$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa File: C66770F24B9111EA9A72503CC4F9AE02.roa (raw, json) Hash identifier: 1YzJKqvdmetf6cd4TL4EhxNZ82iLKjkZrbG403TRtdA= Subject key identifier: 5E:1E:3A:AB:A5:DB:AF:9C:E9:BC:E0:DA:D3:FA:F1:37:2C:C9:41:7B Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Certificate serial: 0BB0 Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa Signing time: Mon 01 Jun 2026 22:44:30 +0000 ROA not before: Mon 01 Jun 2026 22:44:30 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 64095 IP address blocks: 27.111.15.0/24 maxlen: 24 103.60.99.0/24 maxlen: 24 163.47.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Validity Not Before: Jun 1 22:44:30 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a1e0b4e-37ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5d:ea:75:34:3e:a8:cb:fb:d6:b8:69:9f:4d: 69:7f:64:0a:be:4f:b0:31:92:53:45:ef:cf:07:9e: e6:52:12:32:92:d7:21:c9:b9:6d:3f:70:e1:15:4c: f9:9c:5e:33:74:84:e8:d9:9e:4f:c1:51:51:62:a8: 19:ea:8e:70:37:c6:f2:32:5b:92:4c:7a:ec:f1:23: 89:70:37:29:8f:1a:cb:7e:af:d7:c9:0e:b4:81:40: 07:a9:18:ab:6f:ec:54:b5:98:27:10:87:68:e4:58: 42:e1:73:a7:ed:f9:dd:61:0b:99:be:a3:4f:8c:95: 73:b2:71:7f:62:4f:f7:f8:49:22:72:02:50:6e:79: 70:f3:2f:a0:c7:48:2f:8b:64:33:75:80:d2:9d:41: 2c:fc:5e:d6:a1:a8:72:f3:a9:ad:da:a0:91:aa:e0: 33:00:17:a0:8f:10:86:31:48:32:d1:5c:3a:c6:41: 5c:2e:fe:60:20:a1:d7:9e:7f:65:e9:c1:2b:ae:cc: 64:7b:d4:00:85:c8:1a:96:5c:82:69:a3:43:62:28: c4:c3:a0:cc:6a:e5:26:a5:45:3c:43:bc:e1:1c:eb: 96:f2:a9:90:7a:26:43:0c:9b:bf:7a:0b:5b:10:26: 8d:bd:13:10:bc:03:0a:01:68:58:65:fa:d3:22:30: 42:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1E:3A:AB:A5:DB:AF:9C:E9:BC:E0:DA:D3:FA:F1:37:2C:C9:41:7B X509v3 Authority Key Identifier: keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.111.15.0/24 103.60.99.0/24 163.47.231.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:1a:99:c6:0c:92:6e:35:5e:4a:9f:81:c2:49:ee:34:3f:6e: e4:a2:10:af:f2:23:db:75:34:7c:2a:7b:69:da:c5:e8:5d:ee: e1:a7:13:43:fb:ea:b6:b0:b6:e5:a6:78:74:20:72:0d:42:bb: b3:99:1e:80:9b:85:80:4a:f9:5e:8f:47:09:f8:4e:f1:0f:dd: bd:ca:1a:20:22:c3:f9:16:1b:27:fd:19:ab:2e:bf:e9:1c:3b: 28:86:24:ee:35:29:8e:2b:40:c3:c1:7e:f8:86:84:60:70:0c: 48:d5:f0:f8:ba:29:83:69:74:01:56:f4:c9:ca:db:99:64:ae: 98:c5:8f:f7:8d:58:46:1f:d2:6a:60:de:08:b4:a7:62:ef:3f: 13:1c:c4:b0:ca:06:96:a2:0c:b7:06:d4:07:65:aa:c8:47:cd: 03:8c:62:12:74:1f:71:1c:97:37:44:f0:f6:4a:8a:60:33:04: 89:94:66:08:4c:5c:55:bb:dc:8c:e1:d7:f6:3a:10:28:b7:51: 21:a8:aa:ef:56:fc:0f:a1:9a:53:a5:51:d0:b8:48:9c:a2:49: da:13:12:df:1d:15:ba:f3:ac:01:aa:49:f8:84:1f:95:36:d1: c0:8e:3e:b1:9c:44:d7:48:be:ff:09:f8:06:e3:4d:69:4b:7b: 50:a1:d3:f8 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2 RjE1Q0Q3QkUwHhcNMjYwNjAxMjI0NDMwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFlMGI0ZS0zN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAil3qdTQ+qMv71rhpn01pf2QKvk+wMZJTRe/PB57mUhIyktchybltP3DhFUz5 nF4zdITo2Z5PwVFRYqgZ6o5wN8byMluSTHrs8SOJcDcpjxrLfq/XyQ60gUAHqRir b+xUtZgnEIdo5FhC4XOn7fndYQuZvqNPjJVzsnF/Yk/3+EkicgJQbnlw8y+gx0gv i2QzdYDSnUEs/F7Woahy86mt2qCRquAzABegjxCGMUgy0Vw6xkFcLv5gIKHXnn9l 6cErrsxke9QAhcgallyCaaNDYijEw6DMauUmpUU8Q7zhHOuW8qmQeiZDDJu/egtb ECaNvRMQvAMKAWhYZfrTIjBCzwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFF4eOqul 26+c6bzg2tP68TcsyUF7MB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVERUUvQURENjVFMjg0QjkwMTFFQTk1QkVBNjM5QzRGOUFFMDIvQzY2NzcwRjI0 QjkxMTFFQTlBNzI1MDNDQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAG28PAwQAZzxjAwQAoy/nMA0GCSqGSIb3DQEBCwUAA4IBAQA/GpnG DJJuNV5Kn4HCSe40P27kohCv8iPbdTR8Kntp2sXoXe7hpxND++q2sLblpnh0IHIN QruzmR6Am4WASvlej0cJ+E7xD929yhogIsP5Fhsn/RmrLr/pHDsohiTuNSmOK0DD wX74hoRgcAxI1fD4uimDaXQBVvTJytuZZK6YxY/3jVhGH9JqYN4ItKdi7z8THMSw ygaWogy3BtQHZarIR80DjGISdB9xHJc3RPD2SopgMwSJlGYITFxVu9yM4df2OhAo t1EhqKrvVvwPoZpTpVHQuEicoknaExLfHRW686wBqkn4hB+VNtHAjj6xnETXSL7/ CfgG401pS3tQodP4 -----END CERTIFICATE-----Generated at Tue Jun 2 22:01:43 2026 by rpki-client