$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/FFCBC5B4819B11EBA2616775C4F9AE02.roa File: FFCBC5B4819B11EBA2616775C4F9AE02.roa (raw, json) Hash identifier: y4q14mf6OHIEbk9YOEeNb2LUtltwDw2ZCHJ+tX6RWCU= Subject key identifier: FA:42:58:3A:AA:7A:42:61:9D:BC:3D:B2:D2:8C:52:A9:26:24:DC:3A Certificate issuer: /CN=A915E18D/serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604 Certificate serial: 07E0 Authority key identifier: 7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/FFCBC5B4819B11EBA2616775C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:26:44 +0000 ROA not before: Sun 02 Nov 2025 21:40:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132847 IP address blocks: 89.147.120.0/22 maxlen: 24 176.116.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2016 (0x7e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D, serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604 Validity Not Before: Nov 2 21:40:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a43084-27fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:07:9a:a7:7c:2d:a9:4f:f8:67:5f:72:78: 45:cb:f3:59:8a:a8:7a:e4:dc:0a:6f:11:cb:a1:e6: d6:3d:57:2d:2f:76:ed:e0:72:48:f8:f8:aa:7e:99: 67:49:fc:94:ee:a2:f5:63:e6:b7:69:eb:3d:1b:4e: 29:f4:42:06:e3:5d:ec:66:c0:39:a7:11:42:85:81: da:15:21:32:80:f0:c4:8a:b8:c6:d4:83:ca:8c:eb: e8:c9:21:fb:2c:50:c5:6a:9c:16:82:7a:36:02:a3: 8c:c3:7c:e7:6b:99:8f:9f:58:c8:0d:d0:6a:0d:a6: ec:c4:e4:25:7a:ad:f5:3c:22:a2:69:cd:8c:a2:46: 8c:9b:08:92:9a:83:3c:9c:e7:ed:a8:59:28:78:a7: 2d:6c:94:29:de:51:f3:bc:f2:6b:dc:33:9b:db:03: 5a:47:8e:71:a4:53:ef:e5:5f:6d:25:d2:e6:75:af: df:81:b1:55:4f:ac:cf:1c:61:de:6b:0e:af:7b:82: c7:03:99:94:de:66:84:8c:28:66:85:2e:e9:06:4e: d9:21:ad:60:5e:93:b3:4b:4c:d0:d9:c0:0a:93:83: 7b:91:83:33:3d:9e:f6:79:07:6e:c9:62:d4:b9:36: 78:81:56:1f:0d:b7:10:4d:41:c6:69:98:5f:5a:90: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:42:58:3A:AA:7A:42:61:9D:BC:3D:B2:D2:8C:52:A9:26:24:DC:3A X509v3 Authority Key Identifier: keyid:7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/FFCBC5B4819B11EBA2616775C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 89.147.120.0/22 176.116.127.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:1b:63:b3:f9:79:c8:a2:3e:78:e9:ea:72:a5:0d:44:b0:f9: 09:5b:23:ef:d4:75:a9:c3:a7:8e:73:95:51:f8:8c:60:03:d6: a9:09:80:68:09:6f:66:24:a6:04:96:0b:79:0b:72:01:52:f9: 25:94:cb:e1:c9:f1:80:3b:e0:6c:b5:7c:06:c7:f5:bb:88:46: 4c:51:be:bb:7e:5d:78:fd:5d:09:14:92:c4:3b:03:bd:f1:f4: 5c:58:ce:f1:48:fe:82:0f:3a:c0:c2:b1:0e:f8:8d:9a:4f:87: a9:7d:85:3b:cc:36:d0:52:92:45:aa:8c:7e:09:ad:01:3a:44: 44:18:74:bf:1e:3f:e6:9b:d6:e1:bc:16:cb:47:a7:51:e3:0c: a9:fc:b9:a8:20:74:a4:eb:54:41:0f:50:e2:86:89:0d:78:8e: 80:67:3b:69:99:5b:09:9b:62:20:77:4f:aa:f5:47:dd:d1:08: 62:c7:fd:16:bc:92:36:3f:42:e0:ee:3b:92:91:eb:e4:63:aa: 3b:99:fb:f9:a3:25:8c:d7:cc:76:a3:70:b3:47:4a:46:c2:85: ab:1f:9e:1f:63:bc:a2:49:54:46:35:fc:84:15:fe:ea:1b:d0: 6d:dc:b4:7b:94:d7:64:6c:be:91:da:e2:4b:94:0a:c8:1b:f3: 28:90:15:11 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDdCMkY5NUNFNkZEQzI1MzFCQkNBM0U1M0MxRDZFRDFC QTJBQTM2MDQwHhcNMjUxMTAyMjE0MDUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzA4NC0yN2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBkHmqd8LalP+GdfcnhFy/NZiqh65NwKbxHLoebWPVctL3bt4HJI+Piqfpln SfyU7qL1Y+a3aes9G04p9EIG413sZsA5pxFChYHaFSEygPDEirjG1IPKjOvoySH7 LFDFapwWgno2AqOMw3zna5mPn1jIDdBqDabsxOQleq31PCKiac2MokaMmwiSmoM8 nOftqFkoeKctbJQp3lHzvPJr3DOb2wNaR45xpFPv5V9tJdLmda/fgbFVT6zPHGHe aw6ve4LHA5mU3maEjChmhS7pBk7ZIa1gXpOzS0zQ2cAKk4N7kYMzPZ72eQduyWLU uTZ4gVYfDbcQTUHGaZhfWpBIHQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPpCWDqq ekJhnbw9stKMUqkmJNw6MB8GA1UdIwQYMBaAFHsvlc5v3CUxu8o+U8HW7RuiqjYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83MDAxNUM0MjJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9leS1Wem1fY0pURzd5ajVUd2RidEc2S3FO Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2V5LVZ6bV9jSlRHN3lqNVR3ZGJ0RzZLcU5nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUxOEQvNzAwMTVDNDIyQUUyMTFFQkJCRkM0RjBBQzRGOUFFMDIvRkZDQkM1QjQ4 MTlCMTFFQkEyNjE2Nzc1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCWZN4AwQAsHR/MA0GCSqGSIb3DQEBCwUAA4IBAQArG2Oz+XnIoj54 6epypQ1EsPkJWyPv1HWpw6eOc5VR+IxgA9apCYBoCW9mJKYElgt5C3IBUvkllMvh yfGAO+BstXwGx/W7iEZMUb67fl14/V0JFJLEOwO98fRcWM7xSP6CDzrAwrEO+I2a T4epfYU7zDbQUpJFqox+Ca0BOkREGHS/Hj/mm9bhvBbLR6dR4wyp/LmoIHSk61RB D1DihokNeI6AZztpmVsJm2Igd0+q9Ufd0Qhix/0WvJI2P0Lg7juSkevkY6o7mfv5 oyWM18x2o3CzR0pGwoWrH54fY7yiSVRGNfyEFf7qG9Bt3LR7lNdkbL6R2uJLlArI G/MokBUR -----END CERTIFICATE-----Generated at Mon Mar 2 09:56:52 2026 by rpki-client