$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/C1C12662CFC811EB9A5C5879C4F9AE02.roa File: C1C12662CFC811EB9A5C5879C4F9AE02.roa (raw, json) Hash identifier: LN8SJ3+25Y2Ck45ZaDbAqfPgkdrya3Oui9uvtFNOgyY= Subject key identifier: E5:13:E7:75:8C:9A:5E:F2:4E:A0:77:04:8C:AE:AC:49:B4:9E:A5:D6 Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 1913 Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/C1C12662CFC811EB9A5C5879C4F9AE02.roa Signing time: Thu 20 Aug 2026 16:32:28 +0000 ROA not before: Thu 20 Aug 2026 16:32:28 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 55792 IP address blocks: 27.122.16.0/20 maxlen: 24 103.3.168.0/22 maxlen: 24 202.95.192.0/20 maxlen: 24 2400:9300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6419 (0x1913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Aug 20 16:32:28 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a872c1c-f48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:56:55:99:ca:07:43:3a:e1:f8:c0:47:83: 02:19:1c:5c:5a:26:13:db:b1:43:68:3a:05:84:21: 64:e6:56:c4:50:c2:fc:89:67:74:b9:71:c9:b1:5a: dd:be:8e:b7:87:93:20:5a:00:a9:c9:36:ff:50:38: cf:50:98:7e:d0:92:46:7a:e9:79:23:41:76:dd:93: ba:06:00:01:77:54:26:d4:02:ad:35:46:95:df:61: e9:f9:83:5b:28:a6:6c:28:fb:b9:a2:5f:ba:d0:cd: 2e:b3:a2:74:97:a9:d2:f1:ef:38:5c:7c:e1:38:3e: 3f:ef:5a:95:20:61:af:95:92:24:1f:68:0a:bf:0e: ba:a4:d6:90:b7:d9:d3:36:23:e4:4d:ba:23:9d:db: 33:18:aa:f6:9f:cd:6a:cc:16:87:b7:b4:c8:92:35: 81:ef:c5:95:79:9c:03:25:05:df:73:24:66:7e:2b: bd:16:a2:66:2a:51:b2:a3:22:a3:27:f7:01:ec:57: 01:14:04:f9:e4:23:03:dd:a9:b9:4f:c2:77:a3:60: d4:dd:2a:a7:2a:30:ba:9a:18:8a:ac:63:9a:c3:b5: b9:6f:1a:c2:41:9a:73:c2:e1:14:85:4c:d7:d7:59: a8:a5:16:8e:0b:a1:bb:05:ec:6a:a2:9c:a8:f2:f0: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:13:E7:75:8C:9A:5E:F2:4E:A0:77:04:8C:AE:AC:49:B4:9E:A5:D6 X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/C1C12662CFC811EB9A5C5879C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.122.16.0/20 103.3.168.0/22 202.95.192.0/20 IPv6: 2400:9300::/32 Signature Algorithm: sha256WithRSAEncryption 42:8d:0d:09:fb:dc:0b:18:00:ce:d1:5a:ab:00:4d:21:b0:04: 9c:33:da:44:3b:c6:4e:1e:1a:bd:9b:05:46:81:88:0a:66:6f: 2d:c9:19:53:94:93:c7:47:1b:6d:e8:26:71:45:1b:a7:4a:ce: fb:f0:11:cc:80:39:45:04:03:8c:e5:2d:4f:83:6e:63:b7:75: e7:43:73:ac:0b:ad:87:5d:04:9e:08:e1:5d:3b:35:d9:e9:96: 58:71:d1:14:b2:fa:3e:e5:ba:b4:dc:a3:5b:0a:79:8f:4d:6c: 7d:a8:00:54:28:fd:90:0a:b8:e0:29:b2:d9:4f:dd:31:4b:d2: 26:86:bc:82:e1:03:a0:93:ce:4a:1c:e9:ec:b3:c4:7b:51:ae: a4:11:41:e2:87:0a:11:41:36:6b:96:a6:7d:ef:34:16:a2:01: 18:49:2e:11:e7:17:d1:ac:d5:30:09:29:82:a4:b8:b8:ee:e6: 37:9b:11:ef:ff:bc:a0:8b:d9:25:d5:83:56:91:0c:e1:02:8f: 4e:fa:57:37:2c:77:dd:84:af:86:f4:8d:53:ba:b1:6b:e6:02: f9:a4:f9:bb:f1:3d:65:19:40:ae:ad:1a:58:5a:79:1f:50:d2: fa:02:a8:0d:5b:8b:dc:9e:f2:ef:12:1f:14:08:51:d8:f7:0f: de:0e:a9:ee -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICGRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjYwODIwMTYzMjI4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3MmMxYy1mNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dhWVZnKB0M64fjAR4MCGRxcWiYT27FDaDoFhCFk5lbEUML8iWd0uXHJsVrd vo63h5MgWgCpyTb/UDjPUJh+0JJGeul5I0F23ZO6BgABd1Qm1AKtNUaV32Hp+YNb KKZsKPu5ol+60M0us6J0l6nS8e84XHzhOD4/71qVIGGvlZIkH2gKvw66pNaQt9nT NiPkTbojndszGKr2n81qzBaHt7TIkjWB78WVeZwDJQXfcyRmfiu9FqJmKlGyoyKj J/cB7FcBFAT55CMD3am5T8J3o2DU3SqnKjC6mhiKrGOaw7W5bxrCQZpzwuEUhUzX 11mopRaOC6G7Bexqopyo8vA8BwIDAQABo4ICezCCAncwHQYDVR0OBBYEFOUT53WM ml7yTqB3BIyurEm0nqXWMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0IxQjEvQTBGMEFERjBCMjUyMTFFNzhCNTBGRjYwQzRGOUFFMDIvQzFDMTI2NjJD RkM4MTFFQjlBNUM1ODc5QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQEG3oQAwQCZwOoAwQEyl/AMA0EAgACMAcDBQAkAJMAMA0GCSqGSIb3 DQEBCwUAA4IBAQBCjQ0J+9wLGADO0VqrAE0hsAScM9pEO8ZOHhq9mwVGgYgKZm8t yRlTlJPHRxtt6CZxRRunSs778BHMgDlFBAOM5S1Pg25jt3XnQ3OsC62HXQSeCOFd OzXZ6ZZYcdEUsvo+5bq03KNbCnmPTWx9qABUKP2QCrjgKbLZT90xS9ImhryC4QOg k85KHOnss8R7Ua6kEUHihwoRQTZrlqZ97zQWogEYSS4R5xfRrNUwCSmCpLi47uY3 mxHv/7ygi9kl1YNWkQzhAo9O+lc3LHfdhK+G9I1TurFr5gL5pPm78T1lGUCurRpY WnkfUNL6AqgNW4vcnvLvEh8UCFHY9w/eDqnu -----END CERTIFICATE-----Generated at Sun Sep 20 15:52:43 2026 by rpki-client