$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/920D7BD0549211EFB6D69465C4F9AE02.roa File: 920D7BD0549211EFB6D69465C4F9AE02.roa (raw, json) Hash identifier: CKul+kVwMWY4jLfuuuUbRh3TQkde1chI2jW7GmtTDpI= Subject key identifier: 70:DB:6B:E0:B5:35:44:37:0F:4A:1C:2C:C1:44:61:EC:C7:E9:23:87 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 047A Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/920D7BD0549211EFB6D69465C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:30:44 +0000 ROA not before: Thu 11 Sep 2025 01:08:26 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 10022 IP address blocks: 202.14.20.0/22 maxlen: 22 202.14.24.0/21 maxlen: 21 202.36.8.0/22 maxlen: 22 202.36.8.0/24 maxlen: 24 202.36.9.0/24 maxlen: 24 202.36.10.0/24 maxlen: 24 202.36.11.0/24 maxlen: 24 202.36.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Sep 11 01:08:26 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a477c4-8881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:98:58:a6:f0:9e:19:5e:59:31:e3:c1:31: 4d:6c:78:13:6e:6a:f4:29:06:83:5c:d8:92:16:5c: 05:99:bd:9f:8e:00:49:0e:90:b6:36:88:03:81:3e: b1:1a:3f:a1:5b:3a:fb:bb:cc:77:78:a8:ac:82:bd: ed:3e:8d:6e:12:1c:db:cf:e0:27:b0:f7:15:21:02: 5f:ec:f4:16:dd:40:04:cb:00:3d:a8:91:eb:10:39: a3:d6:01:41:28:d5:bf:84:43:f0:30:d0:28:07:0a: 25:f4:ce:58:49:c7:c8:0a:c6:b7:64:47:bd:e9:24: 7c:55:d3:30:74:49:cb:b1:9f:0c:65:97:71:80:8e: cc:91:6a:2f:a8:43:12:7e:e7:41:38:9c:98:da:95: 9f:7e:20:83:32:fc:25:1f:b2:87:c0:5f:33:54:b0: 0e:46:f0:49:37:04:e5:e3:09:ae:4b:8d:7b:c1:b1: 90:1c:3a:74:dd:54:d7:f2:43:d9:e9:99:17:3b:70: 0b:69:4d:9a:35:43:1a:09:cd:5d:85:83:6d:54:49: 6e:87:c7:c4:52:04:58:ed:ea:09:f3:82:bd:cd:fd: b2:96:d4:77:42:1a:59:e0:aa:5b:68:97:c6:dc:b1: 9f:32:b7:6e:53:83:74:79:d5:4d:68:41:82:71:6a: 3b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:6B:E0:B5:35:44:37:0F:4A:1C:2C:C1:44:61:EC:C7:E9:23:87 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/920D7BD0549211EFB6D69465C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.14.20.0-202.14.31.255 202.36.8.0-202.36.12.255 Signature Algorithm: sha256WithRSAEncryption 98:fe:42:b5:22:d8:c5:8b:4c:8d:a2:63:37:99:e0:c3:7a:1d: 3a:6f:e4:c5:07:0f:67:f9:29:7a:e0:5a:3e:c2:6a:98:73:84: 72:cf:5e:be:72:4c:6c:d5:fc:bc:31:50:a1:98:95:96:6e:f5: 8c:ac:7a:11:d5:8b:de:18:fa:67:fd:d6:1b:78:00:10:7a:e4: ad:5b:09:3f:ba:51:7a:1b:cb:4f:88:0f:14:b0:6d:91:fe:58: b0:2e:55:05:a7:67:79:3d:88:67:7c:f0:3a:57:ce:65:bd:25: 1d:e1:62:c2:97:74:8a:df:d6:86:0c:7a:67:85:cb:27:4d:65: 0a:51:81:cc:4b:05:4b:e5:cf:35:0c:9f:63:fa:3d:4f:5a:9b: 94:80:fa:65:4f:4a:c2:9c:f8:f9:cb:8a:94:3e:40:5b:65:c1: 3a:54:a4:7f:75:4b:71:5b:f6:a7:52:05:8a:f4:aa:24:e5:83: 97:31:dd:09:1b:53:dd:51:b8:5f:f1:11:bd:7b:65:5e:2d:f9: 2f:94:d1:dc:d2:72:a8:b1:42:1b:38:1f:0c:45:f4:ba:96:ca: da:64:29:ab:6b:e7:6f:e4:d1:bd:48:ae:8d:df:15:e0:67:e8: 64:c5:aa:dd:a6:4d:f4:7d:1c:50:b6:b9:65:de:b3:5d:dd:a1: 52:85:a8:e9 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUwOTExMDEwODI2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzdjNC04ODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmGYWKbwnhleWTHjwTFNbHgTbmr0KQaDXNiSFlwFmb2fjgBJDpC2NogDgT6x Gj+hWzr7u8x3eKisgr3tPo1uEhzbz+AnsPcVIQJf7PQW3UAEywA9qJHrEDmj1gFB KNW/hEPwMNAoBwol9M5YScfICsa3ZEe96SR8VdMwdEnLsZ8MZZdxgI7MkWovqEMS fudBOJyY2pWffiCDMvwlH7KHwF8zVLAORvBJNwTl4wmuS417wbGQHDp03VTX8kPZ 6ZkXO3ALaU2aNUMaCc1dhYNtVEluh8fEUgRY7eoJ84K9zf2yltR3QhpZ4KpbaJfG 3LGfMrduU4N0edVNaEGCcWo7cQIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFHDba+C1 NUQ3D0ocLMFEYezH6SOHMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCMTkvMTEwMzBBRjQ4NTU2MTFFQzlBQjgyRTIxQzRGOUFFMDIvOTIwRDdCRDA1 NDkyMTFFRkI2RDY5NDY1QzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi BAIAATAcMAwDBALKDhQDBAXKDgAwDAMEA8okCAMEAMokDDANBgkqhkiG9w0BAQsF AAOCAQEAmP5CtSLYxYtMjaJjN5ngw3odOm/kxQcPZ/kpeuBaPsJqmHOEcs9evnJM bNX8vDFQoZiVlm71jKx6EdWL3hj6Z/3WG3gAEHrkrVsJP7pRehvLT4gPFLBtkf5Y sC5VBadneT2IZ3zwOlfOZb0lHeFiwpd0it/Whgx6Z4XLJ01lClGBzEsFS+XPNQyf Y/o9T1qblID6ZU9Kwpz4+cuKlD5AW2XBOlSkf3VLcVv2p1IFivSqJOWDlzHdCRtT 3VG4X/ERvXtlXi35L5TR3NJyqLFCGzgfDEX0upbK2mQpq2vnb+TRvUiujd8V4Gfo ZMWq3aZN9H0cULa5Zd6zXd2hUoWo6Q== -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:35 2026 by rpki-client