$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/03C06766DC1211EC80AE816DC4F9AE02.roa File: 03C06766DC1211EC80AE816DC4F9AE02.roa (raw, json) Hash identifier: cU2lqC8TIbL72lTnvOhD/xI/XrTHAha+gv4NhbTb0Kc= Subject key identifier: 8A:1D:85:21:20:80:9F:79:0B:C5:9A:91:6D:12:49:E9:A0:9E:5A:5E Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Certificate serial: 0395 Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/03C06766DC1211EC80AE816DC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:20:59 +0000 ROA not before: Sat 17 May 2025 01:36:54 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 8220 IP address blocks: 27.110.0.0/20 maxlen: 20 27.110.16.0/22 maxlen: 22 2400:81e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 00:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Validity Not Before: May 17 01:36:54 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a59ccb-2b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:7b:9d:22:9e:24:4e:bc:79:0a:91:4d:64: 38:3b:ed:25:82:f9:b5:f8:44:8b:5c:17:8b:39:c7: 2f:a4:04:61:96:61:8c:9a:c3:8b:19:2a:5a:84:23: ab:21:82:ff:f6:84:2a:f4:4c:71:63:4e:0e:31:47: 2f:64:d6:13:04:1c:d1:53:c7:e6:8f:5c:6b:e2:df: 4b:78:a8:d0:87:94:36:7f:35:e5:fe:41:67:75:92: 66:16:45:c7:bf:0d:e3:0f:61:82:c1:b6:1e:51:87: 5e:53:c4:1b:dd:25:13:68:70:5f:25:11:01:88:56: 9e:57:1d:5c:73:4b:e5:bf:48:39:8c:43:8f:49:75: cd:5d:40:66:fe:d9:85:50:c6:99:82:8b:4c:b8:b6: 1b:8f:8b:57:0e:5f:2c:22:22:17:fb:ff:4d:f2:9c: 8c:8b:40:ec:f9:0a:0f:4e:e5:22:21:e6:3b:c6:95: 18:9e:00:77:1b:f2:e7:55:74:f2:69:a4:d1:47:c0: ed:39:4d:13:53:3d:39:99:9e:19:69:9f:aa:4d:74: c6:57:fe:cd:9c:61:67:39:ce:c9:fd:c8:90:51:a0: b0:5a:d4:26:52:70:5b:43:c2:80:f6:c6:13:36:ab: d1:f3:6b:7b:1c:43:04:25:a2:0d:f0:52:2a:55:34: bf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1D:85:21:20:80:9F:79:0B:C5:9A:91:6D:12:49:E9:A0:9E:5A:5E X509v3 Authority Key Identifier: keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/03C06766DC1211EC80AE816DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.110.0.0-27.110.19.255 IPv6: 2400:81e0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:df:ae:59:7d:c9:26:52:ff:ac:66:c1:ca:ab:3f:7d:4f:b9: 5a:2d:89:1d:5b:5f:70:60:07:10:49:22:67:04:e2:0b:3c:50: a0:a6:42:12:69:49:16:3b:0a:fe:2e:7b:e9:b9:2b:fe:91:e1: 80:29:16:d8:86:59:69:86:b5:32:a5:76:3c:ab:3d:32:7b:b7: c4:26:7a:48:a1:07:f3:f4:aa:d5:87:8c:66:b0:a3:13:86:77: 5b:8a:71:c5:d5:90:f2:a1:cf:a2:5b:79:0f:1a:b8:df:45:da: e5:4f:c0:43:26:ca:69:5e:96:a4:f6:bf:09:7d:a9:db:a5:9e: bd:c4:e2:3f:09:2e:5a:17:91:82:b4:86:3e:03:0e:ff:97:c4: 50:d6:5f:e2:e4:0d:07:cb:4c:a9:8a:bc:5b:dc:c0:fb:16:e2: 66:4f:7c:0b:82:5f:18:93:90:3f:d3:02:04:3a:19:51:ed:3c: dd:a5:37:e8:8e:86:b7:0c:5c:5e:c1:d3:4b:79:73:98:ce:77: c4:7d:7c:20:4b:8a:8e:06:91:bb:e0:e0:3f:21:28:d5:e4:5d: e2:a0:00:be:1f:98:ab:c3:05:5a:65:af:98:67:3e:e2:db:f3: 7b:bc:09:c0:42:62:9a:63:02:11:ba:9d:0e:ca:9b:27:74:8c: c1:83:05:73 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKDNCM0Q2QkE5RkJFRjQyNEFGQUJGRDJCQTMwQzhCODU3 RDQ1OUYwOUMwHhcNMjUwNTE3MDEzNjU0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWNjYi0yYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjZJ7nSKeJE68eQqRTWQ4O+0lgvm1+ESLXBeLOccvpARhlmGMmsOLGSpahCOr IYL/9oQq9ExxY04OMUcvZNYTBBzRU8fmj1xr4t9LeKjQh5Q2fzXl/kFndZJmFkXH vw3jD2GCwbYeUYdeU8Qb3SUTaHBfJREBiFaeVx1cc0vlv0g5jEOPSXXNXUBm/tmF UMaZgotMuLYbj4tXDl8sIiIX+/9N8pyMi0Ds+QoPTuUiIeY7xpUYngB3G/LnVXTy aaTRR8DtOU0TUz05mZ4ZaZ+qTXTGV/7NnGFnOc7J/ciQUaCwWtQmUnBbQ8KA9sYT NqvR82t7HEMEJaIN8FIqVTS/2QIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFIodhSEg gJ95C8WakW0SSemgnlpeMB8GA1UdIwQYMBaAFDs9a6n770JK+r/SujDIuFfUWfCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC9CMzVFQjUwQ0RC RjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFrcjZ2OUs2TU1pNFY5Ulo4 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL096MXJxZnZ2UWtyNnY5SzZNTWk0VjlSWjhKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEM0RUQvQjM1RUI1MENEQkY4MTFFQzkzMjQwRTVEQzRGOUFFMDIvMDNDMDY3NjZE QzEyMTFFQzgwQUU4MTZEQzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAT BAIAATANMAsDAwEbbgMEAhtuEDANBAIAAjAHAwUAJACB4DANBgkqhkiG9w0BAQsF AAOCAQEAmt+uWX3JJlL/rGbByqs/fU+5Wi2JHVtfcGAHEEkiZwTiCzxQoKZCEmlJ FjsK/i576bkr/pHhgCkW2IZZaYa1MqV2PKs9Mnu3xCZ6SKEH8/Sq1YeMZrCjE4Z3 W4pxxdWQ8qHPolt5Dxq430Xa5U/AQybKaV6WpPa/CX2p26WevcTiPwkuWheRgrSG PgMO/5fEUNZf4uQNB8tMqYq8W9zA+xbiZk98C4JfGJOQP9MCBDoZUe083aU36I6G twxcXsHTS3lzmM53xH18IEuKjgaRu+DgPyEo1eRd4qAAvh+Yq8MFWmWvmGc+4tvz e7wJwEJimmMCEbqdDsqbJ3SMwYMFcw== -----END CERTIFICATE-----Generated at Sat Mar 7 19:17:54 2026 by rpki-client