$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/21E1440A1E7711EFB69BE070C4F9AE02.roa File: 21E1440A1E7711EFB69BE070C4F9AE02.roa (raw, json) Hash identifier: Ehn7aSib3b8B+hpkrpsP8+4lO11Z+1C3P4j81GdJzF8= Subject key identifier: 41:EB:4B:B8:1F:C4:FE:DA:41:45:9B:8D:06:2E:3F:D7:8C:08:21:93 Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256 Certificate serial: 02BA Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/21E1440A1E7711EFB69BE070C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:57:29 +0000 ROA not before: Thu 31 Jul 2025 01:06:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152605 IP address blocks: 103.151.46.0/23 maxlen: 24 2400:3fa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256 Validity Not Before: Jul 31 01:06:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a48c19-eb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:2b:b2:a8:d5:ce:80:3b:21:b5:6a:95:fc: e8:3a:99:08:57:8b:7a:a0:38:28:37:98:32:08:89: 17:09:d4:60:f0:95:3e:9b:89:da:82:0d:a5:e5:53: 5e:96:85:fd:d6:a6:86:ec:42:00:fc:a4:5a:07:3f: 51:94:53:45:75:e4:f0:7b:60:28:02:08:21:ff:ff: b8:04:2a:98:77:34:da:a6:09:8c:ae:64:89:1a:9e: d3:77:c6:97:a6:2e:85:af:7c:5c:fe:83:e1:96:16: 3c:9d:2b:c1:3d:7d:77:a5:b1:43:73:a8:21:c7:4b: 33:d5:12:97:d5:fa:63:4d:2e:99:22:e2:4a:bf:a8: d2:7a:64:6d:6d:ad:2a:28:bf:9a:24:e3:b6:da:88: 11:f4:a9:cc:cb:01:ec:7e:b4:d8:4b:69:3b:8b:0d: 5d:2d:99:7b:ab:89:f4:1e:16:06:68:41:4b:42:8d: 78:ca:a6:15:ca:52:45:9e:a8:87:a5:ce:40:84:27: bf:32:bb:06:c8:07:0b:4a:a6:24:79:6b:10:e7:fa: dc:f3:77:cb:16:c1:fc:39:d0:89:ff:af:a2:63:88: 40:92:b3:14:05:d8:b4:6b:3d:82:6e:f9:23:eb:ac: ce:62:22:06:4e:73:0b:5c:41:be:2a:08:2b:6c:5c: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EB:4B:B8:1F:C4:FE:DA:41:45:9B:8D:06:2E:3F:D7:8C:08:21:93 X509v3 Authority Key Identifier: keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/21E1440A1E7711EFB69BE070C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.151.46.0/23 IPv6: 2400:3fa0::/32 Signature Algorithm: sha256WithRSAEncryption 41:38:85:a5:2c:a4:a4:6e:cc:22:c6:d7:b2:d3:f6:da:6c:dd: 5c:2d:c1:ba:ff:1b:5d:46:80:ff:95:19:6d:75:91:10:68:1b: f7:4b:4b:3c:46:ce:6d:01:63:9f:c3:b8:4a:e3:74:b6:27:01: d0:52:74:a9:56:d2:33:c0:62:e5:2c:60:c4:7c:72:b1:a8:a1: 06:e0:59:4e:8a:70:dc:2f:22:53:d6:d4:25:8a:29:81:6c:2f: c8:01:52:b9:22:5f:1c:2d:d3:05:56:fb:4c:b3:3e:c8:9b:08: 32:9f:15:9b:4d:1a:78:ae:7c:a3:2b:2b:46:11:f6:6a:bc:2d: 66:56:0e:db:0d:9c:10:cf:69:f0:81:db:f3:cc:63:fd:a5:d9: a8:d2:6d:b0:74:2b:22:51:c4:aa:78:c3:b0:88:9c:25:68:ea: 81:44:ff:d1:b7:07:26:37:80:2b:9d:7f:11:23:a2:b1:be:ac: c1:f6:d2:a5:9d:d5:eb:78:16:bc:5c:d9:2d:e1:97:91:91:ad: 0a:e5:9d:5f:5a:9f:bb:fa:9c:d5:bf:b4:59:62:49:de:a3:e1: c8:96:52:c6:f3:2f:d5:41:8a:11:87:81:ed:14:ee:54:d1:11: 28:e9:5c:48:07:ef:c4:c5:cf:d4:fc:e7:ad:91:4d:11:7d:f5: f9:34:e0:fe -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDgzNTJBNzM0RTgyMTQ0RjMyMkM1MEI3MjhBNEY3NjVB MzNENzIyNTYwHhcNMjUwNzMxMDEwNjIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGMxOS1lYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsecrsqjVzoA7IbVqlfzoOpkIV4t6oDgoN5gyCIkXCdRg8JU+m4nagg2l5VNe loX91qaG7EIA/KRaBz9RlFNFdeTwe2AoAggh//+4BCqYdzTapgmMrmSJGp7Td8aX pi6Fr3xc/oPhlhY8nSvBPX13pbFDc6ghx0sz1RKX1fpjTS6ZIuJKv6jSemRtba0q KL+aJOO22ogR9KnMywHsfrTYS2k7iw1dLZl7q4n0HhYGaEFLQo14yqYVylJFnqiH pc5AhCe/MrsGyAcLSqYkeWsQ5/rc83fLFsH8OdCJ/6+iY4hAkrMUBdi0az2Cbvkj 66zOYiIGTnMLXEG+KggrbFy+SwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEHrS7gf xP7aQUWbjQYuP9eMCCGTMB8GA1UdIwQYMBaAFINSpzToIUTzIsULcopPdloz1yJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQTWl4UXR5aWs5MldqUFhJ bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxS25OT2doUlBNaXhRdHlpazkyV2pQWElsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzM1N0UvNjAyRDc2RDg1RDczMTFFQ0EzMjQ4ODUzQzRGOUFFMDIvMjFFMTQ0MEEx RTc3MTFFRkI2OUJFMDcwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5cuMA0EAgACMAcDBQAkAD+gMA0GCSqGSIb3DQEBCwUAA4IBAQBB OIWlLKSkbswixtey0/babN1cLcG6/xtdRoD/lRltdZEQaBv3S0s8Rs5tAWOfw7hK 43S2JwHQUnSpVtIzwGLlLGDEfHKxqKEG4FlOinDcLyJT1tQliimBbC/IAVK5Il8c LdMFVvtMsz7ImwgynxWbTRp4rnyjKytGEfZqvC1mVg7bDZwQz2nwgdvzzGP9pdmo 0m2wdCsiUcSqeMOwiJwlaOqBRP/RtwcmN4ArnX8RI6KxvqzB9tKlndXreBa8XNkt 4ZeRka0K5Z1fWp+7+pzVv7RZYkneo+HIllLG8y/VQYoRh4HtFO5U0REo6VxIB+/E xc/U/OetkU0RffX5NOD+ -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:27 2026 by rpki-client