$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/0B975458C53E11F1A7315A354911F970.roa File: 0B975458C53E11F1A7315A354911F970.roa (raw, json) Hash identifier: mUKTYko8UOv6K2c/+tTXeBja1kWOi29HrVupm42mewg= Subject key identifier: 6E:45:29:C1:6F:A3:A5:AB:1C:D7:55:59:36:DD:8B:DF:1F:0B:56:D3 Certificate issuer: /CN=A9163C7E/serialNumber=A67EF26FABFA05E4368332605478D14615D42B8F Certificate serial: 03 Authority key identifier: A6:7E:F2:6F:AB:FA:05:E4:36:83:32:60:54:78:D1:46:15:D4:2B:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pn7yb6v6BeQ2gzJgVHjRRhXUK48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/0B975458C53E11F1A7315A354911F970.roa Signing time: Sun 11 Oct 2026 06:36:10 +0000 ROA not before: Sun 11 Oct 2026 06:36:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9268 IP address blocks: 202.174.32.0/20 maxlen: 20 202.174.32.0/24 maxlen: 24 202.174.33.0/24 maxlen: 24 202.174.39.0/24 maxlen: 24 202.174.40.0/24 maxlen: 24 202.174.42.0/24 maxlen: 24 202.174.43.0/24 maxlen: 24 202.174.44.0/24 maxlen: 24 202.174.45.0/24 maxlen: 24 202.174.46.0/24 maxlen: 24 202.174.47.0/24 maxlen: 24 203.30.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/pn7yb6v6BeQ2gzJgVHjRRhXUK48.crl rsync://rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/pn7yb6v6BeQ2gzJgVHjRRhXUK48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pn7yb6v6BeQ2gzJgVHjRRhXUK48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163C7E, serialNumber=A67EF26FABFA05E4368332605478D14615D42B8F Validity Not Before: Oct 11 06:36:10 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6acb2e5a-8a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:1d:0b:2a:bf:34:6e:8f:84:7d:12:19:7a: 6c:9f:c0:f0:06:9a:ea:9b:9a:d7:3d:1a:7b:bc:c5: 25:c1:d3:cc:c6:3f:bb:bf:bd:06:67:dc:a1:0e:f7: f5:ec:25:2e:60:22:78:4b:e1:e8:c1:e3:49:2c:a2: 4a:9f:72:65:5b:86:b0:4c:d0:85:cd:cc:c9:1a:58: a4:a3:d3:86:ec:3b:13:a1:b6:69:89:04:27:cb:d4: d0:37:3d:e3:28:f6:2a:f5:c0:6b:8e:9b:df:25:83: 15:b9:4c:d6:95:94:2e:61:ff:5a:e8:ba:12:e0:86: a0:7f:ef:11:81:76:5d:ff:ab:2f:b9:f5:c8:39:e2: 0e:2a:65:28:d6:40:92:60:38:d4:2f:17:fb:74:45: 28:1d:95:b5:fb:e6:85:61:fd:7c:3e:e4:c6:40:71: 7e:18:96:0d:0f:2e:42:e3:f8:fe:8f:16:cd:cf:3f: 49:0e:72:86:f0:87:98:2d:58:8a:e2:30:44:47:e8: 74:87:a2:98:03:7a:4a:af:95:d5:42:05:4c:4d:27: e2:05:11:a9:75:73:17:f7:34:1a:7e:65:f9:fb:a8: b9:d3:db:c5:0d:9e:d3:1d:bd:ba:4b:0d:ba:00:86: 36:91:ad:08:48:e6:9d:83:4d:99:86:43:6d:fa:dd: fb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:45:29:C1:6F:A3:A5:AB:1C:D7:55:59:36:DD:8B:DF:1F:0B:56:D3 X509v3 Authority Key Identifier: keyid:A6:7E:F2:6F:AB:FA:05:E4:36:83:32:60:54:78:D1:46:15:D4:2B:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/pn7yb6v6BeQ2gzJgVHjRRhXUK48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pn7yb6v6BeQ2gzJgVHjRRhXUK48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/0B975458C53E11F1A7315A354911F970.roa sbgp-ipAddrBlock: critical IPv4: 202.174.32.0/20 203.30.88.