$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/FA57B70A706F11F1A66ABD9E76A30FBC.roa File: FA57B70A706F11F1A66ABD9E76A30FBC.roa (raw, json) Hash identifier: qhtPC4c3/ihK8zHDitlN/gJrE0SBwNrrJJaKSbliufY= Subject key identifier: F5:DF:C6:A7:39:19:10:C1:A5:A5:C7:C9:9E:D9:23:F4:10:1F:35:B5 Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Certificate serial: 0A21 Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/FA57B70A706F11F1A66ABD9E76A30FBC.roa Signing time: Thu 25 Jun 2026 08:29:27 +0000 ROA not before: Thu 25 Jun 2026 08:29:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 3300 IP address blocks: 61.14.0.0/18 maxlen: 24 203.187.128.0/19 maxlen: 24 2402:fb00::/32 maxlen: 32 2402:fb00::/36 maxlen: 36 2402:fb00:f00::/40 maxlen: 40 2402:fb00:1000::/36 maxlen: 36 2402:fb00:1f00::/40 maxlen: 40 2402:fb00:2000::/36 maxlen: 36 2402:fb00:2f00::/40 maxlen: 40 2402:fb00:3000::/36 maxlen: 36 2402:fb00:3f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Validity Not Before: Jun 25 08:29:27 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a3ce6e7-7dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8e:43:8b:f2:ce:ac:0d:8a:2a:02:e6:da:ff: 0f:01:c5:36:af:23:14:40:1d:58:c3:5c:08:30:6a: eb:c5:37:81:99:6a:b4:42:52:60:81:7e:9d:f2:9b: 63:00:de:d0:e9:55:44:1e:e8:b0:55:04:30:a5:b2: e3:ed:14:b7:60:e3:e1:f9:92:5b:0e:49:52:15:e4: 0f:e1:5f:c3:44:99:12:7e:c5:1a:76:a3:9c:28:02: 1a:e4:51:09:d0:ff:53:52:86:ad:99:8a:fe:3d:ad: 83:4a:35:c0:a7:3b:e1:64:af:5a:0d:49:b1:f9:61: 7e:4f:08:d4:33:45:bd:6f:3f:65:57:43:63:e3:07: 08:12:ed:9d:ec:8f:24:19:b5:1c:ce:70:75:42:3d: 52:b9:a5:b6:b9:0c:6e:74:bd:0b:e5:7f:e9:28:3a: 2f:2a:4f:ca:0a:f3:a7:b8:f7:54:71:c2:89:41:db: 01:a9:d9:09:84:fa:43:51:3f:cf:cd:62:97:01:88: d6:cb:ff:63:4b:34:29:37:ca:73:b6:a6:db:4b:96: 3b:21:08:9a:20:79:a2:aa:bc:bd:9d:8c:a5:5e:b3: db:f8:4d:91:d1:79:7a:7f:a7:c5:f2:56:4c:06:ad: e4:a5:7b:5e:23:23:34:1d:14:3f:55:b1:44:9c:cd: 30:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DF:C6:A7:39:19:10:C1:A5:A5:C7:C9:9E:D9:23:F4:10:1F:35:B5 X509v3 Authority Key Identifier: keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/FA57B70A706F11F1A66ABD9E76A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 61.14.0.0/18 203.187.128.0/19 IPv6: 2402:fb00::/32 Signature Algorithm: sha256WithRSAEncryption 5a:13:0c:81:50:94:55:9c:f0:57:f6:ba:17:dd:69:14:dc:86: