$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/0A1FAC405BB211EEAD06B243C4F9AE02.roa File: 0A1FAC405BB211EEAD06B243C4F9AE02.roa (raw, json) Hash identifier: cLEGJuuOutpOBPsuC1eSdRC04oAPN6e0TRfgYBt8aGU= Subject key identifier: BB:88:9D:3F:BE:BF:26:C7:38:A6:39:0A:51:4C:0B:BD:38:53:41:4E Certificate issuer: /CN=A9197FDB/serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D Certificate serial: 0620 Authority key identifier: E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/0A1FAC405BB211EEAD06B243C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:16:15 +0000 ROA not before: Wed 24 Dec 2025 22:19:51 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 4787 IP address blocks: 202.179.136.0/24 maxlen: 24 202.179.137.0/24 maxlen: 24 202.179.138.0/24 maxlen: 24 202.179.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FDB, serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D Validity Not Before: Dec 24 22:19:51 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44a2f-1f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:13:e9:2f:ad:73:c9:78:43:b3:74:79:48:c1: 0b:cc:6a:55:82:ab:89:e7:64:4c:63:e3:0f:61:45: f2:5c:09:7f:44:ed:b5:55:2e:44:a1:36:8d:9a:41: c5:75:0b:c1:d9:10:0e:c7:35:2a:52:f9:b6:8d:9d: 8a:b4:82:27:d2:09:0b:55:12:9e:87:54:93:b5:40: 69:85:d3:d0:10:e6:52:2f:58:2b:05:e1:05:99:c8: b2:a3:35:d1:77:79:1e:65:27:a5:8f:39:81:01:36: 8b:e1:12:80:bb:7e:65:8b:83:bc:7a:0a:e9:97:35: 41:83:32:47:fb:fe:97:65:f6:eb:57:17:72:4c:56: 66:0c:f2:eb:1d:b2:aa:b7:3f:20:3b:70:63:4c:87: 8b:e7:21:7f:c9:a9:49:ff:41:d3:b5:da:6b:e3:c8: bf:1f:53:38:63:2d:ec:a1:93:3a:67:a1:49:00:bb: a6:9a:34:7f:6c:6c:ed:62:1c:c4:e5:e4:dc:5f:85: 4d:5a:c1:f3:79:ba:bb:46:35:2d:a3:ff:5a:bf:ad: bf:37:70:88:7e:da:6f:9e:9a:f9:9b:26:73:b0:87: b9:f5:47:55:84:1e:56:d4:21:44:c3:c9:07:50:18: 4c:32:7b:3d:eb:26:4d:00:4f:eb:1a:f5:cf:2c:66: d9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:9D:3F:BE:BF:26:C7:38:A6:39:0A:51:4C:0B:BD:38:53:41:4E X509v3 Authority Key Identifier: keyid:E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/0A1FAC405BB211EEAD06B243C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.179.136.0/22 Signature Algorithm: sha256WithRSAEncryption b5:78:7d:e0:e6:54:f2:56:b1:bd:bc:d8:08:9b:53:07:13:d4: 0b:b0:c8:d0:65:b7:eb:95:f9:39:e0:33:bf:47:bc:85:b6:a2: e0:42:af:4e:c9:81:8f:ae:5b:78:7b:7b:51:5f:33:dd:9e:41: c6:ce:a4:d6:82:71:42:22:ec:1c:1d:26:3e:65:b6:8c:df:78: 4c:2f:24:22:c5:fc:a0:11:97:93:a0:a0:92:74:c1:85:89:4c: 5f:8c:78:9e:76:36:5e:51:ba:80:66:9e:5a:a6:13:76:7e:1b: 4e:ae:50:3f:2e:9c:2c:4c:b0:e4:df:1b:6b:35:9e:dc:45:7e: f3:99:cb:da:8f:53:83:90:75:7d:fa:8e:26:10:76:28:e5:a2: 9a:d5:3d:2d:2b:19:2b:9d:0e:fd:d4:77:93:70:4b:ff:73:33: 15:a7:43:fa:2f:c4:75:ac:12:af:2a:24:fe:d3:db:4f:ec:b6: b7:bd:5f:23:e3:73:dd:bc:a4:4d:01:4c:d0:75:7d:f7:d6:9a: b9:c5:8b:53:ae:20:52:bb:5a:f5:d5:19:14:e8:7c:1b:9a:ad: 44:90:f8:4a:8c:f7:e3:a4:b5:4f:11:37:d8:12:ac:0e:64:b3: e1:08:6b:e2:aa:41:17:01:be:d2:39:b9:72:c1:8f:d1:40:d4: 7a:54:3b:e0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGREIxMTAvBgNVBAUTKEUwMDI1QkY5MzJFNzE2RTFBMUY4QUY5MDEwMjExQzQx MTA4NEZDOUQwHhcNMjUxMjI0MjIxOTUxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGEyZi0xZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkhPpL61zyXhDs3R5SMELzGpVgquJ52RMY+MPYUXyXAl/RO21VS5EoTaNmkHF dQvB2RAOxzUqUvm2jZ2KtIIn0gkLVRKeh1STtUBphdPQEOZSL1grBeEFmciyozXR d3keZSeljzmBATaL4RKAu35li4O8egrplzVBgzJH+/6XZfbrVxdyTFZmDPLrHbKq tz8gO3BjTIeL5yF/yalJ/0HTtdpr48i/H1M4Yy3soZM6Z6FJALummjR/bGztYhzE 5eTcX4VNWsHzebq7RjUto/9av62/N3CIftpvnpr5myZzsIe59UdVhB5W1CFEw8kH UBhMMns96yZNAE/rGvXPLGbZTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLuInT++ vybHOKY5ClFMC704U0FOMB8GA1UdIwQYMBaAFOACW/ky5xbhofivkBAhHEEQhPyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZEQi82NTdFNDA3NERB MzYxMUVCODRFNkEzNDlDNEY5QUUwMi80QUpiLVRMbkZ1R2gtSy1RRUNFY1FSQ0Vf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRBSmItVExuRnVHaC1LLVFFQ0VjUVJDRV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTdGREIvNjU3RTQwNzREQTM2MTFFQjg0RTZBMzQ5QzRGOUFFMDIvMEExRkFDNDA1 QkIyMTFFRUFEMDZCMjQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyrOIMA0GCSqGSIb3DQEBCwUAA4IBAQC1eH3g5lTyVrG9vNgIm1MH E9QLsMjQZbfrlfk54DO/R7yFtqLgQq9OyYGPrlt4e3tRXzPdnkHGzqTWgnFCIuwc HSY+ZbaM33hMLyQixfygEZeToKCSdMGFiUxfjHiedjZeUbqAZp5aphN2fhtOrlA/ LpwsTLDk3xtrNZ7cRX7zmcvaj1ODkHV9+o4mEHYo5aKa1T0tKxkrnQ791HeTcEv/ czMVp0P6L8R1rBKvKiT+09tP7La3vV8j43PdvKRNAUzQdX331pq5xYtTriBSu1r1 1RkU6Hwbmq1EkPhKjPfjpLVPETfYEqwOZLPhCGviqkEXAb7SOblywY/RQNR6VDvg -----END CERTIFICATE-----Generated at Mon Mar 2 06:32:35 2026 by rpki-client