$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/9BB3FAB6CCB511EE8612FB18C4F9AE02.roa File: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (raw, json) Hash identifier: XziEOmHehC91jypB6vBKLGxNX2adJM+CaWsnH6wjX0o= Subject key identifier: 38:2D:E3:03:70:76:48:7F:09:65:6A:19:32:B7:84:39:E5:64:46:EA Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Certificate serial: 0266 Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/9BB3FAB6CCB511EE8612FB18C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:19:28 +0000 ROA not before: Fri 11 Apr 2025 03:39:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8075 IP address blocks: 155.60.224.0/24 maxlen: 24 155.60.225.0/24 maxlen: 24 155.60.226.0/24 maxlen: 24 155.60.227.0/24 maxlen: 24 155.60.228.0/24 maxlen: 24 155.60.229.0/24 maxlen: 24 155.60.230.0/24 maxlen: 24 155.60.231.0/24 maxlen: 24 155.60.232.0/24 maxlen: 24 155.60.233.0/24 maxlen: 24 155.60.234.0/24 maxlen: 24 155.60.235.0/24 maxlen: 24 155.60.236.0/24 maxlen: 24 155.60.237.0/24 maxlen: 24 155.60.238.0/24 maxlen: 24 155.60.239.0/24 maxlen: 24 155.60.240.0/24 maxlen: 24 155.60.241.0/24 maxlen: 24 155.60.242.0/24 maxlen: 24 155.60.243.0/24 maxlen: 24 155.60.244.0/24 maxlen: 24 155.60.245.0/24 maxlen: 24 155.60.246.0/24 maxlen: 24 155.60.247.0/24 maxlen: 24 155.60.248.0/24 maxlen: 24 155.60.249.0/24 maxlen: 24 155.60.250.0/24 maxlen: 24 155.60.251.0/24 maxlen: 24 155.60.252.0/24 maxlen: 24 155.60.253.0/24 maxlen: 24 155.60.254.0/24 maxlen: 24 155.60.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Validity Not Before: Apr 11 03:39:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a5aa80-6863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:2d:91:41:59:d8:10:a1:c7:ac:f0:82:9e: 40:d5:f7:24:e7:d6:67:ee:f5:f2:e0:ad:4d:3c:b5: be:3b:4d:2d:7a:10:43:f8:38:f8:f5:b8:ac:6c:80: 6c:26:f3:6d:71:4b:bc:94:8e:a3:55:d2:1a:55:03: 0f:f4:e3:29:dc:2f:eb:13:c0:ad:51:e9:39:b9:90: 39:98:a5:e7:fd:b1:e0:17:f1:34:ea:43:84:2d:b7: 80:bc:9b:90:08:1b:e4:5f:73:bb:ad:25:1d:d8:d7: 17:62:1b:d8:57:2f:1d:8a:c1:c8:1d:9a:c0:80:5b: 2a:00:18:82:ce:94:b0:79:d7:a9:d6:c9:f7:77:7e: cd:81:c8:c3:e5:e5:c8:f0:85:80:7f:6d:c2:45:69: c8:68:1f:be:a1:82:44:6a:b6:53:75:93:e4:fe:d9: 7b:4b:6d:81:5d:9a:a4:5c:b7:2f:31:0c:10:29:40: 94:c4:aa:99:65:e1:7a:68:8d:ab:0b:e1:f3:98:41: a8:af:8a:1c:36:69:f0:f4:cf:20:e9:54:7c:ad:43: 3a:eb:d2:14:57:5a:53:e3:be:f5:1d:08:fb:46:62: 2d:ac:4a:46:3b:f2:31:05:d9:e8:d2:81:41:33:dd: ce:d8:5f:2c:1e:00:e5:c8:0f:6d:79:7a:bc:68:f4: 8e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:E3:03:70:76:48:7F:09:65:6A:19:32:B7:84:39:E5:64:46:EA X509v3 