$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D9AFDBC2400111EFBB30C475C4F9AE02.roa File: D9AFDBC2400111EFBB30C475C4F9AE02.roa (raw, json) Hash identifier: HrZGFhV7ij/MniPPdnAUj9aXz0QqgUpU7Kf1yG1SMQ0= Subject key identifier: 4A:6D:CE:66:87:66:14:42:98:88:28:BA:4A:BF:97:8E:71:5A:16:6A Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0B1E Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D9AFDBC2400111EFBB30C475C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:47:17 +0000 ROA not before: Sat 08 Nov 2025 19:09:59 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138195 IP address blocks: 27.124.8.0/24 maxlen: 24 202.79.160.0/24 maxlen: 24 202.79.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2846 (0xb1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Nov 8 19:09:59 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47ba4-1f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:77:10:4b:e0:86:85:ff:5b:79:3a:28:82: fc:82:57:7c:99:d2:df:ae:70:bb:0f:34:c6:ca:94: ff:db:c2:2d:2f:d2:bc:a9:c6:c4:83:1c:6f:02:3e: c7:3a:b7:93:ca:39:81:ca:00:ac:e4:c0:3f:5f:b4: b1:2c:26:02:b3:a9:c8:8d:5e:e7:d0:7e:cd:3c:58: 71:77:58:d2:9c:22:eb:81:fd:c5:f8:41:24:43:af: 77:fd:c4:1b:ae:ad:05:3d:1d:30:e9:57:64:61:ca: 95:01:4a:42:3d:cd:94:c3:8c:71:a9:2d:77:39:92: 97:d7:ba:67:61:f9:61:e9:da:9d:0a:b2:6c:c0:ff: 43:5f:4b:99:22:07:48:dd:ff:8f:d0:98:8a:83:9e: 3b:46:8c:5e:4c:7d:fc:38:a5:e0:46:77:56:55:9a: 36:9f:4f:1e:e8:c1:22:cc:51:0f:a0:8a:b4:13:8b: 67:fc:72:07:01:24:6d:62:79:84:1e:6c:78:aa:08: 50:e5:df:b8:1b:3b:72:2a:a7:c1:c8:5d:69:8c:de: a2:a8:1e:68:35:e7:a2:b4:7a:d6:8c:c4:13:06:9a: a9:c1:14:52:43:a6:87:51:20:a0:3e:1b:07:1d:85: 49:17:0f:70:af:77:5c:d5:d3:c0:2d:32:31:80:f8: ba:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6D:CE:66:87:66:14:42:98:88:28:BA:4A:BF:97:8E:71:5A:16:6A X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D9AFDBC2400111EFBB30C475C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.124.8.0/24 202.79.160.0/23 Signature Algorithm: sha256WithRSAEncryption 82:ed:d4:7b:25:3c:1a:4c:d9:3f:c0:43:20:d6:36:5c:23:56: 2a:4e:5e:5e:99:b2:f3:d1:f4:d6:09:22:16:c4:e2:3f:41:5c: 77:38:61:8f:aa:5c:c6:06:30:1b:ce:cd:2e:79:ee:3c:45:b6: 08:36:74:58:e6:ca:95:0e:f5:68:6c:28:c2:ac:2d:a5:d9:60: 14:ad:2a:97:18:b5:3c:08:e3:e7:b4:7a:cc:93:a0:49:c9:84: a3:fe:65:33:3f:02:e9:1a:8c:5c:18:28:98:98:86:52:1f:c6: 39:54:a1:1e:fc:c3:b5:91:5b:7d:c2:df:b5:77:10:41:b1:6a: f0:4d:15:bd:e3:7d:08:30:d6:31:dc:41:da:ba:3a:20:ef:77: 6c:d6:bc:0a:a7:f6:11:34:b0:5e:d4:e5:ec:9c:3f:e9:96:52: ba:ef:47:35:57:cf:f6:57:85:98:12:41:47:22:9b:0a:2e:44: 70:04:43:8d:b5:e4:6a:6a:c6:25:da:20:1f:09:1c:b3:27:cd: 72:25:8d:4d:dc:32:1a:73:71:3d:76:f2:b6:05:e7:e5:f0:00: 8d:37:ee:3b:ce:61:8f:5a:39:d7:a7:1d:86:f6:ee:2c:04:d4: 76:63:15:15:a0:b4:68:7a:28:5a:87:83:a4:a2:08:8b:79:8f: b4:89:47:2d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjUxMTA4MTkwOTU5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2JhNC0xZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCp3EEvghoX/W3k6KIL8gld8mdLfrnC7DzTGypT/28ItL9K8qcbEgxxvAj7H OreTyjmBygCs5MA/X7SxLCYCs6nIjV7n0H7NPFhxd1jSnCLrgf3F+EEkQ693/cQb rq0FPR0w6VdkYcqVAUpCPc2Uw4xxqS13OZKX17pnYflh6dqdCrJswP9DX0uZIgdI 3f+P0JiKg547RoxeTH38OKXgRndWVZo2n08e6MEizFEPoIq0E4tn/HIHASRtYnmE Hmx4qghQ5d+4GztyKqfByF1pjN6iqB5oNeeitHrWjMQTBpqpwRRSQ6aHUSCgPhsH HYVJFw9wr3dc1dPALTIxgPi6eQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEptzmaH ZhRCmIgoukq/l45xWhZqMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMEJCRDlFQTI4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvRDlBRkRCQzI0 MDAxMTFFRkJCMzBDNDc1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAG3wIAwQByk+gMA0GCSqGSIb3DQEBCwUAA4IBAQCC7dR7JTwaTNk/ wEMg1jZcI1YqTl5embLz0fTWCSIWxOI/QVx3OGGPqlzGBjAbzs0uee48RbYINnRY 5sqVDvVobCjCrC2l2WAUrSqXGLU8COPntHrMk6BJyYSj/mUzPwLpGoxcGCiYmIZS H8Y5VKEe/MO1kVt9wt+1dxBBsWrwTRW9430IMNYx3EHaujog73ds1rwKp/YRNLBe 1OXsnD/pllK670c1V8/2V4WYEkFHIpsKLkRwBEONteRqasYl2iAfCRyzJ81yJY1N 3DIac3E9dvK2Befl8ACNN+47zmGPWjnXpx2G9u4sBNR2YxUVoLRoeihah4OkogiL eY+0iUct -----END CERTIFICATE-----Generated at Mon Mar 2 10:43:24 2026 by rpki-client