b3:c1:95:5d:03:8a:1b:26:13:ab:20:e1:4f:0b:20:57:c3:fb: 2b:e0:2f:28:13:81:31:94:02:fa:dd:6f:ce:36:9f:ab:04:b8: 2f:1e:50:ff:da:b0:a8:47:56:71:61:62:f1:ee:68:ab:3c:32: 06:ad:f5:d7:06:aa:ab:04:b9:2d:e0:de:13:e4:6e:0d:2f:f8: eb:fc:a1:66:6c:47:c2:c3:07:57:d3:f0:ab:70:62:59:34:d6: 35:6e:a8:d8:a3:ef:2b:19:98:ee:61:c8:67:25:f3:b6:c5:be: d1:8d:9b:a3:ae:9e:83:bb:93:87:74:31:2f:64:a6:8c:a3:26: 00:9a:17:b7:fa:68:de:aa:71:d0:ca:b1:9d:78:7c:47:79:ed: 1d:62:4b:0b:3b:a2:2e:9a:73:80:11:b1:1a:45:69:83:da:75: 61:d5:ef:36:f4:e9:7d:16:36:10:be:a7:26:52:dc:f8:db:9e: e0:19:a4:e0:21:93:b2:c2:41:55:e9:d8:49:73:1b:73:74:06: ca:0d:c0:d7:45:ae:ac:5d:10:b7:9c:1a:b7:c9:97:f2:99:d9: 94:6b:de:6a:16:ec:24:ee:bb:4a:b1:49:ce:95:63:ad:60:f8: 03:43:7a:64 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDRUExMTAvBgNVBAUTKDg2MkI3M0I5Q0UzNTA0QjBCQTI0MUQxNEZEQUMwRUM0 QjRFNEFEQzIwHhcNMjYwNjI1MDgyOTI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjZTZlNy03ZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA545Di/LOrA2KKgLm2v8PAcU2ryMUQB1Yw1wIMGrrxTeBmWq0QlJggX6d8ptj AN7Q6VVEHuiwVQQwpbLj7RS3YOPh+ZJbDklSFeQP4V/DRJkSfsUadqOcKAIa5FEJ 0P9TUoatmYr+Pa2DSjXApzvhZK9aDUmx+WF+TwjUM0W9bz9lV0Nj4wcIEu2d7I8k GbUcznB1Qj1SuaW2uQxudL0L5X/pKDovKk/KCvOnuPdUccKJQdsBqdkJhPpDUT/P zWKXAYjWy/9jSzQpN8pztqbbS5Y7IQiaIHmiqry9nYylXrPb+E2R0Xl6f6fF8lZM Bq3kpXteIyM0HRQ/VbFEnM0wGQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPXfxqc5 GRDBpaXHyZ7ZI/QQHzW1MB8GA1UdIwQYMBaAFIYrc7nONQSwuiQdFP2sDsS05K3C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0NFQS80MDZFRjE3OEEw QzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJMQzZKQjBVX2F3T3hMVGty Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpdHp1YzQxQkxDNkpCMFVfYXdPeExUa3JjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNDRUEvNDA2RUYxNzhBMEMzMTFFQTg3NjQyMzZGQzRGOUFFMDIvRkE1N0I3MEE3 MDZGMTFGMUE2NkFCRDlFNzZBMzBGQkMucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQGPQ4AAwQFy7uAMA0EAgACMAcDBQAkAvsAMA0GCSqGSIb3DQEBCwUA A4IBAQBaEwyBUJRVnPBX9roX3WkU3IazwZVdA4obJhOrIOFPCyBXw/sr4C8oE4Ex lAL63W/ONp+rBLgvHlD/2rCoR1ZxYWLx7mirPDIGrfXXBqqrBLkt4N4T5G4NL/jr /KFmbEfCwwdX0/CrcGJZNNY1bqjYo+8rGZjuYchnJfO2xb7RjZujrp6Du5OHdDEv ZKaMoyYAmhe3+mjeqnHQyrGdeHxHee0dYksLO6IumnOAEbEaRWmD2nVh1e829Ol9 FjYQvqcmUtz4257gGaTgIZOywkFV6dhJcxtzdAbKDcDXRa6sXRC3nBq3yZfymdmU a95qFuwk7rtKsUnOlWOtYPgDQ3pk -----END CERTIFICATE-----Generated at Fri Jul 24 09:03:16 2026 by rpki-client