$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1827B7E0605411EFA8069323C4F9AE02.roa File: 1827B7E0605411EFA8069323C4F9AE02.roa (raw, json) Hash identifier: Bwyx7v9ErsR+mUyY+3+Ype9qNhlTd5XIZgvvVkhOvjQ= Subject key identifier: E1:1C:41:37:3D:63:E8:F1:7F:B5:06:EE:35:1D:11:96:45:98:C1:81 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 367F Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1827B7E0605411EFA8069323C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:47:59 +0000 ROA not before: Thu 24 Jul 2025 14:50:25 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 149796 IP address blocks: 203.209.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13951 (0x367f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 24 14:50:25 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a489df-6d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:29:67:38:1f:71:15:ed:67:12:f3:e3:d1: 45:12:7f:33:7b:ec:02:09:c3:2d:2c:c8:d6:04:28: d0:25:32:c0:a9:70:1b:ce:5f:2c:c4:da:c1:da:13: f6:48:86:85:52:5b:98:00:e0:8c:42:39:ad:bc:32: 74:8d:fa:8b:ae:bc:cc:08:57:70:70:11:a3:22:4f: f3:2b:47:61:11:2f:8b:c3:60:28:01:28:cc:e2:80: a9:07:7f:98:4f:6e:f2:3b:a7:94:97:9a:99:7f:ae: 91:9e:c0:ec:3e:77:fe:20:87:27:1c:5c:88:a3:8b: 99:91:68:f4:90:64:e4:0f:05:fa:0c:04:a0:b6:db: fc:04:fb:61:ec:72:d5:e8:58:83:a4:ec:59:95:00: 3b:d2:6d:11:35:c6:7c:0e:6c:27:40:0e:6b:b6:3e: 4b:ee:f8:1e:91:5b:39:30:46:78:70:a8:f5:5a:71: d9:49:83:6d:1f:3e:2b:02:1b:46:36:a5:33:b3:ef: 82:81:e5:68:26:9f:d1:ee:9d:b0:96:e5:2f:71:a2: 54:a3:09:c7:d2:10:73:06:e6:f2:85:09:ea:66:43: ac:db:71:51:a5:5f:44:ef:54:d7:f5:43:27:82:87: b0:4a:77:84:74:4c:f5:1e:14:3c:15:82:95:69:7d: 22:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1C:41:37:3D:63:E8:F1:7F:B5:06:EE:35:1D:11:96:45:98:C1:81 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1827B7E0605411EFA8069323C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.209.84.0/24 Signature Algorithm: sha256WithRSAEncryption 02:0a:b2:9e:32:ac:6d:eb:ae:55:00:60:b1:02:b5:51:d5:db: f2:7a:1a:31:30:21:e5:4b:5f:dc:b4:13:98:0f:02:09:d9:c4: fa:f6:cf:a1:b9:0d:1d:d2:65:e6:c2:70:3f:a4:ae:a7:fc:13: ae:8b:ad:b3:de:0b:1c:fc:a1:fc:d6:fd:b5:30:6a:f1:87:af: e4:f2:4a:e1:d1:02:51:f3:c2:bf:f2:24:c8:be:96:80:41:d7: 59:94:a8:f4:2f:52:96:f0:3a:09:fb:5b:1a:05:5c:2a:d3:c9: 25:46:29:2d:9b:e8:d3:a1:07:5a:84:d4:3b:cf:d1:71:05:d3: b3:70:5d:31:17:ce:09:b2:87:2d:21:4c:70:63:cb:df:f9:22: d9:5f:2a:ac:40:13:f0:46:8b:48:76:2c:65:18:c9:73:78:98: 3c:bb:b3:f7:bf:08:8d:dc:7f:2b:66:2e:21:3c:a3:7d:91:69: 44:4a:96:32:1f:db:da:d0:d5:6c:4e:49:be:b3:04:6c:df:2f: 02:e9:e0:eb:62:c7:c9:6c:cd:c0:82:34:55:c7:cf:37:cf:34: 81:88:70:d7:d3:f0:63:12:08:70:50:62:8f:e8:2b:c4:0b:9e: 18:cf:51:c8:49:28:6a:73:7a:08:22:20:97:cb:b1:73:3b:d6: ab:11:ab:82 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjUwNzI0MTQ1MDI1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODlkZi02ZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmUpZzgfcRXtZxLz49FFEn8ze+wCCcMtLMjWBCjQJTLAqXAbzl8sxNrB2hP2 SIaFUluYAOCMQjmtvDJ0jfqLrrzMCFdwcBGjIk/zK0dhES+Lw2AoASjM4oCpB3+Y T27yO6eUl5qZf66RnsDsPnf+IIcnHFyIo4uZkWj0kGTkDwX6DASgttv8BPth7HLV 6FiDpOxZlQA70m0RNcZ8DmwnQA5rtj5L7vgekVs5MEZ4cKj1WnHZSYNtHz4rAhtG NqUzs++CgeVoJp/R7p2wluUvcaJUownH0hBzBubyhQnqZkOs23FRpV9E71TX9UMn goewSneEdEz1HhQ8FYKVaX0iVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOEcQTc9 Y+jxf7UG7jUdEZZFmMGBMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvMTgyN0I3RTA2 MDU0MTFFRkE4MDY5MzIzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAy9FUMA0GCSqGSIb3DQEBCwUAA4IBAQACCrKeMqxt665VAGCxArVR 1dvyehoxMCHlS1/ctBOYDwIJ2cT69s+huQ0d0mXmwnA/pK6n/BOui62z3gsc/KH8 1v21MGrxh6/k8krh0QJR88K/8iTIvpaAQddZlKj0L1KW8DoJ+1saBVwq08klRikt m+jToQdahNQ7z9FxBdOzcF0xF84JsoctIUxwY8vf+SLZXyqsQBPwRotIdixlGMlz eJg8u7P3vwiN3H8rZi4hPKN9kWlESpYyH9va0NVsTkm+swRs3y8C6eDrYsfJbM3A gjRVx883zzSBiHDX0/BjEghwUGKP6CvEC54Yz1HISShqc3oIIiCXy7FzO9arEauC -----END CERTIFICATE-----Generated at Mon Mar 2 20:07:02 2026 by rpki-client