$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/202B1B2E9CD311EFB718505EC4F9AE02.roa File: 202B1B2E9CD311EFB718505EC4F9AE02.roa (raw, json) Hash identifier: HkSiGGM/lAgy3AD/GHp2NTtP3Fp+6F/N3xri53El5io= Subject key identifier: 49:C4:7D:FA:57:84:C9:21:5B:D5:A7:48:CF:A1:54:4A:CB:88:75:77 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D86A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/202B1B2E9CD311EFB718505EC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:54:46 +0000 ROA not before: Thu 08 May 2025 16:29:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17453 IP address blocks: 202.46.196.0/22 maxlen: 22 202.46.196.0/24 maxlen: 24 202.46.197.0/24 maxlen: 24 202.46.200.0/22 maxlen: 22 202.46.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55402 (0xd86a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:29:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c3b6-ac79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:53:54:5c:92:5b:db:de:ee:20:81:12:ef: 08:b0:aa:3b:83:e1:7d:cf:8c:72:d0:a2:5a:9b:5e: 15:25:5b:e6:ae:08:b1:20:17:fc:c2:bf:ac:24:4d: 10:41:fb:ab:42:d2:eb:9b:84:1b:68:8a:83:a0:3e: 9d:3c:ac:80:bb:37:1a:f9:24:c4:67:f3:c5:0e:79: 11:78:fe:61:3d:6d:45:74:92:26:fa:7f:fc:59:b6: eb:47:fa:ca:d3:48:27:88:e6:6f:22:55:be:bb:07: d8:a5:f9:17:6a:ae:e8:ed:68:18:b9:b3:31:0e:da: 30:3e:66:eb:3b:24:1c:12:5d:47:ea:06:e4:02:2c: db:25:16:0f:88:58:30:87:58:ad:84:b0:f7:6b:6a: 02:ec:b8:f0:0b:9c:d5:09:49:df:17:8b:d0:17:77: 9e:50:f8:a9:d6:53:4b:6f:d7:b9:85:b3:b8:00:36: f2:d5:20:1a:3c:85:0d:fe:eb:36:e2:8c:64:fb:6b: ea:75:cb:92:62:87:3f:68:65:49:95:fa:e7:6a:03: 57:11:44:26:e2:29:00:3f:ea:95:35:1e:1d:0d:ae: 45:47:29:30:5c:c3:62:40:65:e1:04:ea:8a:46:b3: 9d:6d:37:d7:c2:f3:2a:0a:48:0b:55:18:bc:5d:5a: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C4:7D:FA:57:84:C9:21:5B:D5:A7:48:CF:A1:54:4A:CB:88:75:77 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/202B1B2E9CD311EFB718505EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.46.196.0-202.46.207.255 Signature Algorithm: sha256WithRSAEncryption 84:62:cc:e0:fe:aa:6f:ab:14:60:4f:7d:90:7b:60:83:86:d7: b8:99:47:d5:0f:bc:25:78:bd:77:9f:f1:5d:63:0c:7a:5c:12: f3:7c:de:7a:b4:4c:7d:48:2b:30:37:08:0c:f3:68:ac:3d:c2: 5f:98:5d:ad:cd:17:61:eb:98:e8:b7:e9:3d:c4:71:67:21:cc: 26:31:8c:04:14:96:94:dc:9b:c7:36:fe:60:55:d2:1e:fb:c8: c8:e1:3c:d1:15:2d:a0:af:a9:49:56:1a:6f:0b:e0:ac:27:22: 3c:d1:27:24:6b:3d:55:b6:15:8e:ab:cc:a8:0e:d3:c6:a6:dd: f5:1f:4c:17:41:59:4f:cc:8a:63:46:87:08:68:31:1d:b2:6a: 27:be:66:00:d5:26:ef:64:09:c1:47:49:b0:40:09:8a:a6:ad: 02:66:19:28:a7:95:5d:64:b5:89:29:ac:d3:95:3e:41:7b:67: 71:19:a2:a8:ca:fc:1b:74:ba:fe:78:e2:0b:8d:60:ca:f5:c6: 7e:90:9e:63:80:6c:c7:e1:cb:b1:b0:e0:59:61:10:10:3d:18: eb:24:d5:9c:e3:18:b1:19:40:1d:2e:48:dd:c3:31:f5:0a:17: 66:c1:a1:35:f1:c0:98:45:ed:8f:6c:13:1c:63:03:c3:35:4d: d3:7b:13:e2 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIDANhqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2Mjk1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGMzYjYtYWM3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALi2U1Rcklvb3u4ggRLvCLCqO4Phfc+MctCiWpteFSVb5q4IsSAX/MK/rCRN EEH7q0LS65uEG2iKg6A+nTysgLs3GvkkxGfzxQ55EXj+YT1tRXSSJvp//Fm260f6 ytNIJ4jmbyJVvrsH2KX5F2qu6O1oGLmzMQ7aMD5m6zskHBJdR+oG5AIs2yUWD4hY MIdYrYSw92tqAuy48Auc1QlJ3xeL0Bd3nlD4qdZTS2/XuYWzuAA28tUgGjyFDf7r NuKMZPtr6nXLkmKHP2hlSZX652oDVxFEJuIpAD/qlTUeHQ2uRUcpMFzDYkBl4QTq ikaznW0318LzKgpIC1UYvF1aAGsCAwEAAaOCAmgwggJkMB0GA1UdDgQWBBRJxH36 V4TJIVvVp0jPoVRKy4h1dzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIwMkIxQjJF OUNEMzExRUZCNzE4NTA1RUM0RjlBRTAyLnJvYTAnBggrBgEFBQcBBwEB/wQYMBYw FAQCAAEwDjAMAwQCyi7EAwQEyi7AMA0GCSqGSIb3DQEBCwUAA4IBAQCEYszg/qpv qxRgT32Qe2CDhte4mUfVD7wleL13n/FdYwx6XBLzfN56tEx9SCswNwgM82isPcJf mF2tzRdh65jot+k9xHFnIcwmMYwEFJaU3JvHNv5gVdIe+8jI4TzRFS2gr6lJVhpv C+CsJyI80Sckaz1VthWOq8yoDtPGpt31H0wXQVlPzIpjRocIaDEdsmonvmYA1Sbv ZAnBR0mwQAmKpq0CZhkop5VdZLWJKazTlT5Be2dxGaKoyvwbdLr+eOILjWDK9cZ+ kJ5jgGzH4cuxsOBZYRAQPRjrJNWc4xixGUAdLkjdwzH1ChdmwaE18cCYRe2PbBMc YwPDNU3TexPi -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:26 2026 by rpki-client