$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/68DAAA1A749711EFB4EDA45FC4F9AE02.roa File: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (raw, json) Hash identifier: jQKMgjpzfVC4yr89ThGiT9ygh+/rUur+KtBDxKUm250= Subject key identifier: 8F:75:FA:BF:D3:0D:8E:17:82:D3:1D:08:6E:B8:AB:41:CE:1D:48:18 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 083B Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/68DAAA1A749711EFB4EDA45FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:44:33 +0000 ROA not before: Fri 06 Jun 2025 21:41:00 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 10310 IP address blocks: 27.123.33.0/24 maxlen: 24 27.123.34.0/23 maxlen: 23 183.177.76.0/22 maxlen: 22 202.43.216.0/23 maxlen: 23 202.43.216.0/24 maxlen: 24 202.43.216.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Jun 6 21:41:00 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a45ee1-b09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:6e:fc:92:a0:e5:0a:17:f8:4e:6e:16:c0: a1:e6:87:5d:40:e8:2d:e6:43:73:9b:7b:e9:59:8c: 16:24:ad:42:2f:39:30:f0:bb:6b:91:8a:d1:3b:d0: f9:32:25:d2:ab:5c:d1:50:38:31:4a:4b:b9:f4:ec: 30:cc:27:c7:ce:73:86:15:86:01:03:a3:5d:55:2a: 90:44:9e:85:56:10:3c:0e:60:c2:bb:93:ab:17:82: 59:69:f8:ca:48:a6:34:ac:5c:0d:03:b7:c7:de:6e: 86:ad:af:ea:3d:f2:5e:ef:24:5d:7e:d9:3a:ab:68: 6b:c5:05:ff:db:4d:97:de:84:1f:db:16:db:9e:b3: bf:26:fe:9e:ca:aa:5a:9b:eb:8c:c0:04:2d:4e:42: 1d:b3:52:66:51:8f:8d:be:4a:1a:5b:17:f7:bb:d2: 77:af:72:a4:3d:95:fb:19:fa:a2:27:b9:ba:8a:8d: 40:dd:2d:1a:cd:31:3a:b8:01:2a:76:44:04:c0:ba: ec:c3:0b:17:3f:49:2c:a1:a6:ca:19:10:a5:83:bd: 62:84:31:8d:7a:c1:24:2c:72:dd:bd:86:9b:e7:bc: 01:87:73:af:6f:7f:a5:ab:3e:30:0d:62:87:27:6e: cc:be:c5:9b:d6:f9:84:51:e8:61:86:27:85:28:02: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:75:FA:BF:D3:0D:8E:17:82:D3:1D:08:6E:B8:AB:41:CE:1D:48:18 X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/68DAAA1A749711EFB4EDA45FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.123.33.0-27.123.35.255 183.177.76.0/22 202.43.216.0/23 Signature Algorithm: sha256WithRSAEncryption 51:c2:d6:05:f2:fc:6b:7b:2f:0a:7e:05:a6:d8:34:fc:41:d0: 43:47:59:9c:74:0f:17:99:9c:8c:bd:91:77:1a:31:c1:bc:45: a9:ba:75:53:e6:a2:47:92:8c:a1:da:2b:c3:b7:31:e5:ac:9d: 32:dd:d3:56:68:95:d9:e9:1f:7a:82:c7:87:92:25:87:ed:48: fb:32:6b:cd:70:e5:28:fc:f6:f3:1b:f3:61:2e:b4:ea:25:3e: 4a:7f:c2:38:88:1a:e7:5d:7e:ca:63:fe:ca:69:bf:4b:28:29: 04:8b:66:d1:2c:d4:d2:31:43:81:af:05:a7:51:2f:09:15:53: 21:fb:f4:73:e9:29:5e:10:7d:4c:c6:ab:a7:72:a6:ff:75:3d: 2e:c9:e3:b6:51:a8:2c:43:56:88:f5:49:7b:26:d4:35:1e:f2: 0f:b6:4a:6e:0e:bf:d1:1a:59:df:66:ff:bd:ab:ca:3e:05:a6: 5c:d3:21:20:75:ef:ff:1d:f7:9e:d2:74:58:18:06:9a:d0:c9: 1f:29:85:48:35:46:34:61:fb:c1:cc:47:3b:93:37:04:13:dd: c9:cc:e9:21:8e:0b:69:67:c9:b7:00:84:d6:13:64:78:a2:e1: 96:ec:81:64:b3:30:c6:d0:75:4d:44:e3:99:45:dd:d2:b8:b3: f1:66:4b:0a -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUwNjA2MjE0MTAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWVlMS1iMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/1u/JKg5QoX+E5uFsCh5oddQOgt5kNzm3vpWYwWJK1CLzkw8LtrkYrRO9D5 MiXSq1zRUDgxSku59OwwzCfHznOGFYYBA6NdVSqQRJ6FVhA8DmDCu5OrF4JZafjK SKY0rFwNA7fH3m6Gra/qPfJe7yRdftk6q2hrxQX/202X3oQf2xbbnrO/Jv6eyqpa m+uMwAQtTkIds1JmUY+NvkoaWxf3u9J3r3KkPZX7GfqiJ7m6io1A3S0azTE6uAEq dkQEwLrswwsXP0ksoabKGRClg71ihDGNesEkLHLdvYab57wBh3Ovb3+lqz4wDWKH J27MvsWb1vmEUehhhieFKAIU9wIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFI91+r/T DY4XgtMdCG64q0HOHUgYMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlEQ0IvRTRDMEY1NkMxODdGMTFFQkFFMjk2OTJFQzRGOUFFMDIvNjhEQUFBMUE3 NDk3MTFFRkI0RURBNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaMAwDBAAbeyEDBAIbeyADBAK3sUwDBAHKK9gwDQYJKoZIhvcNAQELBQAD ggEBAFHC1gXy/Gt7Lwp+BabYNPxB0ENHWZx0DxeZnIy9kXcaMcG8Ram6dVPmokeS jKHaK8O3MeWsnTLd01ZoldnpH3qCx4eSJYftSPsya81w5Sj89vMb82EutOolPkp/ wjiIGuddfspj/sppv0soKQSLZtEs1NIxQ4GvBadRLwkVUyH79HPpKV4QfUzGq6dy pv91PS7J47ZRqCxDVoj1SXsm1DUe8g+2Sm4Ov9EaWd9m/72ryj4FplzTISB17/8d 957SdFgYBprQyR8phUg1RjRh+8HMRzuTNwQT3cnM6SGOC2lnybcAhNYTZHii4Zbs gWSzMMbQdU1E45lF3dK4s/FmSwo= -----END CERTIFICATE-----Generated at Mon Mar 2 09:41:51 2026 by rpki-client