$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/B94BEEA036D811ECB5BD1470C4F9AE02.roa File: B94BEEA036D811ECB5BD1470C4F9AE02.roa (raw, json) Hash identifier: +xbbDGKjJ6DqQpBrbDd8JJCmqdHxccmvBDGEJY8Y1eA= Subject key identifier: D8:50:43:7A:19:DE:85:5A:01:17:6E:B2:7C:F9:61:F5:9C:B7:59:12 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 08A0 Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/B94BEEA036D811ECB5BD1470C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:33:58 +0000 ROA not before: Thu 04 Dec 2025 20:03:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38325 IP address blocks: 27.106.216.0/21 maxlen: 22 27.106.216.0/24 maxlen: 24 27.106.217.0/24 maxlen: 24 27.106.218.0/24 maxlen: 24 27.106.219.0/24 maxlen: 24 27.106.220.0/24 maxlen: 24 27.106.221.0/24 maxlen: 24 27.106.222.0/24 maxlen: 24 27.106.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Dec 4 20:03:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46a76-8099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e0:1f:b6:cf:72:64:34:3a:74:38:92:10:97: f8:bb:5a:9d:dd:c5:97:11:9f:98:6f:a5:8c:51:88: fa:d2:7e:76:9a:d7:d6:49:89:fb:41:a2:81:2e:bf: 1d:12:08:a3:5a:2f:85:3a:14:db:31:59:09:f7:e1: 38:c8:d7:53:de:ee:7a:ea:97:40:7d:f2:25:89:75: 5b:98:a1:ba:8c:32:eb:b9:d8:7b:79:31:98:ca:76: 90:2f:29:d6:c0:d8:b1:c9:ca:03:3c:e1:42:0d:d0: 05:65:5c:48:d5:35:75:d8:b4:ea:68:19:7f:29:f0: e1:b3:ac:03:f1:e1:f0:48:3c:eb:d7:e9:b4:e6:d8: b7:86:39:a1:97:db:57:cd:9b:7a:82:31:dc:a6:e7: 0e:46:61:b8:f1:19:2b:f0:6f:26:04:01:92:46:87: 8e:d6:b5:0a:ee:1c:2f:ec:7e:cd:5d:85:fc:01:16: eb:6f:6d:38:b4:ce:e2:91:74:5e:a1:8b:db:f1:8e: c6:92:85:f9:77:40:c2:35:86:7b:3b:b7:e3:f7:99: 5d:78:cb:de:e6:85:02:66:f2:00:f1:a3:d7:af:a5: e8:1e:ea:16:2a:6c:b0:db:a9:9e:63:3d:99:3f:d2: ec:87:4b:b1:50:95:f4:29:53:39:f3:eb:e5:9e:72: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:50:43:7A:19:DE:85:5A:01:17:6E:B2:7C:F9:61:F5:9C:B7:59:12 X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/B94BEEA036D811ECB5BD1470C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.106.216.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:f2:c7:ec:17:47:b9:6f:90:99:76:12:ec:1b:bb:89:7b:4e: d8:62:6a:aa:6a:be:b8:45:70:bb:7c:50:3c:07:6a:39:f9:bc: 01:70:e0:51:39:eb:8e:d4:3f:ae:01:b6:94:1b:7d:9d:02:93: 84:84:3f:96:ca:64:c6:7d:47:ec:b6:ea:74:93:b8:5f:08:05: d0:ab:62:f0:a4:d9:3e:c7:2a:34:f3:95:68:c6:31:cc:af:72: 5b:a8:da:31:b8:5a:fc:5a:cf:1d:a6:89:76:ca:11:2a:1c:9a: a3:a9:60:17:e9:c6:b7:51:60:93:74:9f:99:00:bb:33:b7:c6: d7:96:87:1d:c8:1a:5e:88:fe:f0:75:04:a8:f0:d8:98:a0:71: 86:52:f7:63:2a:e0:d6:0e:7d:d0:95:a0:d8:ea:57:87:6a:a9: b7:5b:c6:19:1f:0b:20:09:f1:36:c2:c8:d8:06:c6:ed:39:98: 38:f1:9a:40:59:50:f3:52:e6:7b:2f:01:18:c1:93:f5:06:b7: 33:c4:a3:71:d4:61:cd:4b:83:fa:b9:a9:75:9b:c7:f9:91:24: 6f:ec:62:74:4a:1a:cf:fb:8a:17:31:07:11:7f:84:88:af:2d: b6:e6:55:95:05:6b:06:09:cb:ff:ed:e4:fb:63:e4:0a:30:7b: 8e:08:b8:3b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjUxMjA0MjAwMzIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmE3Ni04MDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7uAfts9yZDQ6dDiSEJf4u1qd3cWXEZ+Yb6WMUYj60n52mtfWSYn7QaKBLr8d EgijWi+FOhTbMVkJ9+E4yNdT3u566pdAffIliXVbmKG6jDLrudh7eTGYynaQLynW wNixycoDPOFCDdAFZVxI1TV12LTqaBl/KfDhs6wD8eHwSDzr1+m05ti3hjmhl9tX zZt6gjHcpucORmG48Rkr8G8mBAGSRoeO1rUK7hwv7H7NXYX8ARbrb204tM7ikXRe oYvb8Y7GkoX5d0DCNYZ7O7fj95ldeMve5oUCZvIA8aPXr6XoHuoWKmyw26meYz2Z P9Lsh0uxUJX0KVM58+vlnnL6mwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNhQQ3oZ 3oVaARdusnz5YfWct1kSMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ1MzkvQzEyNjVEQzBFMzg5MTFFQUI3M0EzNjU5QzRGOUFFMDIvQjk0QkVFQTAz NkQ4MTFFQ0I1QkQxNDcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDG2rYMA0GCSqGSIb3DQEBCwUAA4IBAQCc8sfsF0e5b5CZdhLsG7uJ e07YYmqqar64RXC7fFA8B2o5+bwBcOBROeuO1D+uAbaUG32dApOEhD+WymTGfUfs tup0k7hfCAXQq2LwpNk+xyo085VoxjHMr3JbqNoxuFr8Ws8dpol2yhEqHJqjqWAX 6ca3UWCTdJ+ZALszt8bXlocdyBpeiP7wdQSo8NiYoHGGUvdjKuDWDn3QlaDY6leH aqm3W8YZHwsgCfE2wsjYBsbtOZg48ZpAWVDzUuZ7LwEYwZP1BrczxKNx1GHNS4P6 ual1m8f5kSRv7GJ0ShrP+4oXMQcRf4SIry225lWVBWsGCcv/7eT7Y+QKMHuOCLg7 -----END CERTIFICATE-----Generated at Mon Mar 2 07:47:27 2026 by rpki-client