$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/7F27A9D6C88211EBB7A6F948C4F9AE02.roa File: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (raw, json) Hash identifier: XRS9X+c5H6+PF5E3AA5+5JCGv1T1c0IZvsE7D/UMy8s= Subject key identifier: B9:08:88:C2:5D:CB:A6:E1:C3:F9:8B:B0:28:E6:35:8D:D8:90:4B:00 Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Certificate serial: 0644 Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/7F27A9D6C88211EBB7A6F948C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:49:19 +0000 ROA not before: Wed 04 Jun 2025 23:03:40 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56270 IP address blocks: 203.1.8.0/24 maxlen: 24 203.1.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Validity Not Before: Jun 4 23:03:40 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3fd8f-b278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:49:a2:de:f5:b2:fe:f4:71:75:88:7e:db: d0:a4:3f:a9:b5:cf:97:ca:9a:f2:a7:27:eb:d8:66: 33:ed:63:9b:ff:23:76:95:27:01:c1:82:4b:a3:17: 75:1f:e7:24:b8:48:bc:13:46:9b:48:cb:86:90:20: bc:da:2c:ac:35:4c:f9:02:ef:1b:ee:92:bd:b3:87: 52:94:f3:3c:fd:7f:9c:ab:83:09:23:24:35:b5:3b: 3b:cd:41:55:d2:c8:ef:d7:9e:df:0b:13:90:9c:95: 9f:f6:ee:5c:ed:5f:ff:fe:d8:d5:0b:3d:07:cc:cd: 97:99:90:d1:76:d8:37:a1:54:ec:d2:84:fb:81:86: 97:1d:21:2f:0b:01:54:42:60:7f:da:3c:40:78:ed: af:2f:21:6a:47:8d:9d:a3:df:1c:fd:d5:37:fe:f7: 9d:db:e2:c0:ba:93:32:b0:d0:9b:27:76:b4:f9:41: 8c:3e:0e:f2:a1:cb:5e:03:4a:e4:a4:7d:d9:62:53: e4:3d:c0:2d:2f:f4:20:d9:fe:5f:54:e5:2c:df:ca: f6:e0:7e:f3:6d:4c:f7:da:fe:78:74:89:e3:c7:12: 80:2c:67:db:b8:d2:51:ec:fd:f1:39:da:a8:cc:d6: 95:62:b8:43:cf:c7:b1:10:ba:7a:3a:49:ba:6e:d1: eb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:08:88:C2:5D:CB:A6:E1:C3:F9:8B:B0:28:E6:35:8D:D8:90:4B:00 X509v3 Authority Key Identifier: keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/7F27A9D6C88211EBB7A6F948C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.1.8.0/23 Signature Algorithm: sha256WithRSAEncryption a7:c9:d1:15:0f:eb:ef:65:63:17:4a:39:5f:4c:8f:4a:09:1e: 25:00:b4:ee:54:49:f6:2e:19:31:64:26:ab:50:1e:02:b2:e3: 2d:87:d4:ed:f6:cd:a3:de:05:39:ca:5e:21:d3:4f:51:fb:ce: 9b:ee:94:30:3e:10:87:d0:d0:22:80:52:19:30:29:3a:d0:0f: 71:48:8d:89:d0:b3:53:b4:4d:3e:c8:e9:fe:7a:82:4d:ed:07: 4e:35:2d:78:af:fa:38:d3:52:71:9e:2e:e7:c8:1a:25:da:7c: 3b:fb:2a:73:7c:4c:78:7c:b8:a4:8a:98:98:f4:71:c9:9b:a1: a2:6e:73:cc:97:49:33:f4:ab:16:e2:f8:1f:8b:69:ff:3c:4b: 25:55:dc:1d:ba:eb:24:6e:6e:a1:14:7d:b2:21:3c:db:bd:4c: 91:68:15:8c:66:2e:0e:3f:f4:db:7a:97:aa:05:4e:f0:ca:1c: f7:d2:84:14:9a:ad:29:b4:d7:61:41:f0:c4:b2:c6:ca:72:1f: 4f:b8:a9:e0:b3:9a:18:d2:99:97:0d:07:46:bb:00:1c:31:ca: ff:ce:d5:85:39:8a:05:af:e9:0b:1a:d1:09:70:b0:22:ef:8b: f5:0e:25:c9:b1:ff:01:56:9f:2b:08:66:dc:7b:8f:a7:05:87: 8a:5e:c5:e8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxQjkxMTAvBgNVBAUTKDUxM0YyMDc3RDhBRDkxMUFDNzdCNUI1QzU5QjNFMjE0 Qzc4QjAyM0IwHhcNMjUwNjA0MjMwMzQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmQ4Zi1iMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD9Jot71sv70cXWIftvQpD+ptc+Xyprypyfr2GYz7WOb/yN2lScBwYJLoxd1 H+ckuEi8E0abSMuGkCC82iysNUz5Au8b7pK9s4dSlPM8/X+cq4MJIyQ1tTs7zUFV 0sjv157fCxOQnJWf9u5c7V///tjVCz0HzM2XmZDRdtg3oVTs0oT7gYaXHSEvCwFU QmB/2jxAeO2vLyFqR42do98c/dU3/ved2+LAupMysNCbJ3a0+UGMPg7yocteA0rk pH3ZYlPkPcAtL/Qg2f5fVOUs38r24H7zbUz32v54dInjxxKALGfbuNJR7P3xOdqo zNaVYrhDz8exELp6Okm6btHrAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLkIiMJd y6bhw/mLsCjmNY3YkEsAMB8GA1UdIwQYMBaAFFE/IHfYrZEax3tbXFmz4hTHiwI7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFCOS9DREI3MDJGNkM4 N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtSckhlMXRjV2JQaUZNZUxB anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUOGdkOWl0a1JySGUxdGNXYlBpRk1lTEFqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxQjkvQ0RCNzAyRjZDODdCMTFFQkFGQTY5NTNCQzRGOUFFMDIvN0YyN0E5RDZD ODgyMTFFQkI3QTZGOTQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBywEIMA0GCSqGSIb3DQEBCwUAA4IBAQCnydEVD+vvZWMXSjlfTI9K CR4lALTuVEn2LhkxZCarUB4CsuMth9Tt9s2j3gU5yl4h009R+86b7pQwPhCH0NAi gFIZMCk60A9xSI2J0LNTtE0+yOn+eoJN7QdONS14r/o401Jxni7nyBol2nw7+ypz fEx4fLikipiY9HHJm6GibnPMl0kz9KsW4vgfi2n/PEslVdwduuskbm6hFH2yITzb vUyRaBWMZi4OP/TbepeqBU7wyhz30oQUmq0ptNdhQfDEssbKch9PuKngs5oY0pmX DQdGuwAcMcr/ztWFOYoFr+kLGtEJcLAi74v1DiXJsf8BVp8rCGbce4+nBYeKXsXo -----END CERTIFICATE-----Generated at Mon Mar 2 04:19:11 2026 by rpki-client