$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/AE21A9C6818911EA81577016C4F9AE02.roa File: AE21A9C6818911EA81577016C4F9AE02.roa (raw, json) Hash identifier: /WXgSdIhpBtfBEEOEgt0Tnq7bnUCbAtf1R0CAhaphCY= Subject key identifier: 88:A9:79:3C:C2:59:33:DD:52:6D:13:40:7C:ED:5C:28:06:63:89:5F Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Certificate serial: 1923 Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/AE21A9C6818911EA81577016C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:27:45 +0000 ROA not before: Tue 26 Aug 2025 16:23:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45352 IP address blocks: 162.253.16.0/22 maxlen: 22 162.253.16.0/24 maxlen: 24 162.253.17.0/24 maxlen: 24 162.253.18.0/24 maxlen: 24 162.253.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6435 (0x1923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF Validity Not Before: Aug 26 16:23:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a422b1-98ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:05:14:21:1f:89:af:8a:75:4b:06:a7:bd: 1d:b7:75:8d:c8:e6:19:62:97:93:8f:e9:67:3f:e2: c4:8a:2b:60:57:b2:c1:48:ab:80:32:5b:51:5a:3e: 74:37:46:50:b5:32:fe:dd:28:fa:83:78:59:aa:8a: 39:f6:b1:74:f2:1b:b5:1c:f0:c8:51:35:f0:d1:30: bb:90:79:d9:e1:06:01:01:e6:9b:02:3e:a2:3c:ca: d8:30:b1:78:70:05:3a:97:ca:d1:83:20:09:c4:9a: 17:6f:76:62:bc:bf:e2:c2:9e:3c:16:cb:57:58:4a: 4f:4d:16:c8:f4:5d:12:af:2e:95:2c:91:c0:43:2e: d2:24:8d:42:bc:13:b3:af:5b:b3:be:04:70:8e:03: e5:86:d1:32:c0:49:51:1f:10:61:e7:5b:5d:89:2c: af:14:ca:16:86:16:c8:90:a4:7d:59:73:41:91:77: 84:dc:d7:1f:46:1d:61:5c:ee:f4:b6:11:a2:88:50: 01:fb:aa:01:d5:95:2c:23:24:70:82:84:b0:6d:59: 2a:6a:95:c1:a8:54:dd:cb:35:93:e2:fd:de:1e:f5: 7b:b8:ec:03:e8:f6:b9:47:dc:25:b0:3a:a3:34:d0: 2c:db:78:74:73:72:08:3d:9b:be:10:de:14:aa:aa: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A9:79:3C:C2:59:33:DD:52:6D:13:40:7C:ED:5C:28:06:63:89:5F X509v3 Authority Key Identifier: keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/AE21A9C6818911EA81577016C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 162.253.16.0/22 Signature Algorithm: sha256WithRSAEncryption 35:6e:10:7a:90:55:50:0f:72:d7:83:a9:3f:d2:02:1c:04:11: d9:da:f5:fd:e0:0d:f1:8e:ba:ed:16:89:f0:97:14:30:39:f8: 3a:5d:f0:01:00:06:a8:c0:35:6f:c2:9b:29:22:29:0e:15:a6: 27:dd:dc:83:ff:0e:e0:48:13:a0:0a:de:8d:00:ac:d1:c9:47: 2d:8a:da:0f:d9:93:73:c1:64:14:f4:7f:6c:54:93:51:be:bd: 66:42:32:cb:00:3f:ff:3f:3f:0d:11:90:f6:eb:1b:f2:06:77: ca:ef:09:6c:03:4a:23:98:55:3c:03:cf:24:1f:63:28:e7:6a: 75:2f:5c:87:27:ef:a3:5b:9a:db:b2:7a:39:3f:49:18:00:f2: bd:39:69:01:cb:a4:36:35:c0:31:0a:9b:ad:ac:f3:e0:c6:45: b2:d6:15:86:de:97:90:1d:76:f8:fc:ca:09:9c:4a:8d:bc:69: 4d:ef:de:01:12:6c:c7:3f:e8:ca:64:17:de:b0:90:5a:c1:78: 6d:81:46:0e:e9:2e:3a:fc:9d:03:e9:da:e0:83:a5:18:88:76: cb:08:8f:e8:06:17:01:7b:45:72:0d:2e:00:31:58:23:a4:64: 5d:48:22:26:88:73:93:35:75:78:da:c6:53:f0:2d:81:ce:03: 60:e7:fb:7c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3 MTk3NUNCRUYwHhcNMjUwODI2MTYyMzE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjJiMS05OGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzosFFCEfia+KdUsGp70dt3WNyOYZYpeTj+lnP+LEiitgV7LBSKuAMltRWj50 N0ZQtTL+3Sj6g3hZqoo59rF08hu1HPDIUTXw0TC7kHnZ4QYBAeabAj6iPMrYMLF4 cAU6l8rRgyAJxJoXb3ZivL/iwp48FstXWEpPTRbI9F0Sry6VLJHAQy7SJI1CvBOz r1uzvgRwjgPlhtEywElRHxBh51tdiSyvFMoWhhbIkKR9WXNBkXeE3NcfRh1hXO70 thGiiFAB+6oB1ZUsIyRwgoSwbVkqapXBqFTdyzWT4v3eHvV7uOwD6Pa5R9wlsDqj NNAs23h0c3IIPZu+EN4UqqoHTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIipeTzC WTPdUm0TQHztXCgGY4lfMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2OTEvNDgyQkExNzI5RDI0MTFFNzg2MUEyMjZCQzRGOUFFMDIvQUUyMUE5QzY4 MTg5MTFFQTgxNTc3MDE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCov0QMA0GCSqGSIb3DQEBCwUAA4IBAQA1bhB6kFVQD3LXg6k/0gIc BBHZ2vX94A3xjrrtFonwlxQwOfg6XfABAAaowDVvwpspIikOFaYn3dyD/w7gSBOg Ct6NAKzRyUctitoP2ZNzwWQU9H9sVJNRvr1mQjLLAD//Pz8NEZD26xvyBnfK7wls A0ojmFU8A88kH2Mo52p1L1yHJ++jW5rbsno5P0kYAPK9OWkBy6Q2NcAxCputrPPg xkWy1hWG3peQHXb4/MoJnEqNvGlN794BEmzHP+jKZBfesJBawXhtgUYO6S46/J0D 6drgg6UYiHbLCI/oBhcBe0VyDS4AMVgjpGRdSCImiHOTNXV42sZT8C2BzgNg5/t8 -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:10 2026 by rpki-client