$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/41E32C9852E411EC9E19AA2FC4F9AE02.roa File: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (raw, json) Hash identifier: qtZVADdmFN9d5j6ch3m5PUYodnBui2LsIftYffK0ss4= Subject key identifier: 40:4B:3C:01:B2:F5:6B:3B:90:F3:19:32:8B:D3:2F:41:44:70:AB:C4 Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 052C Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/41E32C9852E411EC9E19AA2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:07:58 +0000 ROA not before: Sat 19 Jul 2025 00:37:24 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 16509 IP address blocks: 202.92.192.0/24 maxlen: 24 202.92.193.0/24 maxlen: 24 202.92.196.0/24 maxlen: 24 202.92.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: Jul 19 00:37:24 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4645e-7d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:d6:46:e5:03:b8:04:b8:90:50:b7:76:09: 50:e5:c5:cd:51:ec:5f:ff:00:bc:e3:79:d6:5a:40: cd:61:56:81:63:93:30:14:38:c9:fc:ed:5f:a9:99: bf:32:a0:16:b1:01:58:33:6b:20:bf:1a:d4:73:5b: d5:40:03:dc:98:2a:a6:51:7c:a9:eb:51:6c:bf:66: 1d:7d:1c:ea:d6:7c:e3:73:ca:0c:05:90:d6:a2:63: ef:ba:9e:3f:4a:d5:89:3c:2d:e5:4e:3c:11:cd:45: 1c:12:94:6c:f1:51:30:0b:1b:f1:ab:c6:00:fd:0b: a6:d9:92:66:36:a1:2d:a7:14:a1:ba:74:11:86:6a: 4e:aa:4f:25:e7:7e:16:0a:53:a2:80:85:a7:e0:f2: 5c:87:09:04:e4:c5:e4:9c:61:40:43:92:d6:df:cc: 44:0f:ea:92:c4:77:5f:73:c8:cb:de:d7:c6:57:cc: cb:5f:18:07:8b:da:a3:5f:74:4f:67:2c:99:09:d0: a1:e4:87:69:00:be:dd:2f:27:2c:30:5f:3a:68:dd: c4:ea:fc:6c:bc:98:67:ec:f4:4f:30:47:83:5b:2f: 94:cc:22:10:71:33:38:cc:75:df:c1:7a:eb:68:3d: ef:37:c7:e0:ce:39:69:17:81:e2:46:9a:70:d8:20: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4B:3C:01:B2:F5:6B:3B:90:F3:19:32:8B:D3:2F:41:44:70:AB:C4 X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/41E32C9852E411EC9E19AA2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.92.192.0/23 202.92.196.0/23 Signature Algorithm: sha256WithRSAEncryption 12:2a:0a:c0:b4:0e:48:59:a8:cd:16:22:45:bc:f6:97:68:7a: e9:f1:7a:9a:4e:79:5e:a2:57:ef:b5:36:ff:1f:3a:70:c0:52: f9:b1:8c:14:70:da:69:d3:45:38:5d:f1:65:53:06:2d:10:68: 38:ad:00:93:a7:ac:93:f4:89:a2:43:cd:20:83:34:f5:37:23: fb:79:75:ea:c6:b0:b5:46:fb:bf:31:58:5c:36:ce:89:6d:f0: b9:ae:9e:03:c5:92:22:ac:d6:67:4f:ef:1a:5e:2c:d7:a8:a4: 99:a5:55:5f:90:26:bc:3e:a4:ab:e7:6a:6b:cd:b1:6b:58:a7: 88:e5:76:51:51:75:88:66:35:c1:24:6b:b7:d9:6e:0f:5f:86: f2:0e:e8:1e:3d:b7:9b:cf:fe:06:37:e5:64:db:f3:d4:01:b5: 8e:a0:8a:02:70:17:ee:8f:5f:60:79:53:7f:ce:1a:46:ef:7e: 61:6d:cb:40:20:5e:be:a5:4d:7b:43:58:0a:e7:4a:5c:89:81: a4:44:6b:e2:ef:56:44:8c:fe:c1:38:32:a1:f1:ad:5f:5c:88: 58:36:4b:3a:e5:ac:1b:eb:dd:25:97:8a:f2:71:65:18:9b:35: c8:52:d8:cf:67:d7:87:9b:dd:d3:35:4d:54:86:9c:99:b7:6c: 04:13:87:22 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjUwNzE5MDAzNzI0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjQ1ZS03ZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRfWRuUDuAS4kFC3dglQ5cXNUexf/wC843nWWkDNYVaBY5MwFDjJ/O1fqZm/ MqAWsQFYM2sgvxrUc1vVQAPcmCqmUXyp61Fsv2YdfRzq1nzjc8oMBZDWomPvup4/ StWJPC3lTjwRzUUcEpRs8VEwCxvxq8YA/Qum2ZJmNqEtpxShunQRhmpOqk8l534W ClOigIWn4PJchwkE5MXknGFAQ5LW38xED+qSxHdfc8jL3tfGV8zLXxgHi9qjX3RP ZyyZCdCh5IdpAL7dLycsMF86aN3E6vxsvJhn7PRPMEeDWy+UzCIQcTM4zHXfwXrr aD3vN8fgzjlpF4HiRppw2CDoswIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEBLPAGy 9Ws7kPMZMovTL0FEcKvEMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNDRkYvOUE1RUMxNkM0NkZFMTFFQzk0RTNEMjRBQzRGOUFFMDIvNDFFMzJDOTg1 MkU0MTFFQzlFMTlBQTJGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBylzAAwQBylzEMA0GCSqGSIb3DQEBCwUAA4IBAQASKgrAtA5IWajN FiJFvPaXaHrp8XqaTnleolfvtTb/HzpwwFL5sYwUcNpp00U4XfFlUwYtEGg4rQCT p6yT9ImiQ80ggzT1NyP7eXXqxrC1Rvu/MVhcNs6JbfC5rp4DxZIirNZnT+8aXizX qKSZpVVfkCa8PqSr52przbFrWKeI5XZRUXWIZjXBJGu32W4PX4byDugePbebz/4G N+Vk2/PUAbWOoIoCcBfuj19geVN/zhpG735hbctAIF6+pU17Q1gK50pciYGkRGvi 71ZEjP7BODKh8a1fXIhYNks65awb690ll4rycWUYmzXIUtjPZ9eHm93TNU1UhpyZ t2wEE4ci -----END CERTIFICATE-----Generated at Mon Mar 2 04:17:59 2026 by rpki-client