$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F378ABC21B9411F1B53238423F3D8C67.roa File: F378ABC21B9411F1B53238423F3D8C67.roa (raw, json) Hash identifier: hJFqdkYICXxW38Eoy6HXzoaRQfWPrDGnErBTUNXD3Xk= Subject key identifier: 91:92:0C:16:4B:AE:CB:FF:52:51:87:39:CA:29:97:BB:2E:34:23:BB Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2A09 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F378ABC21B9411F1B53238423F3D8C67.roa Signing time: Sun 30 Aug 2026 16:25:26 +0000 ROA not before: Sun 30 Aug 2026 16:25:25 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 7489 IP address blocks: 27.100.36.0/23 maxlen: 24 45.124.64.0/22 maxlen: 24 103.192.176.0/22 maxlen: 24 103.196.20.0/23 maxlen: 24 103.217.252.0/22 maxlen: 22 2402:9e80::/48 maxlen: 48 2402:9e80:1::/48 maxlen: 48 2402:9e80:5::/48 maxlen: 48 2402:9e80:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10761 (0x2a09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 30 16:25:25 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a945975-3691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:e2:49:f9:2d:1a:ab:fc:48:b4:ae:83:48: 96:58:9b:f6:85:c6:00:2f:cb:ed:fd:f9:65:f4:b0: 7d:76:64:71:d2:1a:62:f5:7f:86:11:9e:dd:72:84: 3f:de:30:4a:57:e2:e2:25:f5:c7:d6:95:be:4f:ab: 06:8a:42:cb:10:67:c3:71:a5:b0:34:8e:c6:1b:b8: 0b:d5:94:07:85:bf:60:c3:b7:36:bf:96:14:54:3e: 6b:5c:f2:51:9c:40:50:e6:3c:a3:3f:98:db:b7:6f: 16:2f:a4:2c:61:f9:78:36:2d:14:56:05:92:fa:ea: 03:28:6c:0a:2d:d4:81:92:76:57:af:8e:94:f8:66: 70:dd:d4:67:fb:14:8a:69:0b:bb:21:b9:a4:63:33: d0:30:85:d3:9d:80:02:a1:2a:89:4e:b3:88:4e:77: ea:6c:f8:0d:77:b1:bd:fd:b6:51:15:65:ff:12:61: 2d:2a:48:4e:f1:04:d8:9d:16:ac:c0:cf:94:43:1a: eb:96:39:db:25:9e:73:95:72:f5:a5:b5:c1:bc:f0: 35:04:58:47:36:fe:d4:b2:54:92:1a:ce:78:27:00: bc:d7:26:d6:74:e4:09:e0:1f:b2:cf:94:fd:1c:c5: 11:be:c2:99:a5:c5:0e:00:92:3a:8a:5b:d0:bd:47: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:92:0C:16:4B:AE:CB:FF:52:51:87:39:CA:29:97:BB:2E:34:23:BB X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F378ABC21B9411F1B53238423F3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 27.100.36.0/23 45.124.64.0/22 103.192.176.0/22 103.196.20.0/23 103.217.252.0/22 IPv6: 2402:9e80::/47 2402:9e80:5::/48 2402:9e80:a::/48 Signature Algorithm: sha256WithRSAEncryption 7e:49:e7:31:6f:42:4f:f6:25:8b:c4:31:4c:39:57:76:b6:ba: 2a:a2:8c:6c:f5:c0:c9:14:21:47:92:53:c5:56:b1:0a:0e:9c: b6:6d:97:d6:54:24:b3:0d:e0:c4:e2:71:38:ef:38:38:e5:6b: 5e:67:8b:6e:76:7c:a1:e2:95:50:64:ad:ea:ac:97:b6:e3:0a: b0:58:28:43:4d:eb:0a:0e:f3:ed:8e:91:8d:6d:c4:ad:ba:0d: 5b:b8:80:fe:f1:07:93:89:da:b8:bc:ae:07:2a:0f:ec:63:83: 4e:8f:cb:21:82:3d:cc:7c:8b:eb:4a:4e:ad:02:2a:cf:84:ea: a7:a0:e9:75:38:76:e7:32:c0:fb:1d:1f:1b:50:e8:a4:c0:9a: 82:5f:d4:3a:43:00:ab:5b:dd:fe:f6:c3:ed:a1:a4:8c:b6:35: a2:b3:11:79:55:1c:a7:85:26:cb:92:7c:f2:12:9c:28:a3:ae: 9b:05:0b:83:27:34:50:23:40:8e:b9:64:c6:10:5a:59:02:ac: 73:c5:08:7f:c0:81:a4:4b:8e:7a:16:36:eb:b6:ad:c2:b7:db: cb:a3:82:39:fe:ca:80:a7:c4:06:ff:da:88:d9:03:21:4b:a2: 38:7b:c4:58:82:8f:e5:79:09:aa:11:92:42:a7:9a:18:09:ab: 67:95:8d:f0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICKgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjYwODMwMTYyNTI1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0NTk3NS0zNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtz3iSfktGqv8SLSug0iWWJv2hcYAL8vt/fll9LB9dmRx0hpi9X+GEZ7dcoQ/ 3jBKV+LiJfXH1pW+T6sGikLLEGfDcaWwNI7GG7gL1ZQHhb9gw7c2v5YUVD5rXPJR nEBQ5jyjP5jbt28WL6QsYfl4Ni0UVgWS+uoDKGwKLdSBknZXr46U+GZw3dRn+xSK aQu7IbmkYzPQMIXTnYACoSqJTrOITnfqbPgNd7G9/bZRFWX/EmEtKkhO8QTYnRas wM+UQxrrljnbJZ5zlXL1pbXBvPA1BFhHNv7UslSSGs54JwC81ybWdOQJ4B+yz5T9 HMURvsKZpcUOAJI6ilvQvUf5MQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJGSDBZL rsv/UlGHOcopl7suNCO7MB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRjM3OEFCQzIx Qjk0MTFGMUI1MzIzODQyM0YzRDhDNjcucm9hMFoGCCsGAQUFBwEHAQH/BEswSTAk BAIAATAeAwQBG2QkAwQCLXxAAwQCZ8CwAwQBZ8QUAwQCZ9n8MCEEAgACMBsDBwEk Ap6AAAADBwAkAp6AAAUDBwAkAp6AAAowDQYJKoZIhvcNAQELBQADggEBAH5J5zFv Qk/2JYvEMUw5V3a2uiqijGz1wMkUIUeSU8VWsQoOnLZtl9ZUJLMN4MTicTjvODjl a15ni252fKHilVBkreqsl7bjCrBYKENN6woO8+2OkY1txK26DVu4gP7xB5OJ2ri8 rgcqD+xjg06PyyGCPcx8i+tKTq0CKs+E6qeg6XU4ducywPsdHxtQ6KTAmoJf1DpD AKtb3f72w+2hpIy2NaKzEXlVHKeFJsuSfPISnCijrpsFC4MnNFAjQI65ZMYQWlkC rHPFCH/AgaRLjnoWNuu2rcK328ujgjn+yoCnxAb/2ojZAyFLojh7xFiCj+V5CaoR kkKnmhgJq2eVjfA= -----END CERTIFICATE-----Generated at Fri Sep 4 22:59:42 2026 by rpki-client