$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa File: 1BDBCE5013A011EE91039C41C4F9AE02.roa (raw, json) Hash identifier: X6nIJKrPOsKF/xBNNQOCxuWrhRZQbFDhttqReRf2IsI= Subject key identifier: C5:62:9D:56:8F:0A:31:C7:95:D1:EC:49:2E:17:B3:0D:F5:EA:D2:C5 Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Certificate serial: 0271 Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa Signing time: Wed 19 Aug 2026 02:51:47 +0000 ROA not before: Wed 19 Aug 2026 02:51:47 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 18081 IP address blocks: 61.86.0.0/16 maxlen: 16 61.86.0.0/18 maxlen: 18 61.86.64.0/18 maxlen: 18 61.86.128.0/18 maxlen: 18 61.86.192.0/18 maxlen: 18 61.89.0.0/16 maxlen: 16 61.89.0.0/18 maxlen: 18 61.89.64.0/18 maxlen: 18 61.89.128.0/18 maxlen: 18 61.89.192.0/18 maxlen: 18 117.108.0.0/16 maxlen: 16 117.108.0.0/18 maxlen: 18 117.108.64.0/18 maxlen: 18 117.108.128.0/18 maxlen: 18 117.108.192.0/18 maxlen: 18 117.109.0.0/16 maxlen: 16 117.109.0.0/18 maxlen: 18 117.109.64.0/18 maxlen: 18 117.109.128.0/18 maxlen: 18 117.109.192.0/18 maxlen: 18 125.2.32.0/19 maxlen: 19 125.2.64.0/18 maxlen: 19 220.153.0.0/16 maxlen: 16 220.153.0.0/18 maxlen: 18 220.153.64.0/18 maxlen: 18 220.153.128.0/18 maxlen: 18 220.153.192.0/18 maxlen: 18 2404:ec00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Validity Not Before: Aug 19 02:51:47 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a851a43-e1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:dc:29:eb:47:db:99:75:4a:fa:1b:b0:8b: 73:2c:57:c5:11:7a:5e:5f:ce:5e:08:b3:e2:fd:83: f8:5e:ac:42:b2:b4:20:3d:66:5b:55:09:c1:56:94: 17:fc:d5:60:89:ed:12:87:00:09:d9:07:52:ef:ec: db:14:ac:e4:16:ed:a0:7e:30:13:1b:3f:29:b5:b9: a7:f8:85:7a:b9:8c:9c:68:d7:e9:d2:38:08:3a:e0: 8b:b2:4f:45:a6:da:73:ab:eb:80:0d:ff:f5:c5:db: 8e:9d:40:19:31:49:63:ed:44:78:47:fe:71:ca:96: 7b:30:7c:df:b1:1c:49:ee:b1:3d:7a:8a:e1:66:bd: ba:a4:11:56:cb:b8:cf:77:6b:c9:8d:93:fb:9e:38: a1:f5:f5:d5:18:a2:19:09:14:de:b2:b5:1b:1d:35: 61:53:90:02:09:d5:a9:94:86:9f:b0:0e:99:ae:8c: cf:a3:79:d4:e7:3f:cf:57:4b:13:50:46:b4:e2:b5: 34:47:c6:82:8c:d1:54:9e:7e:0b:cb:87:6d:a4:d3: 0f:3e:a1:85:10:63:f1:13:85:aa:d6:f2:b4:4a:c5: eb:01:f7:67:d1:be:3f:3e:a5:52:83:1a:09:23:2e: c9:fc:cb:02:81:0e:82:b8:50:ab:b4:86:cb:4f:16: 63:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:62:9D:56:8F:0A:31:C7:95:D1:EC:49:2E:17:B3:0D:F5:EA:D2:C5 X509v3 Authority Key Identifier: keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.86.0.0/16 61.89.0.0/16 117.108.0.0/15 125.2.32.0-125.2.127.255 