$ rpki-client -vvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/2021C6F6795E11F0B07E6E6BC4F9AE02.roa File: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (raw, json) Hash identifier: /tr9Ms57wuKfsw+OEtuIOe0iJR3426UBPMZCKa1pr2A= Subject key identifier: 16:CB:74:49:E6:3F:BD:7A:77:8D:65:C3:A6:15:4D:FA:5B:9C:E2:9A Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7 Certificate serial: 34B0 Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/2021C6F6795E11F0B07E6E6BC4F9AE02.roa Signing time: Thu 14 Aug 2025 22:29:22 +0000 ROA not before: Thu 14 Aug 2025 22:29:22 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 17492 IP address blocks: 101.100.0.0/17 maxlen: 17 202.0.151.0/24 maxlen: 24 202.126.193.0/24 maxlen: 24 202.126.194.0/24 maxlen: 24 202.126.195.0/24 maxlen: 24 202.126.196.0/24 maxlen: 24 202.126.197.0/24 maxlen: 24 202.126.198.0/24 maxlen: 24 202.126.199.0/24 maxlen: 24 202.126.200.0/24 maxlen: 24 202.126.201.0/24 maxlen: 24 202.126.202.0/24 maxlen: 24 202.126.203.0/24 maxlen: 24 202.126.204.0/24 maxlen: 24 202.126.205.0/24 maxlen: 24 202.126.206.0/24 maxlen: 24 202.126.207.0/24 maxlen: 24 2401:2c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7 Validity Not Before: Aug 14 22:29:22 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=689e6342-36c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:68:82:a4:18:ed:6a:a2:f1:48:40:98:d7:6e: 28:50:91:30:36:ab:d8:da:69:d7:87:0a:2e:d4:e5: 23:12:6d:e3:e3:ce:65:64:df:f8:95:c1:da:17:8e: 64:39:fc:78:0c:ef:b3:30:b1:5c:c9:a3:63:08:e4: be:31:28:5d:97:7d:81:e9:be:2e:83:de:98:1c:6c: 68:ee:d0:86:12:13:ba:1f:86:e0:b9:3c:66:c8:7b: d5:99:8e:d2:57:8d:b9:e4:3c:c9:c6:9c:63:6a:78: 5e:27:f3:d5:f5:b1:95:13:37:22:a7:90:fe:48:2b: 10:9e:cb:93:44:a1:63:a8:59:5d:c5:e8:13:57:bd: 66:0a:dd:c4:b8:b0:58:f6:98:6a:69:52:2f:4a:3f: 21:d5:8a:72:a5:e2:be:5b:93:7f:53:e0:df:ac:03: b3:d7:e1:e8:19:c8:f0:f0:3e:20:91:a0:33:e1:45: c0:aa:ab:be:9b:64:80:fe:7c:18:2d:22:8f:d0:4b: 8a:24:72:03:19:b8:64:09:f7:df:d2:e6:72:4c:50: e1:78:4d:d4:c2:49:2f:76:aa:3e:d6:34:e2:9b:da: 3c:9f:b6:2c:3f:67:8b:91:9a:18:df:70:36:07:06: 7a:8a:a7:42:a8:8a:85:8d:69:06:31:e6:69:b6:22: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CB:74:49:E6:3F:BD:7A:77:8D:65:C3:A6:15:4D:FA:5B:9C:E2:9A X509v3 Authority Key Identifier: keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/2021C6F6795E11F0B07E6E6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.100.0.0/17 202.0.151.0/24 202.126.193.0-202.126.207.255 IPv6: 2401:2c00::/32 