$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/7F27A9D6C88211EBB7A6F948C4F9AE02.roa File: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (raw, json) Hash identifier: 0DdKz2dwlNQQLlFEjcuZMVHNGtOylU4qbdsXKkCH924= Subject key identifier: 02:34:50:A2:32:5E:11:A0:AB:A1:B3:88:B8:27:03:6B:70:3A:6B:6E Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Certificate serial: 0679 Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/7F27A9D6C88211EBB7A6F948C4F9AE02.roa Signing time: Thu 04 Jun 2026 23:27:43 +0000 ROA not before: Thu 04 Jun 2026 23:27:43 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 56270 IP address blocks: 203.1.8.0/24 maxlen: 24 203.1.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Validity Not Before: Jun 4 23:27:43 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a2209ee-cf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:c2:ad:06:f6:84:bc:79:99:7a:05:b3:08: dc:cf:c0:64:c3:c4:ec:83:41:db:c9:13:fb:be:55: 23:a3:2b:81:e1:7c:e8:e4:8b:47:5d:6e:dd:20:e0: e4:0c:f2:7a:a8:1c:01:b9:18:27:a8:0b:09:47:19: fd:0c:1b:c2:4e:f2:62:fe:a6:13:dc:4a:b5:c3:bf: 2a:af:17:de:3f:37:6b:0b:94:7c:3a:16:c9:44:41: fd:87:96:c1:78:d9:61:52:3a:fb:4f:98:d8:e4:54: 79:b3:64:71:01:1e:a7:d5:51:df:ea:7d:1e:ef:37: ab:65:56:b7:88:6b:a9:8e:c1:56:d8:a8:3b:a4:7f: 80:8f:25:9e:52:51:6f:b1:7a:4c:97:a7:67:fc:69: af:88:26:b1:f8:8d:c2:7e:0e:ec:f1:ce:fc:f2:94: a2:d2:c5:c3:1b:4b:c2:1b:5f:3b:d3:d5:10:f4:48: 75:da:82:03:ff:bc:b7:65:50:f0:91:7c:8e:2e:c0: 22:5d:95:92:1e:05:d5:1d:cd:bd:41:11:89:51:9b: f3:5e:55:9a:06:84:36:2a:73:c0:2c:b3:16:6e:da: c7:6a:cc:83:93:65:08:86:06:69:76:46:16:ec:10: 48:f0:fc:b2:7a:3a:ab:79:15:8e:5f:9a:30:fa:7e: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:34:50:A2:32:5E:11:A0:AB:A1:B3:88:B8:27:03:6B:70:3A:6B:6E X509v3 Authority Key Identifier: keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/7F27A9D6C88211EBB7A6F948C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.1.8.0/23 Signature Algorithm: sha256WithRSAEncryption b7:dc:fb:0e:5f:57:bb:c8:5e:c1:a6:33:09:2b:19:85:44:94: 7b:33:3b:ac:4b:e8:59:3e:59:ad:e0:c7:21:67:46:4f:81:1a: 4e:3a:f6:07:74:c6:cd:94:e6:14:ca:81:37:1c:9d:6f:f5:9d: e7:d9:bb:ee:33:1b:6f:3d:22:15:04:e1:77:d7:b0:cd:bd:d7: 90:30:91:c7:f4:e8:af:cb:95:5d:aa:1d:81:7c:29:30:a2:80: c6:2d:24:aa:8a:86:76:1d:cc:52:44:fa:90:32:2c:14:8d:ac: b3:e5:66:74:36:e4:aa:82:90:10:2f:fa:58:22:c8:e0:c6:eb: c1:ec:a8:05:5d:47:62:a6:63:83:1e:da:7d:ef:dd:1f:56:a2: 73:2b:91:ec:0e:ef:1a:8c:9b:ca:d3:ad:42:a8:10:af:e7:06: d1:99:7d:d2:6a:fa:4e:dc:c5:10:9c:54:12:ee:2b:68:15:c8: 63:21:e4:98:74:20:8b:5e:ba:5b:89:23:00:3e:68:5a:7b:2f: c8:34:3a:94:bb:cd:86:cd:30:21:d4:ec:8a:10:fa:27:8a:dc: 78:1d:27:b7:38:67:c0:05:38:bb:a8:6d:4d:90:be:cf:e0:7e: 1d:38:1d:fb:c1:5d:f2:70:c7:56:d5:ed:73:fb:4f:2a:fa:4c: e5:02:29:21 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxQjkxMTAvBgNVBAUTKDUxM0YyMDc3RDhBRDkxMUFDNzdCNUI1QzU5QjNFMjE0 Qzc4QjAyM0IwHhcNMjYwNjA0MjMyNzQzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyMDllZS1jZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDjCrQb2hLx5mXoFswjcz8Bkw8Tsg0HbyRP7vlUjoyuB4Xzo5ItHXW7dIODk DPJ6qBwBuRgnqAsJRxn9DBvCTvJi/qYT3Eq1w78qrxfePzdrC5R8OhbJREH9h5bB eNlhUjr7T5jY5FR5s2RxAR6n1VHf6n0e7zerZVa3iGupjsFW2Kg7pH+AjyWeUlFv sXpMl6dn/GmviCax+I3Cfg7s8c788pSi0sXDG0vCG18709UQ9Eh12oID/7y3ZVDw kXyOLsAiXZWSHgXVHc29QRGJUZvzXlWaBoQ2KnPALLMWbtrHasyDk2UIhgZpdkYW 7BBI8PyyejqreRWOX5ow+n7w0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAI0UKIy XhGgq6GziLgnA2twOmtuMB8GA1UdIwQYMBaAFFE/IHfYrZEax3tbXFmz4hTHiwI7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFCOS9DREI3MDJGNkM4 N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtSckhlMXRjV2JQaUZNZUxB anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUOGdkOWl0a1JySGUxdGNXYlBpRk1lTEFqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxQjkvQ0RCNzAyRjZDODdCMTFFQkFGQTY5NTNCQzRGOUFFMDIvN0YyN0E5RDZD ODgyMTFFQkI3QTZGOTQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBywEIMA0GCSqGSIb3DQEBCwUAA4IBAQC33PsOX1e7yF7BpjMJKxmF RJR7MzusS+hZPlmt4MchZ0ZPgRpOOvYHdMbNlOYUyoE3HJ1v9Z3n2bvuMxtvPSIV BOF317DNvdeQMJHH9Oivy5Vdqh2BfCkwooDGLSSqioZ2HcxSRPqQMiwUjayz5WZ0 NuSqgpAQL/pYIsjgxuvB7KgFXUdipmODHtp9790fVqJzK5HsDu8ajJvK061CqBCv 5wbRmX3SavpO3MUQnFQS7itoFchjIeSYdCCLXrpbiSMAPmhaey/INDqUu82GzTAh 1OyKEPonitx4HSe3OGfABTi7qG1NkL7P4H4dOB37wV3ycMdW1e1z+08q+kzlAikh -----END CERTIFICATE-----Generated at Wed Jul 29 00:31:36 2026 by rpki-client