$ rpki-client -vvvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/C1B929B4682B11E9AE87C117C4F9AE02.roa File: C1B929B4682B11E9AE87C117C4F9AE02.roa (raw, json) Hash identifier: n9Z78E9PnKp26az8kMPsnXZ+M19pNm6jwZr04fpkaQM= Subject key identifier: 83:17:E9:81:A6:1B:E2:11:78:64:24:E7:80:21:ED:88:1A:BC:EB:83 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 273B Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/C1B929B4682B11E9AE87C117C4F9AE02.roa Signing time: Mon 28 Sep 2026 16:22:44 +0000 ROA not before: Mon 28 Sep 2026 16:22:44 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 23688 IP address blocks: 27.147.128.0/17 maxlen: 24 103.197.152.0/22 maxlen: 24 103.232.100.0/22 maxlen: 24 123.200.0.0/19 maxlen: 24 163.47.32.0/22 maxlen: 24 203.76.96.0/19 maxlen: 24 2400:ca00::/28 maxlen: 36 2400:ca00::/40 maxlen: 48 2400:ca00:100::/48 maxlen: 48 2400:ca00:1f1::/48 maxlen: 48 2400:ca00:1f2::/48 maxlen: 48 2400:ca00:1f3::/48 maxlen: 48 2400:ca00:1f3:2::/64 maxlen: 64 2400:ca00:1fa::/48 maxlen: 48 2400:ca00:1fb::/48 maxlen: 48 2400:ca00:1fb:fb01::/64 maxlen: 64 2400:ca00:1fb:fc01::/64 maxlen: 64 2400:ca00:1fb:fd01::/64 maxlen: 64 2400:ca00:1fb:fe01::/64 maxlen: 64 2400:ca00:1fb:ff01::/64 maxlen: 64 2400:ca00:1fc::/48 maxlen: 48 2400:ca00:1fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10043 (0x273b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Sep 28 16:22:44 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aba9454-1c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:f3:3a:c8:d5:5b:cc:cb:16:5f:98:59:77: 4a:f5:8d:50:92:f9:93:cc:f0:92:05:90:13:40:ab: cc:04:78:19:14:48:4f:ac:b9:25:0b:c1:ac:b9:71: ff:92:ae:05:81:cb:10:6a:51:a5:09:17:2b:e5:cd: 15:e8:33:98:ff:0c:b5:ca:b6:0d:04:ab:d5:9e:02: d7:7b:59:ce:d4:83:0f:68:95:5a:df:86:d6:8d:12: fc:fb:56:16:0a:de:d3:53:f3:ad:14:2b:c1:3f:27: c5:62:41:7d:8b:71:40:c9:b3:64:2b:cf:0f:c3:57: 2c:2b:f4:6c:54:af:b4:ad:ab:45:7e:3a:33:e9:ee: e0:05:28:37:4d:89:c8:49:11:a4:de:00:12:9c:f5: 04:88:fb:a0:23:d9:21:ac:7e:b5:2b:92:99:3c:71: ea:5a:9c:d3:61:e3:ae:2b:bc:b8:2a:b5:53:12:18: 2b:a7:dc:fc:cd:57:ac:c6:19:6c:4b:48:c6:06:ea: e5:25:e7:67:24:e8:b3:83:9d:0a:b1:d5:03:e1:c0: 24:d2:b9:60:70:70:e6:d0:a9:22:58:bd:9c:2d:96: 29:b1:92:d5:9d:f2:dc:a6:71:63:75:21:45:b2:80: 46:37:22:5e:ae:ee:ac:08:6d:f3:8b:72:4a:b7:a2: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:17:E9:81:A6:1B:E2:11:78:64:24:E7:80:21:ED:88:1A:BC:EB:83 