$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa File: 21A970BC737211EEB3112437C4F9AE02.roa (raw, json) Hash identifier: XJ/1YrCaSDNyCh/d53BiCDPgdkZZW4dlXKK+XbVzcl4= Subject key identifier: 38:75:DD:9D:B5:49:A7:FF:B7:9F:87:05:98:94:EE:28:FC:FB:17:2A Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 015E Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa Signing time: Tue 26 Aug 2025 16:55:08 +0000 ROA not before: Tue 26 Aug 2025 16:55:08 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38910 IP address blocks: 161.121.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Aug 26 16:55:08 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ade6eb-241e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:4d:94:7e:be:31:bc:93:54:cd:57:05:9d: 56:ba:6e:7f:19:37:11:ef:80:b9:c7:1f:01:fd:6f: 41:da:db:5a:22:b8:fb:e5:16:43:25:31:65:68:7b: b3:c8:f2:9b:e5:73:91:56:41:bc:bd:70:04:98:ba: f3:55:42:d1:ff:6d:2e:58:c1:53:f0:ae:74:c6:2f: ab:99:68:b0:3e:f4:c6:35:a0:a0:13:42:09:06:44: 8d:fb:65:ae:00:1a:5a:44:fb:56:e4:79:44:78:17: 36:84:86:d3:a1:6c:07:67:89:86:75:44:77:37:a9: f7:df:78:8f:ec:7d:46:28:50:f8:c5:60:1d:c1:46: d0:6e:1c:08:6a:8a:de:d2:d1:e7:6c:29:99:1e:8b: 41:c1:41:ef:48:fb:69:54:84:77:69:9f:c2:9f:b0: 4c:38:61:24:fb:ad:32:b8:78:f6:d0:92:58:9e:a8: f1:0d:76:ff:7d:8c:1c:d8:ce:f3:fa:be:00:2b:74: 3c:a1:b8:e5:eb:6b:9c:31:55:82:8a:03:38:c0:0b: 7e:ee:a4:e0:d1:ec:dd:c9:e6:83:ad:be:7a:2a:1d: e5:4b:19:e5:7a:14:bf:66:e0:1a:5f:8d:b5:43:24: 5d:e4:13:a2:c4:01:13:74:60:b0:9b:d5:f6:24:f3: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:75:DD:9D:B5:49:A7:FF:B7:9F:87:05:98:94:EE:28:FC:FB:17:2A X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.121.128.0/19 Signature Algorithm: sha256WithRSAEncryption 53:62:cd:2c:a7:6b:fb:81:65:f1:61:48:4d:df:3a:6f:a0:81: ab:1c:5e:cf:5e:6e:ae:2b:26:24:dc:4d:4a:0f:6c:bf:a2:c6: e7:e1:f1:47:26:0b:e7:0a:6c:eb:a3:1d:21:3a:2e:3f:87:c9: 39:44:ed:65:9a:16:d7:f6:20:f3:6d:0e:5f:6a:dc:1d:d4:6c: 04:27:c7:0d:c8:b2:99:5d:11:82:ac:29:0f:ef:56:9f:f0:a9: dd:01:15:e8:99:22:4c:31:bc:12:eb:88:d9:66:f0:81:b7:fc: 00:ca:a1:78:3e:64:6c:4e:71:02:5a:5b:5e:61:c9:fe:b8:9a: 8d:1b:ae:55:2b:e7:d7:d1:56:1f:59:b4:ce:d2:e3:5b:6c:91: db:b7:46:d3:3b:91:e0:e5:05:bc:96:81:ec:ed:e8:c7:67:a5: ca:49:76:92:8e:88:db:6d:8e:ef:52:0e:84:c8:03:89:7a:fc: 75:22:d1:04:8b:64:fd:cc:2f:20:21:f8:2c:7d:f4:48:26:e4: 03:ce:44:0c:a3:59:97:31:ab:88:98:c5:ea:40:0a:ae:27:b2: e3:a5:56:cf:ba:06:bb:17:5b:c9:74:ba:17:f1:24:6b:58:e7: e8:48:e3:c0:e8:5d:6a:5c:21:ff:f4:5e:2f:46:42:32:ed:2f: 9c:de:3e:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUwODI2MTY1NTA4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFkZTZlYi0yNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pNNlH6+MbyTVM1XBZ1Wum5/GTcR74C5xx8B/W9B2ttaIrj75RZDJTFlaHuz yPKb5XORVkG8vXAEmLrzVULR/20uWMFT8K50xi+rmWiwPvTGNaCgE0IJBkSN+2Wu ABpaRPtW5HlEeBc2hIbToWwHZ4mGdUR3N6n333iP7H1GKFD4xWAdwUbQbhwIaore 0tHnbCmZHotBwUHvSPtpVIR3aZ/Cn7BMOGEk+60yuHj20JJYnqjxDXb/fYwc2M7z +r4AK3Q8objl62ucMVWCigM4wAt+7qTg0ezdyeaDrb56Kh3lSxnlehS/ZuAaX421 QyRd5BOixAETdGCwm9X2JPM+BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDh13Z21 Saf/t5+HBZiU7ij8+xcqMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQzNkEvQzZERDUxQjQ3MzZGMTFFRTkxN0QwMzM0QzRGOUFFMDIvMjFBOTcwQkM3 MzcyMTFFRUIzMTEyNDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAWheYAwDQYJKoZIhvcNAQELBQADggEBAFNizSyna/uBZfFh SE3fOm+ggascXs9ebq4rJiTcTUoPbL+ixufh8UcmC+cKbOujHSE6Lj+HyTlE7WWa Ftf2IPNtDl9q3B3UbAQnxw3IspldEYKsKQ/vVp/wqd0BFeiZIkwxvBLriNlm8IG3 /ADKoXg+ZGxOcQJaW15hyf64mo0brlUr59fRVh9ZtM7S41tskdu3RtM7keDlBbyW gezt6MdnpcpJdpKOiNttju9SDoTIA4l6/HUi0QSLZP3MLyAh+Cx99Egm5APORAyj WZcxq4iYxepACq4nsuOlVs+6BrsXW8l0uhfxJGtY5+hI48DoXWpcIf/0Xi9GQjLt L5zePgw= -----END CERTIFICATE-----Generated at Sun Sep 7 19:19:06 2025 by rpki-client