$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/9993077459B011F18691C362BD833773.roa File: 9993077459B011F18691C362BD833773.roa (raw, json) Hash identifier: PKDdZUq/eeCrgJp6yfNiqjr8n5K/Gvs8SrQ/lEfK2Y8= Subject key identifier: C1:94:95:D6:88:BA:17:1D:C1:C0:4E:C0:45:0A:98:A7:F1:F4:74:C8 Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Certificate serial: 022E Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/9993077459B011F18691C362BD833773.roa Signing time: Wed 27 May 2026 09:44:05 +0000 ROA not before: Wed 27 May 2026 09:44:05 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55832 IP address blocks: 27.123.216.0/22 maxlen: 22 27.123.216.0/24 maxlen: 24 27.123.217.0/24 maxlen: 24 27.123.218.0/24 maxlen: 24 27.123.219.0/24 maxlen: 24 120.88.180.0/24 maxlen: 24 120.88.181.0/24 maxlen: 24 120.88.182.0/23 maxlen: 24 120.88.184.0/24 maxlen: 24 120.88.185.0/24 maxlen: 24 120.88.186.0/24 maxlen: 24 120.88.187.0/24 maxlen: 24 2407:2a00::/32 maxlen: 32 2407:2a00::/44 maxlen: 44 2407:2a00::/48 maxlen: 48 2407:2a00:1::/48 maxlen: 48 2407:2a00:2::/48 maxlen: 48 2407:2a00:3::/48 maxlen: 48 2407:2a00:4::/48 maxlen: 48 2407:2a00:5::/48 maxlen: 48 2407:2a00:6::/48 maxlen: 48 2407:2a00:7::/48 maxlen: 48 2407:2a00:8::/48 maxlen: 48 2407:2a00:10::/44 maxlen: 44 2407:2a00:20::/44 maxlen: 44 2407:2a00:30::/44 maxlen: 44 2407:2a00:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 05:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Validity Not Before: May 27 09:44:05 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a16bce5-dac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:4f:66:c8:5c:22:8d:ca:86:79:cb:43:13: e7:13:c1:7f:f2:30:d5:10:02:3c:25:18:4f:cb:d7: 08:28:1f:b1:69:10:55:f0:cb:89:ab:9b:a3:62:f6: e7:ec:2a:03:73:e6:eb:85:86:c7:bc:07:e3:5b:5d: eb:92:af:80:d4:8e:3a:76:11:0d:bc:8f:24:46:c9: 6f:de:9c:67:a9:09:5e:b7:49:86:b1:56:04:21:af: 94:dc:54:58:f9:08:12:5b:ef:57:c3:fb:9d:1a:e5: 57:ce:80:31:8e:8c:35:da:8e:f8:43:7c:39:74:61: 6b:88:2c:1d:d3:bf:5e:d1:0e:02:c5:93:bf:93:9f: f5:55:98:65:43:6a:b2:76:3f:30:a1:f5:f1:43:5d: 47:30:8f:bd:73:f8:5a:76:2a:98:10:73:da:02:21: 46:c5:43:4a:34:d2:52:09:cc:d4:a7:7f:17:e4:9b: a5:14:3a:29:4f:dc:be:f6:ce:b9:7a:51:f5:04:29: e2:c4:4a:35:08:ca:1b:e5:d4:37:47:84:1a:64:91: 58:66:84:e0:5d:b1:1f:70:fc:30:95:f2:62:44:a3: a4:d3:b8:13:7c:fb:51:98:a0:d1:b5:62:f8:51:f8: 8e:8d:f3:29:9e:3b:c2:22:4b:9f:35:da:79:49:28: a6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:95:D6:88:BA:17:1D:C1:C0:4E:C0:45:0A:98:A7:F1:F4:74:C8 X509v3 Authority Key Identifier: keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/9993077459B011F18691C362BD833773.roa