$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/9CEF2622B76E11EF8FCC9767C4F9AE02.roa File: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (raw, json) Hash identifier: BT5lGoepooMPklXWzsmxnmANaCteYyqvqzOaxtbVyhM= Subject key identifier: 7D:2F:C7:DB:2E:34:E4:B5:DA:F3:6C:E1:C0:AD:51:C6:79:0E:2F:F8 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: F1 Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/9CEF2622B76E11EF8FCC9767C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:57:23 +0000 ROA not before: Tue 29 Jul 2025 07:45:22 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 24092 IP address blocks: 27.111.0.0/21 maxlen: 21 2407:380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Jul 29 07:45:22 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a59743-ca6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:09:86:38:58:d6:72:13:33:0b:63:76:bf: 5e:4b:ae:f6:55:66:44:ac:ea:19:37:f2:1d:82:c0: 88:05:ee:55:02:1a:c7:ba:b6:dc:3d:90:c0:af:98: f0:51:56:12:d4:74:6d:54:69:88:36:94:4e:2c:bc: 64:f1:07:6b:6b:29:75:eb:04:91:2a:24:6c:84:89: 0f:da:76:2e:eb:02:2c:96:b9:1a:48:e9:e3:0b:da: 00:cf:db:21:74:61:73:b1:74:de:69:52:8e:a7:52: 6e:36:66:32:b9:66:a5:d2:45:0f:79:e7:a6:e3:48: 21:88:99:b7:1e:bd:15:cd:f5:ec:40:c1:1b:82:4a: 80:05:92:41:c4:49:22:9b:c4:f1:a1:4c:ab:aa:65: f8:26:67:95:b0:0d:c5:22:85:f7:53:0e:fb:0c:91: 90:2c:a9:be:0e:6f:5d:ed:17:41:75:81:c4:80:c3: b5:52:1c:cc:c1:e1:7f:44:5a:65:4e:9d:8c:35:bf: cf:18:cb:10:fa:e8:91:77:fc:e3:94:f9:30:ce:a8: 74:0a:ed:6b:c5:07:0c:b8:6d:b5:11:bd:64:d2:5f: aa:2b:26:f4:02:38:4b:eb:a9:98:53:89:7f:dc:53: d3:64:b4:e8:08:f0:e2:1f:91:a9:61:6b:3e:07:12: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2F:C7:DB:2E:34:E4:B5:DA:F3:6C:E1:C0:AD:51:C6:79:0E:2F:F8 X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/9CEF2622B76E11EF8FCC9767C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.111.0.0/21 IPv6: 2407:380::/32 Signature Algorithm: sha256WithRSAEncryption 43:ab:c5:83:a3:74:40:35:3c:1a:a1:39:13:47:cc:63:d9:c0: f8:8c:85:9d:39:a6:d5:cc:01:ba:2d:b0:cc:f7:80:1a:da:5e: 36:1e:7d:e2:b3:e1:f9:2b:1c:af:b5:13:2e:4e:fa:36:34:f4: 52:d2:1d:87:5c:d8:5f:2c:f0:84:15:62:00:bf:a8:ed:ff:93: 91:b9:ac:c7:df:0a:10:7b:17:af:a9:e7:e1:ec:96:09:13:fa: 60:c6:12:b7:12:15:a8:d4:b0:f4:22:92:a0:7c:08:01:85:f3: 15:a6:d4:1e:9b:db:f5:00:f2:71:fd:65:80:c4:03:63:62:d4: c7:a1:03:09:13:0a:2d:6a:6d:de:a7:8e:a1:0b:b8:fc:41:40: 36:e4:9a:47:97:5a:a3:2a:a9:fd:f5:f6:02:52:b3:02:e3:ff: 82:81:92:d7:74:ba:e0:20:b9:69:04:da:2a:b5:11:94:c0:a8: b1:e9:72:68:fb:92:33:3d:5c:66:f2:b7:44:b7:93:a1:ad:e3: 7f:29:dc:88:d6:46:75:05:4b:d7:83:09:38:07:5e:f9:be:1c: c7:68:d7:a4:15:2b:11:bb:02:42:2c:f0:87:2f:f2:27:ca:63: 2a:79:39:50:1a:34:b1:2c:5b:8d:3c:91:67:f5:51:18:65:db: e9:8f:63:81 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQwOEYxMTAvBgNVBAUTKDkxMEYyRjQxNDA4RTEzREFFRDdDMjFEQzQ3MkRDNUM1 OEM0NTg4MzYwHhcNMjUwNzI5MDc0NTIyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTc0My1jYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluYJhjhY1nITMwtjdr9eS672VWZErOoZN/IdgsCIBe5VAhrHurbcPZDAr5jw UVYS1HRtVGmINpROLLxk8Qdrayl16wSRKiRshIkP2nYu6wIslrkaSOnjC9oAz9sh dGFzsXTeaVKOp1JuNmYyuWal0kUPeeem40ghiJm3Hr0VzfXsQMEbgkqABZJBxEki m8TxoUyrqmX4JmeVsA3FIoX3Uw77DJGQLKm+Dm9d7RdBdYHEgMO1UhzMweF/RFpl Tp2MNb/PGMsQ+uiRd/zjlPkwzqh0Cu1rxQcMuG21Eb1k0l+qKyb0AjhL66mYU4l/ 3FPTZLToCPDiH5GpYWs+BxJ2cQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFH0vx9su NOS12vNs4cCtUcZ5Di/4MB8GA1UdIwQYMBaAFJEPL0FAjhPa7Xwh3EctxcWMRYg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDA4Ri8xNkNEOTg1OEI3 NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5cnRmQ0hjUnkzRnhZeEZp RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQwOEYvMTZDRDk4NThCNzZFMTFFRkFDRjBGODY1QzRGOUFFMDIvOUNFRjI2MjJC NzZFMTFFRjhGQ0M5NzY3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQDG28AMA0EAgACMAcDBQAkBwOAMA0GCSqGSIb3DQEBCwUAA4IBAQBD q8WDo3RANTwaoTkTR8xj2cD4jIWdOabVzAG6LbDM94Aa2l42Hn3is+H5KxyvtRMu Tvo2NPRS0h2HXNhfLPCEFWIAv6jt/5ORuazH3woQexevqefh7JYJE/pgxhK3EhWo 1LD0IpKgfAgBhfMVptQem9v1APJx/WWAxANjYtTHoQMJEwotam3ep46hC7j8QUA2 5JpHl1qjKqn99fYCUrMC4/+CgZLXdLrgILlpBNoqtRGUwKix6XJo+5IzPVxm8rdE t5OhreN/KdyI1kZ1BUvXgwk4B175vhzHaNekFSsRuwJCLPCHL/InymMqeTlQGjSx LFuNPJFn9VEYZdvpj2OB -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:03 2026 by rpki-client