$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa File: CF1EEA5232E311EFA2DDE95DC4F9AE02.roa (raw, json) Hash identifier: QYkQiFEr05Tv2z+AzZ7yFfuyD8NEMDlUdlkRM18Cr8k= Subject key identifier: 4F:29:0F:5D:2E:C0:58:D5:E2:0D:F1:4D:21:EE:F2:98:9F:0B:6D:8B Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 075A Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:15:22 +0000 ROA not before: Wed 27 Aug 2025 01:06:15 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55927 IP address blocks: 27.254.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1882 (0x75a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Aug 27 01:06:15 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4904a-cfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:e4:69:b2:9c:93:a4:bf:19:3f:8a:2f:b9: b9:40:fa:68:e8:d2:2e:1d:a3:b1:75:62:aa:ed:b7: be:3a:2e:6a:a1:5c:04:66:67:9e:ce:65:8d:15:83: 31:41:bc:17:eb:86:cf:34:e1:96:ff:e8:eb:d6:8f: 18:c9:f9:d1:dd:3b:49:e2:98:c8:ff:9e:8a:2c:18: 2a:48:8b:49:da:3f:72:6b:09:a3:25:d5:6a:c8:3d: c9:b5:88:3e:cb:eb:24:71:5a:e6:a5:1d:cd:43:ee: 57:46:ec:ff:37:1c:31:fb:25:43:3a:a8:c8:d7:53: c9:82:a1:1f:17:ac:42:ac:05:88:6f:c7:43:5d:fa: a0:79:5e:96:dc:20:33:dd:f9:fb:bc:de:91:81:d8: e6:88:95:4c:b2:f1:84:e7:46:8c:ce:06:db:a2:4b: 86:4d:01:03:62:55:f4:e5:e0:e0:78:fb:0c:e3:80: 85:75:65:71:a1:a1:27:00:15:8e:da:c4:2d:4a:c3: 03:5e:42:db:e3:79:25:6a:45:ea:a8:b6:97:2f:ca: 03:9a:a1:19:5b:92:73:01:da:59:bd:26:8e:1d:0a: e4:7f:43:9e:91:09:ba:53:9e:cc:51:79:4a:86:bd: 8c:c5:de:fb:ae:be:b1:21:b8:05:38:0c:c3:89:29: e9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:29:0F:5D:2E:C0:58:D5:E2:0D:F1:4D:21:EE:F2:98:9F:0B:6D:8B X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.254.221.0/24 Signature Algorithm: sha256WithRSAEncryption 30:01:18:1f:ad:31:9c:ad:05:30:b1:dd:06:3b:a6:0b:e6:dd: f2:54:54:d0:0c:7f:94:d4:73:1a:20:c2:e8:97:14:8d:88:f2: d8:9e:fb:60:cd:88:ae:93:a7:0b:c6:2e:74:4b:b3:25:3d:ef: 87:6e:ed:d8:d4:1e:aa:6f:ac:71:aa:57:87:7a:ba:90:d4:8c: a1:d1:19:86:32:1a:af:44:b3:b2:01:ab:91:f7:ec:5e:95:09: 57:49:79:71:a4:63:f5:e3:ee:9d:4e:9b:8b:3b:a5:eb:3d:8a: 83:98:f7:88:ba:73:4e:19:d2:90:ac:53:d2:08:57:f6:80:44: e2:ef:ca:e4:d7:cd:9f:20:7a:98:e9:02:ef:07:21:1a:31:bf: a9:06:d7:56:39:d8:ea:bb:88:95:bc:c3:fa:d3:e1:91:86:8e: 67:83:7e:8d:ab:15:bb:56:ee:2a:52:4c:ac:ea:c3:bb:cc:e5: e1:d3:45:a8:d2:79:2d:0d:d8:98:b2:4a:b9:5a:de:c1:37:61: 44:8b:6c:7e:dd:07:d3:8d:28:c3:5c:63:ec:4e:ab:59:e6:7a: 77:e3:fd:60:e4:80:b9:6d:0b:57:ca:33:0f:aa:ce:fc:94:9c: 06:9f:02:de:02:30:dc:40:b2:57:c1:a7:36:31:57:63:ff:18: cd:b9:e9:11 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjUwODI3MDEwNjE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTA0YS1jZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcnkabKck6S/GT+KL7m5QPpo6NIuHaOxdWKq7be+Oi5qoVwEZmeezmWNFYMx QbwX64bPNOGW/+jr1o8YyfnR3TtJ4pjI/56KLBgqSItJ2j9yawmjJdVqyD3JtYg+ y+skcVrmpR3NQ+5XRuz/Nxwx+yVDOqjI11PJgqEfF6xCrAWIb8dDXfqgeV6W3CAz 3fn7vN6RgdjmiJVMsvGE50aMzgbbokuGTQEDYlX05eDgePsM44CFdWVxoaEnABWO 2sQtSsMDXkLb43klakXqqLaXL8oDmqEZW5JzAdpZvSaOHQrkf0OekQm6U57MUXlK hr2Mxd77rr6xIbgFOAzDiSnpgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE8pD10u wFjV4g3xTSHu8pifC22LMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQ0YxRUVBNTIz MkUzMTFFRkEyRERFOTVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAG/7dMA0GCSqGSIb3DQEBCwUAA4IBAQAwARgfrTGcrQUwsd0GO6YL 5t3yVFTQDH+U1HMaIMLolxSNiPLYnvtgzYiuk6cLxi50S7MlPe+Hbu3Y1B6qb6xx qleHerqQ1Iyh0RmGMhqvRLOyAauR9+xelQlXSXlxpGP14+6dTpuLO6XrPYqDmPeI unNOGdKQrFPSCFf2gETi78rk182fIHqY6QLvByEaMb+pBtdWOdjqu4iVvMP60+GR ho5ng36NqxW7Vu4qUkys6sO7zOXh00Wo0nktDdiYskq5Wt7BN2FEi2x+3QfTjSjD XGPsTqtZ5np34/1g5IC5bQtXyjMPqs78lJwGnwLeAjDcQLJXwac2MVdj/xjNuekR -----END CERTIFICATE-----Generated at Mon Mar 2 02:06:18 2026 by rpki-client