$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/E68E0FD4077B11EB98CA5D1CC4F9AE02.roa File: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (raw, json) Hash identifier: rIwXuVAKzTQeQgdJujiwbvj/r919Ii7m2oS5MI0eTgQ= Subject key identifier: B9:3A:38:AE:41:A1:50:D1:6F:F6:29:F1:09:4B:6A:DE:5F:3E:1C:2D Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Certificate serial: 3522 Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/E68E0FD4077B11EB98CA5D1CC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:35:17 +0000 ROA not before: Tue 02 Dec 2025 15:11:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38869 IP address blocks: 121.101.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13602 (0x3522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Validity Not Before: Dec 2 15:11:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44095-51b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:09:91:a8:54:34:f2:ad:5a:32:06:0c:a6:86: 47:0e:e8:4b:36:bc:fa:cb:0d:b2:a9:4a:de:4d:4c: 0d:2f:92:90:39:95:b7:45:6b:bc:09:2f:40:41:a1: d5:9a:e3:fe:c3:e4:d8:37:69:93:a8:e3:44:47:6d: 3c:53:db:45:8d:b5:cd:02:e5:4f:ad:82:3a:35:e4: 2a:a8:47:0e:f6:f9:45:98:d3:3c:71:37:20:14:d9: 40:b8:61:a4:6e:42:69:c0:6d:bf:a8:e5:06:70:df: ce:75:ae:8d:4b:46:8f:23:05:3a:1c:47:51:26:5b: a2:9a:f2:fd:40:18:38:bc:b6:51:f5:b2:a9:a5:4a: 20:c2:06:c2:a7:3a:6b:00:76:9c:a9:99:05:9e:40: 62:92:21:3c:0e:fe:c0:0c:f1:b2:52:ae:07:33:84: bf:4b:ed:c9:f8:d2:8a:9f:b8:b4:57:01:d7:00:36: 8e:17:a0:ca:0d:c9:08:6d:94:8d:8b:af:0f:79:1f: b3:b1:ff:68:1d:9a:d9:c8:8d:96:6a:a6:52:d1:74: a7:fd:3e:ba:68:99:fd:99:f9:7c:9d:6a:e8:b5:53: cf:db:42:87:f8:ea:c7:50:95:d2:f6:bc:75:7a:7f: 9e:3a:5a:a7:3a:0a:8d:2c:cd:44:7f:40:c7:84:f1: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3A:38:AE:41:A1:50:D1:6F:F6:29:F1:09:4B:6A:DE:5F:3E:1C:2D X509v3 Authority Key Identifier: keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/E68E0FD4077B11EB98CA5D1CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.101.176.0/21 Signature Algorithm: sha256WithRSAEncryption 34:9f:14:87:72:63:8d:c6:d2:20:83:53:f5:ef:ee:1b:84:70: 62:b2:ea:ad:11:76:4b:4d:61:c5:02:ba:dd:d4:96:0b:6c:35: c5:73:db:81:39:44:28:8e:78:03:eb:6e:71:35:70:3a:7b:f9: ff:66:dd:a6:68:fa:39:35:a5:c7:c2:d3:3e:af:d9:a7:d4:96: a9:b8:ce:66:84:fa:b4:c8:90:11:c0:db:49:2f:27:e3:f0:45: 98:54:b9:73:f5:ab:00:6c:13:d2:e5:7e:ad:4c:49:89:a5:ab: 81:30:a0:2f:92:0f:7c:73:fd:64:33:e9:c0:f0:c5:6b:57:0b: 7c:1b:02:a9:0f:c3:49:75:4c:42:6f:7d:eb:0c:f6:15:71:e7: 5d:6a:60:23:e7:78:5d:5b:c5:df:45:63:ad:81:79:a0:ec:b5: b4:2d:2a:65:65:5f:85:83:a6:fd:94:aa:e5:d2:d5:8b:18:ee: 54:2c:1f:ff:c4:9b:70:97:54:ea:c3:4e:52:0c:fb:f6:c7:fd: 9f:1f:44:91:a3:19:4b:46:b2:f3:43:2a:65:10:c8:ea:94:28: fb:19:15:14:18:ab:ed:b7:ab:8f:99:a1:a3:ae:14:8d:81:3b: 33:0c:42:4a:14:6a:57:3c:e2:69:7b:62:6b:d7:ac:cd:4b:73: 19:34:67:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQjgxMTAvBgNVBAUTKDE3MEU5Qzc2NzY0M0MzQzFGNjA1Nzk0MDg2NDhBM0Yw REE4NDA0NUEwHhcNMjUxMjAyMTUxMTUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDA5NS01MWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgmRqFQ08q1aMgYMpoZHDuhLNrz6yw2yqUreTUwNL5KQOZW3RWu8CS9AQaHV muP+w+TYN2mTqONER208U9tFjbXNAuVPrYI6NeQqqEcO9vlFmNM8cTcgFNlAuGGk bkJpwG2/qOUGcN/Oda6NS0aPIwU6HEdRJluimvL9QBg4vLZR9bKppUogwgbCpzpr AHacqZkFnkBikiE8Dv7ADPGyUq4HM4S/S+3J+NKKn7i0VwHXADaOF6DKDckIbZSN i68PeR+zsf9oHZrZyI2WaqZS0XSn/T66aJn9mfl8nWrotVPP20KH+OrHUJXS9rx1 en+eOlqnOgqNLM1Ef0DHhPFF9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLk6OK5B oVDRb/Yp8QlLat5fPhwtMB8GA1UdIwQYMBaAFBcOnHZ2Q8PB9gV5QIZIo/DahARa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZCOC9EOTgwQTE3MjFE OTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4SDJCWGxBaGtpajhOcUVC Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3NmNkblpEdzhIMkJYbEFoa2lqOE5xRUJGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VGQjgvRDk4MEExNzIxRDk1MTFFMjkyMTUwRTdFMDhCMDJDRDIvRTY4RTBGRDQw NzdCMTFFQjk4Q0E1RDFDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDeWWwMA0GCSqGSIb3DQEBCwUAA4IBAQA0nxSHcmONxtIgg1P17+4b hHBisuqtEXZLTWHFArrd1JYLbDXFc9uBOUQojngD625xNXA6e/n/Zt2maPo5NaXH wtM+r9mn1JapuM5mhPq0yJARwNtJLyfj8EWYVLlz9asAbBPS5X6tTEmJpauBMKAv kg98c/1kM+nA8MVrVwt8GwKpD8NJdUxCb33rDPYVceddamAj53hdW8XfRWOtgXmg 7LW0LSplZV+Fg6b9lKrl0tWLGO5ULB//xJtwl1Tqw05SDPv2x/2fH0SRoxlLRrLz QyplEMjqlCj7GRUUGKvtt6uPmaGjrhSNgTszDEJKFGpXPOJpe2Jr16zNS3MZNGdO -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:35 2026 by rpki-client