$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/15812F82C4A111EBAE6C7F49C4F9AE02.roa File: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (raw, json) Hash identifier: MBkHhBI2rL5wTLorBd1qSPQBbwMaRhrLdxT4vnO5UBk= Subject key identifier: 53:F3:2B:6A:0F:0B:9C:06:57:F5:24:21:8F:20:AE:EB:0E:34:1F:EB Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 26E7 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/15812F82C4A111EBAE6C7F49C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:33:22 +0000 ROA not before: Fri 04 Jul 2025 16:23:00 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55430 IP address blocks: 58.146.128.0/18 maxlen: 24 58.182.0.0/16 maxlen: 24 59.189.0.0/16 maxlen: 24 103.234.104.0/22 maxlen: 24 116.86.0.0/15 maxlen: 24 116.88.0.0/16 maxlen: 24 116.89.0.0/17 maxlen: 24 150.107.128.0/22 maxlen: 24 202.156.0.0/16 maxlen: 24 218.186.0.0/16 maxlen: 24 218.212.0.0/16 maxlen: 24 222.164.0.0/16 maxlen: 24 222.165.0.0/17 maxlen: 24 2404:e800::/31 maxlen: 32 2404:e800::/40 maxlen: 48 2404:e800:100::/40 maxlen: 48 2404:e800:2000::/40 maxlen: 48 2404:e801:1000::/40 maxlen: 48 2404:e801:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9959 (0x26e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 4 16:23:00 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47862-dc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:30:71:c2:a0:21:a7:92:af:81:19:a7:d9: 30:39:95:0b:38:c8:5d:cf:8c:21:7d:80:f8:23:ab: 91:79:f7:7f:1a:80:01:21:88:54:03:f4:83:7c:fb: e7:9a:4e:bb:5a:d7:3d:aa:ba:7f:63:1b:fe:32:70: a7:70:04:63:e9:94:65:f0:6e:5b:36:80:26:a4:45: 5c:9b:9f:f8:86:ee:6e:6f:4b:14:79:47:45:3a:cc: 9c:fb:54:93:e5:a6:8d:1f:f1:2d:39:47:20:79:cf: d7:07:1a:de:ba:49:c1:4f:a5:0e:c7:ba:5d:c0:19: e1:32:0e:e4:d1:af:fa:d6:bd:e3:b8:37:3d:0b:24: b2:4e:57:83:d1:a7:fd:06:59:35:af:bc:5b:69:f7: 0b:ba:d6:b4:62:50:d1:c1:d9:45:6e:35:fe:c7:5c: 0f:65:1d:78:84:8c:1e:7b:fb:81:c7:d6:a9:85:5e: e5:7e:97:f4:c5:41:22:06:a9:9e:90:20:98:78:0b: 8e:71:06:51:ba:94:6f:05:46:e8:fe:f4:62:ce:b6: 64:7a:18:e3:79:a1:2a:21:1a:67:97:74:28:cf:c5: 29:57:b9:48:ca:0c:f4:c9:a2:a6:ae:a4:d9:59:43: 67:d9:df:20:4a:62:14:c4:f5:f9:44:23:80:3d:a2: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F3:2B:6A:0F:0B:9C:06:57:F5:24:21:8F:20:AE:EB:0E:34:1F:EB X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/15812F82C4A111EBAE6C7F49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.146.128.0/18 