$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/40583EE4424311EFB787BD3AC4F9AE02.roa File: 40583EE4424311EFB787BD3AC4F9AE02.roa (raw, json) Hash identifier: 20QRaNN5HpjNTE0DjTJaVPeRVD8X2idK/zhTnjiKhQE= Subject key identifier: 48:7C:4F:8C:1A:C0:DD:29:F2:29:25:54:C5:60:BD:CE:24:13:58:D1 Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 06B6 Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/40583EE4424311EFB787BD3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:40:56 +0000 ROA not before: Fri 14 Nov 2025 21:43:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24446 IP address blocks: 27.121.64.0/21 maxlen: 21 114.31.72.0/21 maxlen: 21 114.141.204.0/22 maxlen: 22 117.58.248.0/21 maxlen: 21 180.235.128.0/22 maxlen: 22 202.47.0.0/21 maxlen: 21 202.124.240.0/21 maxlen: 21 202.131.95.0/24 maxlen: 24 202.191.60.0/22 maxlen: 22 203.2.122.0/24 maxlen: 24 203.8.188.0/23 maxlen: 23 203.19.190.0/23 maxlen: 23 203.30.252.0/24 maxlen: 24 203.55.142.0/24 maxlen: 24 203.55.143.0/24 maxlen: 24 203.210.96.0/19 maxlen: 19 2403:1400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Nov 14 21:43:19 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48838-cb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e5:08:26:36:15:f8:c7:22:51:e5:f1:7b:de: 37:c9:42:0a:6f:8c:43:35:ab:7a:09:22:ce:fb:d3: fe:d7:17:b3:d4:6b:5e:a8:21:58:00:0d:d0:df:4b: d7:18:6f:46:70:8d:f9:91:95:df:5b:1d:da:f8:07: 02:94:39:45:2f:d2:8e:e1:32:92:63:b5:f2:02:5e: a6:9e:ff:c0:64:17:0a:80:06:a5:e9:66:71:57:21: 48:c3:80:01:72:81:d2:37:99:f4:a1:90:5d:b3:eb: 55:b9:97:68:2e:a2:ab:17:fb:5b:af:73:8c:81:14: 65:61:cd:6c:b6:99:65:ba:7b:e5:45:4d:e6:13:fe: 33:3d:c4:67:32:88:e8:2e:5b:7d:43:eb:f7:35:a8: 25:ba:65:43:d0:78:48:c1:41:7c:10:73:4b:13:d1: a4:60:5d:0f:30:c3:58:cd:22:34:07:4d:07:2d:35: 0c:1c:63:19:53:06:6e:e1:ae:3a:1f:79:f8:89:74: ca:6c:2d:31:35:c2:c3:ea:f7:66:95:ce:77:7d:1d: 27:25:9a:a2:29:67:77:0c:90:21:bb:30:12:23:ed: 7f:7c:72:bf:2d:fa:e7:e4:a5:62:a2:e7:13:fd:16: 62:db:b3:b2:57:6b:c1:f5:eb:24:ed:0c:f7:6a:a9: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7C:4F:8C:1A:C0:DD:29:F2:29:25:54:C5:60:BD:CE:24:13:58:D1 X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/40583EE4424311EFB787BD3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.121.64.0/21 114.31.72.0/21 114.141.204.0/22 117.58.248.0/21 180.235.128.0/22 202.47.0.0/21 