$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/AF2BF494314B11F0BDC2D637C4F9AE02.roa File: AF2BF494314B11F0BDC2D637C4F9AE02.roa (raw, json) Hash identifier: c+yxSSqDihz+qFEUHuonkkZoAtB8KHRyPQ7jKvq3vlc= Subject key identifier: CE:C8:20:8C:34:70:E6:30:19:70:9B:44:E5:36:3D:DD:03:29:92:37 Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Certificate serial: 1927 Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/AF2BF494314B11F0BDC2D637C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:08:30 +0000 ROA not before: Thu 04 Dec 2025 16:15:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 152335 IP address blocks: 27.49.252.0/22 maxlen: 22 2403:4c0:fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6439 (0x1927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Validity Not Before: Dec 4 16:15:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4809e-5b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:08:b7:ef:a8:9d:8d:84:99:ee:89:e8:f9: 08:cb:0f:4a:51:d4:73:a1:71:a8:c7:4d:0a:9d:26: 88:40:84:20:5b:13:ff:94:6e:84:b8:15:06:4e:cd: 37:c9:62:a9:8b:f8:dd:23:0e:66:12:7d:ff:60:fe: ea:41:c3:a5:cd:4f:c5:88:ac:49:7b:36:3d:d8:92: 21:20:7c:95:49:29:42:88:69:bc:f9:46:52:40:b4: 9a:73:e5:27:e6:c3:ee:b7:fa:3c:28:19:4e:91:69: 5f:90:84:32:d9:24:6a:53:fa:bf:dd:2f:d8:28:a3: 82:2e:89:e8:1c:95:de:f9:ac:a9:41:f8:95:57:c8: f4:ba:f5:95:05:3e:5f:5c:87:84:73:f8:92:6b:81: d2:e7:95:4e:43:21:d4:39:a6:d5:ac:16:b8:3b:85: 98:da:91:38:d0:d8:db:ea:0a:60:7a:9a:51:41:dc: 30:e5:01:0a:c8:86:8b:93:d1:7d:42:17:e6:be:c9: 1b:0a:a3:e3:1d:9f:74:9a:24:ae:3c:68:1a:bf:29: b0:e4:10:b7:bc:98:77:33:b5:14:1c:dd:88:27:f7: 5a:c7:3e:e6:8c:d1:4d:1d:e4:f8:55:ea:fb:4c:0e: 03:0c:d8:72:da:7e:d3:86:9a:e4:00:69:ce:65:c8: 38:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C8:20:8C:34:70:E6:30:19:70:9B:44:E5:36:3D:DD:03:29:92:37 X509v3 Authority Key Identifier: keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/AF2BF494314B11F0BDC2D637C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.49.252.0/22 IPv6: 2403:4c0:fb::/48 Signature Algorithm: sha256WithRSAEncryption 3a:a2:2b:e3:d2:5f:8e:82:53:44:67:a8:f3:41:8e:da:5f:e7: 8c:0e:2a:fe:e6:7b:4c:5c:51:fe:1d:47:37:f2:d1:04:91:9e: 75:48:a1:c3:b4:29:85:71:96:4a:9e:19:ad:49:98:f5:bf:c9: 59:51:36:9a:b7:d8:e7:25:b7:3a:6f:71:ae:86:d2:4b:26:45: 14:f5:83:30:79:01:83:d0:89:55:66:b0:ff:25:90:98:1c:4a: e6:26:86:ec:65:e8:d0:74:bc:68:c9:dd:43:21:31:e3:06:3d: a7:41:e7:e9:c2:a2:3b:61:10:c8:b7:32:a4:47:10:33:30:11: eb:9e:94:95:70:8d:85:01:7d:cb:8f:ec:e8:c3:ca:97:0e:c3: 51:8d:64:3e:4a:8e:74:c9:46:03:d9:40:2e:0f:52:82:d0:7f: c3:f0:63:25:f7:54:5a:09:36:f9:2c:89:78:0a:ba:7c:80:d3: 20:b8:bf:82:57:b8:32:87:66:2a:d4:02:28:e3:5c:7d:7f:9a: 3e:59:b8:f9:92:e7:f7:98:a3:11:d8:e7:d4:41:da:db:e0:1d: 30:cc:76:5d:e7:63:9f:8c:5e:52:6a:e7:34:02:3b:c1:4c:fb: be:6b:bf:a1:25:7b:d8:49:3b:e4:f7:9f:d7:30:ee:a1:19:32: c5:08:34:63 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICGScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKEZERTM2QjZFOTQ5Mzk4RTUyRDk1RTg5RDQwQkRGNjBC MjVEQjY5QjkwHhcNMjUxMjA0MTYxNTUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODA5ZS01Yjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv78It++onY2Eme6J6PkIyw9KUdRzoXGox00KnSaIQIQgWxP/lG6EuBUGTs03 yWKpi/jdIw5mEn3/YP7qQcOlzU/FiKxJezY92JIhIHyVSSlCiGm8+UZSQLSac+Un 5sPut/o8KBlOkWlfkIQy2SRqU/q/3S/YKKOCLonoHJXe+aypQfiVV8j0uvWVBT5f XIeEc/iSa4HS55VOQyHUOabVrBa4O4WY2pE40Njb6gpgeppRQdww5QEKyIaLk9F9 QhfmvskbCqPjHZ90miSuPGgavymw5BC3vJh3M7UUHN2IJ/daxz7mjNFNHeT4Ver7 TA4DDNhy2n7ThprkAGnOZcg45wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFM7IIIw0 cOYwGXCbROU2Pd0DKZI3MB8GA1UdIwQYMBaAFP3ja26Uk5jlLZXonUC99gsl22m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi82MjhERTUwMkRG MjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1PVXRsZWlkUUwzMkN5WGJh YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lTnJicFNUbU9VdGxlaWRRTDMyQ3lYYmFiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIxOEIvNjI4REU1MDJERjIzMTFFNzk3MjI1RDJFQzRGOUFFMDIvQUYyQkY0OTQz MTRCMTFGMEJEQzJENjM3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCGzH8MA8EAgACMAkDBwAkAwTAAPswDQYJKoZIhvcNAQELBQADggEB ADqiK+PSX46CU0RnqPNBjtpf54wOKv7me0xcUf4dRzfy0QSRnnVIocO0KYVxlkqe Ga1JmPW/yVlRNpq32Ocltzpvca6G0ksmRRT1gzB5AYPQiVVmsP8lkJgcSuYmhuxl 6NB0vGjJ3UMhMeMGPadB5+nCojthEMi3MqRHEDMwEeuelJVwjYUBfcuP7OjDypcO w1GNZD5KjnTJRgPZQC4PUoLQf8PwYyX3VFoJNvksiXgKunyA0yC4v4JXuDKHZirU AijjXH1/mj5ZuPmS5/eYoxHY59RB2tvgHTDMdl3nY5+MXlJq5zQCO8FM+75rv6El e9hJO+T3n9cw7qEZMsUINGM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:56:07 2026 by rpki-client