Authority Key Identifier: keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/9BB3FAB6CCB511EE8612FB18C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 155.60.224.0/19 Signature Algorithm: sha256WithRSAEncryption 33:70:9a:fb:a5:b2:0c:84:27:68:b5:fa:d6:67:59:94:e5:5d: ed:8c:2a:19:63:ed:c7:29:7c:90:ee:64:ca:ab:a1:7b:aa:c2: f5:c1:7a:fa:c2:9a:ae:f4:c5:c2:f1:e8:f2:32:e6:af:aa:c5: b7:aa:d8:cf:72:9b:0e:1d:8f:ca:d1:43:a0:01:f9:b9:33:03: b2:60:1c:4d:67:1c:2e:d6:f1:a1:c8:f4:5e:9e:1c:06:97:2f: fb:43:f4:aa:66:39:21:b9:53:c6:a6:3a:99:60:7b:21:47:cc: 25:a6:a3:da:91:6b:9c:0b:1f:4f:d8:f2:23:79:04:1f:7d:ea: ae:43:48:99:6d:27:d6:24:0b:bb:2a:cc:e9:34:4e:2d:4a:ea: c3:83:56:4a:e7:41:2b:d4:0a:82:06:81:f9:77:b1:2a:bc:4b: a6:b8:ea:26:ec:1b:1b:e0:cc:5e:6d:85:dd:08:06:b6:cb:7e: c1:c6:94:f8:23:f8:35:be:7e:d1:73:ec:4b:4d:bc:24:90:59: 2b:98:f7:29:67:1e:89:43:b7:66:76:e8:f0:e6:9f:6c:06:af: b0:7c:4b:2c:e6:4d:d6:70:ff:c6:3f:e8:c0:c3:da:4f:4e:78: a5:b1:b3:ca:48:b2:ce:ef:4e:8e:b6:b1:cc:e6:30:c9:08:ad: 4f:24:99:45 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKEM2MjE4NDgxNTFGNzk3QkY3MjMxMDdGMTRENjJDNjdB MjEzQTUzRTMwHhcNMjUwNDExMDMzOTAwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YWE4MC02ODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6EtkUFZ2BChx6zwgp5A1fck59Zn7vXy4K1NPLW+O00tehBD+Dj49bisbIBs JvNtcUu8lI6jVdIaVQMP9OMp3C/rE8CtUek5uZA5mKXn/bHgF/E06kOELbeAvJuQ CBvkX3O7rSUd2NcXYhvYVy8disHIHZrAgFsqABiCzpSwedep1sn3d37NgcjD5eXI 8IWAf23CRWnIaB++oYJEarZTdZPk/tl7S22BXZqkXLcvMQwQKUCUxKqZZeF6aI2r C+HzmEGor4ocNmnw9M8g6VR8rUM669IUV1pT4771HQj7RmItrEpGO/IxBdno0oFB M93O2F8sHgDlyA9teXq8aPSOKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDgt4wNw dkh/CWVqGTK3hDnlZEbqMB8GA1UdIwQYMBaAFMYhhIFR95e/cjEH8U1ixnohOlPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC81ODk4MjBDMkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3OXlNUWZ4VFdMR2VpRTZV LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hpR0VnVkgzbDc5eU1RZnhUV0xHZWlFNlUtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVCQzgvNTg5ODIwQzJFRjAyMTFFRDhDMkREOTFGQzRGOUFFMDIvOUJCM0ZBQjZD Q0I1MTFFRTg2MTJGQjE4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFmzzgMA0GCSqGSIb3DQEBCwUAA4IBAQAzcJr7pbIMhCdotfrWZ1mU 5V3tjCoZY+3HKXyQ7mTKq6F7qsL1wXr6wpqu9MXC8ejyMuavqsW3qtjPcpsOHY/K 0UOgAfm5MwOyYBxNZxwu1vGhyPRenhwGly/7Q/SqZjkhuVPGpjqZYHshR8wlpqPa kWucCx9P2PIjeQQffequQ0iZbSfWJAu7KszpNE4tSurDg1ZK50Er1AqCBoH5d7Eq vEumuOom7Bsb4MxebYXdCAa2y37BxpT4I/g1vn7Rc+xLTbwkkFkrmPcpZx6JQ7dm dujw5p9sBq+wfEss5k3WcP/GP+jAw9pPTnilsbPKSLLO706OtrHM5jDJCK1PJJlF -----END CERTIFICATE-----Generated at Thu Mar 26 01:55:13 2026 by rpki-client