202.124.240.0/21 202.131.95.0/24 202.191.60.0/22 203.2.122.0/24 203.8.188.0/23 203.19.190.0/23 203.30.252.0/24 203.55.142.0/23 203.210.96.0/19 IPv6: 2403:1400::/32 Signature Algorithm: sha256WithRSAEncryption 39:5d:42:49:86:cd:0d:b1:f5:86:f5:1c:d9:2a:e3:2e:3b:ee: 3a:23:a0:c7:d6:3d:d6:6e:07:9b:d9:a8:fd:c4:6d:42:95:87: c2:45:7d:c5:24:05:b3:3c:9c:c1:42:d1:5e:05:49:fc:c8:6e: 88:cc:45:1c:c1:cc:fd:6a:d9:70:68:32:8a:77:8a:f8:3b:ff: a2:67:e5:0b:85:3c:f1:16:4f:a1:08:bd:ec:1f:fd:97:72:62: eb:90:9f:91:97:51:c0:ee:67:b5:aa:44:52:65:1c:ab:85:dc: 79:d2:b0:9c:2c:db:71:4e:21:4b:ac:12:32:78:cb:fb:26:bc: d9:49:8c:73:27:3d:74:6c:ec:40:50:e8:b6:e6:58:fd:12:b4: db:85:4c:40:d0:a4:ac:2c:d3:bc:03:43:a4:f8:af:19:d3:b6: b7:0d:57:3b:9a:e1:49:64:e1:cb:f4:47:64:d3:c4:3f:ea:e2: 89:84:9f:77:1a:2e:bf:bc:1f:9b:6e:47:57:50:eb:11:83:c7: fe:52:fd:8f:6b:87:7a:d5:63:cc:31:33:fa:b5:3f:1c:97:12: e7:48:2a:1f:38:9d:37:39:50:56:d0:73:bc:7e:42:a0:4b:3f: dc:27:a3:22:c7:71:db:be:ee:b5:f9:6f:9d:f4:14:4b:47:93: 6b:43:4a:30 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjUxMTE0MjE0MzE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODgzOC1jYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OUIJjYV+MciUeXxe943yUIKb4xDNat6CSLO+9P+1xez1GteqCFYAA3Q30vX GG9GcI35kZXfWx3a+AcClDlFL9KO4TKSY7XyAl6mnv/AZBcKgAal6WZxVyFIw4AB coHSN5n0oZBds+tVuZdoLqKrF/tbr3OMgRRlYc1stpllunvlRU3mE/4zPcRnMojo Llt9Q+v3NaglumVD0HhIwUF8EHNLE9GkYF0PMMNYzSI0B00HLTUMHGMZUwZu4a46 H3n4iXTKbC0xNcLD6vdmlc53fR0nJZqiKWd3DJAhuzASI+1/fHK/Lfrn5KVioucT /RZi27OyV2vB9esk7Qz3aqkzUwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFEh8T4wa wN0p8iklVMVgvc4kE1jRMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvNDA1ODNFRTQ0 MjQzMTFFRkI3ODdCRDNBQzRGOUFFMDIucm9hMIGCBggrBgEFBQcBBwEB/wRzMHEw YAQCAAEwWgMEAxt5QAMEA3IfSAMEAnKNzAMEA3U6+AMEArTrgAMEA8ovAAMEA8p8 8AMEAMqDXwMEAsq/PAMEAMsCegMEAcsIvAMEAcsTvgMEAMse/AMEAcs3jgMEBcvS YDANBAIAAjAHAwUAJAMUADANBgkqhkiG9w0BAQsFAAOCAQEAOV1CSYbNDbH1hvUc 2SrjLjvuOiOgx9Y91m4Hm9mo/cRtQpWHwkV9xSQFszycwULRXgVJ/MhuiMxFHMHM /WrZcGgyineK+Dv/omflC4U88RZPoQi97B/9l3Ji65CfkZdRwO5ntapEUmUcq4Xc edKwnCzbcU4hS6wSMnjL+ya82UmMcyc9dGzsQFDotuZY/RK024VMQNCkrCzTvAND pPivGdO2tw1XO5rhSWThy/RHZNPEP+riiYSfdxouv7wfm25HV1DrEYPH/lL9j2uH etVjzDEz+rU/HJcS50gqHzidNzlQVtBzvH5CoEs/3CejIsdx277utflvnfQUS0eT a0NKMA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:56:34 2026 by rpki-client