$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/2921D24E067C11ED882FC127C4F9AE02.roa File: 2921D24E067C11ED882FC127C4F9AE02.roa (raw, json) Hash identifier: fkiwxN+FDUMk1YJfttIFKif5qgzxiSgVetIrMWaLkc8= Subject key identifier: 46:66:7B:93:0C:5D:DB:AD:74:CA:DA:E6:0B:4B:B0:09:F9:16:FA:F6 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 09B9 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/2921D24E067C11ED882FC127C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:06:30 +0000 ROA not before: Fri 30 May 2025 20:57:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134806 IP address blocks: 114.129.12.0/22 maxlen: 22 114.129.12.0/24 maxlen: 24 114.129.13.0/24 maxlen: 24 114.129.14.0/24 maxlen: 24 114.129.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2489 (0x9b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: May 30 20:57:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48e36-97a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:53:72:3c:12:a5:45:f9:6b:d9:21:1f:9f: 31:bc:73:0b:2a:b0:98:8c:4c:c5:70:e1:cb:8c:c4: dd:ff:69:a6:2d:52:0c:58:24:f8:25:3a:6e:ab:e2: 00:ae:15:e8:28:7d:64:ef:7c:8f:58:9e:8a:37:9b: 0e:9b:ac:58:aa:e1:f5:b0:e0:a1:9a:33:00:f2:11: 30:27:05:be:f5:34:da:fb:1a:1b:cf:2f:d4:29:6a: 6d:5b:3b:00:a5:32:12:0f:c0:8f:99:ec:2e:bc:ca: aa:fd:83:5d:b1:32:b5:52:2f:ca:ee:44:e7:08:cb: b5:66:12:a5:5f:66:e6:5f:29:1a:54:44:3f:32:a4: e6:4c:0c:23:80:b1:2b:38:69:a2:8b:db:42:ba:91: 94:c8:ff:7f:c9:4d:a9:74:ba:6c:bb:c7:1d:a8:10: df:83:71:07:f6:bd:59:45:0a:e1:3c:58:72:e0:0a: 48:45:b3:bd:45:41:cc:e9:fc:1f:05:42:4c:f2:ad: 59:c6:b7:f9:6b:fc:27:71:cc:96:2a:7b:7f:3d:1c: 7d:b8:3c:2f:de:19:c1:77:9d:40:67:1f:75:6e:40: 64:cd:2f:19:12:4c:74:f3:f6:09:08:cd:ed:fe:5a: ff:9d:40:3d:8b:f6:ab:8c:e0:d1:87:f4:b1:92:bb: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:66:7B:93:0C:5D:DB:AD:74:CA:DA:E6:0B:4B:B0:09:F9:16:FA:F6 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/2921D24E067C11ED882FC127C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.129.12.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:3a:e6:52:70:47:d5:05:ab:7d:97:e5:b5:f4:fb:ea:69:8c: df:08:4e:4c:39:24:d4:7f:5a:ac:c1:cb:88:4a:49:a0:c9:61: 6c:97:53:79:d4:0d:c6:f5:85:11:1d:c6:5e:43:83:e8:f1:a2: 45:5c:fc:3e:b3:51:73:a8:2c:d0:95:df:5f:40:7c:06:ba:5e: 30:38:07:aa:75:41:1b:9b:94:ee:d0:7c:11:1d:ef:5e:ce:41: c4:88:9f:40:c7:fc:0a:b5:c9:22:6d:de:24:71:74:e1:97:37: 89:cc:98:43:dc:17:9e:6d:2b:84:72:77:32:ac:62:6d:9b:bf: d7:b0:e7:fc:40:11:12:16:d3:1d:6e:99:c2:42:09:5e:87:22: 86:53:96:1f:6b:14:38:84:fc:1f:1d:89:89:f4:b0:74:c4:05: e0:25:93:5d:3c:66:16:8c:44:cd:1e:d6:44:4b:6c:05:b8:4d: ca:c4:8d:02:4b:61:c6:24:50:f4:ff:1f:93:99:76:55:68:28: 40:56:ff:2d:e8:0e:1c:08:4a:8f:65:05:2a:b7:d9:62:27:7c: b2:4c:cc:d8:48:df:bf:f4:36:49:68:42:f6:23:e3:b4:48:ce: 27:f4:61:32:a5:58:3d:75:bf:f1:15:e9:67:da:cf:db:3a:46: b7:09:96:04 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNTMwMjA1NzA5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGUzNi05N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk1TcjwSpUX5a9khH58xvHMLKrCYjEzFcOHLjMTd/2mmLVIMWCT4JTpuq+IA rhXoKH1k73yPWJ6KN5sOm6xYquH1sOChmjMA8hEwJwW+9TTa+xobzy/UKWptWzsA pTISD8CPmewuvMqq/YNdsTK1Ui/K7kTnCMu1ZhKlX2bmXykaVEQ/MqTmTAwjgLEr OGmii9tCupGUyP9/yU2pdLpsu8cdqBDfg3EH9r1ZRQrhPFhy4ApIRbO9RUHM6fwf BUJM8q1Zxrf5a/wnccyWKnt/PRx9uDwv3hnBd51AZx91bkBkzS8ZEkx08/YJCM3t /lr/nUA9i/arjODRh/SxkrtcFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEZme5MM XdutdMra5gtLsAn5Fvr2MB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBCREUvN0U1QUMzRTA4OTcxMTFFQTkyNDAyQTBBQzRGOUFFMDIvMjkyMUQyNEUw NjdDMTFFRDg4MkZDMTI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCcoEMMA0GCSqGSIb3DQEBCwUAA4IBAQALOuZScEfVBat9l+W19Pvq aYzfCE5MOSTUf1qswcuISkmgyWFsl1N51A3G9YURHcZeQ4Po8aJFXPw+s1FzqCzQ ld9fQHwGul4wOAeqdUEbm5Tu0HwRHe9ezkHEiJ9Ax/wKtckibd4kcXThlzeJzJhD 3BeebSuEcncyrGJtm7/XsOf8QBESFtMdbpnCQglehyKGU5YfaxQ4hPwfHYmJ9LB0 xAXgJZNdPGYWjETNHtZES2wFuE3KxI0CS2HGJFD0/x+TmXZVaChAVv8t6A4cCEqP ZQUqt9liJ3yyTMzYSN+/9DZJaEL2I+O0SM4n9GEypVg9db/xFeln2s/bOka3CZYE -----END CERTIFICATE-----Generated at Mon Mar 2 09:10:17 2026 by rpki-client