$ rpki-client -vvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa File: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (raw, json) Hash identifier: PBDYtXzBKsX1NmPtB32fhdWOYzhQ9QZAE+Uffi18nz0= Subject key identifier: 48:E7:56:DF:5F:F0:1E:53:CB:AD:3A:CB:82:7E:56:98:35:EB:1F:A1 Certificate issuer: /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Certificate serial: 01B7 Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa Signing time: Mon 02 Mar 2026 11:27:57 +0000 ROA not before: Tue 23 Dec 2025 03:23:25 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 58723 IP address blocks: 203.27.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912809D, serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Validity Not Before: Dec 23 03:23:25 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5743d-1ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:c9:6b:8a:a8:01:c4:af:74:b4:06:7a:88: 8f:2f:59:ff:5e:f9:ee:e3:55:53:ad:8a:f2:ac:0a: e9:fc:1a:19:76:ca:4d:4e:b0:1e:de:70:1b:fc:5f: e7:03:5b:33:b7:fc:63:a6:3c:6e:3a:b8:39:25:80: da:33:73:70:41:fc:9c:69:7a:ca:28:51:e1:37:92: e3:0b:9e:24:99:bc:4f:74:4d:6e:e3:37:9e:f1:40: 93:e3:c2:a6:20:dd:5c:2c:2b:1a:ea:b2:1d:25:ca: 9b:f5:46:e1:b8:45:b7:27:21:f8:6a:40:87:46:fc: 9d:26:ba:6c:2a:e7:d7:78:a4:dd:bc:3d:5d:89:3a: 56:65:6c:52:b8:9f:99:33:99:1f:ff:39:e2:b9:5d: 6a:74:00:0c:a5:ab:7b:13:06:ee:5c:0b:c1:ae:a4: 6f:3c:b8:36:f9:4d:ac:0b:4f:81:da:ba:c4:59:5c: f5:f5:69:87:0a:86:38:3d:95:fc:8b:d5:a5:5d:bf: 49:23:e0:17:cd:ef:0f:99:df:6b:70:24:63:a7:b6: 2a:9d:cd:db:ff:4d:d7:d6:e8:ad:04:15:9d:ba:e7: fa:76:28:db:c9:1b:fb:9a:75:bd:a1:b1:c7:ba:09: 01:64:7b:34:bb:9d:95:b4:0f:4a:8b:d0:f5:5e:4c: 11:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:56:DF:5F:F0:1E:53:CB:AD:3A:CB:82:7E:56:98:35:EB:1F:A1 X509v3 Authority Key Identifier: keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.27.38.0/24 Signature Algorithm: sha256WithRSAEncryption 49:53:3e:4a:a8:36:b7:12:34:f5:f7:7e:1c:3e:4d:c0:b1:ea: 50:86:67:10:9b:fd:db:21:c5:e7:66:f3:73:73:3c:54:32:79: 5b:6e:86:4e:ee:49:06:87:57:40:84:dd:6b:e4:29:6d:51:ec: 9a:8d:cb:3e:f4:26:82:6f:9b:f3:31:03:4b:64:94:49:33:5e: 6d:b7:5f:8a:cd:08:d1:72:1a:4e:37:96:bd:ed:39:c6:e9:eb: 7f:84:70:32:f0:95:29:e3:6b:c8:60:e6:11:b9:cc:25:20:4e: e3:32:54:6f:75:a5:95:5a:e5:1a:d7:fa:f6:36:e3:b9:9d:3f: 2f:a9:fb:86:81:f1:36:c6:36:bd:9f:c6:26:30:61:0d:0e:73: e1:ba:6b:3a:96:7a:91:ff:94:12:b0:eb:93:65:d4:87:79:4e: dc:1e:82:ae:09:c2:0a:23:3b:f2:df:99:d6:c8:b3:7d:8f:bb: 1f:3d:b9:47:1c:ab:48:28:59:a0:15:7f:2f:5a:a6:65:df:c4: f2:af:14:8e:06:d9:22:13:57:50:f3:d0:06:7d:a8:d8:0a:7a: ca:ec:6d:b1:a3:d4:f5:8c:a5:aa:06:05:83:72:28:93:61:db: b1:36:c0:91:df:89:12:22:a6:9f:53:a7:ce:cc:b9:ec:0e:47: 5a:2e:24:22 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwOUQxMTAvBgNVBAUTKEU0NzVENDQyNzcyMTUxQUNGMEZBRUE2QjM5QjkwMTJC RDIyM0QzOTMwHhcNMjUxMjIzMDMyMzI1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1NzQzZC0xZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5zJa4qoAcSvdLQGeoiPL1n/Xvnu41VTrYryrArp/BoZdspNTrAe3nAb/F/n A1szt/xjpjxuOrg5JYDaM3NwQfycaXrKKFHhN5LjC54kmbxPdE1u4zee8UCT48Km IN1cLCsa6rIdJcqb9UbhuEW3JyH4akCHRvydJrpsKufXeKTdvD1diTpWZWxSuJ+Z M5kf/zniuV1qdAAMpat7EwbuXAvBrqRvPLg2+U2sC0+B2rrEWVz19WmHCoY4PZX8 i9WlXb9JI+AXze8Pmd9rcCRjp7Yqnc3b/03X1uitBBWduuf6dijbyRv7mnW9obHH ugkBZHs0u52VtA9Ki9D1XkwR/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEjnVt9f 8B5Ty606y4J+Vpg16x+hMB8GA1UdIwQYMBaAFOR11EJ3IVGs8Prqazm5ASvSI9OT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA5RC8wMUZBQzk4QTg0 RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVhenctdXByT2JrQks5SWow NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIWFVRbmNoVWF6dy11cHJPYmtCSzlJajA1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjgwOUQvMDFGQUM5OEE4NEY5MTFFRUE3NUMyRjM5QzRGOUFFMDIvMkJCRTk2QzI4 NEZDMTFFRUFBNUVBQTVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxsmMA0GCSqGSIb3DQEBCwUAA4IBAQBJUz5KqDa3EjT1934cPk3A sepQhmcQm/3bIcXnZvNzczxUMnlbboZO7kkGh1dAhN1r5CltUeyajcs+9CaCb5vz MQNLZJRJM15tt1+KzQjRchpON5a97TnG6et/hHAy8JUp42vIYOYRucwlIE7jMlRv daWVWuUa1/r2NuO5nT8vqfuGgfE2xja9n8YmMGENDnPhums6lnqR/5QSsOuTZdSH eU7cHoKuCcIKIzvy35nWyLN9j7sfPblHHKtIKFmgFX8vWqZl38TyrxSOBtkiE1dQ 89AGfajYCnrK7G2xo9T1jKWqBgWDciiTYduxNsCR34kSIqafU6fOzLnsDkdaLiQi -----END CERTIFICATE-----Generated at Thu Mar 26 13:59:15 2026 by rpki-client