$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/21DB5BC4FAAA11F0A3B995435A6F56BC.roa File: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (raw, json) Hash identifier: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk= Subject key identifier: BB:70:59:14:0A:DC:8B:4C:63:AB:6E:73:76:58:A9:80:1B:B1:69:22 Certificate issuer: /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Certificate serial: 22 Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/21DB5BC4FAAA11F0A3B995435A6F56BC.roa Signing time: Sun 01 Mar 2026 05:47:53 +0000 ROA not before: Mon 26 Jan 2026 11:28:27 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 142217 IP address blocks: 151.158.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Validity Not Before: Jan 26 11:28:27 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a3d309-da6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:8b:38:97:6b:34:3b:69:b7:94:80:d9:7f: ce:6f:39:dd:fa:f3:a9:26:aa:f6:4c:0a:32:6c:f5: e9:ec:c0:66:bc:75:c6:16:f9:1f:1f:e6:6c:b2:4d: 1e:b8:a0:24:b0:da:3c:dd:1f:71:ab:e7:b0:7c:c7: 4e:91:27:31:cd:8c:69:bb:eb:b9:52:8f:eb:eb:c0: f1:73:65:f4:6e:a4:13:07:ea:27:b3:79:65:c8:84: 12:2f:18:90:3f:9a:cf:1b:d3:66:cc:9c:73:33:3d: 59:04:bb:ce:06:c3:f6:02:cc:3b:f5:b4:d7:81:6e: 6c:f5:ce:79:1d:5c:89:46:80:45:49:9b:18:d5:7a: d5:a2:7c:61:34:48:a7:16:50:7f:5b:c7:55:0a:ac: 47:d8:33:25:86:fe:0d:0a:fd:bb:47:d5:60:fe:ab: 70:91:19:a1:48:f6:8d:55:7c:ab:ea:11:9b:73:98: 85:9e:db:4a:6f:c3:b9:45:de:22:1f:25:98:54:10: fe:a9:4d:70:95:73:e5:e2:d3:2e:c7:11:f2:e3:3d: 1b:89:36:8e:c1:ed:bc:b5:7f:f0:61:14:d7:2c:65: b3:fa:1f:49:c4:78:11:be:ce:dd:94:6c:77:0f:d6: db:35:4a:94:3c:4c:43:68:9b:3e:74:b4:13:a5:57: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:70:59:14:0A:DC:8B:4C:63:AB:6E:73:76:58:A9:80:1B:B1:69:22 X509v3 Authority Key Identifier: keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/21DB5BC4FAAA11F0A3B995435A6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 151.158.50.0/24 Signature Algorithm: sha256WithRSAEncryption 00:36:31:bd:a6:bc:02:6a:98:4c:56:25:e0:b6:b5:86:ef:6e: a0:cc:3a:30:57:9a:a6:69:b8:e2:18:d5:0d:7b:a2:ef:df:f4: 7f:3f:d6:54:da:65:67:d7:a2:53:5a:a4:84:b7:c7:f1:b6:c3: 10:a3:ca:0f:f9:f4:49:ef:08:68:7c:0f:e1:c3:e8:d0:71:b8: 8c:31:15:84:d9:40:18:88:0b:be:85:72:af:ae:0b:52:8d:79: dd:98:de:45:5c:05:16:8c:68:f4:07:82:31:f4:6b:74:9d:b5: 9e:29:da:c4:91:5e:3f:06:5d:96:a1:ff:42:c5:45:78:c6:61: 59:5a:a2:fa:ea:d7:14:f7:45:2a:35:67:9d:e1:e7:0d:b8:fe: e0:32:c3:a4:26:66:b8:00:21:9c:f3:99:e5:27:36:ea:6f:e0: 2e:ec:c2:50:64:77:82:b7:df:84:64:ba:1c:a9:f6:56:51:4f: 11:b1:38:9e:c6:1b:ae:f4:e1:11:07:82:69:9f:ad:e3:38:84: bb:19:1d:95:e6:3a:e7:34:df:8d:b9:f8:f4:91:c0:33:ed:4c: eb:ea:7f:fa:07:4c:62:51:f6:74:27:62:e1:9d:14:57:9a:ff: 2f:12:91:23:9c:be:4d:cc:f2:3e:a6:37:a7:8e:a9:d2:53:1f: 75:ba:ce:fa -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0E1NTExMC8GA1UEBRMoQzVFQjI1NDZCQjczQUNFNjkzRTE5QUIxMDdEODNGMjY2 NjMyQ0VFODAeFw0yNjAxMjYxMTI4MjdaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMzA5LWRhNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtG4s4l2s0O2m3lIDZf85vOd3686kmqvZMCjJs9enswGa8dcYW+R8f5myyTR64 oCSw2jzdH3Gr57B8x06RJzHNjGm767lSj+vrwPFzZfRupBMH6iezeWXIhBIvGJA/ ms8b02bMnHMzPVkEu84Gw/YCzDv1tNeBbmz1znkdXIlGgEVJmxjVetWifGE0SKcW UH9bx1UKrEfYMyWG/g0K/btH1WD+q3CRGaFI9o1VfKvqEZtzmIWe20pvw7lF3iIf JZhUEP6pTXCVc+Xi0y7HEfLjPRuJNo7B7by1f/BhFNcsZbP6H0nEeBG+zt2UbHcP 1ts1SpQ8TENomz50tBOlV107AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUu3BZFArc i0xjq25zdlipgBuxaSIwHwYDVR0jBBgwFoAUxeslRrtzrOaT4ZqxB9g/JmYyzugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QTU1L0IzMkI1MDI4RjdB NTExRjA4N0U1MUYxNjU1NkY1NkJDL3hlc2xScnR6ck9hVDRacXhCOWdfSm1ZeXp1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIveGVzbFJydHpyT2FUNFpxeEI5Z19KbVl5enVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0E1NS9CMzJCNTAyOEY3QTUxMUYwODdFNTFGMTY1NTZGNTZCQy8yMURCNUJDNEZB QUExMUYwQTNCOTk1NDM1QTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACXnjIwDQYJKoZIhvcNAQELBQADggEBAAA2Mb2mvAJqmExWJeC2tYbv bqDMOjBXmqZpuOIY1Q17ou/f9H8/1lTaZWfXolNapIS3x/G2wxCjyg/59EnvCGh8 D+HD6NBxuIwxFYTZQBiIC76Fcq+uC1KNed2Y3kVcBRaMaPQHgjH0a3SdtZ4p2sSR Xj8GXZah/0LFRXjGYVlaovrq1xT3RSo1Z53h5w24/uAyw6QmZrgAIZzzmeUnNupv 4C7swlBkd4K334Rkuhyp9lZRTxGxOJ7GG6704REHgmmfreM4hLsZHZXmOuc03425 +PSRwDPtTOvqf/oHTGJR9nQnYuGdFFea/y8SkSOcvk3M8j6mN6eOqdJTH3W6zvo= -----END CERTIFICATE-----Generated at Mon Mar 2 15:05:19 2026 by rpki-client