$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/C297542CC53F11F1A5DA985B4911F970.roa File: C297542CC53F11F1A5DA985B4911F970.roa (raw, json) Hash identifier: TYGvD/+SD3ySokc/8mE1XKom+zUdjVI9UBKtnalS/24= Subject key identifier: B2:69:B3:E1:47:1D:AF:28:C2:69:89:19:D3:D1:5C:0F:1C:D1:F2:B9 Certificate issuer: /CN=A9163C7E/serialNumber=A67EF26FABFA05E4368332605478D14615D42B8F Certificate serial: 07 Authority key identifier: A6:7E:F2:6F:AB:FA:05:E4:36:83:32:60:54:78:D1:46:15:D4:2B:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pn7yb6v6BeQ2gzJgVHjRRhXUK48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/C297542CC53F11F1A5DA985B4911F970.roa Signing time: Sun 11 Oct 2026 06:48:27 +0000 ROA not before: Sun 11 Oct 2026 06:48:27 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4764 IP address blocks: 202.174.32.0/20 maxlen: 20 202.174.32.0/24 maxlen: 24 202.174.33.0/24 maxlen: 24 202.174.39.0/24 maxlen: 24 202.174.40.0/24 maxlen: 24 202.174.42.0/24 maxlen: 24 202.174.43.0/24 maxlen: 24 202.174.44.0/24 maxlen: 24 202.174.45.0/24 maxlen: 24 202.174.46.0/24 maxlen: 24 202.174.47.0/24 maxlen: 24 203.30.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/pn7yb6v6BeQ2gzJgVHjRRhXUK48.crl rsync://rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/pn7yb6v6BeQ2gzJgVHjRRhXUK48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pn7yb6v6BeQ2gzJgVHjRRhXUK48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163C7E, serialNumber=A67EF26FABFA05E4368332605478D14615D42B8F Validity Not Before: Oct 11 06:48:27 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6acb313b-f200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5c:69:06:f3:98:e8:b3:05:ec:04:e5:d3:c9: 81:e3:e9:5e:ad:aa:60:49:28:d6:60:4b:be:c1:79: 1d:d2:7f:0d:c0:3a:45:b5:4c:7e:a8:1c:04:72:e0: 72:13:59:da:21:b3:85:cd:75:ce:0c:63:c7:5c:ce: 28:0c:fe:a8:5c:a4:bf:b4:71:03:fd:c1:f4:7f:7d: a0:ee:8e:1c:a9:ba:46:2d:38:4a:50:f7:04:d6:81: d6:07:49:06:81:4b:d8:df:7b:3f:b7:21:1e:74:0c: da:60:34:0f:4b:48:11:38:12:75:cb:fe:81:bf:da: b2:f1:a8:54:e2:cf:91:8d:bb:ef:e1:2b:44:15:c8: 6f:8c:23:b1:e1:ce:03:89:dd:07:f1:f3:aa:85:ad: 49:b9:b0:80:23:62:9b:84:38:b6:b0:42:31:db:04: 92:60:84:be:aa:31:a2:6f:b0:44:f5:77:8a:2e:53: ec:b0:16:db:c6:5c:2a:9d:bc:53:17:85:6b:f6:7c: 2e:4b:32:40:0a:a5:53:65:6a:ee:b0:30:70:ec:e0: c9:4d:4f:f8:a9:61:e6:5e:1b:f1:df:c0:3a:a0:a0: 42:0a:00:c7:70:92:ff:80:61:d3:38:50:d9:94:e8: d2:18:39:cd:2f:3a:2e:b2:af:c3:a1:3d:b0:05:84: fc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:69:B3:E1:47:1D:AF:28:C2:69:89:19:D3:D1:5C:0F:1C:D1:F2:B9 X509v3 Authority Key Identifier: