$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F378ABC21B9411F1B53238423F3D8C67.roa File: F378ABC21B9411F1B53238423F3D8C67.roa (raw, json) Hash identifier: habWS7E82YfP8L4q0DGHMnxJV4mFHXUGvtm1V1YFZqE= Subject key identifier: AB:73:25:5D:36:80:D3:F7:28:95:FE:15:17:31:32:F7:A3:16:50:B8 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2976 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F378ABC21B9411F1B53238423F3D8C67.roa Signing time: Mon 09 Mar 2026 08:49:58 +0000 ROA not before: Mon 09 Mar 2026 08:49:58 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 7489 IP address blocks: 27.100.36.0/23 maxlen: 24 45.124.64.0/22 maxlen: 24 103.192.176.0/22 maxlen: 24 103.196.20.0/23 maxlen: 24 103.217.252.0/22 maxlen: 22 2402:9e80::/48 maxlen: 48 2402:9e80:1::/48 maxlen: 48 2402:9e80:5::/48 maxlen: 48 2402:9e80:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 15:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10614 (0x2976) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Mar 9 08:49:58 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69ae89b6-561f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:39:5b:ae:f7:93:92:d2:04:4c:c8:68:4c: f3:6b:6b:ab:e5:3e:d9:22:f0:2e:0a:5c:84:db:e3: 64:2e:8c:06:62:72:db:eb:50:1a:7a:3d:6f:3d:4d: b4:69:1c:76:f8:e3:84:d7:39:3e:f7:50:76:0f:1e: ca:6f:2f:5f:3e:71:83:2e:76:39:0f:a4:2a:1d:0f: 3e:6a:b8:04:9a:4c:fb:89:fb:17:8e:0d:c4:71:32: bb:0b:ae:65:9a:12:44:19:e0:7a:df:bd:82:c9:81: be:72:84:02:77:fa:35:3a:50:2c:2f:eb:bb:af:9e: 5f:be:80:84:6d:f4:3d:02:ff:33:a0:5a:b0:42:58: 3d:e0:48:24:b1:c1:31:a5:8f:6f:26:24:7f:86:c3: 19:d0:a2:43:07:83:83:c3:99:f1:37:c2:29:6a:24: 92:fe:4c:8f:e6:79:28:56:1b:0b:26:8c:19:4a:21: c4:41:9d:f9:c3:36:9a:08:ee:94:23:9c:1b:69:5b: d9:d3:a0:09:cc:1c:08:72:be:df:ef:09:55:0e:90: 02:47:e7:70:4e:ff:48:5c:4a:9f:f6:24:56:37:9d: 7c:04:47:c7:09:67:5d:74:c5:fb:d6:ad:72:58:b4: 64:96:c3:e9:08:4b:ab:4e:c3:cb:0d:1c:03:64:02: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:73:25:5D:36:80:D3:F7:28:95:FE:15:17:31:32:F7:A3:16:50:B8 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F378ABC21B9411F1B53238423F3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 27.100.36.0/23 45.124.64.0/22 103.192.176.0/22 103.196.20.0/23 103.217.252.0/22 IPv6: 2402:9e80::/47 2402:9e80:5::/48 2402:9e80:a::/48 Signature Algorithm: sha256WithRSAEncryption 54:8c:33:89:1e:3c:f0:19:f7:df:59:da:9a:95:09:6e:cd:79: 52:a7:70:9d:50:26:00:1b:a0:5c:15:98:97:b9:85:11:e9:2b: 3e:15:24:2d:13:5d:e1:93:7f:55:bb:dc:91:e1:39:ff:8b:99: 5b:7c:df:f3:3a:7a:33:75:50:ec:7e:44:9d:3f:31:fd:ea:9d: 04:19:63:dc:4a:fe:e8:78:ed:9b:8b:bd:05:71:dd:69:38:15: 6d:9b:b7:65:4c:57:be:f3:8f:79:90:57:40:c0:ac:7d:02:6d: fe:21:ed:4b:cb:ac:01:7b:1a:43:a0:62:a3:95:df:53:6f:b4: 02:0f:6c:d8:05:4d:6b:29:52:a7:2e:79:49:a3:dc:b9:63:97: 3d:11:bb:06:72:b9:3e:c6:e4:89:7a:d2:0c:14:78:14:bb:4f: 84:7b:67:95:20:6d:4c:33:ed:41:88:b6:d0:31:f2:77:4c:fd: e6:5d:c0:d8:04:0f:8e:6f:91:0d:75:28:b1:f4:1e:ed:10:44: 93:1a:a0:62:c1:bc:aa:e1:fc:50:fc:6a:bc:d9:59:5a:22:2d: a5:de:f4:db:f0:2f:ea:2a:33:18:1e:81:65:55:b0:c4:24:a9: 50:4c:89:4b:d0:38:c1:68:01:dc:b4:42:25:57:8b:c2:3c:0d: 03:7d:00:b1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICKXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjYwMzA5MDg0OTU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFlODliNi01NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaI5W673k5LSBEzIaEzza2ur5T7ZIvAuClyE2+NkLowGYnLb61Aaej1vPU20 aRx2+OOE1zk+91B2Dx7Kby9fPnGDLnY5D6QqHQ8+argEmkz7ifsXjg3EcTK7C65l mhJEGeB6372CyYG+coQCd/o1OlAsL+u7r55fvoCEbfQ9Av8zoFqwQlg94EgkscEx pY9vJiR/hsMZ0KJDB4ODw5nxN8IpaiSS/kyP5nkoVhsLJowZSiHEQZ35wzaaCO6U I5wbaVvZ06AJzBwIcr7f7wlVDpACR+dwTv9IXEqf9iRWN518BEfHCWdddMX71q1y WLRklsPpCEurTsPLDRwDZAIdQQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKtzJV02 gNP3KJX+FRcxMvejFlC4MB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRjM3OEFCQzIx Qjk0MTFGMUI1MzIzODQyM0YzRDhDNjcucm9hMFoGCCsGAQUFBwEHAQH/BEswSTAk BAIAATAeAwQBG2QkAwQCLXxAAwQCZ8CwAwQBZ8QUAwQCZ9n8MCEEAgACMBsDBwEk Ap6AAAADBwAkAp6AAAUDBwAkAp6AAAowDQYJKoZIhvcNAQELBQADggEBAFSMM4ke PPAZ999Z2pqVCW7NeVKncJ1QJgAboFwVmJe5hRHpKz4VJC0TXeGTf1W73JHhOf+L mVt83/M6ejN1UOx+RJ0/Mf3qnQQZY9xK/uh47ZuLvQVx3Wk4FW2bt2VMV77zj3mQ V0DArH0Cbf4h7UvLrAF7GkOgYqOV31NvtAIPbNgFTWspUqcueUmj3Lljlz0RuwZy uT7G5Il60gwUeBS7T4R7Z5UgbUwz7UGIttAx8ndM/eZdwNgED45vkQ11KLH0Hu0Q RJMaoGLBvKrh/FD8arzZWVoiLaXe9NvwL+oqMxgegWVVsMQkqVBMiUvQOMFoAdy0 QiVXi8I8DQN9ALE= -----END CERTIFICATE-----Generated at Wed Mar 11 10:32:46 2026 by rpki-client