$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa File: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (raw, json) Hash identifier: u9cehntkmN+Per/glhjpUt2xiu+ij4ZxhwGHfN+ijAE= Subject key identifier: C0:22:43:73:C5:20:FF:F8:44:12:3E:AD:53:A0:5C:69:0E:23:27:38 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 024B Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:58:44 +0000 ROA not before: Fri 11 Jul 2025 03:39:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 37900 IP address blocks: 202.2.88.0/22 maxlen: 24 202.4.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Jul 11 03:39:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a43804-05c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:30:0f:42:58:a2:7a:e4:19:58:2e:65:a7: 28:81:9d:95:b1:92:cd:b0:b8:9d:30:c1:0a:27:3a: 6b:f1:11:c9:bc:71:0c:de:29:19:72:9c:37:7a:92: 07:5c:2c:c4:ae:b1:06:a7:f7:dc:d4:1c:a6:c1:23: f5:99:ce:07:d4:ce:ea:fb:55:b3:13:f7:77:6f:83: 86:bb:d1:41:f1:21:3d:c9:fa:4c:42:29:04:fb:e3: 02:a8:b0:33:bb:a5:e4:4a:d7:38:f4:47:77:fd:8c: ec:5e:12:77:2b:15:54:d3:31:df:99:e8:3d:75:34: 94:39:29:4d:be:bb:b8:c5:22:7a:7b:13:e7:61:82: 68:a1:64:e8:7f:4a:0b:22:81:c5:4a:f9:6f:72:11: 4b:1e:ad:60:69:9a:72:82:09:a3:b3:dc:33:c5:de: f8:45:a7:45:7f:81:a8:f3:c7:01:ab:f9:ba:be:ed: 82:23:da:87:3e:8f:47:eb:79:40:a4:f0:17:e6:b1: 67:5f:c4:27:1b:0f:c2:c0:d3:cf:43:e8:c4:0b:ef: 94:e9:96:1f:e6:e1:04:50:48:33:b6:40:5d:ba:09: 5a:66:fa:85:00:12:d5:a1:05:4c:e0:1d:c7:3a:1f: 50:e1:69:41:74:07:bc:07:20:f9:fa:4a:cf:da:81: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:22:43:73:C5:20:FF:F8:44:12:3E:AD:53:A0:5C:69:0E:23:27:38 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.2.88.0/22 202.4.244.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:2f:9a:dd:e3:a4:79:f5:f3:10:db:a9:22:72:f7:19:8d:3e: 80:8e:b8:c3:e3:21:07:95:68:20:40:fd:64:1b:d5:38:43:67: ed:05:f7:f9:74:a3:e9:dc:a6:9c:79:a4:a5:81:18:03:bb:99: d2:ae:89:7d:53:b0:d9:f6:37:a6:da:87:15:9b:70:61:69:39: 6d:45:c1:48:04:63:1f:2f:ea:b8:19:11:3f:9a:83:87:ad:44: b3:b0:01:38:9c:44:2c:c9:b7:b1:d6:1a:30:3b:84:ac:68:b5: ba:72:cf:90:a8:2e:4f:34:69:d9:b3:f5:ea:d0:e0:d3:f3:be: 62:34:db:db:b7:71:5e:b1:e7:a5:5f:ab:83:d7:88:a4:5c:09: 0e:a1:68:12:3f:09:6b:cc:0b:e7:d5:83:95:1c:dd:d7:ca:ac: ca:d1:ca:b8:b7:3e:02:64:75:2a:23:8d:a4:6a:62:99:e2:1e: 51:fe:c3:99:72:c5:7f:b4:c9:9d:ef:9f:78:fd:ec:83:e0:44: 9f:9e:f9:bc:2c:65:37:5f:18:d9:5f:25:b3:35:5a:3b:06:e0: c2:3c:39:05:da:29:af:82:43:03:39:0f:8a:8e:59:48:a4:b1: 71:f4:3c:fe:c8:68:7e:f1:89:9e:e1:48:2f:60:71:95:b1:e9: 24:a7:8d:a9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjUwNzExMDMzOTE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzgwNC0wNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmx8wD0JYonrkGVguZacogZ2VsZLNsLidMMEKJzpr8RHJvHEM3ikZcpw3epIH XCzErrEGp/fc1BymwSP1mc4H1M7q+1WzE/d3b4OGu9FB8SE9yfpMQikE++MCqLAz u6XkStc49Ed3/YzsXhJ3KxVU0zHfmeg9dTSUOSlNvru4xSJ6exPnYYJooWTof0oL IoHFSvlvchFLHq1gaZpyggmjs9wzxd74RadFf4Go88cBq/m6vu2CI9qHPo9H63lA pPAX5rFnX8QnGw/CwNPPQ+jEC++U6ZYf5uEEUEgztkBduglaZvqFABLVoQVM4B3H Oh9Q4WlBdAe8ByD5+krP2oE/SwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMAiQ3PF IP/4RBI+rVOgXGkOIyc4MB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDFCRUQvRkIyQUE4RUNCNzJBMTFFRDg4NEEwOTFEQzRGOUFFMDIvODVCQjdBNEUy QUIzMTFFRTk4RUEwMzE1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCygJYAwQCygT0MA0GCSqGSIb3DQEBCwUAA4IBAQBML5rd46R59fMQ 26kicvcZjT6AjrjD4yEHlWggQP1kG9U4Q2ftBff5dKPp3KaceaSlgRgDu5nSrol9 U7DZ9jem2ocVm3BhaTltRcFIBGMfL+q4GRE/moOHrUSzsAE4nEQsybex1howO4Ss aLW6cs+QqC5PNGnZs/Xq0ODT875iNNvbt3FeseelX6uD14ikXAkOoWgSPwlrzAvn 1YOVHN3XyqzK0cq4tz4CZHUqI42kamKZ4h5R/sOZcsV/tMmd7594/eyD4ESfnvm8 LGU3XxjZXyWzNVo7BuDCPDkF2imvgkMDOQ+KjllIpLFx9Dz+yGh+8Yme4UgvYHGV sekkp42p -----END CERTIFICATE-----Generated at Mon Mar 2 06:16:12 2026 by rpki-client