$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/9CEF2622B76E11EF8FCC9767C4F9AE02.roa File: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (raw, json) Hash identifier: yfb220iGzDGa3XU3sQROek0sLb302JfPDqPBvtfaVsY= Subject key identifier: 2B:6E:00:4F:2F:12:AD:F4:6E:E2:D0:20:F2:F3:59:17:DC:0B:67:66 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: 013E Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/9CEF2622B76E11EF8FCC9767C4F9AE02.roa Signing time: Mon 27 Jul 2026 07:56:00 +0000 ROA not before: Mon 27 Jul 2026 07:56:00 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 24092 IP address blocks: 27.111.0.0/21 maxlen: 21 2407:380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Jul 27 07:56:00 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a670f10-1601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:9d:a6:b3:80:93:83:f7:76:e0:62:83:e4: 3a:39:ca:b6:b5:f6:90:ea:d7:3d:f6:d6:30:34:ec: 34:ac:7c:9a:2b:9e:0c:3b:93:0a:e2:d6:09:c7:e5: b3:ed:9e:2f:ce:78:45:51:35:17:e2:2d:56:23:c7: 51:15:c0:27:b6:d4:c9:4b:f9:c8:99:8c:8e:15:06: 63:fd:69:f3:08:0f:64:6b:41:01:59:e0:8f:fc:82: c3:b5:5b:92:3a:8b:2a:95:19:de:bb:58:91:d5:5a: 66:6e:4b:e5:64:94:fb:69:f8:32:e8:d8:e8:18:1d: dd:1f:9c:9e:0b:86:16:c4:57:51:8c:9e:72:19:53: 9c:de:c4:c5:2f:c3:4c:87:53:e3:d8:15:37:79:d4: e3:1b:2d:a0:56:be:f0:03:ef:9c:ce:8b:10:10:14: 41:db:af:9a:d8:78:00:df:9c:12:f0:d8:5b:9f:70: c9:1c:2b:1f:59:11:59:b0:bb:01:b4:d0:df:ae:b6: 42:bb:e1:36:2c:07:f8:b2:38:53:78:04:01:ce:cf: ba:a1:00:f2:db:76:91:3f:b7:53:65:ff:f5:c4:16: 2b:8a:31:33:54:52:12:96:86:d3:9f:99:d1:31:8b: 46:8b:23:82:47:3e:dd:5a:17:9c:ac:49:d2:de:02: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6E:00:4F:2F:12:AD:F4:6E:E2:D0:20:F2:F3:59:17:DC:0B:67:66 X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/9CEF2622B76E11EF8FCC9767C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.111.0.0/21 IPv6: 2407:380::/32 Signature Algorithm: sha256WithRSAEncryption 6a:5b:90:5c:46:ef:ac:c5:da:75:d8:85:8f:6a:66:64:59:48: 07:18:5c:a8:cf:4f:3c:56:84:0d:8b:97:2a:21:44:ba:87:5f: ae:f6:03:98:87:96:ca:95:39:45:aa:f8:78:14:1f:c2:05:86: b9:70:11:b2:fa:c1:51:cf:6d:6e:c5:4f:3b:b1:26:bb:2f:4f: aa:89:dc:8e:e8:5d:f1:45:13:ac:32:24:c0:da:bd:35:7c:d6: 0e:fa:a6:f9:09:fa:b3:20:b4:73:84:07:4c:85:cf:53:7c:ae: ec:56:b0:1b:93:5b:92:92:a5:c8:fe:61:30:69:2e:4c:1e:b6: 58:73:58:6e:de:7c:c1:aa:b6:ca:a0:5c:15:cf:aa:49:28:e9: e6:a0:84:97:43:39:60:81:b8:67:8a:19:eb:77:9a:c1:ba:47: ac:7d:fd:4e:6b:6e:e7:97:86:8b:22:49:5b:d6:79:c7:ea:e8: 9d:2f:3f:83:52:e2:b1:21:d6:02:a8:2b:f8:19:e6:a7:92:12: 78:51:99:d1:4b:be:d5:a9:0f:58:ad:f2:5a:cc:8e:b3:0f:a0: 55:20:39:1b:2c:be:b4:f4:1b:c1:a5:2a:5d:62:a3:5b:01:92: 7f:16:9d:0f:9c:0e:3c:98:3e:d1:22:ad:62:f6:c6:0c:09:c2: 5f:31:cd:b0 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQwOEYxMTAvBgNVBAUTKDkxMEYyRjQxNDA4RTEzREFFRDdDMjFEQzQ3MkRDNUM1 OEM0NTg4MzYwHhcNMjYwNzI3MDc1NjAwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY3MGYxMC0xNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmydprOAk4P3duBig+Q6Ocq2tfaQ6tc99tYwNOw0rHyaK54MO5MK4tYJx+Wz 7Z4vznhFUTUX4i1WI8dRFcAnttTJS/nImYyOFQZj/WnzCA9ka0EBWeCP/ILDtVuS OosqlRneu1iR1VpmbkvlZJT7afgy6NjoGB3dH5yeC4YWxFdRjJ5yGVOc3sTFL8NM h1Pj2BU3edTjGy2gVr7wA++czosQEBRB26+a2HgA35wS8Nhbn3DJHCsfWRFZsLsB tNDfrrZCu+E2LAf4sjhTeAQBzs+6oQDy23aRP7dTZf/1xBYrijEzVFISlobTn5nR MYtGiyOCRz7dWhecrEnS3gLLgwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCtuAE8v Eq30buLQIPLzWRfcC2dmMB8GA1UdIwQYMBaAFJEPL0FAjhPa7Xwh3EctxcWMRYg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDA4Ri8xNkNEOTg1OEI3 NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5cnRmQ0hjUnkzRnhZeEZp RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQwOEYvMTZDRDk4NThCNzZFMTFFRkFDRjBGODY1QzRGOUFFMDIvOUNFRjI2MjJC NzZFMTFFRjhGQ0M5NzY3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQDG28AMA0EAgACMAcDBQAkBwOAMA0GCSqGSIb3DQEBCwUAA4IBAQBq W5BcRu+sxdp12IWPamZkWUgHGFyoz088VoQNi5cqIUS6h1+u9gOYh5bKlTlFqvh4 FB/CBYa5cBGy+sFRz21uxU87sSa7L0+qidyO6F3xRROsMiTA2r01fNYO+qb5Cfqz ILRzhAdMhc9TfK7sVrAbk1uSkqXI/mEwaS5MHrZYc1hu3nzBqrbKoFwVz6pJKOnm oISXQzlggbhnihnrd5rBukesff1Oa27nl4aLIklb1nnH6uidLz+DUuKxIdYCqCv4 GeankhJ4UZnRS77VqQ9YrfJazI6zD6BVIDkbLL609BvBpSpdYqNbAZJ/Fp0PnA48 mD7RIq1i9sYMCcJfMc2w -----END CERTIFICATE-----Generated at Tue Jul 28 20:50:49 2026 by rpki-client