$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/84DBC93004CF11E9BA917C34C4F9AE02.roa File: 84DBC93004CF11E9BA917C34C4F9AE02.roa (raw, json) Hash identifier: IQ+obBn4x3B0NYuMGNxknZ0/taDTCGutqi1GL5HgQRY= Subject key identifier: 21:3A:20:8A:2B:B9:D7:3D:73:01:21:7C:42:74:49:EB:05:0D:35:30 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 2030 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/84DBC93004CF11E9BA917C34C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:12:26 +0000 ROA not before: Sat 30 Aug 2025 16:35:18 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134763 IP address blocks: 121.12.104.0/21 maxlen: 21 121.12.112.0/20 maxlen: 20 121.12.168.0/21 maxlen: 21 121.14.128.0/21 maxlen: 21 121.14.136.0/22 maxlen: 22 121.14.140.0/22 maxlen: 22 121.14.144.0/22 maxlen: 22 121.14.148.0/22 maxlen: 22 121.14.152.0/21 maxlen: 21 218.16.117.0/24 maxlen: 24 218.16.118.0/23 maxlen: 23 218.16.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8240 (0x2030) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Aug 30 16:35:18 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48f9a-d141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:b8:a7:2a:f6:38:1b:85:98:8f:76:c4:55: 66:dc:47:e1:ff:e3:92:ed:57:a0:6e:4b:2d:1d:a6: 39:e2:02:0d:fa:58:c2:b4:ac:5d:6a:ab:84:26:71: 24:02:e9:f5:4e:0b:42:53:82:6d:bb:ef:71:88:23: c6:c3:6d:f8:6e:cb:3b:90:9d:de:bb:30:29:60:0a: 23:81:5c:a5:02:6b:16:15:5f:c7:8d:da:43:6c:a1: cd:27:c9:02:e9:ac:ba:bf:d0:70:06:c9:1d:54:6e: 08:f2:be:67:bc:9c:de:11:5e:92:5c:51:0a:fa:b5: eb:b0:dd:ad:54:54:03:85:f9:f1:0c:f2:25:cf:d0: 1d:ea:2a:fe:86:ec:94:e2:88:1c:78:f8:32:77:83: 74:4f:3c:2d:31:5e:da:a9:bb:b2:12:b3:ae:e5:c3: bb:fa:95:f4:20:98:a8:f2:1b:51:0f:c7:56:e6:31: 03:b1:2e:e5:77:0d:15:02:10:e0:74:76:49:3c:11: 06:62:17:20:28:59:52:45:7f:35:24:19:6d:7d:80: 50:65:d8:eb:07:97:96:58:4c:3a:2b:40:7e:b5:83: 19:72:a6:df:2f:9d:58:21:0f:52:b7:e8:4a:ee:a9: f2:9f:17:73:5b:05:8f:30:37:d8:13:8f:e4:5e:45: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3A:20:8A:2B:B9:D7:3D:73:01:21:7C:42:74:49:EB:05:0D:35:30 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/84DBC93004CF11E9BA917C34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.12.104.0-121.12.127.255 121.12.168.0/21 121.14.128.0/19 218.16.117.0-218.16.127.255 Signature Algorithm: sha256WithRSAEncryption 0f:02:e1:76:b9:14:a6:b1:8c:37:72:05:cb:d1:c0:50:45:7c: 9a:22:7e:01:56:2e:1e:e5:b4:1a:cb:9f:4f:6a:04:89:e2:5a: a2:4d:3a:42:cc:24:83:33:63:ea:a3:bf:6f:44:32:07:e3:5b: e1:30:2d:25:ea:70:c2:df:a3:da:3b:b7:dd:09:37:ba:22:03: 54:f7:e6:f8:2f:bd:82:b5:90:d4:bf:39:72:ea:ba:07:7a:6e: be:d6:f7:6e:1d:20:ea:a4:f6:87:99:47:83:87:67:16:7d:e5: b1:23:fa:98:2f:5e:3e:10:0c:3e:92:dc:75:86:3d:a4:be:cc: 45:4b:0b:fb:9d:bc:12:cd:5c:bf:ec:4b:2f:f6:db:27:8f:4f: 25:24:29:5d:68:7a:6e:f5:27:80:27:e4:7a:51:82:2a:f4:48: fe:14:e0:52:9a:6e:87:cb:94:c6:17:30:b9:a0:70:93:a6:ca: c6:2f:7a:f5:2f:00:26:ac:8e:4b:6f:95:90:68:68:51:e6:60: c3:f2:33:b0:5a:ab:1c:cd:95:79:9a:37:9e:64:1a:98:86:18: 59:3e:f1:43:f0:d9:a7:5e:73:e8:98:08:dd:f1:96:71:c0:4e: 4d:0f:00:5c:eb:45:e7:7b:2f:6c:d3:bf:a7:fc:6d:03:03:b1: 9c:9e:8b:95 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICIDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjUwODMwMTYzNTE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGY5YS1kMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZy4pyr2OBuFmI92xFVm3Efh/+OS7VegbkstHaY54gIN+ljCtKxdaquEJnEk Aun1TgtCU4Jtu+9xiCPGw234bss7kJ3euzApYAojgVylAmsWFV/HjdpDbKHNJ8kC 6ay6v9BwBskdVG4I8r5nvJzeEV6SXFEK+rXrsN2tVFQDhfnxDPIlz9Ad6ir+huyU 4ogcePgyd4N0TzwtMV7aqbuyErOu5cO7+pX0IJio8htRD8dW5jEDsS7ldw0VAhDg dHZJPBEGYhcgKFlSRX81JBltfYBQZdjrB5eWWEw6K0B+tYMZcqbfL51YIQ9St+hK 7qnynxdzWwWPMDfYE4/kXkXyBwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFCE6IIor udc9cwEhfEJ0SesFDTUwMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvODREQkM5MzAw NENGMTFFOUJBOTE3QzM0QzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu BAIAATAoMAwDBAN5DGgDBAd5DAADBAN5DKgDBAV5DoAwDAMEANoQdQMEB9oQADAN BgkqhkiG9w0BAQsFAAOCAQEADwLhdrkUprGMN3IFy9HAUEV8miJ+AVYuHuW0Gsuf T2oEieJaok06QswkgzNj6qO/b0QyB+Nb4TAtJepwwt+j2ju33Qk3uiIDVPfm+C+9 grWQ1L85cuq6B3puvtb3bh0g6qT2h5lHg4dnFn3lsSP6mC9ePhAMPpLcdYY9pL7M RUsL+528Es1cv+xLL/bbJ49PJSQpXWh6bvUngCfkelGCKvRI/hTgUppuh8uUxhcw uaBwk6bKxi969S8AJqyOS2+VkGhoUeZgw/IzsFqrHM2VeZo3nmQamIYYWT7xQ/DZ p15z6JgI3fGWccBOTQ8AXOtF53svbNO/p/xtAwOxnJ6LlQ== -----END CERTIFICATE-----Generated at Thu Mar 12 22:45:19 2026 by rpki-client