sbgp-ipAddrBlock: critical IPv4: 27.123.216.0/22 120.88.180.0-120.88.187.255 IPv6: 2407:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 06:7b:61:63:86:66:b0:84:eb:82:57:32:b5:dc:92:7c:22:3e: aa:3a:25:c7:f7:27:0d:a3:63:e9:61:42:de:48:95:a7:32:53: d6:69:04:f5:d3:3b:f7:48:10:71:f8:71:15:b7:35:4c:c0:96: 7a:a3:f5:b5:62:a0:2a:95:ab:ff:eb:e8:03:55:6d:fd:bb:6e: a5:86:be:a5:fd:7f:48:99:67:be:50:a6:db:e8:60:e0:fd:cc: 14:3f:d3:2f:33:77:31:2a:fc:d4:22:89:e6:d5:0d:bd:d9:30: 22:18:3f:02:c1:9b:ec:a9:e7:40:e7:0d:2c:eb:81:cf:5d:b3: f8:f9:8b:3b:7b:a2:88:e0:5f:dc:7d:55:06:f0:3d:b7:1a:3d: 97:41:6e:bf:9f:f4:6d:b5:26:24:89:4e:77:bf:ba:84:c9:80: 75:23:7d:3f:f7:90:d9:7f:8f:8a:b6:6c:49:08:04:38:7a:c6: 6e:84:17:0e:d7:82:57:56:56:91:e0:86:76:fc:a0:f4:94:20: 94:22:51:21:47:12:a3:a8:05:b9:3a:58:f0:6f:de:cc:30:36: ff:fb:e3:13:6e:5f:22:20:a7:29:69:62:67:43:09:dd:0b:fc: 4b:f9:12:55:09:01:57:68:d4:f7:2f:b6:36:aa:c8:4d:c8:18: a6:ac:ba:3f -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3QUNBODgwRjg3 OEExNEZFNDgwHhcNMjYwNTI3MDk0NDA1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE2YmNlNS1kYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbZPZshcIo3KhnnLQxPnE8F/8jDVEAI8JRhPy9cIKB+xaRBV8MuJq5ujYvbn 7CoDc+brhYbHvAfjW13rkq+A1I46dhENvI8kRslv3pxnqQlet0mGsVYEIa+U3FRY +QgSW+9Xw/udGuVXzoAxjow12o74Q3w5dGFriCwd079e0Q4CxZO/k5/1VZhlQ2qy dj8wofXxQ11HMI+9c/hadiqYEHPaAiFGxUNKNNJSCczUp38X5JulFDopT9y+9s65 elH1BCnixEo1CMob5dQ3R4QaZJFYZoTgXbEfcPwwlfJiRKOk07gTfPtRmKDRtWL4 UfiOjfMpnjvCIkufNdp5SSim1wIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFMGUldaI uhcdwcBOwEUKmKfx9HTIMB8GA1UdIwQYMBaAFDkY2AvLcC7Kz4TLesqID4eKFP5I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyNC9CNDczQzRCRTkz MzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0d0xzclBoTXQ2eW9nUGg0b1Vf a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09SallDOHR3THNyUGhNdDZ5b2dQaDRvVV9rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZCMjQvQjQ3M0M0QkU5MzMwMTFFRTgyMzA4MDU5QzRGOUFFMDIvOTk5MzA3NzQ1 OUIwMTFGMTg2OTFDMzYyQkQ4MzM3NzMucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAa BAIAATAUAwQCG3vYMAwDBAJ4WLQDBAJ4WLgwDQQCAAIwBwMFACQHKgAwDQYJKoZI hvcNAQELBQADggEBAAZ7YWOGZrCE64JXMrXcknwiPqo6Jcf3Jw2jY+lhQt5Ilacy U9ZpBPXTO/dIEHH4cRW3NUzAlnqj9bVioCqVq//r6ANVbf27bqWGvqX9f0iZZ75Q ptvoYOD9zBQ/0y8zdzEq/NQiiebVDb3ZMCIYPwLBm+yp50DnDSzrgc9ds/j5izt7 oojgX9x9VQbwPbcaPZdBbr+f9G21JiSJTne/uoTJgHUjfT/3kNl/j4q2bEkIBDh6 xm6EFw7XgldWVpHghnb8oPSUIJQiUSFHEqOoBbk6WPBv3swwNv/74xNuXyIgpylp YmdDCd0L/Ev5ElUJAVdo1PcvtjaqyE3IGKasuj8= -----END CERTIFICATE-----Generated at Thu Jun 4 11:12:39 2026 by rpki-client