$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/857A6BC00E9711EB9A6C2B3CC4F9AE02.roa File: 857A6BC00E9711EB9A6C2B3CC4F9AE02.roa (raw, json) Hash identifier: 2B9w5akDsjV/uqZco7E7faLjlGCr0uBdhxds5wvxGd0= Subject key identifier: 9C:C7:EC:59:7B:C1:6B:BE:16:BA:BF:97:46:D0:EC:A7:85:60:D7:66 Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Certificate serial: 088D Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/857A6BC00E9711EB9A6C2B3CC4F9AE02.roa Signing time: Thu 02 Apr 2026 21:27:47 +0000 ROA not before: Thu 02 Apr 2026 21:27:47 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 45600 IP address blocks: 202.92.148.0/22 maxlen: 22 2400:b000:300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Validity Not Before: Apr 2 21:27:47 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=69cedf53-f784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:60:9d:00:58:ad:db:94:1a:3b:c5:4e:12:b1: 89:43:a3:b1:4e:a7:91:28:1b:d9:8a:90:19:b0:c3: 4c:35:29:3b:e2:1f:73:13:d8:db:28:29:9c:a9:bb: f4:f0:4c:34:b9:6b:a1:71:04:40:4c:e9:e2:ef:06: 8d:9b:e6:e5:b5:97:6d:ca:1f:4b:0a:22:74:de:d6: c8:9d:11:08:a5:e4:d8:36:98:aa:69:22:15:15:d1: 09:1c:98:57:2e:36:5a:7f:da:71:e1:80:2e:b0:19: b8:63:1e:dd:2e:63:02:f4:a1:99:90:ea:b2:2f:00: f6:cd:68:18:c4:78:90:3b:7d:45:85:f5:71:59:75: bd:32:b1:4d:ea:b0:6f:6b:96:7b:90:25:e1:57:d5: 5c:60:9f:5c:3d:c4:f4:10:af:c3:6e:c7:48:12:a8: d2:c4:91:67:6a:18:89:ec:29:6d:df:26:48:08:ab: 65:e7:6a:f1:e4:ee:37:ed:f7:41:34:a9:a7:00:4c: 0f:0f:b8:3a:08:98:30:cc:86:6d:b6:ac:ef:e7:c5: f7:2e:46:0f:ea:8e:88:0e:da:a7:67:09:5d:76:46: 15:ca:bb:5b:b5:ce:85:87:d4:29:f3:5e:f6:f2:38: 4e:7c:72:f0:cf:0c:04:71:a1:63:f3:74:8a:df:9d: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C7:EC:59:7B:C1:6B:BE:16:BA:BF:97:46:D0:EC:A7:85:60:D7:66 X509v3 Authority Key Identifier: keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/857A6BC00E9711EB9A6C2B3CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.92.148.0/22 IPv6: 2400:b000:300::/48 Signature Algorithm: sha256WithRSAEncryption 1e:5f:46:7c:8d:97:b0:06:52:25:60:cf:1d:b2:15:d0:25:76: aa:2d:77:48:31:36:93:86:27:c0:a3:e3:8f:5a:ab:2d:e1:33: 4e:bc:d3:a0:70:76:1e:5a:a4:b0:1a:7d:2a:1e:3a:c2:e8:30: 63:48:ba:3e:45:d0:34:fb:fc:ed:46:bb:20:73:b1:e5:c2:40: 32:dd:8c:b8:1d:fa:ea:f6:65:c0:ce:58:d4:e3:8e:c1:26:e3: a6:7e:d2:95:6c:ab:ef:02:2d:b8:e7:1d:d5:6e:6b:29:6f:23: a4:4a:7d:09:51:ea:eb:04:bc:8a:7f:46:76:dc:66:d8:a1:c8: df:2a:7d:f8:22:84:29:ec:04:4c:73:7a:32:4b:32:7f:d4:9b: e6:ac:4d:f9:a0:15:f3:aa:96:3a:f7:25:da:84:63:d0:79:40: e3:da:08:da:b7:83:53:6d:6a:a0:84:3e:95:5c:ef:b9:b2:c3: 79:c5:b4:f2:b8:52:07:8f:c6:fe:23:07:c9:79:57:51:e7:37: d2:3a:e7:7e:ae:d1:57:6d:82:c2:89:4b:34:55:a5:11:61:34: c3:3f:bf:c6:25:82:d1:18:15:e0:cf:6b:12:5d:f9:bf:df:49: 2c:ed:e4:f6:39:31:92:5e:83:37:c9:ac:f7:34:d6:4c:89:26: 7c:81:57:a4 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB Mjg4N0U2RjUwHhcNMjYwNDAyMjEyNzQ3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlZGY1My1mNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2CdAFit25QaO8VOErGJQ6OxTqeRKBvZipAZsMNMNSk74h9zE9jbKCmcqbv0 8Ew0uWuhcQRATOni7waNm+bltZdtyh9LCiJ03tbInREIpeTYNpiqaSIVFdEJHJhX LjZaf9px4YAusBm4Yx7dLmMC9KGZkOqyLwD2zWgYxHiQO31FhfVxWXW9MrFN6rBv a5Z7kCXhV9VcYJ9cPcT0EK/DbsdIEqjSxJFnahiJ7Clt3yZICKtl52rx5O437fdB NKmnAEwPD7g6CJgwzIZttqzv58X3LkYP6o6IDtqnZwlddkYVyrtbtc6Fh9Qp8172 8jhOfHLwzwwEcaFj83SK353dnQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJzH7Fl7 wWu+Frq/l0bQ7KeFYNdmMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA3MTgvOTI4M0VERUUwRTk0MTFFQjk2NjlFMTMzQzRGOUFFMDIvODU3QTZCQzAw RTk3MTFFQjlBNkMyQjNDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCylyUMA8EAgACMAkDBwAkALAAAwAwDQYJKoZIhvcNAQELBQADggEB AB5fRnyNl7AGUiVgzx2yFdAldqotd0gxNpOGJ8Cj449aqy3hM06806Bwdh5apLAa fSoeOsLoMGNIuj5F0DT7/O1GuyBzseXCQDLdjLgd+ur2ZcDOWNTjjsEm46Z+0pVs q+8CLbjnHdVuaylvI6RKfQlR6usEvIp/RnbcZtihyN8qffgihCnsBExzejJLMn/U m+asTfmgFfOqljr3JdqEY9B5QOPaCNq3g1NtaqCEPpVc77myw3nFtPK4UgePxv4j B8l5V1HnN9I6536u0VdtgsKJSzRVpRFhNMM/v8YlgtEYFeDPaxJd+b/fSSzt5PY5 MZJegzfJrPc01kyJJnyBV6Q= -----END CERTIFICATE-----Generated at Mon Apr 6 10:28:07 2026 by rpki-client