$ rpki-client -vvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/2021C6F6795E11F0B07E6E6BC4F9AE02.roa File: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (raw, json) Hash identifier: H1+eNyFxSYBbTOlAelJP17FVNMe8XWeUPzrzJnDcY0Y= Subject key identifier: 60:68:3E:80:92:FA:95:66:4A:D9:47:E4:97:65:15:2A:69:79:3C:EA Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7 Certificate serial: 3518 Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/2021C6F6795E11F0B07E6E6BC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:10:26 +0000 ROA not before: Thu 14 Aug 2025 22:29:22 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 17492 IP address blocks: 101.100.0.0/17 maxlen: 17 202.0.151.0/24 maxlen: 24 202.126.193.0/24 maxlen: 24 202.126.194.0/24 maxlen: 24 202.126.195.0/24 maxlen: 24 202.126.196.0/24 maxlen: 24 202.126.197.0/24 maxlen: 24 202.126.198.0/24 maxlen: 24 202.126.199.0/24 maxlen: 24 202.126.200.0/24 maxlen: 24 202.126.201.0/24 maxlen: 24 202.126.202.0/24 maxlen: 24 202.126.203.0/24 maxlen: 24 202.126.204.0/24 maxlen: 24 202.126.205.0/24 maxlen: 24 202.126.206.0/24 maxlen: 24 202.126.207.0/24 maxlen: 24 2401:2c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13592 (0x3518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7 Validity Not Before: Aug 14 22:29:22 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a40282-56fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:bf:8f:23:81:26:3b:a4:e2:8c:98:30:e9: c2:f6:28:d2:bb:d2:68:50:90:17:90:ed:2f:82:72: 00:62:41:a9:3e:06:87:f6:70:27:e0:53:5b:98:dd: 1e:5f:34:55:89:f2:d3:33:b9:64:50:a6:51:80:b8: 6d:66:9f:2d:16:5a:a7:2c:11:07:cd:8b:5d:95:bc: e0:41:3d:e9:fa:b4:c7:c3:5f:eb:09:7d:89:e3:12: 6e:ae:50:a5:d5:fa:ad:65:f3:b2:f8:37:b1:b3:5e: 58:fe:4d:92:98:3f:8c:eb:1f:df:08:22:36:d8:e0: 18:28:d8:c8:a5:6c:a6:51:09:d1:d5:a1:26:54:81: 75:c0:18:d4:e6:a1:60:e0:19:24:f5:07:0c:96:d4: 29:80:fc:02:6c:e1:60:92:05:b8:4d:a3:12:8f:24: 60:76:aa:2e:7f:1a:40:42:99:d9:96:18:d5:79:bc: c1:88:97:e8:41:2e:9f:8f:80:5a:a6:ac:05:19:af: 16:ed:33:62:04:e1:7c:ff:b9:36:dc:6d:51:30:f9: 92:53:b3:2d:81:3d:17:c8:fc:89:9d:76:5f:90:fa: 9c:12:63:f7:04:81:49:b8:1f:b7:5c:59:0b:cb:73: 05:0d:23:95:a0:73:58:aa:e2:36:1d:c4:32:aa:95: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:68:3E:80:92:FA:95:66:4A:D9:47:E4:97:65:15:2A:69:79:3C:EA X509v3 Authority Key Identifier: keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/2021C6F6795E11F0B07E6E6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.100.0.0/17 202.0.151.0/24 202.126.193.0-202.126.207.255 IPv6: 2401:2c00::/32 