$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa File: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (raw, json) Hash identifier: 1xmqiSrpDm/48U2LlNSiWnkP8cdrmJaMWEJPOe1j7c8= Subject key identifier: 2D:03:20:38:82:9D:63:2D:52:C8:3A:F0:E7:D0:E4:64:91:75:7C:F0 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 0334 Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa Signing time: Sat 31 Oct 2026 01:48:17 +0000 ROA not before: Sat 31 Oct 2026 01:48:17 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 31898 IP address blocks: 65.254.64.0/19 maxlen: 24 66.116.192.0/18 maxlen: 24 216.10.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Oct 31 01:48:17 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ae548e1-88b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:48:3a:32:d7:69:7d:42:b7:50:a6:82:94: 9b:12:ad:39:5c:c2:ef:41:20:4d:62:4f:79:6d:cf: 0d:20:3d:dd:c3:fb:4b:58:26:4a:e0:ec:93:80:93: 27:2e:f4:d1:e7:96:ee:fb:3b:07:da:84:53:89:70: 33:3f:c9:c4:b6:85:00:76:0a:96:6d:c6:e9:11:31: 43:55:c4:bf:b8:41:4b:7f:69:a5:cc:90:2f:70:11: 4a:71:c5:9f:57:0b:da:8f:94:c1:f5:f5:0b:1d:55: ed:26:5b:63:15:55:f6:18:2b:0e:4d:fe:ad:d6:b1: 76:0a:17:00:09:ab:bb:47:b2:40:2d:54:52:99:83: cb:d2:d9:90:84:a0:bd:89:6d:11:96:38:fd:24:bd: f9:cf:9d:ff:88:1c:e8:a4:a8:ae:0d:58:5f:4f:37: 68:06:01:c1:08:9f:b8:7c:23:d2:43:c5:26:bb:14: a4:2f:59:2d:ec:b3:8c:ec:2d:3e:f5:0d:8b:f1:ad: 14:b4:1d:26:30:cd:05:69:94:c9:c8:85:c7:07:05: 4d:82:f5:4b:85:1a:32:dc:50:a5:c3:ae:ab:74:25: d9:d0:1b:01:f8:29:06:96:81:cf:d9:1d:21:83:07: 5a:17:36:32:3d:37:ea:66:12:65:d8:f0:78:c5:8d: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:03:20:38:82:9D:63:2D:52:C8:3A:F0:E7:D0:E4:64:91:75:7C:F0 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 65.254.64.0/19 66.116.192.0/18 216.10.240.0/20 Signature Algorithm: sha256WithRSAEncryption 44:3f:08:9d:c1:fe:c5:9c:df:5f:c6:85:7e:8b:ad:d0:de:6d: ad:0f:ea:d1:ae:ca:af:04:67:b9:76:e6:fc:a9:2e:a5:2f:a5: 99:7a:55:64:58:cd:55:15:a2:ce:a1:23:58:0c:5a:ce:26:28: f0:3d:a9:d3:06:4c:30:eb:a4:f3:05:74:e3:92:81:d6:9d:76: 94:c9:c3:4d:77:60:c6:81:70:3f:ad:27:92:96:35:62:4a:bf: 82:44:0b:69:9e:76:1c:6a:2d:73:d6:0c:ee:19:1b:49:7e:f6: a2:8d:c4:9e:39:59:39:67:42:b3:8b:3b:2d:be:ec:7f:53:f5: af:c4:c9:e2:d5:bb:94:a9:40:8a:fd:04:51:0a:5f:58:d3:3e: 96:63:69:3c:24:21:f5:1b:15:d7:de:95:08:e2:12:66:62:2b: 6b:b6:76:b6:73:a3:1f:e0:24:a3:5c:c1:ce:dc:00:58:14:47: f9:d7:f1:40:c2:99:7c:63:d3:81:df:ee:66:87:70:f0:76:f5: 30:bf:9f:46:8d:f7:28:3f:f8:1c:d4:bc:6b:ed:d6:f0:3b:0d: ec:39:38:7d:37:ad:c5:05:35:e2:e1:4d:39:16:0d:d8:2d:7c: 73:28:66:b2:93:4d:9c:d2:28:74:5b:b2:9e:43:e8:db:e2:ad: 44:7a:13:7e -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjYxMDMxMDE0ODE3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU1NDhlMS04OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oJIOjLXaX1Ct1CmgpSbEq05XMLvQSBNYk95bc8NID3dw/tLWCZK4OyTgJMn LvTR55bu+zsH2oRTiXAzP8nEtoUAdgqWbcbpETFDVcS/uEFLf2mlzJAvcBFKccWf Vwvaj5TB9fULHVXtJltjFVX2GCsOTf6t1rF2ChcACau7R7JALVRSmYPL0tmQhKC9 iW0Rljj9JL35z53/iBzopKiuDVhfTzdoBgHBCJ+4fCPSQ8UmuxSkL1kt7LOM7C0+ 9Q2L8a0UtB0mMM0FaZTJyIXHBwVNgvVLhRoy3FClw66rdCXZ0BsB+CkGloHP2R0h gwdaFzYyPTfqZhJl2PB4xY3RQwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFC0DIDiC nWMtUsg68OfQ5GSRdXzwMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvMEMyMUJCQUMz NzM3MTFGMDhGQTlCRDNEQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQFQf5AAwQGQnTAAwQE2ArwMA0GCSqGSIb3DQEBCwUAA4IBAQBEPwid wf7FnN9fxoV+i63Q3m2tD+rRrsqvBGe5dub8qS6lL6WZelVkWM1VFaLOoSNYDFrO JijwPanTBkww66TzBXTjkoHWnXaUycNNd2DGgXA/rSeSljViSr+CRAtpnnYcai1z 1gzuGRtJfvaijcSeOVk5Z0Kzizstvux/U/WvxMni1buUqUCK/QRRCl9Y0z6WY2k8 JCH1GxXX3pUI4hJmYitrtna2c6Mf4CSjXMHO3ABYFEf51/FAwpl8Y9OB3+5mh3Dw dvUwv59GjfcoP/gc1Lxr7dbwOw3sOTh9N63FBTXi4U05Fg3YLXxzKGayk02c0ih0 W7KeQ+jb4q1EehN+ -----END CERTIFICATE-----Generated at Sun Nov 15 14:17:48 2026 by rpki-client