$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/C1C12662CFC811EB9A5C5879C4F9AE02.roa File: C1C12662CFC811EB9A5C5879C4F9AE02.roa (raw, json) Hash identifier: dwc6e0VZe8kImW/u7x+c+fHQZoxulC4UHHkO0IPYi7Q= Subject key identifier: 81:5C:38:A0:13:DE:C5:48:DE:16:C1:FD:E7:5A:6D:49:42:D4:14:FA Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 18B7 Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/C1C12662CFC811EB9A5C5879C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:31:13 +0000 ROA not before: Fri 08 Aug 2025 16:55:21 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55792 IP address blocks: 27.122.16.0/20 maxlen: 24 103.3.168.0/22 maxlen: 24 202.95.192.0/20 maxlen: 24 2400:9300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6327 (0x18b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Aug 8 16:55:21 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a42381-6506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:65:d2:07:e8:1e:14:94:84:1e:eb:e9:37:cd: 50:c2:33:5e:d8:bd:a3:71:7e:c2:a0:e3:db:a4:b6: 88:c4:40:c1:f8:b0:4a:c8:bb:16:ed:5a:eb:60:47: 10:28:33:78:6b:60:69:93:ef:52:18:8f:6a:fc:31: 21:8b:82:fe:f2:64:7b:4a:0b:64:d9:43:4e:3d:5e: a4:bc:25:92:f3:4f:31:32:88:4d:55:c7:82:35:48: 35:47:a6:81:91:64:6a:22:c6:21:1e:d7:54:c8:aa: cb:67:f4:07:e8:f3:29:2b:47:c0:83:1c:67:bb:e9: 9b:fd:2f:8f:4b:41:0f:cd:7a:2d:d0:ce:0f:b6:4c: ab:57:4f:ca:84:0e:3c:9c:00:d9:2e:bd:1a:a8:4f: 47:86:d4:c8:7b:d1:e1:0a:d3:04:e7:ee:4d:5f:cc: 42:15:fc:f0:dd:e3:3d:f3:08:73:65:13:51:83:71: b8:08:8b:45:84:54:67:6f:62:de:21:8f:b5:24:15: 6f:ed:18:35:08:78:c6:dd:71:37:81:7e:a2:07:8a: e5:94:ca:02:8c:ee:c7:c2:e2:47:1a:d2:b8:23:8d: 37:43:a1:c3:1a:79:d6:b3:27:83:56:1a:92:72:91: 07:df:e7:4e:ee:82:4a:90:a5:ef:62:f4:f8:ea:c6: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5C:38:A0:13:DE:C5:48:DE:16:C1:FD:E7:5A:6D:49:42:D4:14:FA X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/C1C12662CFC811EB9A5C5879C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.122.16.0/20 103.3.168.0/22 202.95.192.0/20 IPv6: 2400:9300::/32 Signature Algorithm: sha256WithRSAEncryption 1a:5e:bf:22:3b:f5:a1:66:7a:03:d5:79:1e:a6:76:db:24:26: 86:fe:fb:a1:c8:1e:82:4b:36:23:43:af:da:86:32:c6:c2:23: f4:ab:7e:c4:bb:43:1e:b4:36:52:8d:08:86:8d:c5:c8:7c:9f: 0a:f6:d9:75:b6:f3:d9:7b:e2:a3:1d:9a:c3:90:fa:65:3a:7b: 22:b0:2d:dc:3c:dd:0d:c8:84:36:d5:4f:90:2e:bb:ca:95:1c: ac:e6:c3:4a:2d:24:5f:cc:78:3c:fa:ba:c9:e1:8a:91:e1:b3: 6c:35:1c:d3:5f:f3:42:b1:d2:7e:25:1c:cf:ef:24:d0:55:8f: af:8d:54:c0:02:e8:ce:e7:85:b9:81:8f:ee:87:9c:cd:6f:55: 16:1a:c1:48:0b:9d:31:b1:34:9c:f0:4a:d0:54:da:c3:7a:dd: 08:46:85:1c:9b:55:3e:9f:8a:17:88:b6:02:2e:83:c8:85:a8: d8:6f:1e:2c:d5:6c:25:44:bb:a1:c0:4e:15:b6:d9:2d:97:25: 59:c7:79:3f:c0:5e:30:28:80:6a:86:d4:73:32:59:54:bf:bd: 49:e5:53:c5:2b:91:61:6f:28:80:67:e2:e1:e7:37:45:c5:f9: f8:33:07:9f:d7:ab:64:5a:4d:dd:30:a0:94:d9:56:53:65:4a: 14:12:cc:c9 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICGLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjUwODA4MTY1NTIxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjM4MS02NTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGXSB+geFJSEHuvpN81QwjNe2L2jcX7CoOPbpLaIxEDB+LBKyLsW7VrrYEcQ KDN4a2Bpk+9SGI9q/DEhi4L+8mR7Sgtk2UNOPV6kvCWS808xMohNVceCNUg1R6aB kWRqIsYhHtdUyKrLZ/QH6PMpK0fAgxxnu+mb/S+PS0EPzXot0M4PtkyrV0/KhA48 nADZLr0aqE9HhtTIe9HhCtME5+5NX8xCFfzw3eM98whzZRNRg3G4CItFhFRnb2Le IY+1JBVv7Rg1CHjG3XE3gX6iB4rllMoCjO7HwuJHGtK4I403Q6HDGnnWsyeDVhqS cpEH3+dO7oJKkKXvYvT46sZUOwIDAQABo4ICezCCAncwHQYDVR0OBBYEFIFcOKAT 3sVI3hbB/edabUlC1BT6MB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0IxQjEvQTBGMEFERjBCMjUyMTFFNzhCNTBGRjYwQzRGOUFFMDIvQzFDMTI2NjJD RkM4MTFFQjlBNUM1ODc5QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQEG3oQAwQCZwOoAwQEyl/AMA0EAgACMAcDBQAkAJMAMA0GCSqGSIb3 DQEBCwUAA4IBAQAaXr8iO/WhZnoD1XkepnbbJCaG/vuhyB6CSzYjQ6/ahjLGwiP0 q37Eu0MetDZSjQiGjcXIfJ8K9tl1tvPZe+KjHZrDkPplOnsisC3cPN0NyIQ21U+Q LrvKlRys5sNKLSRfzHg8+rrJ4YqR4bNsNRzTX/NCsdJ+JRzP7yTQVY+vjVTAAujO 54W5gY/uh5zNb1UWGsFIC50xsTSc8ErQVNrDet0IRoUcm1U+n4oXiLYCLoPIhajY bx4s1WwlRLuhwE4VttktlyVZx3k/wF4wKIBqhtRzMllUv71J5VPFK5FhbyiAZ+Lh 5zdFxfn4Mwef16tkWk3dMKCU2VZTZUoUEszJ -----END CERTIFICATE-----Generated at Thu Mar 26 08:34:24 2026 by rpki-client