$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CB46AC50509111EF9E40402FC4F9AE02.roa File: CB46AC50509111EF9E40402FC4F9AE02.roa (raw, json) Hash identifier: J2Vubqi8ic0NqlP+qdXl9htU+adGeTvh1ITR3W4ptX4= Subject key identifier: 0E:D6:5C:B0:83:A5:F2:C6:26:98:E1:DB:6F:05:FB:A2:3C:6F:E0:E7 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0C8D Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CB46AC50509111EF9E40402FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:59:30 +0000 ROA not before: Mon 02 Feb 2026 19:15:38 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 4613 IP address blocks: 27.111.16.0/22 maxlen: 24 27.111.20.0/24 maxlen: 24 27.111.21.0/24 maxlen: 24 27.111.22.0/24 maxlen: 24 27.111.23.0/24 maxlen: 24 27.111.24.0/22 maxlen: 22 27.111.24.0/24 maxlen: 24 27.111.25.0/24 maxlen: 24 27.111.26.0/23 maxlen: 24 27.111.28.0/23 maxlen: 24 27.111.30.0/23 maxlen: 24 117.121.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Feb 2 19:15:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46262-53fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:47:2b:f5:73:4c:44:dd:01:fd:ce:9b:d2: f3:46:fe:bc:e8:68:7d:ae:fa:b2:ab:58:22:9b:b5: bd:00:56:f6:0e:72:31:61:4f:86:11:08:a4:9d:4d: 3a:c7:b3:9a:4e:14:d0:39:b7:a5:2a:97:69:14:b7: db:29:98:3b:7c:47:0a:8e:4b:6b:97:da:6c:34:0e: 17:69:56:52:73:30:bd:f8:55:64:fd:94:81:38:40: 99:ba:ae:fe:8a:a0:34:6b:68:d7:68:61:a7:4c:91: 5c:c1:5c:4c:2b:e5:48:a7:00:49:08:a0:76:6e:b5: b6:1e:93:07:0a:21:08:6f:b1:88:49:a6:4c:79:b8: d0:e1:26:f8:60:71:6f:71:a2:e6:ea:c3:1c:aa:40: 0b:aa:2e:bc:1b:22:36:6a:fa:04:bb:dc:13:a7:04: 89:92:53:fc:35:ff:38:88:f7:fc:83:25:a4:38:f8: 2e:96:4a:87:4a:a9:57:16:a4:84:7f:c4:88:ed:a3: 67:21:06:15:77:64:03:09:fa:16:13:85:36:50:53: 25:c3:ae:af:75:5a:18:75:67:62:97:41:e2:1e:ac: 08:6d:25:48:0d:28:b1:96:8a:09:9b:8f:00:16:40: 25:79:88:2d:76:94:5a:e2:93:80:49:2d:ab:de:05: dd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D6:5C:B0:83:A5:F2:C6:26:98:E1:DB:6F:05:FB:A2:3C:6F:E0:E7 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CB46AC50509111EF9E40402FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.111.16.0/20 117.121.224.0/20 Signature Algorithm: sha256WithRSAEncryption 49:81:d2:21:ab:00:34:a8:72:8c:9f:2d:26:20:d3:35:50:4c: 74:7d:06:06:6a:7c:6b:dc:8c:f7:bc:ea:8f:fc:48:79:a2:b1: 57:91:b5:74:a2:bb:ac:0d:7f:8f:6e:e0:a5:bd:22:42:9e:c0: 0f:65:e1:28:75:19:f0:08:67:e6:d8:34:1e:93:a9:fd:cb:52: 01:b1:07:b6:38:25:78:fe:cd:15:73:09:68:43:1b:20:3f:a4: 01:73:7b:25:01:7b:57:04:d9:9b:c0:0a:54:d4:d2:2b:b5:7f: 5b:8c:2b:dd:aa:62:c3:24:ce:00:82:aa:ed:0b:c8:e3:66:af: 3e:3e:82:c4:e5:d6:ef:e0:95:e1:8c:90:6b:21:55:17:38:8e: d6:2f:20:24:ac:1a:c6:80:f5:f3:84:77:0d:eb:55:91:49:98: 7c:b7:a8:fe:d1:04:7a:1b:57:e6:61:03:79:0e:d5:c6:bb:ec: 77:4b:53:af:4b:99:9c:21:f6:20:35:ef:50:3d:82:c4:69:e3: 9f:f3:c1:8f:25:b6:fa:ac:65:80:30:f9:bb:f4:85:e2:9d:8a: ed:e4:79:fb:2c:60:ce:56:2d:f6:52:12:d6:9d:45:22:00:8a: 4d:bf:be:3d:e0:6c:71:c5:19:8f:84:2f:e7:a6:50:43:63:2d: 58:33:38:8f -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjYwMjAyMTkxNTM4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjI2Mi01M2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVdHK/VzTETdAf3Om9LzRv686Gh9rvqyq1gim7W9AFb2DnIxYU+GEQiknU06 x7OaThTQObelKpdpFLfbKZg7fEcKjktrl9psNA4XaVZSczC9+FVk/ZSBOECZuq7+ iqA0a2jXaGGnTJFcwVxMK+VIpwBJCKB2brW2HpMHCiEIb7GISaZMebjQ4Sb4YHFv caLm6sMcqkALqi68GyI2avoEu9wTpwSJklP8Nf84iPf8gyWkOPgulkqHSqlXFqSE f8SI7aNnIQYVd2QDCfoWE4U2UFMlw66vdVoYdWdil0HiHqwIbSVIDSixlooJm48A FkAleYgtdpRa4pOASS2r3gXdnwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFA7WXLCD pfLGJpjh228F+6I8b+DnMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M3MUUvQzc4RTRBNzIxQ0E4MTFFQThDQkI0NTQzQzRGOUFFMDIvQ0I0NkFDNTA1 MDkxMTFFRjlFNDA0MDJGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQEG28QAwQEdXngMA0GCSqGSIb3DQEBCwUAA4IBAQBJgdIhqwA0qHKM ny0mINM1UEx0fQYGanxr3Iz3vOqP/Eh5orFXkbV0orusDX+PbuClvSJCnsAPZeEo dRnwCGfm2DQek6n9y1IBsQe2OCV4/s0VcwloQxsgP6QBc3slAXtXBNmbwApU1NIr tX9bjCvdqmLDJM4AgqrtC8jjZq8+PoLE5dbv4JXhjJBrIVUXOI7WLyAkrBrGgPXz hHcN61WRSZh8t6j+0QR6G1fmYQN5DtXGu+x3S1OvS5mcIfYgNe9QPYLEaeOf88GP Jbb6rGWAMPm79IXinYrt5Hn7LGDOVi32UhLWnUUiAIpNv7494GxxxRmPhC/nplBD Yy1YMziP -----END CERTIFICATE-----Generated at Mon Mar 2 16:12:29 2026 by rpki-client