$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa File: 1BDBCE5013A011EE91039C41C4F9AE02.roa (raw, json) Hash identifier: jQDpwo+QqLU/lJ9etJ9XrTrIVILmvaXnCVSDMxtlPro= Subject key identifier: 25:D3:21:5A:C6:91:8A:C9:5D:9C:7D:ED:BF:CB:2C:67:0A:CA:BD:0D Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Certificate serial: 0217 Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:32:49 +0000 ROA not before: Tue 19 Aug 2025 04:11:06 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 18081 IP address blocks: 61.86.0.0/16 maxlen: 16 61.86.0.0/18 maxlen: 18 61.86.64.0/18 maxlen: 18 61.86.128.0/18 maxlen: 18 61.86.192.0/18 maxlen: 18 61.89.0.0/16 maxlen: 16 61.89.0.0/18 maxlen: 18 61.89.64.0/18 maxlen: 18 61.89.128.0/18 maxlen: 18 61.89.192.0/18 maxlen: 18 117.108.0.0/16 maxlen: 16 117.108.0.0/18 maxlen: 18 117.108.64.0/18 maxlen: 18 117.108.128.0/18 maxlen: 18 117.108.192.0/18 maxlen: 18 117.109.0.0/16 maxlen: 16 117.109.0.0/18 maxlen: 18 117.109.64.0/18 maxlen: 18 117.109.128.0/18 maxlen: 18 117.109.192.0/18 maxlen: 18 125.2.32.0/19 maxlen: 19 125.2.64.0/18 maxlen: 19 220.153.0.0/16 maxlen: 16 220.153.0.0/18 maxlen: 18 220.153.64.0/18 maxlen: 18 220.153.128.0/18 maxlen: 18 220.153.192.0/18 maxlen: 18 2404:ec00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Validity Not Before: Aug 19 04:11:06 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3eba1-8424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:43:72:f7:63:b5:fa:80:f6:ab:13:e2:8d:34: d2:c9:06:1b:5b:3e:e7:14:43:38:df:8c:df:6c:2d: 9d:08:43:b6:43:4c:79:19:30:1b:9f:38:b8:5e:6e: d3:eb:8e:85:49:93:d5:b2:29:12:2e:33:3c:c3:fc: ac:75:de:5c:7f:18:62:21:5f:00:95:28:23:2e:b3: 7e:2f:8b:4f:4d:36:f9:2a:8f:58:7e:bd:6d:61:ef: b5:0b:9f:89:14:20:66:af:cb:cf:88:f1:81:c4:54: 50:51:b6:5b:3a:79:0f:4c:56:86:a3:7c:2f:82:db: 0d:82:4b:80:2b:91:25:ac:18:50:e0:38:8d:41:4e: 30:28:cb:4d:8c:e1:b5:a0:be:e8:47:39:c5:c1:df: 3a:2b:88:87:4a:be:7c:a7:3c:53:77:4f:7e:dd:6e: 69:3b:a5:65:0d:57:4f:90:fd:ae:4e:7d:fd:26:e3: a7:76:1c:84:80:5e:8d:12:0e:31:4f:44:81:1f:7a: ca:26:31:01:9c:13:1a:38:2d:83:71:bc:b7:46:66: dc:00:c0:39:db:7d:9e:e5:cb:66:58:91:a7:ad:d6: 7b:7a:57:e0:2f:0b:f1:c0:a0:02:ec:86:61:6c:72: 04:85:36:b4:c6:4b:6a:26:19:06:3d:dc:04:6a:78: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D3:21:5A:C6:91:8A:C9:5D:9C:7D:ED:BF:CB:2C:67:0A:CA:BD:0D X509v3 Authority Key Identifier: keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.86.0.0/16 61.89.0.0/16 117.108.0.0/15 125.2.32.0-125.2.127.255 220.153.0.0/16 