$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa File: 2CF180F0809511EFB8A82822C4F9AE02.roa (raw, json) Hash identifier: Fti/BwALCke6E+jyAcaKi62ywWpLRfQC7TvlgdTIB70= Subject key identifier: 02:4E:B3:2E:72:EE:E6:D3:96:75:39:63:AC:04:2B:F5:83:8A:54:0D Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Certificate serial: 171D Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:44:51 +0000 ROA not before: Sat 10 May 2025 16:57:55 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 15830 IP address blocks: 27.111.208.0/20 maxlen: 20 27.111.224.0/22 maxlen: 22 27.111.232.0/21 maxlen: 21 101.97.64.0/22 maxlen: 22 101.97.72.0/21 maxlen: 21 101.97.80.0/21 maxlen: 21 118.103.180.0/22 maxlen: 22 202.79.192.0/22 maxlen: 22 202.79.196.0/23 maxlen: 23 202.79.200.0/21 maxlen: 21 202.79.208.0/20 maxlen: 20 202.79.208.0/22 maxlen: 22 202.79.213.0/24 maxlen: 24 202.79.214.0/23 maxlen: 23 202.79.216.0/21 maxlen: 21 2403:b100::/32 maxlen: 32 2403:b101::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5917 (0x171d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Validity Not Before: May 10 16:57:55 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a442d3-37f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:df:ab:23:c5:4b:62:69:58:80:53:3f:fa: d1:af:b5:da:ae:07:2e:ea:e5:dc:a1:37:d3:6d:19: 4d:8f:31:f2:d0:ad:dd:28:d6:b1:a7:20:76:fe:f7: e7:3d:02:b1:35:ff:ad:0c:a6:50:0e:55:5f:31:9d: ad:1b:83:6a:66:ca:e2:07:77:a0:11:86:00:a4:23: b4:b4:b7:6c:62:d2:d0:54:8b:bb:61:84:78:f7:d8: ea:13:8a:56:b0:24:91:ab:a2:e8:3f:b9:10:11:40: 97:3b:28:87:9f:ab:c4:a9:e3:2a:60:48:a6:44:ba: e3:5d:23:3b:ac:83:17:60:b4:31:50:4d:83:f3:a2: 21:c1:60:76:6d:54:6d:1f:fb:8e:e3:31:eb:02:2c: 98:6a:d3:4f:30:3a:37:30:00:bc:1f:88:25:6d:1c: 84:1c:db:45:1e:4f:72:01:86:ae:12:37:99:56:d6: 08:77:6d:cc:7a:83:07:a6:37:07:40:e4:f0:d0:55: 15:be:62:3d:ee:55:ac:9c:f5:29:d7:f3:aa:63:c4: 0c:42:48:b4:01:0a:51:d9:c3:19:53:9d:a4:f3:ed: bf:f5:d1:1a:4f:c6:fe:d6:d7:5f:7d:51:b2:05:e5: 36:65:67:74:65:7b:f1:bc:00:21:50:8b:95:ee:a1: 7c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4E:B3:2E:72:EE:E6:D3:96:75:39:63:AC:04:2B:F5:83:8A:54:0D X509v3 Authority Key Identifier: keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.111.208.0-27.111.227.255 27.111.232.0/21 101.97.64.0/22 101.97.72.0-101.97.87.255 118.103.180.0/22 202.79.192.0-202.79.197.255 202.79.200.0-202.79.223.255 