$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/2A01310EC16311F18FE561465911F970.roa File: 2A01310EC16311F18FE561465911F970.roa (raw, json) Hash identifier: oMdqNBacMju7uLN3JgNAXjRJ2Oc6Y7lPPtFAMPz05uU= Subject key identifier: 88:E6:64:EE:55:CD:7F:09:3C:6D:F4:11:2F:B3:A1:02:AC:51:7F:1C Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Certificate serial: 0277 Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/2A01310EC16311F18FE561465911F970.roa Signing time: Tue 06 Oct 2026 08:51:48 +0000 ROA not before: Tue 06 Oct 2026 08:51:48 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55832 IP address blocks: 27.123.216.0/22 maxlen: 22 27.123.216.0/24 maxlen: 24 27.123.217.0/24 maxlen: 24 27.123.218.0/24 maxlen: 24 27.123.219.0/24 maxlen: 24 2407:2a00::/32 maxlen: 32 2407:2a00::/44 maxlen: 44 2407:2a00::/48 maxlen: 48 2407:2a00:1::/48 maxlen: 48 2407:2a00:2::/48 maxlen: 48 2407:2a00:3::/48 maxlen: 48 2407:2a00:4::/48 maxlen: 48 2407:2a00:5::/48 maxlen: 48 2407:2a00:6::/48 maxlen: 48 2407:2a00:7::/48 maxlen: 48 2407:2a00:8::/48 maxlen: 48 2407:2a00:10::/44 maxlen: 44 2407:2a00:20::/44 maxlen: 44 2407:2a00:30::/44 maxlen: 44 2407:2a00:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 03:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Validity Not Before: Oct 6 08:51:48 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6ac4b6a3-6982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:7f:27:ea:81:42:b7:11:61:40:39:11:a5: 32:f3:91:ae:29:88:77:54:50:28:9e:97:b0:ff:c2: 83:9c:d6:36:3f:f9:11:61:ad:ce:5d:1d:0e:2d:9b: 2b:dd:24:4a:c3:8a:eb:60:44:c2:32:77:ea:4b:f3: 15:1d:02:38:d7:f5:a9:e0:62:69:83:13:34:09:62: 54:19:12:e5:f3:b2:e1:4b:d6:89:d7:44:fc:a8:2c: 55:96:9a:a4:35:17:a1:ca:2b:62:cc:5a:30:75:93: 2c:a2:bf:af:dc:04:b4:45:0a:0e:53:1e:66:09:0b: 7d:88:ff:38:b3:58:97:5c:df:26:8f:96:ff:c9:6a: 7a:42:00:46:44:af:ab:47:d3:68:13:19:fa:6c:4f: 2a:8b:41:7a:4d:b6:9e:e1:00:83:92:18:95:95:47: 6b:ad:d5:d4:63:09:d2:3d:ed:8d:86:32:c9:ab:ca: 00:ed:45:b2:cf:31:1e:12:8a:fd:91:1e:ce:c6:e3: d4:48:50:d2:cf:50:43:b6:08:d3:2d:c9:a9:ad:ec: 8d:0b:37:59:cc:f1:78:90:2e:82:d8:a9:ef:a2:12: 8e:7a:a8:59:48:78:1d:bf:61:95:59:e4:02:38:34: a2:67:8e:30:22:2c:8a:36:85:5f:07:43:f3:8c:e3: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E6:64:EE:55:CD:7F:09:3C:6D:F4:11:2F:B3:A1:02:AC:51:7F:1C X509v3 Authority Key Identifier: keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/2A01310EC16311F18FE561465911F970.roa sbgp-ipAddrBlock: critical IPv4: 27.123.216.0/22 IPv6: 2407:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 2e:ac:cd:5b:87:ef:3c:d8:0d:80:ee:1b:37:08:36:9e:59:ff: 3b:0b:38:b0:da:6b:4e:ea:88:e7:fa:f5:cf:08:b9:e1:82:9e: dd:1f:89:13:44:5c:6e:d6:7f:26:2d:ee:ed:7f:89:66:5e:af: 16:b2:48:72:44:93:20:98:c8:e3:33:56:22:53:4e:9f:2b:c7: be:92:32:c3:3b:bd:62:c6:e4:17:65:bf:46:42:3e:0a:ca:29: 56:56:6b:28:b6:bd:82:dd:17:0a:87:6b:bf:8e:8f:6a:38:e6: 99:36:b2:cd:90:ba:f9:b5:e9:7a:03:e7:a9:fc:10:b0:8e:ef: 6d:da:7f:57:7c:d4:b8:8f:25:5d:6f:3d:f9:e7:66:f5:3b:f4: 5c:0e:be:26:4f:d8:d5:1f:aa:4c:f2:32:da:08:74:b3:72:5c: 8d:c1:e3:b8:b3:47:15:50:96:4a:0e:e5:a0:da:4e:c2:fb:f4: 3a:40:6d:b9:2c:10:14:c2:6c:6a:84:d7:2c:85:89:3c:d6:67: 78:eb:55:3e:9e:0e:dd:3d:be:92:33:c8:65:33:27:4d:d1:30: 6f:b3:81:00:78:f2:ac:dc:56:ea:a2:70:30:97:56:1b:7f:2c: 57:9c:6c:48:be:67:de:bb:0e:e9:23:63:cb:cc:7c:7a:e4:f0: bb:7f:fe:45 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3 OEExNEZFNDgwHhcNMjYxMDA2MDg1MTQ4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM0YjZhMy02OTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RF/J+qBQrcRYUA5EaUy85GuKYh3VFAonpew/8KDnNY2P/kRYa3OXR0OLZsr 3SRKw4rrYETCMnfqS/MVHQI41/Wp4GJpgxM0CWJUGRLl87LhS9aJ10T8qCxVlpqk NRehyitizFowdZMsor+v3AS0RQoOUx5mCQt9iP84s1iXXN8mj5b/yWp6QgBGRK+r R9NoExn6bE8qi0F6Tbae4QCDkhiVlUdrrdXUYwnSPe2NhjLJq8oA7UWyzzEeEor9 kR7OxuPUSFDSz1BDtgjTLcmpreyNCzdZzPF4kC6C2KnvohKOeqhZSHgdv2GVWeQC ODSiZ44wIiyKNoVfB0PzjOMnrQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFIjmZO5V zX8JPG30ES+zoQKsUX8cMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZCMjQvQjQ3M0M0QkU5MzMwMTFFRTgyMzA4MDU5QzRGOUFFMDIvMkEwMTMxMEVD MTYzMTFGMThGRTU2MTQ2NTkxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCG3vYMA0EAgACMAcDBQAkByoAMA0GCSqGSIb3DQEBCwUAA4IBAQAu rM1bh+882A2A7hs3CDaeWf87Cziw2mtO6ojn+vXPCLnhgp7dH4kTRFxu1n8mLe7t f4lmXq8WskhyRJMgmMjjM1YiU06fK8e+kjLDO71ixuQXZb9GQj4KyilWVmsotr2C 3RcKh2u/jo9qOOaZNrLNkLr5tel6A+ep/BCwju9t2n9XfNS4jyVdbz3552b1O/Rc Dr4mT9jVH6pM8jLaCHSzclyNweO4s0cVUJZKDuWg2k7C+/Q6QG25LBAUwmxqhNcs hYk81md461U+ng7dPb6SM8hlMydN0TBvs4EAePKs3FbqonAwl1YbfyxXnGxIvmfe uw7pI2PLzHx65PC7f/5F -----END CERTIFICATE-----Generated at Mon Oct 12 20:04:07 2026 by rpki-client