$ rpki-client -vvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/2021C6F6795E11F0B07E6E6BC4F9AE02.roa File: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (raw, json) Hash identifier: TqlpecplvSdLV29TPM7WN07wNwjZ8MAc88miHR0h6qc= Subject key identifier: D5:93:BA:19:74:7D:4D:DA:02:A4:7C:5B:A5:F4:A7:80:4F:19:D5:1F Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7 Certificate serial: 3522 Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/2021C6F6795E11F0B07E6E6BC4F9AE02.roa Signing time: Thu 12 Mar 2026 15:13:50 +0000 ROA not before: Thu 12 Mar 2026 15:13:50 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 17492 IP address blocks: 101.100.0.0/17 maxlen: 17 202.0.151.0/24 maxlen: 24 202.126.193.0/24 maxlen: 24 202.126.194.0/24 maxlen: 24 202.126.195.0/24 maxlen: 24 202.126.196.0/24 maxlen: 24 202.126.197.0/24 maxlen: 24 202.126.198.0/24 maxlen: 24 202.126.199.0/24 maxlen: 24 202.126.200.0/24 maxlen: 24 202.126.201.0/24 maxlen: 24 202.126.202.0/24 maxlen: 24 202.126.203.0/24 maxlen: 24 202.126.204.0/24 maxlen: 24 202.126.205.0/24 maxlen: 24 202.126.206.0/24 maxlen: 24 202.126.207.0/24 maxlen: 24 2401:2c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13602 (0x3522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7 Validity Not Before: Mar 12 15:13:50 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b2d82e-e844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:55:f1:9e:a1:b7:a1:30:92:38:0d:bf:c6: 1f:c3:91:ba:4d:9c:b8:f6:dc:9d:0f:63:aa:b9:51: 37:cf:d2:33:c1:10:79:8f:07:80:9c:31:9f:4f:13: 5d:19:25:f9:63:d1:08:0b:23:5f:b4:14:9c:d9:78: 0b:da:10:fb:7b:f3:5d:d7:7d:3b:da:e7:da:f7:4e: 83:59:e7:05:81:ea:cd:52:7e:48:97:e9:2c:04:14: e2:26:57:98:1f:a1:ea:f4:84:0b:9a:bb:2b:52:0b: 7c:96:09:0c:16:05:a2:80:af:88:c0:06:4c:f0:5b: c5:62:2d:9f:a2:53:6f:e3:53:fb:54:d3:bf:8d:a7: 82:75:c7:bd:a8:85:1d:10:6b:b9:76:02:75:10:9d: cc:32:ad:31:fc:86:0a:97:3c:00:87:fe:14:f1:f4: 1f:f0:67:4b:90:94:ed:3e:5c:c7:54:d7:9f:9d:2e: 8c:81:ee:c6:ac:c7:22:89:62:83:22:39:6d:8d:c4: ca:8e:92:51:53:66:e7:d6:17:7d:5c:84:e9:43:3f: fb:18:db:3a:cb:3c:56:cc:08:73:9b:e1:f8:eb:90: 04:cf:ff:ec:6f:ff:66:27:0d:5b:01:80:29:57:da: 5d:7d:e7:2b:3e:b7:96:80:ce:f4:8c:c8:46:e5:32: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:93:BA:19:74:7D:4D:DA:02:A4:7C:5B:A5:F4:A7:80:4F:19:D5:1F X509v3 Authority Key Identifier: keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/2021C6F6795E11F0B07E6E6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.100.0.0/17 202.0.151.0/24 202.126.193.0-202.126.207.255 IPv6: 2401:2c00::/32 Signature