$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa File: 2CF180F0809511EFB8A82822C4F9AE02.roa (raw, json) Hash identifier: 3MpGad6F7Ow9wlBnkKpBeNv0NsvSMEgpoonsoA35SRk= Subject key identifier: D6:4F:6E:7A:AA:F0:97:5A:27:0F:80:2B:A2:7E:72:D1:74:CD:EC:76 Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Certificate serial: 174B Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa Signing time: Sat 16 May 2026 17:20:05 +0000 ROA not before: Sat 16 May 2026 17:20:05 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 27.111.208.0/20 maxlen: 20 27.111.224.0/22 maxlen: 22 27.111.232.0/21 maxlen: 21 101.97.64.0/22 maxlen: 22 101.97.72.0/21 maxlen: 21 101.97.80.0/21 maxlen: 21 118.103.180.0/22 maxlen: 22 202.79.192.0/22 maxlen: 22 202.79.196.0/23 maxlen: 23 202.79.200.0/21 maxlen: 21 202.79.208.0/20 maxlen: 20 202.79.208.0/22 maxlen: 22 202.79.213.0/24 maxlen: 24 202.79.214.0/23 maxlen: 23 202.79.216.0/21 maxlen: 21 2403:b100::/32 maxlen: 32 2403:b101::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 May 2026 16:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5963 (0x174b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Validity Not Before: May 16 17:20:05 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a08a745-ff20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:4d:3b:38:0d:3e:12:15:e2:3a:ba:83:9d: 9c:0e:e9:6b:c0:69:c0:8d:6d:2e:6f:b2:87:ad:1f: 62:e4:d1:e8:40:bd:0b:6a:d3:7b:a0:da:43:79:9f: f9:ff:0e:ed:78:b4:fa:ce:6e:96:be:49:1d:75:8a: 65:0c:82:9c:14:85:5b:8d:99:e5:c8:7c:88:09:07: 01:7e:5c:c4:6f:6a:ca:1d:e9:97:93:43:9e:6b:ab: bf:a0:df:5f:f4:72:89:19:2f:61:6b:19:00:82:dc: 07:58:8c:29:d7:1d:2f:6e:4f:3c:15:d4:c2:43:fd: 78:3c:c3:eb:c3:57:e5:23:92:4f:61:7e:59:7d:8a: c4:27:2f:88:6d:54:ad:cd:af:a8:e5:aa:2f:6e:bc: c3:a8:96:b1:57:f1:dc:80:16:c9:30:9a:3f:92:32: 27:09:bb:11:2c:31:6b:69:1e:c9:af:ad:27:8e:a3: 30:9b:10:aa:b4:e9:e0:15:e5:a7:71:b0:4d:80:9e: 70:38:55:ae:68:84:ab:e9:f9:39:a2:85:d5:e9:5f: f2:8c:ed:f7:23:69:f0:8c:a6:22:4e:f7:e2:3a:92: cd:c9:c4:87:b0:bb:67:4e:ff:65:b0:2f:ff:f8:32: 6d:fa:3d:57:29:4e:01:6f:04:e7:6f:f0:6c:61:68: 53:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4F:6E:7A:AA:F0:97:5A:27:0F:80:2B:A2:7E:72:D1:74:CD:EC:76 X509v3 Authority Key Identifier: keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.111.208.0-27.111.227.255 27.111.232.0/21 101.97.64.0/22 101.97.72.0-101.97.87.255 118.103.180.0/22 202.79.192.0-202.79.197.255 