Signature Algorithm: sha256WithRSAEncryption 3f:94:79:3f:eb:9f:92:06:3e:4b:9c:df:26:5d:e6:dd:f9:70: 4c:e5:a4:35:47:9b:24:7a:81:56:57:12:50:f0:7a:c3:60:da: d4:60:7f:df:a6:89:23:c5:80:86:4a:bb:f2:0c:76:4f:50:ff: 8b:22:e8:22:61:c8:8b:2e:69:e6:5b:4b:c2:c4:86:44:7a:bf: 13:ba:4d:5e:70:83:93:64:c3:00:25:24:a7:f8:c7:3a:c8:cf: a9:95:fd:68:de:4d:28:50:05:c5:91:2c:65:68:b5:86:3f:04: c1:df:cb:50:1f:dd:80:42:52:a8:d9:1c:65:0a:af:fb:f8:c9: 8a:55:81:c3:2f:3a:00:59:1e:93:62:7b:d6:b1:b6:22:2a:ee: 37:e1:07:1e:f2:3d:b1:90:11:1b:16:56:0d:07:ea:97:0f:2b: b6:33:59:7c:11:52:ee:b7:66:44:69:7d:02:e9:b3:83:97:1f: ba:57:d2:75:1b:a1:34:33:78:d3:cd:62:21:fe:04:f5:72:1c: 8e:4b:cf:7e:d2:8a:7d:ec:53:f6:d9:87:33:76:b9:61:70:2f: 5c:17:4b:52:6d:68:aa:4e:8c:30:75:82:e2:fe:4c:41:9e:ff: 74:9a:6d:cf:23:d5:e9:58:c3:0d:c8:82:4a:05:91:ae:20:3c: c3:25:21:60 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGQTgxMTAvBgNVBAUTKDFBODM4QTc2OEQ1QkYwRjU0QzYxQUE2REEyQjQ1MDM4 MUJERTY3QzcwHhcNMjUwODE0MjIyOTIyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllNjM0Mi0zNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6GiCpBjtaqLxSECY124oUJEwNqvY2mnXhwou1OUjEm3j485lZN/4lcHaF45k Ofx4DO+zMLFcyaNjCOS+MShdl32B6b4ug96YHGxo7tCGEhO6H4bguTxmyHvVmY7S V4255DzJxpxjanheJ/PV9bGVEzcip5D+SCsQnsuTRKFjqFldxegTV71mCt3EuLBY 9phqaVIvSj8h1YpypeK+W5N/U+DfrAOz1+HoGcjw8D4gkaAz4UXAqqu+m2SA/nwY LSKP0EuKJHIDGbhkCfff0uZyTFDheE3Uwkkvdqo+1jTim9o8n7YsP2eLkZoY33A2 BwZ6iqdCqIqFjWkGMeZptiKnwQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFBbLdEnm P716d41lw6YVTfpbnOKaMB8GA1UdIwQYMBaAFBqDinaNW/D1TGGqbaK0UDgb3mfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkZBOC85MjU1MzM2MjFE OEIxMUUyOURGRDNERTYwOEIwMkNEMi9Hb09LZG8xYjhQVk1ZYXB0b3JSUU9CdmVa OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dvT0tkbzFiOFBWTVlhcHRvclJRT0J2ZVo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZGQTgvOTI1NTMzNjIxRDhCMTFFMjlERkQzREU2MDhCMDJDRDIvMjAyMUM2RjY3 OTVFMTFGMEIwN0U2RTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBoDBAdlZAADBADKAJcwDAMEAMp+wQMEBMp+wDANBAIAAjAHAwUA JAEsADANBgkqhkiG9w0BAQsFAAOCAQEAP5R5P+ufkgY+S5zfJl3m3flwTOWkNUeb JHqBVlcSUPB6w2Da1GB/36aJI8WAhkq78gx2T1D/iyLoImHIiy5p5ltLwsSGRHq/ E7pNXnCDk2TDACUkp/jHOsjPqZX9aN5NKFAFxZEsZWi1hj8Ewd/LUB/dgEJSqNkc ZQqv+/jJilWBwy86AFkek2J71rG2IiruN+EHHvI9sZARGxZWDQfqlw8rtjNZfBFS 7rdmRGl9Aumzg5cfulfSdRuhNDN4081iIf4E9XIcjkvPftKKfexT9tmHM3a5YXAv XBdLUm1oqk6MMHWC4v5MQZ7/dJptzyPV6VjDDciCSgWRriA8wyUhYA== -----END CERTIFICATE-----Generated at Sun Aug 24 01:26:59 2025 by rpki-client