$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E21E1C6CF3EE11ECBAE10054C4F9AE02.roa File: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (raw, json) Hash identifier: EvkQZGsOKLPT6GJTtv/2h1/nVqPHeYBdzQ6KyMthrv0= Subject key identifier: 14:6F:73:A7:FE:F6:ED:7E:DD:BC:22:A2:2E:F2:AB:2A:3C:86:67:CD Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Certificate serial: 266E Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E21E1C6CF3EE11ECBAE10054C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:39:01 +0000 ROA not before: Wed 12 Mar 2025 15:42:53 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 4755 IP address blocks: 123.136.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9838 (0x266e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Validity Not Before: Mar 12 15:42:53 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69a44175-0942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:e9:a5:1d:8f:86:2b:e0:3f:1e:22:28:42: 2e:f5:3e:80:f6:7a:12:bb:f3:a1:ac:b3:6f:ff:9e: 69:78:a2:87:ec:dc:70:d9:49:d9:ed:d7:5d:70:84: a4:15:79:09:f1:1b:ab:66:1c:8d:2e:14:a8:36:56: ad:87:e2:05:52:8a:71:2a:67:42:7e:90:f8:55:02: 50:2e:ee:db:9d:19:53:58:1d:87:b6:65:a1:58:73: ef:30:c8:3f:01:15:82:eb:37:61:39:7e:e4:cf:12: 19:95:42:83:32:ad:81:58:99:61:05:c1:d5:be:41: fe:60:dd:fb:16:23:f6:93:23:26:fa:13:85:92:53: b6:56:31:33:e2:8f:51:5a:49:fa:b2:31:53:f3:15: 87:fd:c3:a4:6b:de:d1:07:55:27:47:26:f7:b7:d4: 99:e3:a7:de:a1:98:7a:43:ea:6c:45:17:69:41:d2: 7f:72:a5:f5:37:05:df:40:85:72:38:f8:46:c9:a8: b9:dc:d1:0c:45:86:91:32:26:fd:7d:b9:e8:9b:17: e3:dd:15:cd:8b:c6:72:bd:cc:78:88:f4:9a:66:22: 46:73:17:26:52:c9:d6:51:d4:8b:ec:74:4e:bc:7f: 3b:30:47:f9:f3:06:99:41:4d:ef:a5:05:70:ad:f2: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6F:73:A7:FE:F6:ED:7E:DD:BC:22:A2:2E:F2:AB:2A:3C:86:67:CD X509v3 Authority Key Identifier: keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E21E1C6CF3EE11ECBAE10054C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.136.16.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:b3:b3:86:94:42:4c:db:f7:b2:22:cb:e9:d3:41:0a:bf:af: 0d:c2:3e:6f:41:ec:f8:a5:d2:a0:7e:47:92:cd:a7:99:fc:9f: d4:a2:30:49:47:c8:1e:fc:2c:e7:62:e9:46:b1:d6:57:27:f6: 6f:82:33:75:d9:c0:e7:ed:09:51:db:61:27:21:a2:00:d2:7b: 7a:2e:e2:8e:9f:f3:c4:64:91:6a:0c:7d:ea:42:5f:4c:0e:01: 73:b0:ae:5f:e8:ee:d5:a3:4c:08:05:da:f0:b7:77:76:a5:74: aa:13:8f:3b:27:76:58:c4:19:38:18:09:33:55:16:b0:5a:e9: bd:fe:22:db:02:92:dd:78:2c:ff:e8:63:e6:5a:4e:64:c5:ce: 23:95:cb:05:14:e9:b1:ce:9f:c9:0e:c6:21:44:a9:8a:28:e8: 77:d9:cd:88:c0:fa:63:57:78:a1:80:c5:e9:df:55:ad:1c:82: 19:f8:58:7b:b8:62:51:bf:84:b0:77:d8:ec:00:ad:91:01:0a: 9a:0d:9f:b1:24:66:fe:b3:27:7e:d4:94:dc:2a:e0:66:f8:50: ec:a5:2f:58:66:5d:2f:17:48:68:c9:df:e2:29:5e:41:3f:7a: c6:42:86:f7:80:79:ea:8f:ab:6b:39:c3:7b:34:33:b1:7c:40: 4b:b3:4c:eb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICJm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz QUJCOUM2RjcwHhcNMjUwMzEyMTU0MjUzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDE3NS0wOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGnppR2PhivgPx4iKEIu9T6A9noSu/OhrLNv/55peKKH7Nxw2UnZ7dddcISk FXkJ8RurZhyNLhSoNlath+IFUopxKmdCfpD4VQJQLu7bnRlTWB2HtmWhWHPvMMg/ ARWC6zdhOX7kzxIZlUKDMq2BWJlhBcHVvkH+YN37FiP2kyMm+hOFklO2VjEz4o9R Wkn6sjFT8xWH/cOka97RB1UnRyb3t9SZ46feoZh6Q+psRRdpQdJ/cqX1NwXfQIVy OPhGyai53NEMRYaRMib9fbnomxfj3RXNi8Zyvcx4iPSaZiJGcxcmUsnWUdSL7HRO vH87MEf58waZQU3vpQVwrfJabQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBRvc6f+ 9u1+3bwioi7yqyo8hmfNMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzVCNDYvQkEwQjg0MzAwMjg4MTFFNUFFMUU0NzYxQzRGOUFFMDIvRTIxRTFDNkNG M0VFMTFFQ0JBRTEwMDU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDe4gQMA0GCSqGSIb3DQEBCwUAA4IBAQBus7OGlEJM2/eyIsvp00EK v68Nwj5vQez4pdKgfkeSzaeZ/J/UojBJR8ge/CznYulGsdZXJ/ZvgjN12cDn7QlR 22EnIaIA0nt6LuKOn/PEZJFqDH3qQl9MDgFzsK5f6O7Vo0wIBdrwt3d2pXSqE487 J3ZYxBk4GAkzVRawWum9/iLbApLdeCz/6GPmWk5kxc4jlcsFFOmxzp/JDsYhRKmK KOh32c2IwPpjV3ihgMXp31WtHIIZ+Fh7uGJRv4Swd9jsAK2RAQqaDZ+xJGb+syd+ 1JTcKuBm+FDspS9YZl0vF0hoyd/iKV5BP3rGQob3gHnqj6trOcN7NDOxfEBLs0zr -----END CERTIFICATE-----Generated at Mon Mar 2 03:50:16 2026 by rpki-client