$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/FA57B70A706F11F1A66ABD9E76A30FBC.roa File: FA57B70A706F11F1A66ABD9E76A30FBC.roa (raw, json) Hash identifier: 5UlaJz5G/bidOHbT2NbkpzH8+pUHMJEGRJQ4pdfZDCc= Subject key identifier: FB:A8:83:5D:43:3A:BA:9C:26:99:2C:DB:B5:6D:C7:54:1B:3D:94:BB Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Certificate serial: 0A50 Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/FA57B70A706F11F1A66ABD9E76A30FBC.roa Signing time: Thu 10 Sep 2026 20:40:30 +0000 ROA not before: Thu 10 Sep 2026 20:40:30 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 3300 IP address blocks: 61.14.0.0/18 maxlen: 24 203.187.128.0/19 maxlen: 24 2402:fb00::/32 maxlen: 32 2402:fb00::/36 maxlen: 36 2402:fb00:f00::/40 maxlen: 40 2402:fb00:1000::/36 maxlen: 36 2402:fb00:1f00::/40 maxlen: 40 2402:fb00:2000::/36 maxlen: 36 2402:fb00:2f00::/40 maxlen: 40 2402:fb00:3000::/36 maxlen: 36 2402:fb00:3f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2640 (0xa50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Validity Not Before: Sep 10 20:40:30 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa315bd-e0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:e2:7c:05:9d:7a:8f:54:2a:d9:8e:c5:ee: e5:67:fd:e6:98:42:90:a6:4b:c7:49:cc:18:67:c5: 34:44:a6:49:d8:b3:e0:df:40:e2:79:42:6c:4b:d9: 67:b2:5a:82:64:a4:d3:60:ec:55:4b:9e:8b:d8:ff: e1:92:1a:4a:96:ed:78:f0:92:90:3f:a0:08:70:93: b7:e0:eb:0b:f5:6c:39:7d:77:6f:e3:2b:9b:e2:cd: d0:2f:0c:86:d8:d9:43:a9:6d:e7:43:61:ac:8d:8c: 2d:21:2d:d0:8f:74:e2:2f:12:cf:5f:f5:84:21:fa: b5:82:a3:ce:8a:a9:bd:e1:8f:16:9f:bf:73:c1:33: 16:d0:87:08:6e:0d:76:dc:d2:25:3c:5f:5b:10:26: 6b:c9:c5:27:42:f4:56:f4:b5:30:78:a3:64:dc:ca: 58:61:b6:e9:b6:af:8f:80:bd:ce:50:75:71:be:94: 6f:25:65:a5:ae:c0:1e:88:c7:41:c6:ca:f5:06:40: 0c:5a:ac:f9:3a:d2:e8:91:b0:be:66:e2:f0:17:23: bc:b3:56:81:79:85:c5:44:9b:69:ae:9a:a8:ce:38: 9d:6d:85:7e:61:5d:4e:27:46:6c:ea:7b:92:43:5a: 7f:f3:b6:84:a8:34:57:c9:55:55:16:6e:e5:5b:87: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A8:83:5D:43:3A:BA:9C:26:99:2C:DB:B5:6D:C7:54:1B:3D:94:BB X509v3 Authority Key Identifier: keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/FA57B70A706F11F1A66ABD9E76A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 61.14.0.0/18 203.187.128.0/19 IPv6: 2402:fb00::/32 Signature Algorithm: sha256WithRSAEncryption 05:e4:74:c0:8d:31:80:b1:2b:b2:9b:d3:00:b7:96:b9:32:be: 