$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/02B9688489EF11F0850AA959C4F9AE02.roa File: 02B9688489EF11F0850AA959C4F9AE02.roa (raw, json) Hash identifier: g6Ap4btn5Dr6jvAfzwN9O4vlhSQj8j0AjLOLHcxiHRE= Subject key identifier: 21:62:A6:88:DC:F2:C7:89:41:D3:23:AB:40:B4:F2:50:8C:48:C7:31 Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Certificate serial: 010C Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/02B9688489EF11F0850AA959C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:54:31 +0000 ROA not before: Fri 05 Sep 2025 00:26:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 4658 IP address blocks: 202.89.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Validity Not Before: Sep 5 00:26:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a3e2a7-998e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:59:57:49:a0:60:c8:f4:18:30:fd:47:1d:5a: ea:58:72:be:2b:8e:5a:d5:e7:6c:04:36:a6:78:7b: f2:37:95:cd:21:2a:e3:3a:83:88:d5:c8:cb:09:7b: bb:13:9d:35:32:f6:fa:b2:27:32:c5:c0:90:d1:05: 55:e0:88:bb:ec:c6:be:5e:52:82:1b:5a:8b:81:f2: 6f:f8:54:9d:be:82:1c:df:67:6f:df:56:18:73:38: 6c:59:e2:b9:bc:f8:e8:4a:9b:6c:0b:5a:44:94:c1: f9:d9:aa:a3:b7:ae:0b:dd:50:f1:20:e8:5c:d3:7b: 2b:6e:65:88:e9:32:23:a4:53:31:c3:ca:57:2b:c8: 60:fa:24:9e:0b:16:a5:95:90:f0:bd:ff:b3:8f:91: a0:87:86:6a:48:d9:2a:59:6f:21:ef:a2:c5:5e:42: fc:47:02:ce:f6:9e:20:b7:2d:b8:ad:62:9f:27:0a: c7:16:45:35:b2:ec:e4:ad:13:be:58:a7:9a:1a:e8: 1e:0e:d1:82:4b:b6:43:65:e3:75:a8:a9:f1:63:ee: 89:61:15:2f:01:2b:2a:91:f0:77:33:2b:21:35:0a: 55:d4:c7:04:2f:1e:e3:ac:ee:d9:68:46:31:28:fa: 86:88:21:d1:25:16:5b:ee:cd:18:f9:60:7b:18:1c: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:62:A6:88:DC:F2:C7:89:41:D3:23:AB:40:B4:F2:50:8C:48:C7:31 X509v3 Authority Key Identifier: keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/02B9688489EF11F0850AA959C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.89.253.0/24 Signature Algorithm: sha256WithRSAEncryption 82:b6:0c:4c:80:28:4a:43:ec:16:6d:cc:bd:73:e6:13:a3:54: 67:27:16:90:66:cd:a2:36:9c:e8:a4:5f:4b:dd:10:1f:36:85: ec:62:23:2e:de:b6:ab:c7:d5:f1:91:a5:e8:7f:ef:89:95:a7: b9:1f:80:c0:5b:be:a6:0d:6f:87:a7:46:94:14:98:00:bc:1f: ea:4a:b1:1b:f8:5f:9f:21:38:4d:17:68:ae:d9:43:6e:c1:3a: ae:11:a3:c7:28:da:55:52:a4:02:0f:8c:f7:00:bf:fe:2d:48: 69:c3:1b:3a:c2:32:b9:52:d1:00:15:d3:9e:ad:4b:6c:0f:12: f2:cd:95:6c:a0:ba:66:f9:f2:fa:2a:67:19:52:9c:fc:fe:b4: a5:bc:c3:2c:a5:5b:d2:1d:d3:23:52:13:68:f9:d0:d3:93:43: 7f:36:7e:53:d7:bf:b4:07:02:49:87:5a:fb:97:13:f2:16:39: f1:81:e0:46:71:09:5c:cc:19:2b:b8:25:cc:7d:8f:f9:14:94: d8:c6:3c:f7:b3:a1:39:b1:fc:d3:f6:70:71:76:d6:2c:19:d3: 51:15:97:34:77:13:69:00:19:37:87:f8:35:49:74:5f:06:34: 24:45:d8:5f:37:11:3f:5d:ee:48:d5:ac:85:09:41:43:0a:ea: d0:b1:6e:b6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzODgxMTAvBgNVBAUTKDNDMzc3NUQ5Rjg3RjBFQUEyOTY4NjY3NzRFQTYyRjYy NzREMDY2Q0IwHhcNMjUwOTA1MDAyNjQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTJhNy05OThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8llXSaBgyPQYMP1HHVrqWHK+K45a1edsBDameHvyN5XNISrjOoOI1cjLCXu7 E501Mvb6sicyxcCQ0QVV4Ii77Ma+XlKCG1qLgfJv+FSdvoIc32dv31YYczhsWeK5 vPjoSptsC1pElMH52aqjt64L3VDxIOhc03srbmWI6TIjpFMxw8pXK8hg+iSeCxal lZDwvf+zj5Ggh4ZqSNkqWW8h76LFXkL8RwLO9p4gty24rWKfJwrHFkU1suzkrRO+ WKeaGugeDtGCS7ZDZeN1qKnxY+6JYRUvASsqkfB3MyshNQpV1McELx7jrO7ZaEYx KPqGiCHRJRZb7s0Y+WB7GBwq4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCFipojc 8seJQdMjq0C08lCMSMcxMB8GA1UdIwQYMBaAFDw3ddn4fw6qKWhmd06mL2J00GbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM4OC9FMEU3MzYwQTg5 RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rxb3BhR1ozVHFZdlluVFFa c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BEZDEyZmhfRHFvcGFHWjNUcVl2WW5UUVpzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTMzODgvRTBFNzM2MEE4OUY0MTFFRkE5MTNCOTUyQzRGOUFFMDIvMDJCOTY4ODQ4 OUVGMTFGMDg1MEFBOTU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyln9MA0GCSqGSIb3DQEBCwUAA4IBAQCCtgxMgChKQ+wWbcy9c+YT o1RnJxaQZs2iNpzopF9L3RAfNoXsYiMu3rarx9XxkaXof++Jlae5H4DAW76mDW+H p0aUFJgAvB/qSrEb+F+fIThNF2iu2UNuwTquEaPHKNpVUqQCD4z3AL/+LUhpwxs6 wjK5UtEAFdOerUtsDxLyzZVsoLpm+fL6KmcZUpz8/rSlvMMspVvSHdMjUhNo+dDT k0N/Nn5T17+0BwJJh1r7lxPyFjnxgeBGcQlczBkruCXMfY/5FJTYxjz3s6E5sfzT 9nBxdtYsGdNRFZc0dxNpABk3h/g1SXRfBjQkRdhfNxE/Xe5I1ayFCUFDCurQsW62 -----END CERTIFICATE-----Generated at Tue Mar 3 00:58:58 2026 by rpki-client