$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/C21D3A065B7E11F0A8B76B2EC4F9AE02.roa File: C21D3A065B7E11F0A8B76B2EC4F9AE02.roa (raw, json) Hash identifier: ev3YW2NLkO0rjwyR3qqZhC4fRgKa7uqRJcOoJlN/Fyo= Subject key identifier: 51:BB:C3:FF:37:A0:05:62:B6:50:32:80:90:10:50:99:88:4E:E1:36 Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Certificate serial: 0CFF Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/C21D3A065B7E11F0A8B76B2EC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:39:26 +0000 ROA not before: Mon 07 Jul 2025 22:07:23 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132898 IP address blocks: 103.27.216.0/22 maxlen: 24 2407:7f00::/32 maxlen: 32 2407:7f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Validity Not Before: Jul 7 22:07:23 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4256d-4d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:f9:0e:ca:6b:96:20:4a:06:44:b0:34:36: 3f:d5:ff:96:71:9e:00:2d:9d:45:13:c0:5e:a1:db: b2:68:24:1a:63:6d:07:d9:e1:12:1e:40:4e:00:2f: b3:2c:72:62:56:83:c1:35:6e:5f:96:31:d4:5c:6a: 10:f2:67:ad:76:9a:81:cc:33:ca:c7:1e:47:c3:d7: 70:cd:24:be:2e:62:27:65:b5:53:1e:7e:74:7e:44: 6b:e6:26:a9:d4:b0:84:0c:1f:b7:da:8e:ac:19:ce: d2:ae:cb:84:c4:17:59:9a:3a:34:44:62:ff:3f:ec: 0d:08:68:d7:49:09:41:f9:39:43:9b:da:c8:7c:26: 0d:8b:7e:9f:fa:a7:8d:6e:19:2c:35:c4:06:69:92: 0b:6f:54:8d:bc:5b:95:df:9e:46:13:08:89:59:a4: fa:6e:d5:19:5b:7a:1c:07:07:53:ba:9b:45:e6:fa: 3a:d2:5f:e9:c6:48:54:d1:b0:8c:ff:44:fe:9c:39: 23:0a:f1:63:9b:f8:05:76:91:4e:ee:21:d6:6f:89: 15:74:14:a9:23:7a:97:ce:7d:e2:1e:f6:ff:1a:1d: 68:e6:5b:9c:11:69:37:ec:e6:97:9f:97:f4:59:f6: 28:67:5b:53:e8:4c:d7:15:ec:54:a7:ef:19:52:0f: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BB:C3:FF:37:A0:05:62:B6:50:32:80:90:10:50:99:88:4E:E1:36 X509v3 Authority Key Identifier: keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/C21D3A065B7E11F0A8B76B2EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.27.216.0/22 IPv6: 2407:7f00::/32 Signature Algorithm: sha256WithRSAEncryption 22:66:3f:a6:9f:15:7c:cc:fe:c4:12:7b:ad:da:27:76:d5:72: 7a:a3:31:8b:0f:7e:e4:1b:8b:7c:45:08:da:ab:92:af:27:33: 99:d8:e9:04:92:f3:5d:7a:c8:02:3e:9a:9e:86:c1:37:05:dd: ab:cf:d6:40:ec:8d:15:47:1e:31:7a:9e:68:5e:53:d7:54:ca: 55:2d:e4:a6:36:5c:64:a4:dd:50:ab:10:11:7c:c8:d2:9f:45: 9c:6a:70:5b:bd:fa:45:28:ad:29:42:00:03:ab:cd:9b:56:30: 5d:28:65:01:61:fc:77:f8:d4:90:0b:93:20:9c:53:27:e7:1e: 96:90:b0:10:02:b8:8a:9c:6f:be:85:7f:40:5f:b7:9a:07:4f: fa:48:fa:de:e2:82:0c:a2:b7:b6:2e:54:77:ac:70:d9:0d:d0: 0d:f5:72:58:4b:78:a8:78:91:04:25:1f:d2:a8:f0:3f:52:63: 01:39:f3:a3:fe:d3:a6:e8:05:07:1c:e0:05:27:06:37:de:e8: 1f:65:7a:0a:6a:49:52:43:f7:7a:80:15:33:3c:e2:75:c3:66: d7:ab:94:d2:ca:a1:40:98:29:5a:7e:68:2e:f5:bc:28:b8:e8: 66:15:54:8e:2b:4c:55:09:47:22:da:fb:d6:e1:c5:da:e5:76: 28:33:4f:be -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC RDg3QjE5RUYwHhcNMjUwNzA3MjIwNzIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjU2ZC00ZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3/5DsprliBKBkSwNDY/1f+WcZ4ALZ1FE8BeoduyaCQaY20H2eESHkBOAC+z LHJiVoPBNW5fljHUXGoQ8metdpqBzDPKxx5Hw9dwzSS+LmInZbVTHn50fkRr5iap 1LCEDB+32o6sGc7SrsuExBdZmjo0RGL/P+wNCGjXSQlB+TlDm9rIfCYNi36f+qeN bhksNcQGaZILb1SNvFuV355GEwiJWaT6btUZW3ocBwdTuptF5vo60l/pxkhU0bCM /0T+nDkjCvFjm/gFdpFO7iHWb4kVdBSpI3qXzn3iHvb/Gh1o5lucEWk37OaXn5f0 WfYoZ1tT6EzXFexUp+8ZUg8RWQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFG7w/83 oAVitlAygJAQUJmITuE2MB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBFNjYvNzA2MzlFRkNGRjZFMTFFOTg1QTg4QzY3QzRGOUFFMDIvQzIxRDNBMDY1 QjdFMTFGMEE4Qjc2QjJFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZxvYMA0EAgACMAcDBQAkB38AMA0GCSqGSIb3DQEBCwUAA4IBAQAi Zj+mnxV8zP7EEnut2id21XJ6ozGLD37kG4t8RQjaq5KvJzOZ2OkEkvNdesgCPpqe hsE3Bd2rz9ZA7I0VRx4xep5oXlPXVMpVLeSmNlxkpN1QqxARfMjSn0WcanBbvfpF KK0pQgADq82bVjBdKGUBYfx3+NSQC5MgnFMn5x6WkLAQAriKnG++hX9AX7eaB0/6 SPre4oIMore2LlR3rHDZDdAN9XJYS3ioeJEEJR/SqPA/UmMBOfOj/tOm6AUHHOAF JwY33ugfZXoKaklSQ/d6gBUzPOJ1w2bXq5TSyqFAmClafmgu9bwouOhmFVSOK0xV CUci2vvW4cXa5XYoM0++ -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:47 2026 by rpki-client