP2VApktKV5SNZbhgThGf6JODXpjR5WeI9faJqpKMq4Ac bCaho+Kdsfa5o0q4KiO7KZgf/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKCi5eZ6 pFdeQAJfaJdTXW3o8T74MB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMkE5ODQ1REU2 OTE0MTFFRjhEODY4ODY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyl73MA0GCSqGSIb3DQEBCwUAA4IBAQAlJ2sJ4nuXlKIXeJ+NwDqM /pCeqwqWB2HpJ7Z7a5+JPBoNCVp801uRNXQ18ubwyOyFndwCJiPzzgKsMVxHLqz5 o2fkaqi9I5flKahXr+B1yihYOUV4VIWam9G4MY1eGUhWY9kC6f4lqJY89BT//xGH PIG7Dqx3O1bm5DeRGRniskjxDH3wsbEivvv//7tHXqXPCavoHAQPVdqG5aWn53Gj OlCQo3v1jExzI9CxcxpXpT7GVZ6Eo0dHm0od5K6L3MpnKBbZTxCAFhYGpCl6jOxc 4l1K3UXlcCXz2FcDbzJHxxauz02uKr6Bo7Ug63qHiyZ3dW7UzYeBmZWNL0f7+7H5 -----END CERTIFICATE-----Generated at Mon Mar 2 08:18:08 2026 by rpki-client