82:4c:87:30:39:7e:7b:71:2a:b5:0d:cc:db:df:0e:c4:35:6a: 02:9c:e5:df:c1:9b:12:e1:f7:bf:e5:35:24:ca:92:93:9b:57: c1:b3:4d:11:c2:c2:de:fd:31:3c:9e:89:e5:ea:ff:fa:4a:f7: 41:c9:a0:d5:f9:0e:d2:e8:e7:92:0c:87:b8:34:45:9f:68:43: d5:d2:ed:b3:c8:2b:ed:78:85:47:ae:01:54:c9:e0:0e:df:9f: b5:d1:3a:fd:25:4c:e1:d9:42:4b:dc:ca:5f:ec:08:f3:41:3a: 21:82:4d:a6:ed:63:20:0d:4b:74:1e:d1:e0:2e:80:b9:a7:ff: 00:93:a5:e4:d0:8e:9e:84:68:02:15:bb:fe:0c:8e:77:f9:5c: 50:cd:87:01:36:fc:e7:b5:36:07:83:1f:64:3f:9b:29:55:3b: 84:2c:57:e5:45:23:51:b8:09:bf:da:8c:e7:64:dd:8e:d3:84: d3:c4:bf:5e:59:d9:9f:5d:55:3e:ce:05:c0:c9:52:e3:3b:a1: e8:ff:42:f9:fc:ed:93:da:ab:5a:18:cf:3c:59:d0:09:53:8d: 2b:ac:66:c3:18:32:4d:bf:08:b6:17:ac:2c:00:20:a8:b1:0e: c1:8d:c2:36 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICClAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDRUExMTAvBgNVBAUTKDg2MkI3M0I5Q0UzNTA0QjBCQTI0MUQxNEZEQUMwRUM0 QjRFNEFEQzIwHhcNMjYwOTEwMjA0MDMwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEzMTViZC1lMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9PifAWdeo9UKtmOxe7lZ/3mmEKQpkvHScwYZ8U0RKZJ2LPg30DieUJsS9ln slqCZKTTYOxVS56L2P/hkhpKlu148JKQP6AIcJO34OsL9Ww5fXdv4yub4s3QLwyG 2NlDqW3nQ2GsjYwtIS3Qj3TiLxLPX/WEIfq1gqPOiqm94Y8Wn79zwTMW0IcIbg12 3NIlPF9bECZrycUnQvRW9LUweKNk3MpYYbbptq+PgL3OUHVxvpRvJWWlrsAeiMdB xsr1BkAMWqz5OtLokbC+ZuLwFyO8s1aBeYXFRJtprpqozjidbYV+YV1OJ0Zs6nuS Q1p/87aEqDRXyVVVFm7lW4cfTQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPuog11D OrqcJpks27Vtx1QbPZS7MB8GA1UdIwQYMBaAFIYrc7nONQSwuiQdFP2sDsS05K3C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0NFQS80MDZFRjE3OEEw QzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJMQzZKQjBVX2F3T3hMVGty Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpdHp1YzQxQkxDNkpCMFVfYXdPeExUa3JjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNDRUEvNDA2RUYxNzhBMEMzMTFFQTg3NjQyMzZGQzRGOUFFMDIvRkE1N0I3MEE3 MDZGMTFGMUE2NkFCRDlFNzZBMzBGQkMucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQGPQ4AAwQFy7uAMA0EAgACMAcDBQAkAvsAMA0GCSqGSIb3DQEBCwUA A4IBAQAF5HTAjTGAsSuym9MAt5a5Mr6CTIcwOX57cSq1Dczb3w7ENWoCnOXfwZsS 4fe/5TUkypKTm1fBs00RwsLe/TE8nonl6v/6SvdByaDV+Q7S6OeSDIe4NEWfaEPV 0u2zyCvteIVHrgFUyeAO35+10Tr9JUzh2UJL3Mpf7AjzQTohgk2m7WMgDUt0HtHg LoC5p/8Ak6Xk0I6ehGgCFbv+DI53+VxQzYcBNvzntTYHgx9kP5spVTuELFflRSNR uAm/2oznZN2O04TTxL9eWdmfXVU+zgXAyVLjO6Ho/0L5/O2T2qtaGM88WdAJU40r rGbDGDJNvwi2F6wsACCosQ7BjcI2 -----END CERTIFICATE-----Generated at Mon Sep 28 04:45:05 2026 by rpki-client