$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2EDEA8344A5711F0BD4BC13AC4F9AE02.roa File: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (raw, json) Hash identifier: olzU9jiah+vCL2TYo6oua28ch8EeQcQTF/v3T6cuGv0= Subject key identifier: 6E:BB:6D:C5:19:4C:22:E5:29:FA:F4:B2:2D:F0:C3:F5:55:DF:4D:C4 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 0865 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2EDEA8344A5711F0BD4BC13AC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:22:00 +0000 ROA not before: Tue 26 Aug 2025 21:31:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 4049 IP address blocks: 202.49.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 20:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Aug 26 21:31:08 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a42f68-8e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:fa:87:3e:87:cf:12:93:d0:7e:2a:1a:a5: 9d:58:82:c5:17:55:ef:c3:a3:67:5d:e1:7d:9e:3d: 8a:8b:a7:2d:ed:09:2d:c3:2f:c7:a5:d3:d1:6a:b9: 3c:c8:1b:01:f2:ce:0d:64:e5:39:71:cb:08:10:48: 4b:dc:61:f4:df:a1:71:33:3e:bd:49:f2:7a:59:48: ad:e3:4b:f1:6a:be:a7:97:df:f6:1f:43:68:7b:5a: 7f:6f:23:5c:3a:25:6c:8c:b3:5e:dd:13:f6:ab:29: 6f:55:19:c9:de:23:e7:a7:e6:f5:40:c0:7b:4d:9f: 26:72:46:f9:19:c9:43:11:60:8e:4d:e5:3d:f2:29: 9a:82:a6:a7:89:0d:f2:e3:44:ec:d4:c3:89:6f:3d: 75:82:69:8d:2f:f2:dc:35:e2:1c:f6:32:2d:5e:36: 9b:c3:fa:c6:e9:a7:31:69:97:6b:d4:a9:25:3e:93: ef:0a:18:7e:66:ff:07:42:87:28:7a:46:0b:f9:9c: 3b:7e:8e:55:7a:45:d5:48:67:0d:10:f0:13:7c:79: 18:c7:ed:76:0c:ba:a4:22:83:53:b2:7c:71:5a:87: 7b:2d:09:e6:59:52:e9:2d:a9:b7:0a:6e:84:5d:30: 21:fb:f4:b2:5c:88:42:1e:ca:2d:d9:aa:4f:75:22: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BB:6D:C5:19:4C:22:E5:29:FA:F4:B2:2D:F0:C3:F5:55:DF:4D:C4 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2EDEA8344A5711F0BD4BC13AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.49.16.0/22 Signature Algorithm: sha256WithRSAEncryption 04:58:64:19:89:c6:49:63:9a:c5:0b:94:82:7f:6d:39:a1:bf: 29:34:7d:70:5c:44:26:74:09:d3:bc:06:91:54:0e:07:6d:be: 6b:3c:e9:71:0a:f0:0f:32:92:6e:45:24:e4:b1:55:c0:62:de: 4c:4b:cd:b5:13:2b:8e:8b:3f:b2:3c:41:38:37:91:b3:f7:57: 8b:ed:83:9f:f9:c5:87:68:9d:f0:e1:60:4a:9a:fb:5b:95:01: ed:1d:ce:72:67:8e:80:c4:b6:d3:6f:92:2b:32:62:08:68:e8: a2:27:a6:cc:a7:03:99:77:ee:a7:cb:de:15:cf:20:a5:86:63: a0:7a:d4:a8:cc:3c:b2:f5:2d:bc:c6:88:9c:26:f6:7d:52:de: df:d5:8a:cf:c2:14:27:52:25:11:db:14:38:ee:55:47:ff:0b: f5:a2:d7:50:5f:27:3f:52:38:97:a5:57:ff:b3:80:5f:b3:ec: 56:45:a2:fe:c2:bb:f8:63:79:a6:9d:1a:7e:03:92:0a:a2:d9: f3:29:38:8b:4f:71:e1:0d:2a:1d:5b:35:da:c4:dd:43:c6:0e: f6:a6:da:39:fa:88:0d:17:7f:21:40:78:fb:72:4c:0a:69:95: 18:b4:47:d0:a0:12:c9:d2:39:9b:fd:b3:86:27:3c:45:2a:97: 75:ae:f8:e8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjUwODI2MjEzMTA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmY2OC04ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi/f6hz6HzxKT0H4qGqWdWILFF1Xvw6NnXeF9nj2Ki6ct7Qktwy/HpdPRark8 yBsB8s4NZOU5ccsIEEhL3GH036FxMz69SfJ6WUit40vxar6nl9/2H0Noe1p/byNc OiVsjLNe3RP2qylvVRnJ3iPnp+b1QMB7TZ8mckb5GclDEWCOTeU98imagqaniQ3y 40Ts1MOJbz11gmmNL/LcNeIc9jItXjabw/rG6acxaZdr1KklPpPvChh+Zv8HQoco ekYL+Zw7fo5VekXVSGcNEPATfHkYx+12DLqkIoNTsnxxWod7LQnmWVLpLam3Cm6E XTAh+/SyXIhCHsot2apPdSIdAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG67bcUZ TCLlKfr0si3ww/VV303EMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjA1MjIvMUMzREEzQUNGMEE2MTFFQTk1OUQ3NjRBQzRGOUFFMDIvMkVERUE4MzQ0 QTU3MTFGMEJENEJDMTNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyjEQMA0GCSqGSIb3DQEBCwUAA4IBAQAEWGQZicZJY5rFC5SCf205 ob8pNH1wXEQmdAnTvAaRVA4Hbb5rPOlxCvAPMpJuRSTksVXAYt5MS821EyuOiz+y PEE4N5Gz91eL7YOf+cWHaJ3w4WBKmvtblQHtHc5yZ46AxLbTb5IrMmIIaOiiJ6bM pwOZd+6ny94VzyClhmOgetSozDyy9S28xoicJvZ9Ut7f1YrPwhQnUiUR2xQ47lVH /wv1otdQXyc/UjiXpVf/s4Bfs+xWRaL+wrv4Y3mmnRp+A5IKotnzKTiLT3HhDSod WzXaxN1Dxg72pto5+ogNF38hQHj7ckwKaZUYtEfQoBLJ0jmb/bOGJzxFKpd1rvjo -----END CERTIFICATE-----Generated at Fri Mar 13 04:18:16 2026 by rpki-client