58.182.0.0/16 59.189.0.0/16 103.234.104.0/22 116.86.0.0-116.89.127.255 150.107.128.0/22 202.156.0.0/16 218.186.0.0/16 218.212.0.0/16 222.164.0.0-222.165.127.255 IPv6: 2404:e800::/31 Signature Algorithm: sha256WithRSAEncryption 61:b8:4d:ce:8c:c2:94:b9:19:48:59:63:09:0e:ea:a9:8a:0e: 52:03:5f:e7:6e:84:fc:9f:09:db:f4:e8:b0:95:bb:03:7c:0d: 8e:b4:66:83:48:38:0e:83:ea:a1:05:b6:98:98:31:12:be:65: f0:0e:c9:ed:7c:02:16:d8:06:f4:8b:dc:de:58:2f:7d:ca:71: b9:8c:a8:91:25:87:73:9b:d0:44:45:84:ce:6c:b7:05:49:f6: de:0f:e4:2e:bd:17:eb:6c:fb:ac:bf:4d:ea:38:b5:d9:7f:02: d2:61:94:75:51:4e:95:21:20:79:80:f0:95:47:4f:dd:a7:93: e6:1f:69:c6:01:1e:a1:3d:25:a2:37:34:0c:6b:ef:64:3a:de: 36:8e:c2:26:b3:80:2b:02:1e:da:cb:bb:aa:40:49:d1:4f:57: 7d:bf:0a:8b:e9:30:49:50:b0:ef:b6:25:5c:77:d7:08:72:fb: 11:1e:ce:a9:7a:a7:37:3b:0c:5a:14:86:a1:6e:33:0d:5e:b7: 7d:83:73:34:93:4a:68:bb:f6:3d:de:63:54:ea:eb:7d:0f:09: d3:e6:f3:5d:86:9e:74:30:a2:bf:5c:ef:4b:8a:5e:6e:0e:1a: 75:54:0b:4a:67:10:d8:77:15:c7:96:c8:3b:d4:b7:41:85:b9: 2b:57:87:88 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICJucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNzA0MTYyMzAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzg2Mi1kYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEMwccKgIaeSr4EZp9kwOZULOMhdz4whfYD4I6uRefd/GoABIYhUA/SDfPvn mk67Wtc9qrp/Yxv+MnCncARj6ZRl8G5bNoAmpEVcm5/4hu5ub0sUeUdFOsyc+1ST 5aaNH/EtOUcgec/XBxreuknBT6UOx7pdwBnhMg7k0a/61r3juDc9CySyTleD0af9 Blk1r7xbafcLuta0YlDRwdlFbjX+x1wPZR14hIwee/uBx9aphV7lfpf0xUEiBqme kCCYeAuOcQZRupRvBUbo/vRizrZkehjjeaEqIRpnl3Qoz8UpV7lIygz0yaKmrqTZ WUNn2d8gSmIUxPX5RCOAPaKsMwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFFPzK2oP C5wGV/UkIY8grusONB/rMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvMTU4MTJGODJD NEExMTFFQkFFNkM3RjQ5QzRGOUFFMDIucm9hMG0GCCsGAQUFBwEHAQH/BF4wXDBL BAIAATBFAwQGOpKAAwMAOrYDAwA7vQMEAmfqaDALAwMBdFYDBAd0WQADBAKWa4AD AwDKnAMDANq6AwMA2tQwCwMDAt6kAwQH3qUAMA0EAgACMAcDBQEkBOgAMA0GCSqG SIb3DQEBCwUAA4IBAQBhuE3OjMKUuRlIWWMJDuqpig5SA1/nboT8nwnb9OiwlbsD fA2OtGaDSDgOg+qhBbaYmDESvmXwDsntfAIW2Ab0i9zeWC99ynG5jKiRJYdzm9BE RYTObLcFSfbeD+QuvRfrbPusv03qOLXZfwLSYZR1UU6VISB5gPCVR0/dp5PmH2nG AR6hPSWiNzQMa+9kOt42jsIms4ArAh7ay7uqQEnRT1d9vwqL6TBJULDvtiVcd9cI cvsRHs6peqc3OwxaFIahbjMNXrd9g3M0k0pou/Y93mNU6ut9DwnT5vNdhp50MKK/ XO9Lil5uDhp1VAtKZxDYdxXHlsg71LdBhbkrV4eI -----END CERTIFICATE-----Generated at Mon Mar 2 07:34:26 2026 by rpki-client