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:7a:d3:8f:98:83:cb:bd:e4:65:6d:76:a8:ed:9d:22:61:1d: 9a:67:2e:0c:54:ef:7a:39:42:0b:98:f3:a6:21:a4:f9:f7:a9: 26:10:62:3a:1c:66:82:b3:d0:dc:c9:4e:42:e7:eb:21:51:f5: 63:70:00:48:8a:29:90:b4:76:d5:71:c3:a6:21:b0:79:a4:d9: 6a:69:6d:4e:da:c9:03:32:a9:0e:5f:69:f1:17:7b:e7:0e:3a: 37:3c:3a:e4:72:7b:75:49:53:f9:4f:75:db:0e:d7:c1:c1:33: 4f:32:cc:cd:17:db:3c:6b:69:44:6c:b4:ab:5f:5d:67:a9:4f: 04:79:a3:33:73:99:77:8a:ec:ef:fa:bd:28:e4:f2:52:4c:cd: 47:a7:61:3b:7e:7b:7b:bf:4c:6e:14:1e:e8:67:0d:5e:3c:a7: 2c:6f:d1:c4:21:b4:20:1c:97:51:94:55:e2:a9:81:99:3a:7e: 51:17:5f:2e:b3:37:2a:44:1c:c7:dc:0d:ed:31:cc:22:28:67: 81:dc:f5:3f:a7:f7:8f:c7:d3:e1:b5:67:76:54:50:82:60:cb: 90:ef:4d:cf:26:34:0e:e7:66:f7:bc:dc:02:45:37:d0:3c:3d: f5:a3:32:ff:7a:7d:82:1b:5f:9e:d2:38:ea:7c:a6:a2:d9:e0: f6:ea:38:09 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0M3RTExMC8GA1UEBRMoQTY3RUYyNkZBQkZBMDVFNDM2ODMzMjYwNTQ3OEQxNDYx NUQ0MkI4RjAeFw0yNjEwMTEwNjM2MTBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhY2IyZTVhLThhMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP1x0LKr80bo+EfRIZemyfwPAGmuqbmtc9Gnu8xSXB08zGP7u/vQZn3KEO9/Xs JS5gInhL4ejB40ksokqfcmVbhrBM0IXNzMkaWKSj04bsOxOhtmmJBCfL1NA3PeMo 9ir1wGuOm98lgxW5TNaVlC5h/1rouhLghqB/7xGBdl3/qy+59cg54g4qZSjWQJJg ONQvF/t0RSgdlbX75oVh/Xw+5MZAcX4Ylg0PLkLj+P6PFs3PP0kOcobwh5gtWIri MERH6HSHopgDekqvldVCBUxNJ+IFEal1cxf3NBp+Zfn7qLnT28UNntMdvbpLDboA hjaRrQhI5p2DTZmGQ2363fuTAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUbkUpwW+j pasc11VZNt2L3x8LVtMwHwYDVR0jBBgwFoAUpn7yb6v6BeQ2gzJgVHjRRhXUK48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzQzdFLzIwQTYxODQ2QzUz QjExRjE4QjA2M0YwMzQ3MTFGOTcwL3BuN3liNnY2QmVRMmd6SmdWSGpSUmhYVUs0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcG43eWI2djZCZVEyZ3pKZ1ZIalJSaFhVSzQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0M3RS8yMEE2MTg0NkM1M0IxMUYxOEIwNjNGMDM0NzExRjk3MC8wQjk3NTQ1OEM1 M0UxMUYxQTczMTVBMzU0OTExRjk3MC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBATKriADBADLHlgwDQYJKoZIhvcNAQELBQADggEBAIt604+Yg8u95GVt dqjtnSJhHZpnLgxU73o5QguY86YhpPn3qSYQYjocZoKz0NzJTkLn6yFR9WNwAEiK KZC0dtVxw6YhsHmk2WppbU7ayQMyqQ5fafEXe+cOOjc8OuRye3VJU/lPddsO18HB M08yzM0X2zxraURstKtfXWepTwR5ozNzmXeK7O/6vSjk8lJMzUenYTt+e3u/TG4U HuhnDV48pyxv0cQhtCAcl1GUVeKpgZk6flEXXy6zNypEHMfcDe0xzCIoZ4Hc9T+n 94/H0+G1Z3ZUUIJgy5DvTc8mNA7nZve83AJFN9A8PfWjMv96fYIbX57SOOp8pqLZ 4PbqOAk= -----END CERTIFICATE-----Generated at Tue Oct 27 02:54:10 2026 by rpki-client