$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/13C01CC0C4AD11EA9E35F20AC4F9AE02.roa File: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (raw, json) Hash identifier: qwQKPoIUFxOPN3MeCcCPfp5jviDrGHMY5L0x8rUXkG0= Subject key identifier: 62:E9:A9:10:90:6D:5A:09:5A:C0:F9:9D:B1:C7:12:32:5E:28:A8:E0 Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 108E Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/13C01CC0C4AD11EA9E35F20AC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:27:03 +0000 ROA not before: Thu 02 Oct 2025 17:47:10 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9268 IP address blocks: 202.87.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4238 (0x108e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: Oct 2 17:47:10 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a468d6-3317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:e4:a1:44:54:1d:29:8c:38:68:61:00:11: ec:45:38:e0:ee:00:36:17:ff:e3:49:96:21:3f:45: bb:3d:d4:1c:90:9d:1c:e6:a5:d7:d3:4a:bd:a3:9e: bd:b2:b2:da:22:02:26:d2:a6:0b:4c:37:5a:2f:22: ba:72:8a:1e:23:e0:08:ad:ee:62:ee:81:e2:97:8f: 69:77:3e:17:81:2d:b7:09:f2:fe:41:88:69:d3:13: da:24:7d:ec:d4:0e:aa:45:59:ff:12:1b:77:16:6d: 03:1b:79:bb:df:d0:9d:45:3c:59:08:b3:6b:ef:91: 0e:36:b4:4a:90:3f:15:07:be:45:95:70:97:1f:2f: 98:c0:52:d7:28:ff:88:ae:a2:87:97:f2:3d:d7:e1: f7:52:d7:70:a1:fb:fc:34:c1:bc:0f:52:4d:3d:25: 8a:2f:8a:e3:df:8a:93:e2:6a:f5:23:d6:27:85:5d: 3a:2b:83:fd:82:48:41:89:f2:4e:f4:35:0c:6c:32: de:7d:7e:84:36:c4:d9:f3:33:d6:95:53:52:b2:2a: fd:2a:84:b1:95:30:c9:47:c4:a1:c4:fd:c7:39:5e: 76:86:15:9d:c6:e5:a0:83:6a:8a:90:88:42:a7:6d: d1:5c:14:5c:32:3d:a0:d8:32:77:03:5f:ef:32:b9: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E9:A9:10:90:6D:5A:09:5A:C0:F9:9D:B1:C7:12:32:5E:28:A8:E0 X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/13C01CC0C4AD11EA9E35F20AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.87.4.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:dd:b9:24:3d:42:f5:a6:9d:b5:12:6c:02:b1:90:4e:2b:9c: f3:b1:65:98:29:c7:c9:97:3d:bf:0b:3e:51:7f:f1:28:7c:39: 9b:57:57:cf:e8:22:7e:16:a7:cd:f9:1e:fa:bf:0f:5a:ed:e9: c0:ab:fb:d4:11:c5:ba:1c:5e:2b:53:aa:86:fc:aa:74:f5:a0: 1f:9b:ef:df:b0:30:a3:f7:62:8c:6b:cb:ea:8b:90:ed:5e:4e: db:bc:8c:7b:d6:96:66:95:bc:27:3b:ec:76:a7:09:54:25:2b: 34:b6:4e:b7:2a:77:6f:d6:a1:ea:bb:e9:06:71:05:8b:ab:94: ed:78:d8:13:be:48:8f:4b:a4:96:a0:df:0c:db:38:7b:66:3e: ce:f6:a7:64:e2:aa:b5:b8:f5:69:bd:3a:4e:40:9c:87:7a:f7: 57:51:85:36:bf:a2:f4:fc:65:d5:ef:22:2b:f8:c4:6b:d4:1c: 9a:a0:35:30:e4:95:e9:cb:2f:08:e1:ac:67:16:df:37:0f:4e: 32:67:11:93:d0:df:dd:06:7d:57:b2:1c:1f:0c:5a:db:20:1e: 92:b7:92:93:80:31:ca:48:fd:76:dc:48:94:d9:8b:3a:9e:6c: c2:4d:0f:18:0f:13:d1:2f:8c:a2:96:c5:8b:7a:f9:63:f4:91: b2:0f:9b:96 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjUxMDAyMTc0NzEwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjhkNi0zMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUnkoURUHSmMOGhhABHsRTjg7gA2F//jSZYhP0W7PdQckJ0c5qXX00q9o569 srLaIgIm0qYLTDdaLyK6cooeI+AIre5i7oHil49pdz4XgS23CfL+QYhp0xPaJH3s 1A6qRVn/Eht3Fm0DG3m739CdRTxZCLNr75EONrRKkD8VB75FlXCXHy+YwFLXKP+I rqKHl/I91+H3Utdwofv8NMG8D1JNPSWKL4rj34qT4mr1I9YnhV06K4P9gkhBifJO 9DUMbDLefX6ENsTZ8zPWlVNSsir9KoSxlTDJR8ShxP3HOV52hhWdxuWgg2qKkIhC p23RXBRcMj2g2DJ3A1/vMrnTOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGLpqRCQ bVoJWsD5nbHHEjJeKKjgMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQzMzUvMzQyRDIyMjg1MUQxMTFFOUFGMUZGNzNDQzRGOUFFMDIvMTNDMDFDQzBD NEFEMTFFQTlFMzVGMjBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCylcEMA0GCSqGSIb3DQEBCwUAA4IBAQB+3bkkPUL1pp21EmwCsZBO K5zzsWWYKcfJlz2/Cz5Rf/EofDmbV1fP6CJ+FqfN+R76vw9a7enAq/vUEcW6HF4r U6qG/Kp09aAfm+/fsDCj92KMa8vqi5DtXk7bvIx71pZmlbwnO+x2pwlUJSs0tk63 Kndv1qHqu+kGcQWLq5TteNgTvkiPS6SWoN8M2zh7Zj7O9qdk4qq1uPVpvTpOQJyH evdXUYU2v6L0/GXV7yIr+MRr1ByaoDUw5JXpyy8I4axnFt83D04yZxGT0N/dBn1X shwfDFrbIB6St5KTgDHKSP123EiU2Ys6nmzCTQ8YDxPRL4yilsWLevlj9JGyD5uW -----END CERTIFICATE-----Generated at Mon Mar 2 04:30:33 2026 by rpki-client