202.79.200.0-202.79.223.255 IPv6: 2403:b100::-2403:b101:ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1b:59:c1:dc:93:ac:db:ce:ad:cd:36:bd:6c:f9:d3:63:0d:b2: a3:e6:84:e4:49:7a:bc:0d:22:ce:fb:0c:61:ea:7a:29:87:cf: 5e:d9:6d:cd:7a:4d:54:11:eb:5d:dd:da:78:d8:99:3d:41:21: 5d:65:bf:a3:b2:d3:41:f3:8f:be:3c:77:25:97:57:4c:81:55: 6b:2a:46:90:b3:7c:21:71:ee:02:62:8e:06:63:bd:73:29:c8: e4:67:d9:3a:5b:23:24:ba:ce:9b:08:1e:bf:b1:c7:0c:19:ab: 5d:ed:f9:fd:36:1c:5e:e9:bf:50:10:05:b5:6c:35:04:22:73: df:e0:bc:bb:10:24:5d:59:05:b9:f1:77:4c:60:27:d1:7c:4e: 05:24:77:09:98:84:61:91:43:c5:fa:3c:43:7a:86:9b:aa:2f: ec:18:15:7b:b9:a3:39:27:69:3d:c6:68:d7:5c:ce:4e:a8:c6: c3:8b:b2:8c:ee:fe:63:43:c6:b9:87:cb:c6:dc:79:7e:39:d6: 4d:88:0b:54:2f:92:b7:69:97:09:73:8d:e4:91:1a:b4:cf:ca: 3c:4d:fd:02:21:6b:d5:37:d4:ff:14:51:97:a7:37:42:95:ba: ea:b7:26:df:df:8b:9b:f4:93:fb:8f:79:48:5b:7d:2f:e8:04: 26:bc:4a:fb -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICF0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1 NzA3M0UxN0YwHhcNMjYwNTE2MTcyMDA1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTA4YTc0NS1mZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwFNOzgNPhIV4jq6g52cDulrwGnAjW0ub7KHrR9i5NHoQL0LatN7oNpDeZ/5 /w7teLT6zm6WvkkddYplDIKcFIVbjZnlyHyICQcBflzEb2rKHemXk0Oea6u/oN9f 9HKJGS9haxkAgtwHWIwp1x0vbk88FdTCQ/14PMPrw1flI5JPYX5ZfYrEJy+IbVSt za+o5aovbrzDqJaxV/HcgBbJMJo/kjInCbsRLDFraR7Jr60njqMwmxCqtOngFeWn cbBNgJ5wOFWuaISr6fk5ooXV6V/yjO33I2nwjKYiTvfiOpLNycSHsLtnTv9lsC// +DJt+j1XKU4BbwTnb/BsYWhTpQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFNZPbnqq 8JdaJw+AK6J+ctF0zex2MB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5 RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI1NEMvNUE1NjRENDgxOUU4MTFFOEI5NjUwQzdFQzRGOUFFMDIvMkNGMTgwRjA4 MDk1MTFFRkI4QTgyODIyQzRGOUFFMDIucm9hMHsGCCsGAQUFBwEHAQH/BGwwajBQ BAIAATBKMAwDBAQbb9ADBAIbb+ADBAMbb+gDBAJlYUAwDAMEA2VhSAMEA2VhUAME AnZntDAMAwQGyk/AAwQByk/EMAwDBAPKT8gDBAXKT8AwFgQCAAIwEDAOAwQAJAOx AwYAJAOxAQAwDQYJKoZIhvcNAQELBQADggEBABtZwdyTrNvOrc02vWz502MNsqPm hORJerwNIs77DGHqeimHz17Zbc16TVQR613d2njYmT1BIV1lv6Oy00Hzj748dyWX V0yBVWsqRpCzfCFx7gJijgZjvXMpyORn2TpbIyS6zpsIHr+xxwwZq13t+f02HF7p v1AQBbVsNQQic9/gvLsQJF1ZBbnxd0xgJ9F8TgUkdwmYhGGRQ8X6PEN6hpuqL+wY FXu5ozknaT3GaNdczk6oxsOLsozu/mNDxrmHy8bceX451k2IC1QvkrdplwlzjeSR GrTPyjxN/QIha9U31P8UUZenN0KVuuq3Jt/fi5v0k/uPeUhbfS/oBCa8Svs= -----END CERTIFICATE-----Generated at Sat May 23 04:27:30 2026 by rpki-client