keyid:A6:7E:F2:6F:AB:FA:05:E4:36:83:32:60:54:78:D1:46:15:D4:2B:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/pn7yb6v6BeQ2gzJgVHjRRhXUK48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pn7yb6v6BeQ2gzJgVHjRRhXUK48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163C7E/20A61846C53B11F18B063F034711F970/C297542CC53F11F1A5DA985B4911F970.roa sbgp-ipAddrBlock: critical IPv4: 202.174.32.0/20 203.30.88.0/24 Signature Algorithm: sha256WithRSAEncryption b4:e3:b5:71:1f:34:d3:07:90:44:a6:27:5e:68:5d:be:ca:21: e1:d8:93:42:45:98:0d:ab:71:d3:0e:57:86:f1:8d:17:a0:39: 24:a2:77:95:16:51:89:68:68:44:90:b1:3b:33:66:24:f7:55: 2c:94:b9:d8:7e:47:95:3d:cb:a8:cf:f8:f8:7f:cf:38:8a:0a: bb:95:c6:09:ba:68:aa:37:38:69:25:dc:3c:74:58:32:88:00: 82:03:c1:3d:57:af:76:b5:19:67:07:5d:d6:55:ea:98:bd:ba: fc:49:5d:52:8f:30:45:d8:06:7e:b1:21:fe:18:e1:15:2e:a5: 46:13:d8:65:fc:1a:1e:da:06:19:70:16:14:e5:f5:8d:11:1e: 13:06:ff:1e:17:3a:74:11:40:2a:e2:84:6a:b5:9e:0f:eb:6e: 1a:31:32:6e:e4:db:97:a5:39:b3:b3:7d:03:a3:de:68:5c:14: 2c:ac:2d:a5:ca:c3:bd:46:c0:4d:8c:4d:14:25:86:05:da:7b: 70:ee:bf:2c:97:37:43:87:47:7a:b2:81:68:11:2f:e0:39:38: 8f:f7:01:14:52:1e:eb:d3:99:92:0c:17:aa:f0:4b:34:08:84: 5e:57:1c:2b:f1:49:b6:fe:94:05:a3:0f:de:c2:1e:e7:35:2c: ca:e6:8f:de -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0M3RTExMC8GA1UEBRMoQTY3RUYyNkZBQkZBMDVFNDM2ODMzMjYwNTQ3OEQxNDYx NUQ0MkI4RjAeFw0yNjEwMTEwNjQ4MjdaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhY2IzMTNiLWYyMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSXGkG85joswXsBOXTyYHj6V6tqmBJKNZgS77BeR3Sfw3AOkW1TH6oHARy4HIT Wdohs4XNdc4MY8dczigM/qhcpL+0cQP9wfR/faDujhypukYtOEpQ9wTWgdYHSQaB S9jfez+3IR50DNpgNA9LSBE4EnXL/oG/2rLxqFTiz5GNu+/hK0QVyG+MI7HhzgOJ 3Qfx86qFrUm5sIAjYpuEOLawQjHbBJJghL6qMaJvsET1d4ouU+ywFtvGXCqdvFMX hWv2fC5LMkAKpVNlau6wMHDs4MlNT/ipYeZeG/HfwDqgoEIKAMdwkv+AYdM4UNmU 6NIYOc0vOi6yr8OhPbAFhPwTAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUsmmz4Ucd ryjCaYkZ09FcDxzR8rkwHwYDVR0jBBgwFoAUpn7yb6v6BeQ2gzJgVHjRRhXUK48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzQzdFLzIwQTYxODQ2QzUz QjExRjE4QjA2M0YwMzQ3MTFGOTcwL3BuN3liNnY2QmVRMmd6SmdWSGpSUmhYVUs0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcG43eWI2djZCZVEyZ3pKZ1ZIalJSaFhVSzQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0M3RS8yMEE2MTg0NkM1M0IxMUYxOEIwNjNGMDM0NzExRjk3MC9DMjk3NTQyQ0M1 M0YxMUYxQTVEQTk4NUI0OTExRjk3MC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBATKriADBADLHlgwDQYJKoZIhvcNAQELBQADggEBALTjtXEfNNMHkESm J15oXb7KIeHYk0JFmA2rcdMOV4bxjRegOSSid5UWUYloaESQsTszZiT3VSyUudh+ R5U9y6jP+Ph/zziKCruVxgm6aKo3OGkl3Dx0WDKIAIIDwT1Xr3a1GWcHXdZV6pi9 uvxJXVKPMEXYBn6xIf4Y4RUupUYT2GX8Gh7aBhlwFhTl9Y0RHhMG/x4XOnQRQCri hGq1ng/rbhoxMm7k25elObOzfQOj3mhcFCysLaXKw71GwE2MTRQlhgXae3DuvyyX N0OHR3qygWgRL+A5OI/3ARRSHuvTmZIMF6rwSzQIhF5XHCvxSbb+lAWjD97CHuc1 LMrmj94= -----END CERTIFICATE-----Generated at Mon Oct 26 00:33:03 2026 by rpki-client