$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa File: 21A970BC737211EEB3112437C4F9AE02.roa (raw, json) Hash identifier: yEyjyfL4qmMdrXUNa8/FxH8a11hKOq88Y/fK6pSWFOc= Subject key identifier: F8:74:63:C0:54:AD:26:F1:47:49:FB:87:9F:F2:40:1B:73:17:CE:44 Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 01C4 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:34:42 +0000 ROA not before: Thu 18 Dec 2025 14:03:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38910 IP address blocks: 161.121.128.0/19 maxlen: 19 161.121.128.0/20 maxlen: 20 161.121.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Dec 18 14:03:19 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a44e82-e42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:63:32:cd:c6:70:34:64:2b:d8:ca:f9:0a:54: c3:eb:53:24:cc:fb:39:5e:7a:69:78:b0:6e:86:a5: 3e:d0:4a:f9:77:9b:bf:1f:67:23:89:34:34:bc:8e: 7f:e7:5b:55:40:f0:a0:12:a0:45:2a:55:c8:ba:88: 28:69:ed:2b:a8:bc:44:23:75:9f:89:a0:3c:72:cc: 1b:cf:0d:70:9c:af:aa:fc:d0:08:12:69:a9:e5:a9: 62:5c:f0:02:df:d9:23:19:c2:56:00:35:56:92:c3: 93:e1:cf:87:36:65:cd:25:63:5e:90:5a:eb:87:d1: f6:26:b6:b9:4f:5e:e7:2a:b8:72:42:ef:45:e7:1e: c9:d0:2e:4e:46:37:8e:ca:12:fb:9c:ea:5e:d9:15: a0:52:95:20:15:be:cc:06:70:5f:58:2e:7e:02:b3: 18:39:26:79:88:dc:f3:30:b7:ef:39:32:88:cc:18: f9:92:d9:fa:7c:00:87:24:6a:ad:07:39:3c:68:32: 02:c3:3e:93:3f:9d:20:f0:51:2b:be:01:b4:82:bf: bb:de:43:c1:3b:b0:3a:64:95:b4:30:30:ca:72:d4: 4d:84:89:36:1e:31:26:0e:c8:b8:fe:79:40:7b:05: 43:50:14:0c:41:f6:ea:06:70:45:9b:81:8b:e9:8e: 0f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:74:63:C0:54:AD:26:F1:47:49:FB:87:9F:F2:40:1B:73:17:CE:44 X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.121.128.0/19 Signature Algorithm: sha256WithRSAEncryption 8f:71:64:4e:ad:c6:3a:44:42:4a:5f:a8:1b:0d:c7:ef:90:33: 60:8b:37:18:a6:24:34:7e:c7:cd:40:d1:98:62:32:9e:0d:6c: 09:65:ea:f6:c3:92:2e:0d:4f:6d:cd:71:c6:af:07:fd:74:9b: 7a:2b:44:d3:4f:5d:11:b3:c5:98:7a:dc:ff:0e:1c:b8:2a:10: 93:69:36:18:d3:ac:1a:b2:62:03:c4:ae:4c:d3:13:8d:9f:13: b2:cf:49:b1:18:b8:8f:0f:c4:cf:8e:dc:b7:3a:34:d2:ce:ea: fd:c0:86:f2:2d:9d:7c:60:c5:80:5f:e1:82:6a:67:09:db:7b: 4d:cb:a0:85:fd:72:a1:65:cf:92:47:dc:e2:80:3f:1a:42:39: 97:a0:c3:59:fc:c7:d6:df:74:db:a8:6f:05:87:be:de:81:34: 9e:47:dd:4c:9f:6d:5c:63:ef:0e:07:73:e9:3a:54:c3:c0:04: a2:60:c8:b8:9a:19:3f:c4:99:3e:00:96:8d:c4:75:9a:02:e6: 77:02:a1:10:01:df:23:1f:a7:a9:04:10:6f:83:48:e7:94:dd: ae:8e:1f:96:eb:dc:82:43:11:a1:28:4b:b3:24:0e:c9:67:62: 48:b0:68:68:10:e8:4e:b3:38:c6:9a:c9:dc:d2:3e:0f:47:5e: e2:0e:2f:a9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUxMjE4MTQwMzE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGU4Mi1lNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhmMyzcZwNGQr2Mr5ClTD61MkzPs5XnppeLBuhqU+0Er5d5u/H2cjiTQ0vI5/ 51tVQPCgEqBFKlXIuogoae0rqLxEI3WfiaA8cswbzw1wnK+q/NAIEmmp5aliXPAC 39kjGcJWADVWksOT4c+HNmXNJWNekFrrh9H2Jra5T17nKrhyQu9F5x7J0C5ORjeO yhL7nOpe2RWgUpUgFb7MBnBfWC5+ArMYOSZ5iNzzMLfvOTKIzBj5ktn6fACHJGqt Bzk8aDICwz6TP50g8FErvgG0gr+73kPBO7A6ZJW0MDDKctRNhIk2HjEmDsi4/nlA ewVDUBQMQfbqBnBFm4GL6Y4PmQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPh0Y8BU rSbxR0n7h5/yQBtzF85EMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQzNkEvQzZERDUxQjQ3MzZGMTFFRTkxN0QwMzM0QzRGOUFFMDIvMjFBOTcwQkM3 MzcyMTFFRUIzMTEyNDM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFoXmAMA0GCSqGSIb3DQEBCwUAA4IBAQCPcWROrcY6REJKX6gbDcfv kDNgizcYpiQ0fsfNQNGYYjKeDWwJZer2w5IuDU9tzXHGrwf9dJt6K0TTT10Rs8WY etz/Dhy4KhCTaTYY06wasmIDxK5M0xONnxOyz0mxGLiPD8TPjty3OjTSzur9wIby LZ18YMWAX+GCamcJ23tNy6CF/XKhZc+SR9zigD8aQjmXoMNZ/MfW33TbqG8Fh77e gTSeR91Mn21cY+8OB3PpOlTDwASiYMi4mhk/xJk+AJaNxHWaAuZ3AqEQAd8jH6ep BBBvg0jnlN2ujh+W69yCQxGhKEuzJA7JZ2JIsGhoEOhOszjGmsnc0j4PR17iDi+p -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:31 2026 by rpki-client