$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/70FED13CCEF611ED9DDE0A39C4F9AE02.roa File: 70FED13CCEF611ED9DDE0A39C4F9AE02.roa (raw, json) Hash identifier: 6M5Mg9C116unCx1h9rVUgS55hFW2He6mLEZ0NRGWeB0= Subject key identifier: 2A:5A:C3:56:6C:2F:44:C5:28:47:0E:7B:CE:84:F0:94:AE:22:34:CF Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Certificate serial: 09D9 Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/70FED13CCEF611ED9DDE0A39C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:20:11 +0000 ROA not before: Tue 02 Sep 2025 20:40:36 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 3300 IP address blocks: 61.14.0.0/18 maxlen: 24 203.187.128.0/19 maxlen: 24 2402:fb00::/32 maxlen: 32 2402:fb00::/34 maxlen: 40 2402:fb00:4000::/34 maxlen: 40 2402:fb00:8000::/34 maxlen: 40 2402:fb00:c000::/34 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Validity Not Before: Sep 2 20:40:36 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42efb-0c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:6f:63:2d:b6:19:f1:ca:45:66:63:e6:3b: 60:d7:12:a2:5d:95:0a:35:39:e7:d8:5e:8d:60:55: a8:36:b2:f2:6c:a2:e7:c4:8c:df:2c:dc:c5:e0:d5: c1:b4:45:fc:66:47:c4:07:16:46:28:c4:d1:f0:95: 33:c3:b5:7a:03:31:71:59:8b:84:8b:70:9e:41:28: c1:6c:2b:11:4a:ce:6d:27:d5:df:c0:85:04:1a:55: f7:9c:91:68:91:dd:fb:9d:b8:02:dd:48:9a:4e:86: 1a:49:73:50:e3:72:98:0d:a1:46:0c:61:29:2e:83: 1b:f1:56:61:82:73:7e:af:6e:6d:24:c5:70:8e:cb: d3:8c:09:0b:0f:63:4b:6b:07:13:61:09:57:92:1f: 5d:9e:c7:a7:8f:da:b6:57:54:e3:18:4a:6d:4b:0c: bc:bd:25:53:f1:d0:24:2f:78:33:3c:34:06:ff:82: 44:be:ad:f9:d9:f2:04:95:db:c6:ff:b1:24:d5:36: c1:36:82:ae:4a:ba:59:4c:df:19:ba:7e:cc:55:bd: 73:39:7f:54:f0:fb:e3:a3:66:35:b4:b5:0f:55:38: cf:a0:64:9a:df:af:29:c9:55:68:c5:d5:b4:de:2f: 60:d0:2b:d4:89:a5:09:74:c2:14:57:db:de:55:63: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5A:C3:56:6C:2F:44:C5:28:47:0E:7B:CE:84:F0:94:AE:22:34:CF X509v3 Authority Key Identifier: keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/70FED13CCEF611ED9DDE0A39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.14.0.0/18 203.187.128.0/19 IPv6: 2402:fb00::/32 Signature Algorithm: sha256WithRSAEncryption d7:77:3b:e1:dc:25:58:b1:76:39:47:aa:9e:a6:77:38:40:f2: 7b:aa:a1:d3:23:2e:38:ab:12:44:0d:3b:d6:a2:16:91:16:d1: 8a:4a:8c:62:42:9a:a7:0f:98:85:a9:83:18:f5:ee:76:e7:a1: 65:db:19:5c:87:7a:22:9e:03:5c:b2:6c:06:ea:5d:6f:7e:b0: 6f:a6:b7:ca:63:68:15:40:58:43:fd:c6:df:50:9d:0c:ad:9b: 63:2e:c2:18:1b:0e:50:a2:86:d5:e6:33:c6:5e:8a:d8:99:e1: 25:39:7c:39:33:1a:b0:7b:02:9b:72:59:2d:de:5c:6c:94:7f: 0a:7e:ad:a1:b2:cd:9f:da:90:97:ab:53:89:15:d0:8a:2c:dc: 13:18:af:48:03:dd:3d:c8:bc:7a:34:c0:a5:4b:a3:e7:f1:ac: fb:3a:61:bb:57:f0:7e:de:99:04:d3:c1:43:4f:53:11:4a:32: 8e:8e:89:13:87:9c:77:4e:04:13:8a:db:4e:57:0a:18:a0:c8: 60:b6:79:a6:03:84:1a:aa:0a:3e:99:84:9a:9f:fa:2d:56:f0: 5e:eb:4a:c2:c5:c0:be:e8:21:5c:96:fd:38:f6:01:81:10:70: 5c:bb:8e:98:66:ca:cf:8d:d8:fb:59:61:2d:52:13:35:60:32: ae:9a:27:c5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDRUExMTAvBgNVBAUTKDg2MkI3M0I5Q0UzNTA0QjBCQTI0MUQxNEZEQUMwRUM0 QjRFNEFEQzIwHhcNMjUwOTAyMjA0MDM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmVmYi0wYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2hvYy22GfHKRWZj5jtg1xKiXZUKNTnn2F6NYFWoNrLybKLnxIzfLNzF4NXB tEX8ZkfEBxZGKMTR8JUzw7V6AzFxWYuEi3CeQSjBbCsRSs5tJ9XfwIUEGlX3nJFo kd37nbgC3UiaToYaSXNQ43KYDaFGDGEpLoMb8VZhgnN+r25tJMVwjsvTjAkLD2NL awcTYQlXkh9dnsenj9q2V1TjGEptSwy8vSVT8dAkL3gzPDQG/4JEvq352fIEldvG /7Ek1TbBNoKuSrpZTN8Zun7MVb1zOX9U8Pvjo2Y1tLUPVTjPoGSa368pyVVoxdW0 3i9g0CvUiaUJdMIUV9veVWOoPQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFCpaw1Zs L0TFKEcOe86E8JSuIjTPMB8GA1UdIwQYMBaAFIYrc7nONQSwuiQdFP2sDsS05K3C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0NFQS80MDZFRjE3OEEw QzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJMQzZKQjBVX2F3T3hMVGty Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpdHp1YzQxQkxDNkpCMFVfYXdPeExUa3JjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNDRUEvNDA2RUYxNzhBMEMzMTFFQTg3NjQyMzZGQzRGOUFFMDIvNzBGRUQxM0ND RUY2MTFFRDlEREUwQTM5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQGPQ4AAwQFy7uAMA0EAgACMAcDBQAkAvsAMA0GCSqGSIb3DQEBCwUA A4IBAQDXdzvh3CVYsXY5R6qepnc4QPJ7qqHTIy44qxJEDTvWohaRFtGKSoxiQpqn D5iFqYMY9e5256Fl2xlch3oingNcsmwG6l1vfrBvprfKY2gVQFhD/cbfUJ0MrZtj LsIYGw5QoobV5jPGXorYmeElOXw5MxqwewKbclkt3lxslH8Kfq2hss2f2pCXq1OJ FdCKLNwTGK9IA909yLx6NMClS6Pn8az7OmG7V/B+3pkE08FDT1MRSjKOjokTh5x3 TgQTittOVwoYoMhgtnmmA4Qaqgo+mYSan/otVvBe60rCxcC+6CFclv049gGBEHBc u46YZsrPjdj7WWEtUhM1YDKumifF -----END CERTIFICATE-----Generated at Mon Mar 2 06:40:50 2026 by rpki-client