IPv6: 2404:ec00::/32 Signature Algorithm: sha256WithRSAEncryption 47:f3:d8:26:66:50:93:60:4d:32:dc:eb:3f:84:55:7e:6f:05: 71:32:0c:73:6a:0f:f5:ab:eb:20:cc:4e:39:ca:a2:48:44:bb: 78:06:5f:1c:4c:82:b7:87:4a:22:3f:a0:ec:de:a9:7f:df:1f: 04:f2:d6:1d:ee:3d:a5:c3:a4:8d:89:c8:26:0f:2d:f7:2d:77: 19:c5:bc:02:ad:ac:9e:29:38:ad:ef:d5:73:96:28:af:36:4f: 81:07:58:06:39:50:ae:6a:8d:e6:11:1a:b0:03:96:f1:27:ce: b6:b5:76:f7:ae:6e:c8:28:d1:ed:9d:c2:8b:21:0c:48:25:80: d4:41:16:6c:ac:b9:36:54:8d:05:fe:8c:cc:57:82:05:2d:78: 5b:a9:90:b0:cf:81:74:c9:2c:d5:94:15:88:72:b6:a9:86:5e: c0:f3:bb:ec:3d:fe:61:a8:0a:a4:8b:26:ee:0d:f4:72:ad:39: 4f:90:09:01:84:59:bc:d6:e0:84:3e:16:99:3c:05:f7:6c:30: 8f:b6:b0:cc:9f:9a:f7:62:96:2d:8a:a0:b8:9e:18:42:57:69: 22:6b:b9:15:5f:37:65:93:0a:bc:d4:27:01:68:01:07:38:ad: a7:a9:5f:c7:00:fa:ed:20:ce:0b:ef:da:23:27:e1:96:cb:bd: 05:75:60:0d -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKERGNzFEOTlGNENEM0IzODMyNkIzRUQ0N0M4RTRBNURG OTg5RTQyRjIwHhcNMjUwODE5MDQxMTA2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWJhMS04NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70Ny92O1+oD2qxPijTTSyQYbWz7nFEM434zfbC2dCEO2Q0x5GTAbnzi4Xm7T 646FSZPVsikSLjM8w/ysdd5cfxhiIV8AlSgjLrN+L4tPTTb5Ko9Yfr1tYe+1C5+J FCBmr8vPiPGBxFRQUbZbOnkPTFaGo3wvgtsNgkuAK5ElrBhQ4DiNQU4wKMtNjOG1 oL7oRznFwd86K4iHSr58pzxTd09+3W5pO6VlDVdPkP2uTn39JuOndhyEgF6NEg4x T0SBH3rKJjEBnBMaOC2Dcby3RmbcAMA5232e5ctmWJGnrdZ7elfgLwvxwKAC7IZh bHIEhTa0xktqJhkGPdwEangBBwIDAQABo4ICizCCAocwHQYDVR0OBBYEFCXTIVrG kYrJXZx97b/LLGcKyr0NMB8GA1UdIwQYMBaAFN9x2Z9M07ODJrPtR8jkpd+YnkLy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS81NUM4MDNDQTA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0TW1zLTFIeU9TbDM1aWVR dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzSFpuMHpUczRNbXMtMUh5T1NsMzVpZVF2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwRUUvNTVDODAzQ0EwOUMwMTFFRUJFMTI1ODNBQzRGOUFFMDIvMUJEQkNFNTAx M0EwMTFFRTkxMDM5QzQxQzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTAo BAIAATAiAwMAPVYDAwA9WQMDAXVsMAwDBAV9AiADBAd9AgADAwDcmTANBAIAAjAH AwUAJATsADANBgkqhkiG9w0BAQsFAAOCAQEAR/PYJmZQk2BNMtzrP4RVfm8FcTIM c2oP9avrIMxOOcqiSES7eAZfHEyCt4dKIj+g7N6pf98fBPLWHe49pcOkjYnIJg8t 9y13GcW8Aq2snik4re/Vc5YorzZPgQdYBjlQrmqN5hEasAOW8SfOtrV2965uyCjR 7Z3CiyEMSCWA1EEWbKy5NlSNBf6MzFeCBS14W6mQsM+BdMks1ZQViHK2qYZewPO7 7D3+YagKpIsm7g30cq05T5AJAYRZvNbghD4WmTwF92wwj7awzJ+a92KWLYqguJ4Y QldpImu5FV83ZZMKvNQnAWgBBzitp6lfxwD67SDOC+/aIyfhlsu9BXVgDQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:29 2026 by rpki-client