X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/C1B929B4682B11E9AE87C117C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.147.128.0/17 103.197.152.0/22 103.232.100.0/22 123.200.0.0/19 163.47.32.0/22 203.76.96.0/19 IPv6: 2400:ca00::/28 Signature Algorithm: sha256WithRSAEncryption 32:83:9d:2b:3d:83:14:13:11:00:c8:38:74:f3:9d:ea:53:77: 33:ea:b2:72:4b:5b:2a:cf:9b:0f:af:18:85:dd:f5:3c:fb:b7: b6:b9:98:9a:1d:ac:e3:f9:4d:c7:aa:52:29:af:b8:c4:d7:66: a7:9f:4d:7c:d8:91:be:06:3c:cb:9c:e9:6e:1c:d8:d4:21:21: 65:d1:e8:12:e5:19:e8:11:bb:3d:8d:2a:64:7d:ae:b1:6b:31: 20:33:77:0f:8b:59:82:11:06:64:76:bb:5f:cf:7c:c0:00:4e: 39:6e:9a:23:ab:f3:ef:d0:3d:47:2b:d6:3c:19:0f:6f:d1:97: d0:60:26:4b:9e:08:d4:87:e5:b0:b6:d3:74:58:38:60:75:99: f1:ed:40:a3:a0:cb:67:47:6b:47:4c:dd:73:18:94:3f:5a:e0: 50:b6:19:06:13:1a:60:55:0d:b4:06:0e:3c:ef:9c:4b:31:1e: 13:6c:ac:b2:57:be:b7:82:94:6b:16:b0:7e:0d:69:b8:2c:85: 80:63:15:d9:ac:f0:cb:89:b3:90:05:35:6e:95:34:b0:b7:b4: b0:21:93:e5:02:1e:aa:2c:92:80:d9:35:5e:e9:5d:2a:78:ad: 0a:49:f9:2e:fc:37:86:69:2d:1f:34:7b:a0:48:d8:d9:9d:02: 59:64:cf:69 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICJzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjYwOTI4MTYyMjQ0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJhOTQ1NC0xYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PTzOsjVW8zLFl+YWXdK9Y1QkvmTzPCSBZATQKvMBHgZFEhPrLklC8GsuXH/ kq4FgcsQalGlCRcr5c0V6DOY/wy1yrYNBKvVngLXe1nO1IMPaJVa34bWjRL8+1YW Ct7TU/OtFCvBPyfFYkF9i3FAybNkK88Pw1csK/RsVK+0ratFfjoz6e7gBSg3TYnI SRGk3gASnPUEiPugI9khrH61K5KZPHHqWpzTYeOuK7y4KrVTEhgrp9z8zVesxhls S0jGBurlJednJOizg50KsdUD4cAk0rlgcHDm0KkiWL2cLZYpsZLVnfLcpnFjdSFF soBGNyJeru6sCG3zi3JKt6L7HQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFIMX6YGm G+IReGQk54Ah7YgavOuDMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAyQjAvNjU3MkJFOTRGRjk0MTFFNDg3NkI5NDVEQzRGOUFFMDIvQzFCOTI5QjQ2 ODJCMTFFOUFFODdDMTE3QzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQHG5OAAwQCZ8WYAwQCZ+hkAwQFe8gAAwQCoy8gAwQFy0xgMA0EAgAC MAcDBQQkAMoAMA0GCSqGSIb3DQEBCwUAA4IBAQAyg50rPYMUExEAyDh0853qU3cz 6rJyS1sqz5sPrxiF3fU8+7e2uZiaHazj+U3HqlIpr7jE12ann0182JG+BjzLnOlu HNjUISFl0egS5RnoEbs9jSpkfa6xazEgM3cPi1mCEQZkdrtfz3zAAE45bpojq/Pv 0D1HK9Y8GQ9v0ZfQYCZLngjUh+WwttN0WDhgdZnx7UCjoMtnR2tHTN1zGJQ/WuBQ thkGExpgVQ20Bg4875xLMR4TbKyyV763gpRrFrB+DWm4LIWAYxXZrPDLibOQBTVu lTSwt7SwIZPlAh6qLJKA2TVe6V0qeK0KSfku/DeGaS0fNHugSNjZnQJZZM9p -----END CERTIFICATE-----Generated at Thu Oct 8 20:04:49 2026 by rpki-client