$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa File: 971C7F142B3711F0BDDC4B6CC4F9AE02.roa (raw, json) Hash identifier: oF4DFbV1GyAL43F9QxSv+QWfkA3TIJh4RzbCqAKopUQ= Subject key identifier: DD:C1:17:5E:11:CB:D8:F8:E1:33:6B:79:73:26:9A:C5:E1:46:71:E4 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 378C Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa Signing time: Fri 16 Jan 2026 16:13:39 +0000 ROA not before: Fri 16 Jan 2026 16:13:38 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45305 IP address blocks: 202.47.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 15:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14220 (0x378c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 16 16:13:38 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=696a63b2-0921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:60:f1:d6:7b:7c:06:dd:9f:b6:0e:ff:e3:9c: 80:7d:f6:34:d1:cf:3a:74:46:47:d7:e6:5f:0d:ee: e9:f0:6a:33:50:d7:ff:c9:5d:b2:50:c6:72:34:48: 08:03:af:e4:f2:b9:0c:af:a3:0a:6b:d5:32:6e:ad: f8:0c:0e:2e:a1:7e:1b:cf:28:c9:03:d9:b3:e5:f4: 6c:8f:b2:19:73:47:a0:67:34:4f:95:21:20:b2:02: 9f:94:f5:ae:ab:b9:37:8d:70:f6:01:48:82:dc:5f: f8:ff:27:aa:37:fd:35:4d:9c:02:1f:eb:57:88:9a: 37:b0:33:35:28:a8:9f:93:67:59:24:ce:00:3b:09: 50:0b:f8:07:73:90:96:ef:27:c9:1b:62:be:dc:ef: 3e:cb:f4:63:25:bc:88:79:c5:5c:44:be:31:28:55: d6:96:51:52:8d:63:87:29:c5:aa:7c:ea:a2:cd:8e: cb:5f:8e:5d:f6:a4:d0:44:f1:0d:b4:88:d9:77:b9: 8a:49:af:85:2e:c3:ad:01:c7:d8:ee:a4:33:6c:ee: 5b:6f:ed:ec:24:e5:d3:c0:69:74:a5:65:49:e5:8f: d1:1a:ad:49:c9:1d:2a:26:62:ef:c6:62:20:a1:4e: 15:65:c1:b8:bd:c5:e4:f5:ee:a8:96:2a:53:fe:1a: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C1:17:5E:11:CB:D8:F8:E1:33:6B:79:73:26:9A:C5:E1:46:71:E4 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/971C7F142B3711F0BDDC4B6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.188.0/23 Signature Algorithm: sha256WithRSAEncryption 98:81:15:59:60:33:6e:24:b0:fa:aa:08:24:94:48:da:fc:24: eb:bf:1d:f3:07:40:f6:c2:f7:bf:9a:3d:08:8e:05:4e:7e:d3: 9a:3c:e9:51:8a:14:12:28:17:5a:02:55:bb:9d:db:12:d5:fe: ce:b2:47:de:7c:9c:07:41:94:f0:02:a8:8a:17:82:0c:4e:40: 26:f8:11:9a:ec:02:e4:a4:00:6a:7f:01:1b:1b:d6:c3:fb:f5: f6:66:d3:c8:36:74:1e:2c:e3:48:21:30:f9:4b:36:d6:bc:99: a3:17:bf:30:ab:e0:ab:40:4c:16:f3:f9:51:4e:e0:2f:ec:77: 17:53:75:34:64:d3:5d:0d:c5:22:3a:48:30:a7:c2:2b:49:53: 61:e7:5d:35:7d:1a:c9:81:63:c4:9e:e4:d5:15:3c:8a:5a:8f: 80:ce:1b:72:d6:ab:16:72:18:f9:78:d1:b4:62:50:3d:ec:d3: a4:5e:ab:a0:54:34:8c:9d:ef:b2:7c:c9:10:33:84:a8:6b:13: fe:cb:af:b4:a4:5f:1e:c2:1b:21:11:6e:9c:0d:49:f0:98:c1: fd:a7:9c:82:53:4c:63:a9:63:41:90:d7:9b:20:92:96:68:19: 04:61:94:fc:30:4c:66:d4:80:a0:cf:0b:91:c7:c5:9c:af:49: 1a:41:3b:f3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICN4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzM4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZhNjNiMi0wOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk2Dx1nt8Bt2ftg7/45yAffY00c86dEZH1+ZfDe7p8GozUNf/yV2yUMZyNEgI A6/k8rkMr6MKa9Uybq34DA4uoX4bzyjJA9mz5fRsj7IZc0egZzRPlSEgsgKflPWu q7k3jXD2AUiC3F/4/yeqN/01TZwCH+tXiJo3sDM1KKifk2dZJM4AOwlQC/gHc5CW 7yfJG2K+3O8+y/RjJbyIecVcRL4xKFXWllFSjWOHKcWqfOqizY7LX45d9qTQRPEN tIjZd7mKSa+FLsOtAcfY7qQzbO5bb+3sJOXTwGl0pWVJ5Y/RGq1JyR0qJmLvxmIg oU4VZcG4vcXk9e6olipT/hprVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN3BF14R y9j44TNreXMmmsXhRnHkMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvOTcxQzdGMTQy QjM3MTFGMEJEREM0QjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKL7wwDQYJKoZIhvcNAQELBQADggEBAJiBFVlgM24ksPqq CCSUSNr8JOu/HfMHQPbC97+aPQiOBU5+05o86VGKFBIoF1oCVbud2xLV/s6yR958 nAdBlPACqIoXggxOQCb4EZrsAuSkAGp/ARsb1sP79fZm08g2dB4s40ghMPlLNta8 maMXvzCr4KtATBbz+VFO4C/sdxdTdTRk010NxSI6SDCnwitJU2HnXTV9GsmBY8Se 5NUVPIpaj4DOG3LWqxZyGPl40bRiUD3s06Req6BUNIyd77J8yRAzhKhrE/7Lr7Sk Xx7CGyERbpwNSfCYwf2nnIJTTGOpY0GQ15sgkpZoGQRhlPwwTGbUgKDPC5HHxZyv SRpBO/M= -----END CERTIFICATE-----Generated at Mon Mar 2 03:42:46 2026 by rpki-client