$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/B21566C0EE5911EF87651F0AC4F9AE02.roa File: B21566C0EE5911EF87651F0AC4F9AE02.roa (raw, json) Hash identifier: DfVZI77hpfh54+6/FrxIu9n2AVdo9X/i5TCPodhUnSU= Subject key identifier: A8:66:14:05:06:1C:53:19:05:D4:4E:8A:68:F3:54:37:A9:CD:B1:18 Certificate issuer: /CN=A912F6E3/serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9 Certificate serial: F5 Authority key identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/B21566C0EE5911EF87651F0AC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:23:36 +0000 ROA not before: Mon 09 Feb 2026 06:24:52 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 1299 IP address blocks: 170.10.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9 Validity Not Before: Feb 9 06:24:52 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a459f8-9b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:7b:a0:eb:61:b0:6d:d8:c7:8a:b5:7d:5b: 1b:e2:38:ac:de:fe:58:32:ca:b1:70:a9:14:b2:ff: 2f:d4:94:c2:45:0b:1c:a0:c0:8a:98:5f:de:f3:b0: f1:6d:e4:f0:6f:68:27:aa:bb:74:87:51:b2:e4:a1: 47:bf:57:d5:99:26:78:3e:2b:74:10:de:17:12:22: 35:8d:e1:c0:7f:ab:62:49:4b:3f:34:46:67:30:aa: 35:10:c0:df:39:c9:bb:5d:95:de:4c:bb:57:5e:fb: 01:9f:e6:97:89:0a:0d:9b:18:81:37:5b:af:94:f1: dd:c7:25:d1:80:c4:c5:50:cb:e3:a4:68:a6:10:7b: 23:c8:f5:16:4c:6f:1a:6d:9e:be:ba:fa:eb:fd:4e: 34:db:dc:d0:0b:ee:38:db:75:31:74:d1:6f:69:bd: de:30:d2:77:ef:0c:f6:8b:91:f9:07:a5:77:9c:98: e5:2c:ba:6a:de:e3:93:a0:9e:b5:ba:4d:8a:c4:09: 88:77:f2:28:c3:2e:63:2c:86:d5:3d:ad:b6:84:99: 44:39:06:a4:f7:15:77:ae:4c:c9:f7:0f:f3:7f:19: 99:88:e1:4c:37:9f:7b:ca:e7:33:12:31:85:c3:45: d2:f4:99:66:9a:70:e5:a8:c9:1f:56:5b:fa:b1:96: 6a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:66:14:05:06:1C:53:19:05:D4:4E:8A:68:F3:54:37:A9:CD:B1:18 X509v3 Authority Key Identifier: keyid:98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/B21566C0EE5911EF87651F0AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 170.10.70.0/24 Signature Algorithm: sha256WithRSAEncryption 96:91:c1:26:58:5f:e1:99:6b:10:fa:d9:7d:b7:f5:39:53:f2: f3:80:f3:06:f9:8b:1d:38:fa:5a:bc:d2:e7:18:69:c3:b1:e4: bf:37:fe:c9:ba:20:ec:43:d5:55:e4:f3:72:ff:74:fc:c5:a8: 6e:a6:02:4f:a7:fb:8e:34:43:7d:08:d3:f8:ee:67:f6:64:c3: 98:89:3e:fd:0c:5b:28:0b:ba:8d:84:83:8d:19:da:50:6a:bd: 53:2b:18:fd:82:af:44:96:b9:26:10:2e:a1:9d:17:c4:18:e4: af:d6:b6:1b:f0:d0:b4:ff:02:23:39:ec:c6:ff:73:b6:79:7a: 27:d2:d8:66:9c:26:ff:1c:dc:b3:35:96:d8:47:17:65:dd:34: 69:4a:eb:f8:73:d2:0c:03:e6:05:b1:ad:e5:92:39:4a:a6:d9: 70:b2:39:19:a8:76:c3:e3:df:a8:a8:31:bc:8d:ad:4a:01:84: 47:d9:0a:d4:15:3a:cf:50:4e:5f:09:6b:cc:7e:62:e6:39:35: 48:06:64:3c:ec:e5:f2:0e:d2:4f:11:ff:69:f7:94:93:2b:b9: 0f:a8:91:3b:44:f9:9b:c5:e5:79:3d:ed:9a:93:47:c8:20:60: 70:41:68:fe:28:b6:11:3b:f0:f6:29:c7:22:72:57:41:59:20: 0f:13:96:3e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY2RTMxMTAvBgNVBAUTKDk4RkVBNkM0NEZGNTMyODQ4MzVFODFEMDcwREZDMTgy MEI2RDUwRTkwHhcNMjYwMjA5MDYyNDUyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTlmOC05YjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1D97oOthsG3Yx4q1fVsb4jis3v5YMsqxcKkUsv8v1JTCRQscoMCKmF/e87Dx beTwb2gnqrt0h1Gy5KFHv1fVmSZ4Pit0EN4XEiI1jeHAf6tiSUs/NEZnMKo1EMDf Ocm7XZXeTLtXXvsBn+aXiQoNmxiBN1uvlPHdxyXRgMTFUMvjpGimEHsjyPUWTG8a bZ6+uvrr/U4029zQC+4423UxdNFvab3eMNJ37wz2i5H5B6V3nJjlLLpq3uOToJ61 uk2KxAmId/Iowy5jLIbVPa22hJlEOQak9xV3rkzJ9w/zfxmZiOFMN597yuczEjGF w0XS9JlmmnDlqMkfVlv6sZZqAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKhmFAUG HFMZBdROimjzVDepzbEYMB8GA1UdIwQYMBaAFJj+psRP9TKEg16B0HDfwYILbVDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjZFMy9FQTUzODFERUI1 REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9tUDZteEVfMU1vU0RYb0hRY05fQmdndHRV T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21QNm14RV8xTW9TRFhvSFFjTl9CZ2d0dFVPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY2RTMvRUE1MzgxREVCNUREMTFFRjk3RDlGQTM0QzRGOUFFMDIvQjIxNTY2QzBF RTU5MTFFRjg3NjUxRjBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAqgpGMA0GCSqGSIb3DQEBCwUAA4IBAQCWkcEmWF/hmWsQ+tl9t/U5 U/LzgPMG+YsdOPpavNLnGGnDseS/N/7JuiDsQ9VV5PNy/3T8xahupgJPp/uONEN9 CNP47mf2ZMOYiT79DFsoC7qNhIONGdpQar1TKxj9gq9ElrkmEC6hnRfEGOSv1rYb 8NC0/wIjOezG/3O2eXon0thmnCb/HNyzNZbYRxdl3TRpSuv4c9IMA+YFsa3lkjlK ptlwsjkZqHbD49+oqDG8ja1KAYRH2QrUFTrPUE5fCWvMfmLmOTVIBmQ87OXyDtJP Ef9p95STK7kPqJE7RPmbxeV5Pe2ak0fIIGBwQWj+KLYRO/D2KccicldBWSAPE5Y+ -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:54 2026 by rpki-client