$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/CFF5A20078E011EC8357FA15C4F9AE02.roa File: CFF5A20078E011EC8357FA15C4F9AE02.roa (raw, json) Hash identifier: LL3NDZGV/2b4xoaWfCHphnYFTdDWOC8VviDINVOcIOg= Subject key identifier: 52:3F:C4:56:BD:21:32:92:78:75:CA:5C:D9:E9:00:77:4D:B7:64:22 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 26E2 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/CFF5A20078E011EC8357FA15C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:33:18 +0000 ROA not before: Fri 04 Jul 2025 16:22:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140928 IP address blocks: 58.146.128.0/20 maxlen: 24 59.189.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9954 (0x26e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 4 16:22:56 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4785e-2976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:c7:32:d6:36:2b:5e:cd:ec:f2:0c:0e:c7: e1:9a:b2:24:e7:90:87:e8:c3:54:70:78:d2:d4:63: 2f:24:9a:93:17:88:23:9c:76:91:ce:6a:cc:78:d8: 62:4b:4d:ff:55:6c:2f:77:54:2c:cd:15:83:86:f7: 1b:78:ac:07:10:b0:35:67:88:a5:ba:6d:01:1f:b4: 1a:fa:6a:38:ac:22:46:53:10:bc:b0:ab:2e:ec:7a: 1c:76:8c:ca:4c:f5:48:ff:28:44:9c:ed:6a:63:d6: cd:1f:f3:a3:58:a6:70:90:68:e1:47:ad:75:e0:5c: c3:0d:0f:13:a8:90:48:20:9d:25:b7:c5:77:6f:cd: 69:91:c5:9f:c4:53:82:87:76:74:d2:00:d3:5f:d1: 3d:5b:7c:1d:e5:db:b6:ff:38:41:cb:d7:df:47:ca: 2e:72:7b:6e:b5:41:04:79:63:9a:5f:93:45:d6:bd: 0d:82:ae:6c:2c:c6:23:50:d3:5a:02:54:b9:97:60: a0:ec:0f:60:66:d2:34:fb:cf:39:21:36:5d:5e:f5: f8:a1:24:30:3e:52:b2:8a:a6:2c:0b:a4:9d:3b:46: ba:66:c6:b5:a7:85:b9:8f:ea:7c:3c:44:06:82:68: e1:2c:80:83:8b:b9:9e:d2:21:2b:bb:9a:1a:fd:e8: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3F:C4:56:BD:21:32:92:78:75:CA:5C:D9:E9:00:77:4D:B7:64:22 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/CFF5A20078E011EC8357FA15C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.146.128.0/20 59.189.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:29:c8:a5:ae:3e:40:2f:30:79:37:33:0e:b9:f3:df:67:94: dc:68:04:cf:df:e5:d6:d6:fb:05:84:fd:35:85:12:80:9d:a1: 00:5c:02:44:c6:6c:38:a0:8e:2f:af:f7:f3:0f:16:b1:ef:e2: 70:d9:47:e9:2f:30:c8:4b:2e:9d:9c:1c:93:b1:6c:da:1a:26: a8:f8:93:29:e0:a9:1d:40:f5:05:6a:0b:da:83:73:27:cd:5b: b4:30:52:a6:50:d4:db:bf:7d:30:82:24:17:db:2a:40:01:61: 74:cb:84:94:58:5c:88:56:68:d1:ec:eb:b8:a6:18:f2:55:02: db:fa:8f:45:7f:d5:20:19:43:b9:95:23:be:6b:fa:ac:00:52: b9:8f:fc:34:a4:57:42:9f:d0:61:e4:92:0b:45:5a:b6:4f:9f: 53:ca:59:9f:e3:c2:07:0e:08:1a:39:4f:f6:ac:53:1e:78:96: 27:0c:13:87:6b:0b:4a:0f:96:fa:69:35:79:af:0c:f6:93:9b: f8:3f:b1:21:77:48:86:29:d4:60:96:ae:02:f6:4b:e4:a6:fe: 8b:05:c3:fd:a8:79:e2:9e:06:c1:2d:67:f0:60:98:22:a3:02: 14:0c:99:9f:23:6a:ba:47:39:3e:76:0c:c0:d6:96:85:a3:7d: 37:8b:ff:d7 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgICJuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNzA0MTYyMjU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzg1ZS0yOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLLHMtY2K17N7PIMDsfhmrIk55CH6MNUcHjS1GMvJJqTF4gjnHaRzmrMeNhi S03/VWwvd1QszRWDhvcbeKwHELA1Z4ilum0BH7Qa+mo4rCJGUxC8sKsu7HocdozK TPVI/yhEnO1qY9bNH/OjWKZwkGjhR6114FzDDQ8TqJBIIJ0lt8V3b81pkcWfxFOC h3Z00gDTX9E9W3wd5du2/zhBy9ffR8oucntutUEEeWOaX5NF1r0Ngq5sLMYjUNNa AlS5l2Cg7A9gZtI0+885ITZdXvX4oSQwPlKyiqYsC6SdO0a6Zsa1p4W5j+p8PEQG gmjhLICDi7me0iEru5oa/eg0iwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFFI/xFa9 ITKSeHXKXNnpAHdNt2QiMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvQ0ZGNUEyMDA3 OEUwMTFFQzgzNTdGQTE1QzRGOUFFMDIucm9hMCQGCCsGAQUFBwEHAQH/BBUwEzAR BAIAATALAwQEOpKAAwMAO70wDQYJKoZIhvcNAQELBQADggEBAEgpyKWuPkAvMHk3 Mw65899nlNxoBM/f5dbW+wWE/TWFEoCdoQBcAkTGbDigji+v9/MPFrHv4nDZR+kv MMhLLp2cHJOxbNoaJqj4kyngqR1A9QVqC9qDcyfNW7QwUqZQ1Nu/fTCCJBfbKkAB YXTLhJRYXIhWaNHs67imGPJVAtv6j0V/1SAZQ7mVI75r+qwAUrmP/DSkV0Kf0GHk kgtFWrZPn1PKWZ/jwgcOCBo5T/asUx54licME4drC0oPlvppNXmvDPaTm/g/sSF3 SIYp1GCWrgL2S+Sm/osFw/2oeeKeBsEtZ/BgmCKjAhQMmZ8jarpHOT52DMDWloWj fTeL/9c= -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:48 2026 by rpki-client