$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa File: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (raw, json) Hash identifier: Nj2SWfF08+NWeNfqPzGe0G/AhkrzTZtBpN7F7NKz6A0= Subject key identifier: 81:14:BE:D8:0C:92:1D:B8:97:BA:D2:3A:4B:98:B5:AF:E6:12:14:2F Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Certificate serial: 01B8 Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:09:37 +0000 ROA not before: Wed 04 Feb 2026 17:34:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136418 IP address blocks: 202.47.164.0/23 maxlen: 23 202.47.164.0/24 maxlen: 24 202.47.165.0/24 maxlen: 24 2001:df3:2440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Validity Not Before: Feb 4 17:34:22 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a456b1-a376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:18:b7:41:a5:4f:87:14:de:94:c1:ef:b8:ef: b3:eb:4a:0a:50:10:f1:f9:c9:1c:db:16:aa:04:7c: 0d:82:aa:85:d5:84:e6:2f:7f:71:f7:76:08:b5:d6: a7:8d:75:ec:d4:98:bf:fe:4f:2b:35:18:b6:38:93: 61:47:6c:49:c4:f6:33:a0:01:89:36:be:a7:c5:88: ed:70:cd:98:84:8f:b7:e2:78:f2:e8:fb:95:a3:c3: 5d:3f:02:d1:58:64:f0:8e:67:c4:ba:d8:43:83:71: a3:f3:45:d0:c3:a2:38:bb:b0:3c:70:41:45:29:2d: 75:c9:46:a9:43:61:59:80:8c:76:ac:41:ef:2c:8b: 0e:ae:a6:9f:e2:71:3f:ff:c8:2c:9a:46:39:0e:8f: 86:87:db:3e:9c:c1:13:81:8c:5a:9f:eb:d4:35:6d: f3:a4:05:ca:8e:a0:98:93:78:ab:c3:aa:78:37:80: fb:8d:03:47:97:5a:a4:e0:65:2f:8f:11:5f:7a:b2: c0:ba:65:7b:dd:fb:d4:a8:41:28:d2:0b:29:2d:2d: c7:b8:1d:99:2c:4d:da:c1:87:05:30:56:07:eb:1a: 4c:88:dd:fb:89:ce:ec:0e:e0:aa:9b:2b:67:62:63: 8b:ef:92:ca:b1:75:47:ae:24:9b:b1:85:40:ba:67: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:14:BE:D8:0C:92:1D:B8:97:BA:D2:3A:4B:98:B5:AF:E6:12:14:2F X509v3 Authority Key Identifier: keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.47.164.0/23 IPv6: 2001:df3:2440::/48 Signature Algorithm: sha256WithRSAEncryption 9b:ca:20:cd:d4:7e:9b:1a:2f:c8:c3:db:8a:db:34:cb:15:41: 4d:6c:59:66:0b:13:c7:4a:b1:97:79:98:b0:06:a6:cf:4d:23: 3b:99:51:33:e9:62:70:57:4d:ba:d1:44:2c:c8:fc:32:69:20: ac:ca:33:11:36:a1:55:ec:76:48:d7:a1:62:26:1a:96:83:09: c6:b0:90:be:e6:ad:87:b4:a0:7b:c8:69:2a:44:5d:ae:3b:ee: a1:51:f2:bf:46:5f:ce:c5:7b:ac:e4:f8:d7:46:35:ac:48:11: 91:14:6a:96:34:53:60:14:20:9e:13:d3:8f:aa:27:8e:7f:7b: 0c:20:89:9c:90:76:7f:81:64:57:fb:73:24:12:8a:c8:6f:45: 08:d3:2b:83:87:29:ae:ca:3c:cb:3d:62:6a:70:77:1a:ac:56: b7:22:9b:8d:1d:ca:5a:38:3b:9b:59:e0:a3:33:78:d9:0b:3c: 62:36:93:86:d0:f2:cf:8b:e1:dd:1b:d2:59:94:db:2a:31:4f: f4:5c:63:5a:48:26:6d:2d:5e:29:eb:4c:34:62:77:d2:f1:02: 25:88:f0:6f:16:09:3d:f8:a4:19:dd:c1:5b:8c:af:7b:0c:d5: 2b:1e:55:d0:bc:bf:fd:59:96:4f:8a:71:f2:8e:01:d1:8a:0d: 1f:18:d0:51 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDRTExMTAvBgNVBAUTKDNDRDcxNTUyQUZBQTAxMzhGOUE2NEUwMTYwRUVGMDYw OTYwNjUzMjMwHhcNMjYwMjA0MTczNDIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTZiMS1hMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxi3QaVPhxTelMHvuO+z60oKUBDx+ckc2xaqBHwNgqqF1YTmL39x93YItdan jXXs1Ji//k8rNRi2OJNhR2xJxPYzoAGJNr6nxYjtcM2YhI+34njy6PuVo8NdPwLR WGTwjmfEuthDg3Gj80XQw6I4u7A8cEFFKS11yUapQ2FZgIx2rEHvLIsOrqaf4nE/ /8gsmkY5Do+Gh9s+nMETgYxan+vUNW3zpAXKjqCYk3irw6p4N4D7jQNHl1qk4GUv jxFferLAumV73fvUqEEo0gspLS3HuB2ZLE3awYcFMFYH6xpMiN37ic7sDuCqmytn YmOL75LKsXVHriSbsYVAumdyuwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIEUvtgM kh24l7rSOkuYta/mEhQvMB8GA1UdIwQYMBaAFDzXFVKvqgE4+aZOAWDu8GCWBlMj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkNFMS9FODgxRThFQzgy QjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFUajVwazRCWU83d1lKWUdV eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOY1ZVcS1xQVRqNXBrNEJZTzd3WUpZR1V5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTZDRTEvRTg4MUU4RUM4MkI2MTFFRTlCRkMwNjFEQzRGOUFFMDIvNEY3Q0ZCOUE4 MkI3MTFFRTk5N0VCOTJBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQByi+kMA8EAgACMAkDBwAgAQ3zJEAwDQYJKoZIhvcNAQELBQADggEB AJvKIM3UfpsaL8jD24rbNMsVQU1sWWYLE8dKsZd5mLAGps9NIzuZUTPpYnBXTbrR RCzI/DJpIKzKMxE2oVXsdkjXoWImGpaDCcawkL7mrYe0oHvIaSpEXa477qFR8r9G X87Fe6zk+NdGNaxIEZEUapY0U2AUIJ4T04+qJ45/ewwgiZyQdn+BZFf7cyQSishv RQjTK4OHKa7KPMs9YmpwdxqsVrcim40dylo4O5tZ4KMzeNkLPGI2k4bQ8s+L4d0b 0lmU2yoxT/RcY1pIJm0tXinrTDRid9LxAiWI8G8WCT34pBndwVuMr3sM1SseVdC8 v/1Zlk+KcfKOAdGKDR8Y0FE= -----END CERTIFICATE-----Generated at Mon Mar 2 18:06:44 2026 by rpki-client