$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/2A24EFB878D011F08CEB9275C4F9AE02.roa File: 2A24EFB878D011F08CEB9275C4F9AE02.roa (raw, json) Hash identifier: qZUPt2igy/OZCeagcwY7sBJ8TPbC9Y0onFfuw4bOoUY= Subject key identifier: 6F:A1:1D:DA:AF:D4:37:8B:6E:14:E9:6D:05:25:8E:FB:03:B7:1B:9F Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 3552 Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/2A24EFB878D011F08CEB9275C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:26:14 +0000 ROA not before: Thu 02 Oct 2025 15:41:09 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132827 IP address blocks: 27.123.208.0/22 maxlen: 22 101.0.8.0/24 maxlen: 24 101.0.9.0/24 maxlen: 24 101.0.10.0/24 maxlen: 24 101.0.11.0/24 maxlen: 24 101.0.24.0/24 maxlen: 24 101.0.25.0/24 maxlen: 24 101.0.26.0/23 maxlen: 23 103.3.16.0/24 maxlen: 24 103.3.17.0/24 maxlen: 24 103.3.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13650 (0x3552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Oct 2 15:41:09 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a476b6-e622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:4f:6d:ad:89:da:f2:36:cb:2c:55:3c:ab: 82:b8:16:cd:b3:ed:7b:81:89:14:9b:b5:e4:9d:24: f8:43:ae:6a:d3:01:f8:9a:64:49:34:f5:ba:fa:07: b1:83:a4:66:36:d5:9f:c2:da:07:93:4b:04:07:18: c2:63:66:f5:ec:01:94:4b:15:11:e6:ec:d0:10:03: f7:13:ce:13:c4:5a:97:03:9e:bd:6a:66:f5:88:b5: c3:1a:13:a0:a5:3a:7b:5f:df:b1:09:5e:b3:28:2b: 7e:9a:33:2b:3c:3d:f7:22:70:c9:40:e0:0e:9f:16: 7e:2e:72:6a:e9:32:9c:84:a9:8f:2e:d8:1d:fe:e5: ac:c5:69:4b:27:fc:f0:7e:7b:f4:d1:05:2d:96:a7: 6e:f3:dc:35:fb:d0:a6:1b:7d:0a:1d:90:fc:cf:0e: d4:59:81:c2:53:b9:35:f5:8b:49:dd:1b:6d:dc:cb: 3f:8f:69:20:9a:64:3e:b6:43:56:19:9d:0f:58:00: 69:fe:e8:f0:9e:ba:f0:84:ce:c6:03:e6:ed:b0:bb: e4:2c:5b:23:e6:af:1d:5c:a1:3c:3b:bc:b0:b3:b0: 55:c6:72:f2:a3:f9:c0:0a:41:77:eb:46:b1:e9:66: 80:bd:aa:1e:8e:66:8b:8d:04:fc:b6:5b:89:96:5b: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A1:1D:DA:AF:D4:37:8B:6E:14:E9:6D:05:25:8E:FB:03:B7:1B:9F X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/2A24EFB878D011F08CEB9275C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.123.208.0/22 101.0.8.0/22 101.0.24.0/22 103.3.16.0/23 103.3.19.0/24 Signature Algorithm: sha256WithRSAEncryption 83:a0:e2:d7:93:79:02:bb:1d:94:80:a8:98:c1:3c:22:98:18: 23:ad:3c:f8:60:f9:10:6f:ae:cd:c1:31:a2:a4:7a:da:d4:e3: c9:11:09:1b:4f:3e:b0:bb:a9:ea:28:05:36:08:98:aa:29:19: d5:ce:19:38:89:91:42:79:5d:fa:c8:d7:d6:24:55:05:da:d3: 1e:98:6a:bc:7e:11:78:81:cc:40:d3:01:48:b9:47:d3:3f:c7: 25:3e:fc:00:29:d9:55:06:2f:01:b6:8b:e8:60:ff:df:39:03: fe:ba:e6:bd:14:0e:35:a1:44:13:2e:87:13:7f:cc:34:2a:c0: 26:a9:06:77:f4:7d:85:5b:24:5b:85:ce:a9:a9:46:d1:b4:e7: b3:22:fe:1a:32:62:19:e7:6f:a3:96:fc:3c:a6:0f:79:fd:d7: 7e:d0:a4:00:17:96:b7:d6:81:ac:a1:20:49:7d:7d:3f:05:d7: 59:f5:07:b5:09:70:cb:93:5c:e5:c0:4c:ae:be:17:53:fc:d6: ff:05:c3:2d:23:7e:fd:45:c9:fa:18:07:31:b4:83:5e:af:f6: d1:9b:10:10:0d:34:89:09:d7:dd:5c:65:2a:af:4f:80:5e:fa: 7d:84:45:5c:de:92:b7:4f:1a:87:5e:af:ff:77:f4:bc:3d:4b: 2d:8e:40:84 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICNVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjUxMDAyMTU0MTA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzZiNi1lNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvhPba2J2vI2yyxVPKuCuBbNs+17gYkUm7XknST4Q65q0wH4mmRJNPW6+gex g6RmNtWfwtoHk0sEBxjCY2b17AGUSxUR5uzQEAP3E84TxFqXA569amb1iLXDGhOg pTp7X9+xCV6zKCt+mjMrPD33InDJQOAOnxZ+LnJq6TKchKmPLtgd/uWsxWlLJ/zw fnv00QUtlqdu89w1+9CmG30KHZD8zw7UWYHCU7k19YtJ3Rtt3Ms/j2kgmmQ+tkNW GZ0PWABp/ujwnrrwhM7GA+btsLvkLFsj5q8dXKE8O7yws7BVxnLyo/nACkF360ax 6WaAvaoejmaLjQT8tluJlluLkwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFG+hHdqv 1DeLbhTpbQUljvsDtxufMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvMkEyNEVGQjg3 OEQwMTFGMDhDRUI5Mjc1QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCG3vQAwQCZQAIAwQCZQAYAwQBZwMQAwQAZwMTMA0GCSqGSIb3DQEB CwUAA4IBAQCDoOLXk3kCux2UgKiYwTwimBgjrTz4YPkQb67NwTGipHra1OPJEQkb Tz6wu6nqKAU2CJiqKRnVzhk4iZFCeV36yNfWJFUF2tMemGq8fhF4gcxA0wFIuUfT P8clPvwAKdlVBi8BtovoYP/fOQP+uua9FA41oUQTLocTf8w0KsAmqQZ39H2FWyRb hc6pqUbRtOezIv4aMmIZ52+jlvw8pg95/dd+0KQAF5a31oGsoSBJfX0/BddZ9Qe1 CXDLk1zlwEyuvhdT/Nb/BcMtI379Rcn6GAcxtINer/bRmxAQDTSJCdfdXGUqr0+A Xvp9hEVc3pK3TxqHXq//d/S8PUstjkCE -----END CERTIFICATE-----Generated at Mon Mar 2 09:20:01 2026 by rpki-client