$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/21F42C4EFE5511EC9A3F6F31C4F9AE02.roa File: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (raw, json) Hash identifier: 9SWvU83uta5yQV6kASYfDhqApkdxCt/37HDqSjzPVj8= Subject key identifier: C5:3D:79:4F:12:5A:22:65:47:D4:6D:7A:62:A3:ED:EC:66:BE:A6:C4 Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Certificate serial: 068E Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/21F42C4EFE5511EC9A3F6F31C4F9AE02.roa Signing time: Wed 04 Mar 2026 22:30:18 +0000 ROA not before: Wed 04 Mar 2026 22:30:18 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 38451 IP address blocks: 113.197.64.0/24 maxlen: 24 113.197.66.0/24 maxlen: 24 203.84.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Validity Not Before: Mar 4 22:30:18 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a8b27a-1ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7c:1c:ae:96:de:d4:5b:49:65:9a:9b:32:d3: 2f:5c:c5:b7:34:df:ea:b3:3f:55:a0:94:f5:db:57: 10:0a:86:0c:93:2f:e5:b7:fc:55:14:4c:19:c3:9e: 35:3e:ab:4f:69:98:42:7e:e7:77:b1:ac:9d:36:25: 70:bc:e1:0e:1f:4c:63:f1:48:e2:dc:8a:2c:52:fe: 42:0a:59:22:9f:a0:fd:2a:f9:fb:f4:ee:23:a6:3a: ab:8b:84:9b:e6:7c:a9:da:3f:3b:fc:21:79:5f:0c: 30:3a:bf:af:ac:2a:e7:43:6e:79:d4:15:4c:8e:3c: 04:a9:63:dc:55:a4:4a:85:4f:4c:a1:5f:92:c8:58: c8:ab:78:5d:52:14:39:05:32:af:71:8a:51:ad:eb: 19:16:fc:4a:45:dd:d4:17:db:3c:c7:9b:eb:c0:85: ed:c8:ff:57:4d:86:ac:7a:b6:be:63:a4:48:19:4e: b9:b6:43:b5:1d:05:f0:61:af:bc:ed:89:85:b0:96: 2d:1a:0a:b4:b2:f9:5d:b1:16:84:d4:a4:d0:10:bd: f0:bb:e9:be:9f:7c:87:6e:e4:47:f9:a1:d0:41:9b: b3:db:71:91:6f:26:b8:06:73:93:2c:74:8b:95:1e: 58:d0:ba:eb:86:7a:54:28:5a:5b:4c:d2:fb:b1:9c: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3D:79:4F:12:5A:22:65:47:D4:6D:7A:62:A3:ED:EC:66:BE:A6:C4 X509v3 Authority Key Identifier: keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/21F42C4EFE5511EC9A3F6F31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 113.197.64.0/24 113.197.66.0/24 203.84.134.0/23 Signature Algorithm: sha256WithRSAEncryption 58:83:1f:7e:4f:7d:79:b3:06:b5:6f:f1:45:f9:d7:e0:a4:70: b1:50:f1:c5:4a:91:c3:24:ea:aa:2e:8c:58:32:c5:c5:82:30: 4f:f0:df:c8:c8:ba:8e:b4:04:12:6e:ff:1e:61:a5:2f:15:51: 5f:99:ac:df:a6:ab:63:1e:cd:af:73:d6:7b:11:50:50:81:94: b7:ef:22:8f:0c:48:4b:c0:b7:79:fe:23:cf:7c:d8:ed:a8:d7: 28:c2:e5:74:74:38:04:d1:57:7a:18:21:8e:6d:a5:90:9a:5e: 2f:90:5e:8c:78:a8:d3:e0:53:a0:4e:15:68:ac:88:89:b0:ca: a7:77:99:51:05:2b:b4:a7:e6:3d:21:40:2c:70:d0:e2:eb:cd: 5f:46:7e:92:e0:c8:45:23:3f:90:2c:b4:76:89:2b:a6:44:b9: af:8b:5a:0c:55:b8:d5:8d:45:aa:53:74:af:79:cf:d6:c5:dc: e4:8a:07:a5:9d:1d:c0:67:d7:d1:eb:ba:da:d1:c1:a2:1f:cb: bc:d4:76:2a:90:0c:64:72:10:3d:81:8e:2e:c2:7e:7a:b8:22: 34:82:5c:12:03:d7:95:09:7f:21:dd:76:ff:47:31:82:61:15: 43:50:9e:3e:b2:ed:00:8d:8d:aa:87:20:3f:8d:5e:a5:ea:b9: a7:eb:4c:bd -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFGM0IxMTAvBgNVBAUTKEJFOTJBQkE0QTAxNDQzMTlFRTZENDVBQjkwOTBEODhE NURBRjM3RkUwHhcNMjYwMzA0MjIzMDE4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4YjI3YS0xZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlHwcrpbe1FtJZZqbMtMvXMW3NN/qsz9VoJT121cQCoYMky/lt/xVFEwZw541 PqtPaZhCfud3saydNiVwvOEOH0xj8Uji3IosUv5CClkin6D9Kvn79O4jpjqri4Sb 5nyp2j87/CF5XwwwOr+vrCrnQ2551BVMjjwEqWPcVaRKhU9MoV+SyFjIq3hdUhQ5 BTKvcYpRresZFvxKRd3UF9s8x5vrwIXtyP9XTYasera+Y6RIGU65tkO1HQXwYa+8 7YmFsJYtGgq0svldsRaE1KTQEL3wu+m+n3yHbuRH+aHQQZuz23GRbya4BnOTLHSL lR5Y0LrrhnpUKFpbTNL7sZw8pQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMU9eU8S WiJlR9RtemKj7exmvqbEMB8GA1UdIwQYMBaAFL6Sq6SgFEMZ7m1Fq5CQ2I1drzf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUYzQi80RjhCOTFCOEI5 QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4bnViVVdya0pEWWpWMnZO XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwS3JwS0FVUXhudWJVV3JrSkRZalYydk5fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTFGM0IvNEY4QjkxQjhCOUI2MTFFQkI0MTFFOTJFQzRGOUFFMDIvMjFGNDJDNEVG RTU1MTFFQzlBM0Y2RjMxQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAccVAAwQAccVCAwQBy1SGMA0GCSqGSIb3DQEBCwUAA4IBAQBYgx9+ T315swa1b/FF+dfgpHCxUPHFSpHDJOqqLoxYMsXFgjBP8N/IyLqOtAQSbv8eYaUv FVFfmazfpqtjHs2vc9Z7EVBQgZS37yKPDEhLwLd5/iPPfNjtqNcowuV0dDgE0Vd6 GCGObaWQml4vkF6MeKjT4FOgThVorIiJsMqnd5lRBSu0p+Y9IUAscNDi681fRn6S 4MhFIz+QLLR2iSumRLmvi1oMVbjVjUWqU3Svec/WxdzkigelnR3AZ9fR67ra0cGi H8u81HYqkAxkchA9gY4uwn56uCI0glwSA9eVCX8h3Xb/RzGCYRVDUJ4+su0AjY2q hyA/jV6l6rmn60y9 -----END CERTIFICATE-----Generated at Thu Mar 26 09:06:26 2026 by rpki-client