$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F5F86ADA8C5611E792848B4AC4F9AE02.roa File: F5F86ADA8C5611E792848B4AC4F9AE02.roa (raw, json) Hash identifier: wnYTp3fsOW2HQITJ5FlOwfrkiKlWT5LLwinFPfnjQu0= Subject key identifier: B5:5C:AC:DA:01:CC:7C:8E:62:54:B9:0B:DB:E6:7C:28:28:0E:1C:66 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 28AA Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F5F86ADA8C5611E792848B4AC4F9AE02.roa Signing time: Tue 31 Mar 2026 16:20:16 +0000 ROA not before: Tue 31 Mar 2026 16:20:16 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 38483 IP address blocks: 210.14.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10410 (0x28aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Mar 31 16:20:16 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cbf440-580a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:cd:33:80:55:9a:7d:96:0f:e0:88:29:8b: 0f:a6:67:bc:61:0a:d9:e4:b2:ea:e9:9d:02:47:68: c7:8b:eb:85:d4:a2:b4:e3:75:d5:e2:58:53:67:a8: 17:8e:61:c8:61:da:a2:18:cc:ea:cc:c0:c9:bd:26: 7b:7b:b5:80:a1:8f:df:b4:5f:4a:76:3a:f9:b2:54: d4:56:71:b2:aa:fb:8a:f6:89:27:e4:86:b2:9c:42: cf:0b:96:69:bb:b6:24:4c:20:a2:9c:81:95:b2:8c: 2d:22:de:df:1e:b2:ea:ce:75:e7:ce:13:bc:a7:4a: 84:74:aa:fe:4e:c9:94:d7:f4:57:c0:2a:c3:0e:4c: 64:ee:a1:c2:f8:e7:fa:2e:5a:28:46:d3:2b:3d:15: 9e:ce:fe:3c:87:a1:91:ce:45:d2:0c:20:51:a8:ef: 74:6f:c7:09:98:ae:e5:e8:94:34:72:8a:47:d7:83: 72:58:13:1d:75:36:e9:3b:cd:9f:8b:26:19:05:b9: 56:07:30:3d:08:2d:9f:43:02:91:3d:f0:1a:7d:8b: 90:ac:70:a4:81:e6:10:d8:8e:77:a1:0d:da:f6:4a: e7:cb:3f:9e:0d:ac:7e:e2:7d:0b:96:c9:3a:69:51: 47:5d:38:87:93:07:a3:d9:2d:d7:cb:db:41:09:11: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5C:AC:DA:01:CC:7C:8E:62:54:B9:0B:DB:E6:7C:28:28:0E:1C:66 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F5F86ADA8C5611E792848B4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.14.21.0/24 Signature Algorithm: sha256WithRSAEncryption 68:a3:27:bd:60:bb:e6:72:ec:fb:97:1c:e6:d5:af:34:9c:dc: 2b:3c:6a:0e:f5:91:59:9e:65:f0:19:0e:e0:ec:3f:49:7f:ee: e9:ba:ec:23:60:d3:10:8f:7f:13:05:9d:3e:1c:d8:75:b6:8f: 74:fb:9a:92:88:61:9f:5f:b7:6c:ad:ac:af:ce:6f:8f:c3:33: 4c:4c:e6:37:8d:da:8b:d6:e5:3e:71:7a:a6:c2:74:a8:3a:a1: b5:02:03:34:be:0b:b7:f1:3c:aa:a4:c0:21:a1:54:11:54:40: 40:92:3f:40:3f:30:91:fd:1b:7c:a5:c7:20:52:a7:c0:59:61: 11:2d:20:d7:39:37:26:44:ba:8c:0d:f8:68:01:71:cb:44:9f: 18:d0:3b:3f:8a:9a:12:16:cd:e3:f9:b5:c3:c3:b8:99:f4:bf: 42:1e:15:7f:70:d8:e0:67:75:91:0e:7a:64:8f:92:af:dc:d9: 4d:10:6e:fd:fa:f2:60:a6:a6:ff:41:f2:4b:ba:3c:60:ea:a6: 0e:98:d1:a6:2a:41:e6:f6:4a:79:90:24:5d:86:1b:05:c4:83: f4:c7:db:1e:8d:9f:00:1f:87:88:6c:15:65:6a:f6:a2:e9:d0: a0:53:78:f7:f1:83:0c:8d:74:cb:9e:32:29:ad:3e:4d:a1:88: 3c:a9:63:df -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjYwMzMxMTYyMDE2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiZjQ0MC01ODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusDNM4BVmn2WD+CIKYsPpme8YQrZ5LLq6Z0CR2jHi+uF1KK043XV4lhTZ6gX jmHIYdqiGMzqzMDJvSZ7e7WAoY/ftF9Kdjr5slTUVnGyqvuK9okn5IaynELPC5Zp u7YkTCCinIGVsowtIt7fHrLqznXnzhO8p0qEdKr+TsmU1/RXwCrDDkxk7qHC+Of6 LlooRtMrPRWezv48h6GRzkXSDCBRqO90b8cJmK7l6JQ0copH14NyWBMddTbpO82f iyYZBblWBzA9CC2fQwKRPfAafYuQrHCkgeYQ2I53oQ3a9krnyz+eDax+4n0Llsk6 aVFHXTiHkwej2S3Xy9tBCREdywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLVcrNoB zHyOYlS5C9vmfCgoDhxmMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRjVGODZBREE4 QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA0g4VMA0GCSqGSIb3DQEBCwUAA4IBAQBooye9YLvmcuz7lxzm1a80 nNwrPGoO9ZFZnmXwGQ7g7D9Jf+7puuwjYNMQj38TBZ0+HNh1to90+5qSiGGfX7ds rayvzm+PwzNMTOY3jdqL1uU+cXqmwnSoOqG1AgM0vgu38TyqpMAhoVQRVEBAkj9A PzCR/Rt8pccgUqfAWWERLSDXOTcmRLqMDfhoAXHLRJ8Y0Ds/ipoSFs3j+bXDw7iZ 9L9CHhV/cNjgZ3WRDnpkj5Kv3NlNEG79+vJgpqb/QfJLujxg6qYOmNGmKkHm9kp5 kCRdhhsFxIP0x9sejZ8AH4eIbBVlavai6dCgU3j38YMMjXTLnjIprT5NoYg8qWPf -----END CERTIFICATE-----Generated at Fri Apr 17 16:38:53 2026 by rpki-client