$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/02A3523ABC5C11EF9108934FC4F9AE02.roa File: 02A3523ABC5C11EF9108934FC4F9AE02.roa (raw, json) Hash identifier: q8UDUK+lCCiuMwwyo6M2XjilkBBpUcYJdEaZaA3MWC4= Subject key identifier: 9D:A9:D9:0C:1E:5C:94:1E:A3:81:F1:58:A6:28:DD:59:63:A7:D5:A4 Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: 01B7 Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/02A3523ABC5C11EF9108934FC4F9AE02.roa Signing time: Wed 09 Sep 2026 04:55:12 +0000 ROA not before: Wed 09 Sep 2026 04:55:11 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 16509 IP address blocks: 203.0.207.0/24 maxlen: 24 203.0.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Validity Not Before: Sep 9 04:55:11 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa0e6af-94fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:65:e0:7d:fc:ce:13:20:c4:2c:cd:07:8b: 2d:e2:f9:61:89:ac:0b:f2:ca:d1:4d:c5:59:89:c1: fa:36:f8:b1:38:ae:d8:a4:66:f3:aa:17:f0:e2:d6: 7f:b0:4e:79:e6:fc:1b:f2:9d:d6:b2:d4:07:d0:62: 1f:ff:86:bb:6a:72:e4:c2:29:fc:86:d2:30:82:0c: 55:1f:eb:7b:c8:15:13:4a:eb:60:e3:15:30:04:d8: 57:4d:dd:bc:bc:f4:7d:20:cb:60:1b:5f:d1:5b:83: d7:95:01:5c:82:92:7b:61:ca:80:1e:77:1a:56:f1: 42:93:a3:10:15:cb:bd:f3:50:33:7e:84:69:f7:fe: 04:8f:07:b7:33:c2:15:2d:15:20:78:4f:24:0f:da: 36:e2:2d:36:05:5b:4b:9c:02:63:70:1e:aa:d0:8c: c9:a4:a5:26:2a:ff:22:89:aa:ed:1d:5b:76:d7:ef: 58:4a:b5:ad:a3:d0:13:28:a5:39:f8:f9:63:59:36: f5:b8:0b:93:d2:66:10:64:1c:7d:06:37:41:91:a9: 62:f6:3d:70:7f:d3:8f:3b:94:31:c2:5b:d1:b2:e2: 4a:0e:29:ec:1f:fc:f3:f3:d4:d1:be:75:33:2a:8d: 43:54:d6:1b:d4:53:12:eb:18:b5:0b:26:44:ca:75: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A9:D9:0C:1E:5C:94:1E:A3:81:F1:58:A6:28:DD:59:63:A7:D5:A4 X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/02A3523ABC5C11EF9108934FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.0.207.0-203.0.208.255 Signature Algorithm: sha256WithRSAEncryption 60:83:af:72:f6:e1:1c:f4:74:82:25:c2:79:44:ad:c3:a0:d0: bc:2e:35:30:e3:6c:e7:64:f4:05:18:25:4c:12:48:40:96:ac: 64:01:8f:26:6a:db:3b:31:d8:db:40:11:6c:79:15:3e:2f:44: c5:49:69:4b:82:1b:1e:a8:df:3d:21:40:73:44:83:b1:13:70: 92:a0:c0:29:15:be:9b:62:d8:56:f2:9f:bc:51:f7:7c:d2:74: af:74:39:e1:17:e3:0c:a8:cd:33:1c:42:d3:25:52:e9:20:2d: 3d:09:4a:9f:e2:98:2d:0d:7c:89:cf:47:c1:c9:b6:dd:76:f5: 85:b5:c7:d4:b9:28:a5:c7:7c:f1:1e:50:b1:af:1d:e2:0c:b7: 94:77:00:b5:4e:fa:a2:a6:12:93:13:26:dc:10:bc:bf:79:b5: 19:60:5b:46:0e:dc:dc:b8:02:08:30:4d:c6:66:f0:90:7a:0e: 88:9a:e7:81:3f:73:e5:b1:1a:c3:9e:6c:0d:8d:72:8d:58:a4: 95:7b:b9:b0:1c:29:89:c8:7a:51:4e:60:d9:d7:be:4a:f7:eb: 14:8c:b9:fd:16:0f:0c:b7:56:a6:f8:31:cc:b8:64:89:39:78: 1b:94:4e:72:fd:d7:14:1d:3b:01:e6:1f:e0:f5:e5:cb:f1:af: f4:dd:41:4e -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF QzJBMzM1RDIwHhcNMjYwOTA5MDQ1NTExWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwZTZhZi05NGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWJl4H38zhMgxCzNB4st4vlhiawL8srRTcVZicH6NvixOK7YpGbzqhfw4tZ/ sE555vwb8p3WstQH0GIf/4a7anLkwin8htIwggxVH+t7yBUTSutg4xUwBNhXTd28 vPR9IMtgG1/RW4PXlQFcgpJ7YcqAHncaVvFCk6MQFcu981AzfoRp9/4Ejwe3M8IV LRUgeE8kD9o24i02BVtLnAJjcB6q0IzJpKUmKv8iiartHVt21+9YSrWto9ATKKU5 +PljWTb1uAuT0mYQZBx9BjdBkali9j1wf9OPO5QxwlvRsuJKDinsH/zz89TRvnUz Ko1DVNYb1FMS6xi1CyZEynXIPQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFJ2p2Qwe XJQeo4HxWKYo3Vljp9WkMB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNEMTIvQUI4OTM0RjI1MkM0MTFFRjhEREZENTNGQzRGOUFFMDIvMDJBMzUyM0FC QzVDMTFFRjkxMDg5MzRGQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBADLAM8DBADLANAwDQYJKoZIhvcNAQELBQADggEBAGCDr3L24Rz0 dIIlwnlErcOg0LwuNTDjbOdk9AUYJUwSSECWrGQBjyZq2zsx2NtAEWx5FT4vRMVJ aUuCGx6o3z0hQHNEg7ETcJKgwCkVvpti2Fbyn7xR93zSdK90OeEX4wyozTMcQtMl UukgLT0JSp/imC0NfInPR8HJtt129YW1x9S5KKXHfPEeULGvHeIMt5R3ALVO+qKm EpMTJtwQvL95tRlgW0YO3Ny4AggwTcZm8JB6Doia54E/c+WxGsOebA2Nco1YpJV7 ubAcKYnIelFOYNnXvkr36xSMuf0WDwy3Vqb4Mcy4ZIk5eBuUTnL91xQdOwHmH+D1 5cvxr/TdQU4= -----END CERTIFICATE-----Generated at Mon Sep 21 21:53:07 2026 by rpki-client