Signature Algorithm: sha256WithRSAEncryption 4a:cc:87:0a:fb:63:22:9f:37:3f:b5:18:62:6f:89:a4:76:d9: 40:ab:93:74:fe:dc:32:fb:6a:80:ea:aa:41:a9:a8:3c:5a:51: 34:dd:20:f5:6f:d5:dd:3a:aa:75:8e:f8:cc:54:7c:c7:c0:ca: 2f:fa:a6:ae:54:0c:45:47:22:f2:ef:ae:e6:8f:64:c7:14:1e: 00:ed:1d:1f:57:47:db:a0:e0:f1:8a:f4:ab:8a:25:35:ed:38: d3:32:10:c4:bb:af:dc:5f:9c:40:b2:39:89:54:1a:94:99:29: 82:82:97:7c:88:29:21:f3:d4:2f:f2:e6:b9:e3:be:2c:f8:41: 47:da:82:23:98:3e:42:41:1e:ca:3d:95:e8:1f:fe:54:3c:97: be:c6:e2:c7:b4:e1:1d:8f:b3:ea:5a:c8:d0:1f:0c:59:2a:3e: 44:d8:1d:40:a1:78:83:9b:c6:92:f1:e0:3b:6a:67:2a:4e:dd: 4b:a7:56:1b:93:6d:e9:94:a4:48:47:ef:b6:53:b3:dd:e3:95: 34:01:b2:3a:b6:4e:7e:e1:48:0d:1f:f5:48:06:0f:15:9e:4c: f2:d5:e4:e0:bb:74:24:b1:8a:d3:b1:0f:9f:fd:7b:e6:4c:78: 44:92:09:ac:0f:f7:d7:64:c8:04:0b:11:8b:5b:1c:2d:c7:84: cb:c4:1a:bd -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICNRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGQTgxMTAvBgNVBAUTKDFBODM4QTc2OEQ1QkYwRjU0QzYxQUE2REEyQjQ1MDM4 MUJERTY3QzcwHhcNMjUwODE0MjIyOTIyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDI4Mi01NmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxC/jyOBJjuk4oyYMOnC9ijSu9JoUJAXkO0vgnIAYkGpPgaH9nAn4FNbmN0e XzRVifLTM7lkUKZRgLhtZp8tFlqnLBEHzYtdlbzgQT3p+rTHw1/rCX2J4xJurlCl 1fqtZfOy+Dexs15Y/k2SmD+M6x/fCCI22OAYKNjIpWymUQnR1aEmVIF1wBjU5qFg 4Bkk9QcMltQpgPwCbOFgkgW4TaMSjyRgdqoufxpAQpnZlhjVebzBiJfoQS6fj4Ba pqwFGa8W7TNiBOF8/7k23G1RMPmSU7MtgT0XyPyJnXZfkPqcEmP3BIFJuB+3XFkL y3MFDSOVoHNYquI2HcQyqpXvCwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFGBoPoCS +pVmStlH5JdlFSppeTzqMB8GA1UdIwQYMBaAFBqDinaNW/D1TGGqbaK0UDgb3mfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkZBOC85MjU1MzM2MjFE OEIxMUUyOURGRDNERTYwOEIwMkNEMi9Hb09LZG8xYjhQVk1ZYXB0b3JSUU9CdmVa OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dvT0tkbzFiOFBWTVlhcHRvclJRT0J2ZVo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZGQTgvOTI1NTMzNjIxRDhCMTFFMjlERkQzREU2MDhCMDJDRDIvMjAyMUM2RjY3 OTVFMTFGMEIwN0U2RTZCQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAg BAIAATAaAwQHZWQAAwQAygCXMAwDBADKfsEDBATKfsAwDQQCAAIwBwMFACQBLAAw DQYJKoZIhvcNAQELBQADggEBAErMhwr7YyKfNz+1GGJviaR22UCrk3T+3DL7aoDq qkGpqDxaUTTdIPVv1d06qnWO+MxUfMfAyi/6pq5UDEVHIvLvruaPZMcUHgDtHR9X R9ug4PGK9KuKJTXtONMyEMS7r9xfnECyOYlUGpSZKYKCl3yIKSHz1C/y5rnjviz4 QUfagiOYPkJBHso9legf/lQ8l77G4se04R2Ps+payNAfDFkqPkTYHUCheIObxpLx 4DtqZypO3UunVhuTbemUpEhH77ZTs93jlTQBsjq2Tn7hSA0f9UgGDxWeTPLV5OC7 dCSxitOxD5/9e+ZMeESSCawP99dkyAQLEYtbHC3HhMvEGr0= -----END CERTIFICATE-----Generated at Mon Mar 2 05:01:00 2026 by rpki-client