IPv6: 2403:b100::-2403:b101:ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption af:85:81:f0:21:fa:a8:cd:84:4c:df:de:b6:ec:16:86:3d:97: d8:fa:01:50:05:a4:fb:01:aa:08:5c:a4:52:84:97:b4:28:bb: 5c:f1:bd:5e:bf:25:e1:71:a0:42:85:91:43:6b:e6:7b:32:61: cf:98:7b:e6:03:46:af:8b:7d:35:23:42:c4:ec:eb:26:9a:90: a9:de:9b:8a:fa:e1:fa:78:83:1a:38:1a:4a:b9:e0:f4:30:f4: db:be:63:a4:c5:34:3f:23:1b:bc:73:e1:36:a9:f7:fd:93:73: 34:80:9d:07:0a:56:5c:4c:4f:5c:43:4e:be:de:a7:5a:da:bb: 56:8e:23:36:1c:e6:89:ae:ab:e5:ce:37:36:68:32:1d:43:a0: 3d:ff:5c:dd:2f:dc:e0:98:82:34:67:66:e2:2a:c4:e0:0e:dd: 55:99:2f:e6:14:9b:86:bc:74:3c:93:b9:8d:e8:49:7c:cb:91: 80:a1:e7:66:a9:0d:36:c5:59:f0:19:fd:d9:45:a2:bb:56:b2: b2:5d:4a:d7:0d:f2:f6:60:c1:ab:a2:9c:07:e1:4e:b0:5f:ca: 6c:5f:4e:58:6d:7b:54:80:ae:7c:79:fe:4f:e3:a0:f2:5d:e0: 7b:ff:07:db:4b:23:0b:c9:fa:bc:a3:4f:4a:cc:00:c8:52:9b: 8e:8a:54:7a -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICFx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1 NzA3M0UxN0YwHhcNMjUwNTEwMTY1NzU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDJkMy0zN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNTfqyPFS2JpWIBTP/rRr7Xargcu6uXcoTfTbRlNjzHy0K3dKNaxpyB2/vfn PQKxNf+tDKZQDlVfMZ2tG4NqZsriB3egEYYApCO0tLdsYtLQVIu7YYR499jqE4pW sCSRq6LoP7kQEUCXOyiHn6vEqeMqYEimRLrjXSM7rIMXYLQxUE2D86IhwWB2bVRt H/uO4zHrAiyYatNPMDo3MAC8H4glbRyEHNtFHk9yAYauEjeZVtYId23MeoMHpjcH QOTw0FUVvmI97lWsnPUp1/OqY8QMQki0AQpR2cMZU52k8+2/9dEaT8b+1tdffVGy BeU2ZWd0ZXvxvAAhUIuV7qF8owIDAQABo4ICvDCCArgwHQYDVR0OBBYEFAJOsy5y 7ubTlnU5Y6wEK/WDilQNMB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5 RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI1NEMvNUE1NjRENDgxOUU4MTFFOEI5NjUwQzdFQzRGOUFFMDIvMkNGMTgwRjA4 MDk1MTFFRkI4QTgyODIyQzRGOUFFMDIucm9hMHsGCCsGAQUFBwEHAQH/BGwwajBQ BAIAATBKMAwDBAQbb9ADBAIbb+ADBAMbb+gDBAJlYUAwDAMEA2VhSAMEA2VhUAME AnZntDAMAwQGyk/AAwQByk/EMAwDBAPKT8gDBAXKT8AwFgQCAAIwEDAOAwQAJAOx AwYAJAOxAQAwDQYJKoZIhvcNAQELBQADggEBAK+FgfAh+qjNhEzf3rbsFoY9l9j6 AVAFpPsBqghcpFKEl7Qou1zxvV6/JeFxoEKFkUNr5nsyYc+Ye+YDRq+LfTUjQsTs 6yaakKnem4r64fp4gxo4Gkq54PQw9Nu+Y6TFND8jG7xz4Tap9/2TczSAnQcKVlxM T1xDTr7ep1rau1aOIzYc5omuq+XONzZoMh1DoD3/XN0v3OCYgjRnZuIqxOAO3VWZ L+YUm4a8dDyTuY3oSXzLkYCh52apDTbFWfAZ/dlFortWsrJdStcN8vZgwauinAfh TrBfymxfTlhte1SArnx5/k/joPJd4Hv/B9tLIwvJ+ryjT0rMAMhSm46KVHo= -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:33 2026 by rpki-client