$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/920C07EECA9B11EFA931D42DC4F9AE02.roa File: 920C07EECA9B11EFA931D42DC4F9AE02.roa (raw, json) Hash identifier: Md6iVk7JTsWVRtEYwy1UgMChg7TQLgkRoZ5k6ZMAWs4= Subject key identifier: A5:87:20:8C:23:1C:5B:60:88:2C:B1:07:BF:68:A8:8F:15:FE:42:77 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 02EC Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/920C07EECA9B11EFA931D42DC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:28:25 +0000 ROA not before: Mon 07 Apr 2025 01:38:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206888 IP address blocks: 160.202.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 00:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: Apr 7 01:38:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a44d09-b85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:70:ba:0e:9c:de:2a:db:60:a4:74:8a:17:92: e9:98:ca:d3:6e:07:71:58:82:0a:49:9a:12:55:b3: 62:70:96:7b:93:c9:f2:3c:7f:f7:c6:54:aa:a7:0e: a1:c9:c7:d7:69:22:3e:4c:68:2d:a2:47:3c:65:ac: 3a:81:67:c2:5d:57:9f:8e:49:26:76:9a:bc:97:3f: 46:b8:2f:14:aa:06:98:1d:66:b2:b1:71:33:97:58: 9f:b0:10:08:16:5e:0a:7f:c8:62:af:0d:67:e2:df: 12:fd:45:ac:d2:3b:ca:31:0f:f9:69:f2:81:9b:50: 9a:5a:2c:d9:88:32:0a:33:a7:3a:9e:58:ff:b7:f3: fb:dd:df:ef:51:e8:4b:0f:f9:fd:af:dd:c5:39:cc: 3c:a1:e2:3f:0e:67:79:18:33:af:d3:30:42:c9:d7: a4:40:f7:e4:f3:40:a2:7a:f5:d6:3f:ec:ff:dc:1a: c4:3f:02:14:91:21:13:7a:ec:bb:ec:95:22:30:49: 91:bf:88:56:4f:f6:2c:f0:25:b4:b3:93:3d:31:f1: 44:07:9a:44:f6:db:ec:e9:89:ec:39:97:c0:ee:e4: 3e:66:cc:1d:48:f7:50:9e:61:4f:2e:d7:42:8c:e6: 0b:4e:60:6f:d8:6e:ed:89:3c:ea:ac:06:00:a4:ff: 1a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:87:20:8C:23:1C:5B:60:88:2C:B1:07:BF:68:A8:8F:15:FE:42:77 X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/920C07EECA9B11EFA931D42DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.202.46.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:da:20:c4:68:a1:82:26:51:76:27:44:d7:65:30:6f:82:fe: c3:87:c2:04:0c:f2:b3:24:c4:f0:73:28:bf:0f:16:e5:dc:a3: f5:01:11:00:f4:4c:e9:31:bb:0a:1d:21:55:1e:cf:9d:4a:83: e7:54:6b:32:f2:f8:93:ee:12:3c:f7:ff:9a:8c:d7:a7:4d:b3: 08:60:b6:83:b8:a1:b3:3c:5e:36:b0:7d:0b:80:ed:3a:7b:b0: 50:3a:9c:15:cc:30:e5:2e:26:d5:67:dc:6d:8f:1e:ea:e6:96: 9f:36:5e:bf:14:73:5f:22:ff:78:44:ba:5a:92:a0:97:aa:47: 89:9c:e8:83:d5:ae:9c:40:49:f2:c8:f8:b7:44:f0:93:cd:90: 33:a3:ab:9f:f2:57:bd:23:fb:b6:63:10:b0:80:b9:a4:bf:ea: 6b:3d:b0:b7:66:aa:92:25:fd:73:c6:60:b7:73:e1:03:b6:41: 36:64:54:42:6d:ed:32:e2:72:2b:e4:67:21:81:eb:5d:09:de: d4:b4:94:c9:47:5d:0c:14:c3:03:fb:b0:84:11:42:f6:ea:10: fd:29:e6:51:44:ba:08:c8:73:40:62:2f:16:65:9c:4b:1f:f6: de:0b:1a:4b:16:d7:c5:9a:e4:80:6b:0c:25:ac:59:e3:2f:c6: bd:6c:51:11 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjUwNDA3MDEzODA0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGQwOS1iODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XC6DpzeKttgpHSKF5LpmMrTbgdxWIIKSZoSVbNicJZ7k8nyPH/3xlSqpw6h ycfXaSI+TGgtokc8Zaw6gWfCXVefjkkmdpq8lz9GuC8UqgaYHWaysXEzl1ifsBAI Fl4Kf8hirw1n4t8S/UWs0jvKMQ/5afKBm1CaWizZiDIKM6c6nlj/t/P73d/vUehL D/n9r93FOcw8oeI/Dmd5GDOv0zBCydekQPfk80CievXWP+z/3BrEPwIUkSETeuy7 7JUiMEmRv4hWT/Ys8CW0s5M9MfFEB5pE9tvs6YnsOZfA7uQ+ZswdSPdQnmFPLtdC jOYLTmBv2G7tiTzqrAYApP8auQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKWHIIwj HFtgiCyxB79oqI8V/kJ3MB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRFMzUvMEU3QUIzMzIyNzdCMTFFRDgwQTM4MzI4QzRGOUFFMDIvOTIwQzA3RUVD QTlCMTFFRkE5MzFENDJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoMouMA0GCSqGSIb3DQEBCwUAA4IBAQAP2iDEaKGCJlF2J0TXZTBv gv7Dh8IEDPKzJMTwcyi/Dxbl3KP1AREA9EzpMbsKHSFVHs+dSoPnVGsy8viT7hI8 9/+ajNenTbMIYLaDuKGzPF42sH0LgO06e7BQOpwVzDDlLibVZ9xtjx7q5pafNl6/ FHNfIv94RLpakqCXqkeJnOiD1a6cQEnyyPi3RPCTzZAzo6uf8le9I/u2YxCwgLmk v+prPbC3ZqqSJf1zxmC3c+EDtkE2ZFRCbe0y4nIr5GchgetdCd7UtJTJR10MFMMD +7CEEUL26hD9KeZRRLoIyHNAYi8WZZxLH/beCxpLFtfFmuSAawwlrFnjL8a9bFER -----END CERTIFICATE-----Generated at Thu Mar 12 12:26:35 2026 by rpki-client