220.153.0.0/16 IPv6: 2404:ec00::/32 Signature Algorithm: sha256WithRSAEncryption 38:b2:a7:68:97:62:f9:dd:29:8b:3e:a0:66:f0:fc:72:09:1c: 48:67:87:75:f2:e2:5c:43:2b:af:ea:a6:05:84:26:37:40:65: 04:69:5a:b1:48:be:eb:b4:c0:15:0d:bd:9e:9c:24:fb:41:bb: b8:a4:7b:a8:c5:00:68:15:5e:43:a9:bf:bf:9d:39:a8:32:90: 6d:a7:b8:a6:69:67:57:2e:c1:fb:f1:8e:5f:fc:72:5f:fc:cd: 55:48:16:03:1d:e9:34:17:de:e7:f6:a5:68:41:16:7e:3e:44: f3:52:32:90:40:d6:28:cd:a1:71:bc:87:d7:31:27:86:fa:54: 3e:ea:38:8f:c9:58:c2:ce:d1:04:22:bc:a9:ca:20:37:fb:00: 44:dc:88:7f:19:4c:a3:db:e1:7c:c8:ce:79:76:a2:e0:bc:68: 73:04:14:a5:e3:50:71:f3:38:30:ae:24:fa:e9:8b:05:79:d7: 13:bb:71:c5:97:e0:63:40:a7:55:9e:80:fe:41:c3:25:fd:5c: af:eb:05:65:3b:cf:8a:b2:c3:1e:fe:30:68:9c:91:8e:54:b1: fb:16:da:c4:14:64:2c:fe:b8:4f:86:f9:4f:19:a9:de:10:89: fe:1e:8a:4c:93:3b:67:8d:1a:4b:18:07:72:e4:14:64:9e:cb: 18:aa:f1:45 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKERGNzFEOTlGNENEM0IzODMyNkIzRUQ0N0M4RTRBNURG OTg5RTQyRjIwHhcNMjYwODE5MDI1MTQ3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg1MWE0My1lMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTLcKetH25l1SvobsItzLFfFEXpeX85eCLPi/YP4XqxCsrQgPWZbVQnBVpQX /NVgie0ShwAJ2QdS7+zbFKzkFu2gfjATGz8ptbmn+IV6uYycaNfp0jgIOuCLsk9F ptpzq+uADf/1xduOnUAZMUlj7UR4R/5xypZ7MHzfsRxJ7rE9eorhZr26pBFWy7jP d2vJjZP7njih9fXVGKIZCRTesrUbHTVhU5ACCdWplIafsA6ZrozPo3nU5z/PV0sT UEa04rU0R8aCjNFUnn4Ly4dtpNMPPqGFEGPxE4Wq1vK0SsXrAfdn0b4/PqVSgxoJ Iy7J/MsCgQ6CuFCrtIbLTxZjnwIDAQABo4ICizCCAocwHQYDVR0OBBYEFMVinVaP CjHHldHsSS4Xsw316tLFMB8GA1UdIwQYMBaAFN9x2Z9M07ODJrPtR8jkpd+YnkLy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS81NUM4MDNDQTA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0TW1zLTFIeU9TbDM1aWVR dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzSFpuMHpUczRNbXMtMUh5T1NsMzVpZVF2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwRUUvNTVDODAzQ0EwOUMwMTFFRUJFMTI1ODNBQzRGOUFFMDIvMUJEQkNFNTAx M0EwMTFFRTkxMDM5QzQxQzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTAo BAIAATAiAwMAPVYDAwA9WQMDAXVsMAwDBAV9AiADBAd9AgADAwDcmTANBAIAAjAH AwUAJATsADANBgkqhkiG9w0BAQsFAAOCAQEAOLKnaJdi+d0piz6gZvD8cgkcSGeH dfLiXEMrr+qmBYQmN0BlBGlasUi+67TAFQ29npwk+0G7uKR7qMUAaBVeQ6m/v505 qDKQbae4pmlnVy7B+/GOX/xyX/zNVUgWAx3pNBfe5/alaEEWfj5E81IykEDWKM2h cbyH1zEnhvpUPuo4j8lYws7RBCK8qcogN/sARNyIfxlMo9vhfMjOeXai4LxocwQU peNQcfM4MK4k+umLBXnXE7txxZfgY0CnVZ6A/kHDJf1cr+sFZTvPirLDHv4waJyR jlSx+xbaxBRkLP64T4b5Txmp3hCJ/h6KTJM7Z40aSxgHcuQUZJ7LGKrxRQ== -----END CERTIFICATE-----Generated at Sat Sep 5 08:05:20 2026 by rpki-client