
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/27A84B00A1CC11ED8DDB785DC4F9AE02.roa
File: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (raw, json)
Hash identifier: lerl+S1eIB/OLEq2WHdkhDzv2oYfCjPkouNJFGcdWfk=
Subject key identifier: 33:88:87:CE:94:B4:45:AA:C7:1B:9F:86:60:7B:44:F5:1A:9A:21:20
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 28A6
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/27A84B00A1CC11ED8DDB785DC4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:20:09 +0000
ROA not before: Tue 31 Mar 2026 16:20:09 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 21443
IP address blocks: 27.110.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10406 (0x28a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Mar 31 16:20:09 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf439-83c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:37:b9:89:8e:1d:7e:2b:e8:4f:f0:2c:f8:
8a:a5:86:d9:7d:13:42:81:d7:20:78:38:3d:e7:2d:
f4:46:06:5f:16:b8:2f:1d:36:cb:b5:e7:aa:2f:f9:
fb:b8:82:bd:c5:ba:ac:f9:50:1a:0e:76:e9:57:3c:
90:fb:e5:ef:05:35:05:cf:9a:1b:a7:8d:27:0b:fe:
6a:3e:28:a9:e7:38:e0:1f:44:82:10:92:8a:a7:a6:
9d:3f:7a:0d:e8:4c:40:f3:a9:5f:c0:b5:05:e6:41:
09:7b:06:3c:01:ef:f3:4a:c2:a9:4b:65:d6:fb:a4:
16:8f:67:78:42:bf:c2:b4:ee:a3:e2:8e:5b:d2:04:
e3:03:c7:01:0f:13:14:89:39:84:ae:6b:1d:3b:a6:
8f:f3:9f:5e:dd:80:bc:d0:b4:20:02:96:28:e8:91:
68:07:7a:e9:6e:93:4f:0c:db:95:9b:85:55:1a:30:
5a:f0:01:7f:de:8a:e9:a8:f1:a0:3b:ab:26:9e:20:
9e:95:42:df:91:e9:37:ee:03:d5:1b:06:81:37:36:
7f:af:74:96:ad:49:cf:4f:46:56:24:d5:3a:0e:bc:
19:ca:aa:21:33:ea:52:59:78:06:cf:4a:19:fe:25:
d8:18:70:51:51:9e:fb:e8:1c:c9:c0:de:b6:cf:dd:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:88:87:CE:94:B4:45:AA:C7:1B:9F:86:60:7B:44:F5:1A:9A:21:20
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/27A84B00A1CC11ED8DDB785DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.110.227.0/24
Signature Algorithm: sha256WithRSAEncryption
95:40:c8:63:2e:48:49:8e:0f:ad:d7:9e:50:77:1d:4d:5c:bd:
fc:fd:d9:45:98:a5:42:b4:ee:45:49:05:63:36:12:a8:af:79:
fd:c6:27:88:d8:80:f7:83:6c:55:a8:c5:66:e5:c4:27:e0:e8:
2d:93:e9:16:49:d2:d9:3f:44:21:b6:43:c6:9c:ec:45:5d:45:
3c:1d:d3:25:dd:02:45:52:52:d7:7f:47:02:43:68:8e:c2:b8:
a1:da:f5:5d:43:ad:a5:79:b2:00:3c:66:e2:50:36:a4:43:86:
21:ab:74:ee:3f:92:bf:ad:36:8b:6e:fe:5b:fa:76:9c:4c:76:
c7:2c:0d:65:74:c5:a0:22:c2:c9:ca:8e:70:9d:56:3d:0f:1c:
97:a3:9c:6f:2c:1a:01:8a:44:f1:50:f0:86:14:19:b7:7e:34:
17:fb:61:96:e5:48:08:2e:2d:7b:d0:06:a1:66:77:d9:0b:a2:
d3:c2:bd:57:07:49:fd:15:17:f2:64:32:d1:c6:53:95:8e:5f:
e9:42:29:f6:c7:e4:a8:c6:03:71:f1:f7:6f:42:eb:ec:58:7a:
b9:8d:d8:f0:f0:80:64:54:e4:fb:5e:37:fe:1b:24:e9:0b:1d:
13:19:2e:ff:4f:bb:9e:e8:70:c2:31:6c:8a:65:47:a2:cc:de:
d3:c4:72:5b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjYwMzMxMTYyMDA5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNiZjQzOS04M2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoiM3uYmOHX4r6E/wLPiKpYbZfRNCgdcgeDg95y30RgZfFrgvHTbLteeqL/n7
uIK9xbqs+VAaDnbpVzyQ++XvBTUFz5obp40nC/5qPiip5zjgH0SCEJKKp6adP3oN
6ExA86lfwLUF5kEJewY8Ae/zSsKpS2XW+6QWj2d4Qr/CtO6j4o5b0gTjA8cBDxMU
iTmErmsdO6aP859e3YC80LQgApYo6JFoB3rpbpNPDNuVm4VVGjBa8AF/3orpqPGg
O6smniCelULfkek37gPVGwaBNzZ/r3SWrUnPT0ZWJNU6DrwZyqohM+pSWXgGz0oZ
/iXYGHBRUZ776BzJwN62z90BFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDOIh86U
tEWqxxufhmB7RPUamiEgMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvMjdBODRCMDBB
MUNDMTFFRDhEREI3ODVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAG27jMA0GCSqGSIb3DQEBCwUAA4IBAQCVQMhjLkhJjg+t155Qdx1N
XL38/dlFmKVCtO5FSQVjNhKor3n9xieI2ID3g2xVqMVm5cQn4Ogtk+kWSdLZP0Qh
tkPGnOxFXUU8HdMl3QJFUlLXf0cCQ2iOwrih2vVdQ62lebIAPGbiUDakQ4Yhq3Tu
P5K/rTaLbv5b+nacTHbHLA1ldMWgIsLJyo5wnVY9DxyXo5xvLBoBikTxUPCGFBm3
fjQX+2GW5UgILi170AahZnfZC6LTwr1XB0n9FRfyZDLRxlOVjl/pQin2x+SoxgNx
8fdvQuvsWHq5jdjw8IBkVOT7Xjf+GyTpCx0TGS7/T7ue6HDCMWyKZUeizN7TxHJb
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:54 2026 by rpki-client