$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/882AC358E1F511EE9188A919C4F9AE02.roa File: 882AC358E1F511EE9188A919C4F9AE02.roa (raw, json) Hash identifier: 8+HVn+1aDWLHtIQalu+KT6alxAIGWOxLQB3VgePG+TU= Subject key identifier: B7:07:EA:0C:16:9C:1F:ED:0C:6A:B4:E6:B6:77:FA:2A:B5:5F:B5:AD Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1F45 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/882AC358E1F511EE9188A919C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:38:54 +0000 ROA not before: Fri 14 Nov 2025 16:03:49 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138296 IP address blocks: 202.179.70.0/24 maxlen: 24 202.179.71.0/24 maxlen: 24 202.179.72.0/24 maxlen: 24 202.179.73.0/24 maxlen: 24 202.179.74.0/24 maxlen: 24 202.179.75.0/24 maxlen: 24 202.179.76.0/24 maxlen: 24 202.179.79.0/24 maxlen: 24 202.179.81.0/24 maxlen: 24 202.179.82.0/24 maxlen: 24 202.179.83.0/24 maxlen: 24 202.179.84.0/24 maxlen: 24 202.179.85.0/24 maxlen: 24 202.179.86.0/24 maxlen: 24 202.179.87.0/24 maxlen: 24 202.179.88.0/24 maxlen: 24 202.179.90.0/24 maxlen: 24 202.179.91.0/24 maxlen: 24 202.179.92.0/24 maxlen: 24 202.179.93.0/24 maxlen: 24 202.179.94.0/24 maxlen: 24 202.179.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8005 (0x1f45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Nov 14 16:03:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a479ae-4df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:2f:fb:85:0d:d3:f9:f2:41:1b:10:4d:9f: c2:09:b9:b5:bd:6f:5c:44:2f:b6:60:63:b4:23:bb: 4d:cf:26:d0:4b:29:eb:a2:c3:e8:a7:e4:7e:b5:dd: e7:f7:bb:63:c0:08:df:6c:a1:b2:1e:0d:78:78:f3: 3d:47:51:d9:d9:76:47:1c:5e:9f:33:44:1d:49:fe: 67:e8:50:9c:82:16:e3:37:47:c6:26:17:1a:c7:35: ea:d7:33:45:cb:3d:5d:fc:36:4e:7a:ea:27:23:01: 11:0c:f2:65:81:43:35:7f:4f:b6:f3:31:66:26:71: 06:9b:8f:2d:e4:f8:b5:f3:c5:47:bf:ae:40:dd:1f: 89:e2:c9:49:cc:e3:ec:7b:94:6b:2d:1c:32:85:be: a1:04:6c:10:64:ed:a5:eb:4f:b8:4f:6a:00:68:ee: f4:5e:16:f4:d4:fd:d3:a5:9d:7d:b9:78:b5:bf:e2: c2:b9:7b:91:b4:54:db:7e:e7:39:73:52:9a:e5:20: 05:0f:23:ca:cc:04:ca:c9:d1:14:9a:9e:b6:f8:c7: 4c:5e:c6:31:1c:93:79:bb:0f:75:00:c2:90:ad:e9: 0f:93:2d:14:e0:53:04:5c:e0:c2:ce:8f:c1:06:ab: f8:00:c4:b6:d4:32:54:db:22:c3:70:b7:c3:74:6d: 82:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:07:EA:0C:16:9C:1F:ED:0C:6A:B4:E6:B6:77:FA:2A:B5:5F:B5:AD X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/882AC358E1F511EE9188A919C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.179.70.0-202.179.76.255 202.179.79.0/24 202.179.81.0-202.179.88.255 202.179.90.0-202.179.95.255 Signature Algorithm: sha256WithRSAEncryption 19:78:58:a1:35:e8:ad:88:e7:a2:25:ef:e8:3f:66:fb:f4:61: 46:23:5f:ea:a7:31:41:77:39:49:f8:ae:85:c6:06:93:79:08: ee:57:95:fd:da:99:fb:81:b9:ef:26:2d:2e:15:9f:5f:13:04: 23:73:13:a1:ad:8f:45:91:24:d9:b6:24:c3:ab:65:7e:de:24: c4:ca:38:86:96:24:0f:02:e2:e8:1d:a0:12:5a:c1:6d:99:b6: 73:ea:f5:6b:2d:fb:65:3a:d1:1d:98:aa:f5:28:75:41:f5:b8: 07:08:a6:80:2b:62:a9:ba:46:20:8d:0f:93:34:12:24:ba:92: c9:c8:a7:16:b2:df:c2:50:b7:5f:0a:3d:09:34:41:fb:33:dc: 7d:fb:cd:24:e8:e7:e2:f9:f1:81:5e:c0:3e:81:77:14:26:91: 78:af:11:96:88:27:3f:66:5c:1b:e8:35:28:65:4e:ef:87:c1: a2:fa:65:53:a6:91:10:6b:55:43:27:cd:ed:9e:99:e5:8e:4c: c1:74:e6:1a:71:c3:b0:bf:7d:d9:d3:d8:f2:b5:90:bd:6f:69: 90:93:14:4b:b0:48:8a:73:5f:3e:f3:f1:2f:13:e7:89:74:7c: f8:25:f1:1b:6c:52:ab:89:2a:7e:86:cb:6a:ef:64:7b:c1:a3: cf:c7:e4:23 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICH0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUxMTE0MTYwMzQ5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzlhZS00ZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApscv+4UN0/nyQRsQTZ/CCbm1vW9cRC+2YGO0I7tNzybQSynrosPop+R+td3n 97tjwAjfbKGyHg14ePM9R1HZ2XZHHF6fM0QdSf5n6FCcghbjN0fGJhcaxzXq1zNF yz1d/DZOeuonIwERDPJlgUM1f0+28zFmJnEGm48t5Pi188VHv65A3R+J4slJzOPs e5RrLRwyhb6hBGwQZO2l60+4T2oAaO70Xhb01P3TpZ19uXi1v+LCuXuRtFTbfuc5 c1Ka5SAFDyPKzATKydEUmp62+MdMXsYxHJN5uw91AMKQrekPky0U4FMEXODCzo/B Bqv4AMS21DJU2yLDcLfDdG2CiQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFLcH6gwW nB/tDGq05rZ3+iq1X7WtMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFFNUYvOEI3OUI2Nzg4ODUxMTFFNkE2OTJERTc4QzRGOUFFMDIvODgyQUMzNThF MUY1MTFFRTkxODhBOTE5QzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwMAwDBAHKs0YDBADKs0wDBADKs08wDAMEAMqzUQMEAMqzWDAMAwQByrNa AwQFyrNAMA0GCSqGSIb3DQEBCwUAA4IBAQAZeFihNeitiOeiJe/oP2b79GFGI1/q pzFBdzlJ+K6FxgaTeQjuV5X92pn7gbnvJi0uFZ9fEwQjcxOhrY9FkSTZtiTDq2V+ 3iTEyjiGliQPAuLoHaASWsFtmbZz6vVrLftlOtEdmKr1KHVB9bgHCKaAK2KpukYg jQ+TNBIkupLJyKcWst/CULdfCj0JNEH7M9x9+80k6Ofi+fGBXsA+gXcUJpF4rxGW iCc/Zlwb6DUoZU7vh8Gi+mVTppEQa1VDJ83tnpnljkzBdOYaccOwv33Z09jytZC9 b2mQkxRLsEiKc18+8/EvE+eJdHz4JfEbbFKriSp+hstq72R7waPPx+Qj -----END CERTIFICATE-----Generated at Mon Mar 2 08:39:50 2026 by rpki-client