Algorithm: sha256WithRSAEncryption 19:70:e8:7a:eb:87:5b:d8:d5:57:88:28:38:2b:c1:d3:b3:19: 74:65:cd:0d:2f:8f:80:8c:2d:c1:96:e2:07:85:b0:f5:95:4f: d4:e2:ca:10:67:92:6d:2e:70:b8:b7:09:2a:3a:f9:b3:d2:82: 33:2b:d4:0f:57:8b:39:37:c6:09:1b:86:b5:18:62:93:47:db: ec:5c:be:c1:7d:df:82:85:48:e7:b9:6e:42:d9:be:46:0a:37: 52:ce:15:1e:1c:3c:8f:da:fb:e8:d5:9a:05:40:c3:c5:9b:74: 14:60:c8:8e:a8:57:4c:f6:72:74:67:3a:b7:82:02:78:2d:e1: 38:fd:be:24:57:56:99:7a:52:39:f5:95:89:30:8d:96:b4:ee: ac:f9:e6:de:75:35:ba:1f:49:97:93:43:6d:5f:60:4a:14:89: c0:f5:88:41:4f:c6:c8:64:6d:31:fa:d3:d0:85:b7:ea:76:23: 99:d0:13:7c:33:6a:54:e8:f0:05:08:ca:62:3d:88:86:53:e5: 49:e2:b3:85:72:4d:94:c3:b4:72:1f:e3:ce:42:12:1f:cf:d6: 73:67:72:da:b4:c7:3e:09:a4:94:37:5b:00:32:90:c1:70:a3: 82:3f:68:d6:4a:52:53:41:1c:b6:d0:54:59:36:8b:cb:7f:09: 54:bf:29:ae -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICNSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGQTgxMTAvBgNVBAUTKDFBODM4QTc2OEQ1QkYwRjU0QzYxQUE2REEyQjQ1MDM4 MUJERTY3QzcwHhcNMjYwMzEyMTUxMzUwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIyZDgyZS1lODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoURV8Z6ht6EwkjgNv8Yfw5G6TZy49tydD2OquVE3z9IzwRB5jweAnDGfTxNd GSX5Y9EICyNftBSc2XgL2hD7e/Nd13072ufa906DWecFgerNUn5Il+ksBBTiJleY H6Hq9IQLmrsrUgt8lgkMFgWigK+IwAZM8FvFYi2folNv41P7VNO/jaeCdce9qIUd EGu5dgJ1EJ3MMq0x/IYKlzwAh/4U8fQf8GdLkJTtPlzHVNefnS6Mge7GrMciiWKD IjltjcTKjpJRU2bn1hd9XITpQz/7GNs6yzxWzAhzm+H465AEz//sb/9mJw1bAYAp V9pdfecrPreWgM70jMhG5TLMJQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFNWTuhl0 fU3aAqR8W6X0p4BPGdUfMB8GA1UdIwQYMBaAFBqDinaNW/D1TGGqbaK0UDgb3mfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkZBOC85MjU1MzM2MjFE OEIxMUUyOURGRDNERTYwOEIwMkNEMi9Hb09LZG8xYjhQVk1ZYXB0b3JSUU9CdmVa OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dvT0tkbzFiOFBWTVlhcHRvclJRT0J2ZVo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZGQTgvOTI1NTMzNjIxRDhCMTFFMjlERkQzREU2MDhCMDJDRDIvMjAyMUM2RjY3 OTVFMTFGMEIwN0U2RTZCQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAg BAIAATAaAwQHZWQAAwQAygCXMAwDBADKfsEDBATKfsAwDQQCAAIwBwMFACQBLAAw DQYJKoZIhvcNAQELBQADggEBABlw6Hrrh1vY1VeIKDgrwdOzGXRlzQ0vj4CMLcGW 4geFsPWVT9TiyhBnkm0ucLi3CSo6+bPSgjMr1A9Xizk3xgkbhrUYYpNH2+xcvsF9 34KFSOe5bkLZvkYKN1LOFR4cPI/a++jVmgVAw8WbdBRgyI6oV0z2cnRnOreCAngt 4Tj9viRXVpl6Ujn1lYkwjZa07qz55t51NbofSZeTQ21fYEoUicD1iEFPxshkbTH6 09CFt+p2I5nQE3wzalTo8AUIymI9iIZT5Unis4VyTZTDtHIf485CEh/P1nNnctq0 xz4JpJQ3WwAykMFwo4I/aNZKUlNBHLbQVFk2i8t/CVS/Ka4= -----END CERTIFICATE-----Generated at Fri Mar 27 03:38:12 2026 by rpki-client