$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/27F85F401B0811EEA3313C43C4F9AE02.roa File: 27F85F401B0811EEA3313C43C4F9AE02.roa (raw, json) Hash identifier: m7XS9I2yi5BoAseIr1qQouVhNxYJIXGHAhyd9kVBdpk= Subject key identifier: 92:9C:EF:64:82:5E:0F:35:17:CA:73:BB:E8:F9:11:C9:E5:4C:5B:59 Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 1006 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/27F85F401B0811EEA3313C43C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:47:12 +0000 ROA not before: Wed 14 Jan 2026 18:15:16 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 7468 IP address blocks: 202.64.110.0/24 maxlen: 24 220.232.132.0/24 maxlen: 24 220.232.133.0/24 maxlen: 24 220.232.134.0/24 maxlen: 24 220.232.156.0/24 maxlen: 24 220.232.157.0/24 maxlen: 24 220.232.159.0/24 maxlen: 24 220.232.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4102 (0x1006) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Jan 14 18:15:16 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a489b0-be5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:e6:eb:7e:2b:25:a1:96:bc:04:00:c3:0b: 7e:da:43:e7:f5:f1:ce:6e:92:b2:27:f9:a9:f5:0c: df:0d:fd:80:10:5b:82:54:f8:d4:0f:9b:40:40:24: c0:20:bc:94:10:e0:80:7d:f6:75:2c:75:c4:e7:2c: 15:a8:53:bd:be:c9:9d:1f:50:fd:17:2b:c9:22:8e: ec:cb:9f:aa:d0:ad:c8:11:0e:20:d0:4b:b5:ae:ed: fa:27:2c:c2:94:20:ec:57:1a:f9:58:c3:e4:12:db: a8:75:48:20:8a:09:6e:ad:a3:b6:67:ba:b5:c0:7a: bc:31:41:84:70:c9:21:54:b5:f3:69:c2:4c:77:06: c2:ee:0d:08:f3:ec:d4:b2:f8:bd:bc:13:40:86:62: 96:bf:6b:ce:68:be:21:9d:1f:59:bf:13:54:28:14: 0c:6b:ab:d2:1d:bb:19:b4:8c:cf:0b:f5:83:4e:83: 41:2d:72:0b:29:fc:3f:ad:ea:e7:74:23:13:0a:eb: 88:93:8f:6c:a8:69:32:b0:a2:d6:36:d2:d6:55:9a: 73:05:06:44:3c:95:fb:48:8c:73:74:ad:52:4e:b4: 58:e4:ab:df:94:fc:bb:f6:31:34:82:77:cb:96:9a: 5b:f8:b2:64:c9:3d:8a:44:7b:bf:89:1b:f3:53:3e: 94:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9C:EF:64:82:5E:0F:35:17:CA:73:BB:E8:F9:11:C9:E5:4C:5B:59 X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/27F85F401B0811EEA3313C43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.64.110.0/24 220.232.132.0-220.232.134.255 220.232.156.0/23 220.232.159.0/24 220.232.211.0/24 Signature Algorithm: sha256WithRSAEncryption 36:9d:d3:98:0a:6b:c4:bd:e3:fc:3b:45:60:ef:42:13:3b:04: 40:c3:9a:fa:45:2d:e4:30:6e:66:d2:18:47:28:4f:be:b1:57: 31:30:54:60:fc:5c:47:28:da:a0:3f:50:e5:49:f7:69:8e:a2: 1a:0f:03:a5:59:27:4e:45:9c:89:e1:3f:67:52:c5:5b:97:69: fd:19:b2:ee:33:bf:e5:e4:fb:45:31:6b:50:9a:65:63:0b:34: a6:a4:0c:0d:a0:f2:4c:50:26:71:c0:f0:45:74:1b:d6:52:c9: bc:31:e0:b4:59:f5:e4:a3:62:09:68:66:f3:53:ae:dc:35:af: f3:7b:8f:62:3f:87:5e:fd:f4:09:13:fd:ec:26:dc:ce:e3:09: f1:ea:42:fa:5a:04:71:27:17:03:53:a8:03:18:dd:78:ea:ef: b0:c7:26:8f:01:4b:dc:11:0c:ee:ff:7f:93:80:b6:99:96:ea: 63:52:75:99:c2:c5:ef:33:c9:26:08:d0:6c:b4:78:68:f1:61: 5b:3f:95:ee:a5:96:ba:9e:d8:49:2e:8b:cc:06:4a:9b:f0:08: f3:b9:b1:ff:78:25:1e:46:31:d0:0a:29:de:7a:51:95:6a:35: cf:98:7c:90:9f:bb:d8:b2:c7:e8:a1:20:e4:62:1c:64:97:71: da:4a:7a:42 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICEAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjYwMTE0MTgxNTE2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODliMC1iZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7jm634rJaGWvAQAwwt+2kPn9fHObpKyJ/mp9QzfDf2AEFuCVPjUD5tAQCTA ILyUEOCAffZ1LHXE5ywVqFO9vsmdH1D9FyvJIo7sy5+q0K3IEQ4g0Eu1ru36JyzC lCDsVxr5WMPkEtuodUggigluraO2Z7q1wHq8MUGEcMkhVLXzacJMdwbC7g0I8+zU svi9vBNAhmKWv2vOaL4hnR9ZvxNUKBQMa6vSHbsZtIzPC/WDToNBLXILKfw/rern dCMTCuuIk49sqGkysKLWNtLWVZpzBQZEPJX7SIxzdK1STrRY5KvflPy79jE0gnfL lppb+LJkyT2KRHu/iRvzUz6ULwIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFJKc72SC Xg81F8pzu+j5EcnlTFtZMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvMjdGODVGNDAx QjA4MTFFRUEzMzEzQzQzQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQAykBuMAwDBALc6IQDBADc6IYDBAHc6JwDBADc6J8DBADc6NMwDQYJ KoZIhvcNAQELBQADggEBADad05gKa8S94/w7RWDvQhM7BEDDmvpFLeQwbmbSGEco T76xVzEwVGD8XEco2qA/UOVJ92mOohoPA6VZJ05FnInhP2dSxVuXaf0Zsu4zv+Xk +0Uxa1CaZWMLNKakDA2g8kxQJnHA8EV0G9ZSybwx4LRZ9eSjYgloZvNTrtw1r/N7 j2I/h1799AkT/ewm3M7jCfHqQvpaBHEnFwNTqAMY3Xjq77DHJo8BS9wRDO7/f5OA tpmW6mNSdZnCxe8zySYI0Gy0eGjxYVs/le6llrqe2Ekui8wGSpvwCPO5sf94JR5G MdAKKd56UZVqNc+YfJCfu9iyx+ihIORiHGSXcdpKekI= -----END CERTIFICATE-----Generated at Mon Mar 2 18:08:10 2026 by rpki-client