$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/D43F20C6C70F11F0BEE61E6CC4F9AE02.roa File: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (raw, json) Hash identifier: utg9UGvvmJf23Cct3Vn7nNyRBeeVqf8DmiJ8n2ds57Q= Subject key identifier: B8:2C:3B:1B:7D:28:7C:5D:B3:96:84:70:46:53:3E:94:9C:C3:87:4C Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 0233 Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/D43F20C6C70F11F0BEE61E6CC4F9AE02.roa Signing time: Sat 05 Sep 2026 03:54:04 +0000 ROA not before: Sat 05 Sep 2026 03:54:04 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 4766 IP address blocks: 202.168.152.0/24 maxlen: 24 202.168.153.0/24 maxlen: 24 202.168.154.0/24 maxlen: 24 202.168.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Sep 5 03:54:04 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9b925c-5b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:5a:ac:37:5e:d2:14:da:72:52:ee:34:ac: b0:52:a8:cd:92:d5:6d:5a:6f:13:33:aa:3b:a6:ee: 87:7d:bd:b6:19:90:b4:80:0d:8a:8b:3c:d3:ed:76: 46:1d:71:9c:5b:5c:66:ba:c4:67:b6:03:71:ac:b5: 8b:55:d4:54:be:10:fa:5a:7b:df:23:ea:24:8b:ba: 6b:85:74:93:64:8f:9d:06:ab:e2:b4:ab:69:2d:e2: 3d:1c:bd:55:88:24:88:e5:b7:38:cd:73:27:0a:38: 8f:4a:c2:b7:06:e4:4f:1a:34:4b:8a:4d:0c:21:1b: a4:81:02:42:7d:28:06:0e:e1:c3:00:4e:0a:b0:5b: bc:99:56:ab:f8:ff:d2:e2:08:89:c7:11:57:26:ac: 1c:49:e3:a3:c4:12:79:c0:b8:da:23:66:fe:7a:0e: a3:39:55:b9:6c:c1:81:4c:1a:28:d0:93:6f:aa:09: bc:03:9f:fa:db:4a:c9:bd:59:cb:c6:0f:f4:0f:db: 67:25:54:24:a1:42:40:ee:fd:41:b0:b9:4d:c3:1e: 39:35:e1:27:be:0c:92:80:3b:cb:a9:7f:b1:95:b0: ed:a7:67:b6:9e:fe:21:1d:0b:95:fc:e3:b5:b9:d2: 9e:ae:8d:86:d0:44:ed:80:eb:f6:d6:92:a9:08:bf: 01:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2C:3B:1B:7D:28:7C:5D:B3:96:84:70:46:53:3E:94:9C:C3:87:4C X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/D43F20C6C70F11F0BEE61E6CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.168.152.0/22 Signature Algorithm: sha256WithRSAEncryption 25:cc:86:ef:ea:ee:64:9f:84:77:d1:f6:8d:65:07:fb:ae:58: f8:2b:5a:3b:03:7a:33:42:bd:aa:cf:a5:29:17:bd:7a:35:e9: e4:d9:83:d3:3c:53:12:7f:b9:cb:4c:09:5b:ae:fc:2b:dd:00: dd:ca:2c:c4:91:84:ce:69:59:68:80:ca:54:37:cb:32:de:ee: e3:95:31:e0:70:d6:43:7e:da:82:f1:a1:d8:bc:15:12:d4:00: 5c:53:a9:40:f9:c9:af:2c:d8:98:1c:5e:a9:fc:27:7b:8a:3e: c1:74:14:43:09:35:93:a0:9b:da:5e:e3:f5:8b:6e:1e:06:f0: 5e:d5:cb:c1:11:b5:1c:a0:de:f3:c6:99:6c:b2:be:78:ad:46: ce:e4:98:c9:c6:9c:d4:59:12:36:50:00:fc:1b:02:a4:df:80: 89:ee:b0:55:dd:47:de:70:73:03:a4:b0:38:5a:4c:e5:40:84: d4:8d:8e:fb:3c:cb:6c:0b:7c:78:00:74:4c:38:1c:36:fe:8d: f4:91:83:1d:96:6d:70:af:b3:b1:67:4a:0a:e2:3f:30:50:70: b9:5f:a4:05:f9:60:e1:15:b4:f7:5d:f7:1a:f7:a6:9e:27:cc: 41:60:95:81:0d:63:04:81:1d:1e:ed:0c:f5:ff:52:7c:1e:59: 7a:b6:ec:fa -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjYwOTA1MDM1NDA0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliOTI1Yy01YjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CharDde0hTaclLuNKywUqjNktVtWm8TM6o7pu6Hfb22GZC0gA2KizzT7XZG HXGcW1xmusRntgNxrLWLVdRUvhD6WnvfI+oki7prhXSTZI+dBqvitKtpLeI9HL1V iCSI5bc4zXMnCjiPSsK3BuRPGjRLik0MIRukgQJCfSgGDuHDAE4KsFu8mVar+P/S 4giJxxFXJqwcSeOjxBJ5wLjaI2b+eg6jOVW5bMGBTBoo0JNvqgm8A5/620rJvVnL xg/0D9tnJVQkoUJA7v1BsLlNwx45NeEnvgySgDvLqX+xlbDtp2e2nv4hHQuV/OO1 udKero2G0ETtgOv21pKpCL8B7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLgsOxt9 KHxds5aEcEZTPpScw4dMMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3NzcvMEJBNTcyQjBFQzRGMTFFRUExQjM4ODY2QzRGOUFFMDIvRDQzRjIwQzZD NzBGMTFGMEJFRTYxRTZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyqiYMA0GCSqGSIb3DQEBCwUAA4IBAQAlzIbv6u5kn4R30faNZQf7 rlj4K1o7A3ozQr2qz6UpF716Nenk2YPTPFMSf7nLTAlbrvwr3QDdyizEkYTOaVlo gMpUN8sy3u7jlTHgcNZDftqC8aHYvBUS1ABcU6lA+cmvLNiYHF6p/Cd7ij7BdBRD CTWToJvaXuP1i24eBvBe1cvBEbUcoN7zxplssr54rUbO5JjJxpzUWRI2UAD8GwKk 34CJ7rBV3UfecHMDpLA4WkzlQITUjY77PMtsC3x4AHRMOBw2/o30kYMdlm1wr7Ox Z0oK4j8wUHC5X6QF+WDhFbT3Xfca96aeJ8xBYJWBDWMEgR0e7Qz1/1J8Hll6tuz6 -----END CERTIFICATE-----Generated at Tue Sep 22 18:06:16 2026 by rpki-client