$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa File: 21A970BC737211EEB3112437C4F9AE02.roa (raw, json) Hash identifier: BXpSSI8KpMJOkiZJh2DyIGA+D+UNVbBkKMgidE7nKr4= Subject key identifier: EC:0E:54:60:B1:E8:42:10:5B:68:34:21:39:F0:B3:BA:26:B7:B3:5D Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 0225 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa Signing time: Sun 30 Aug 2026 16:32:38 +0000 ROA not before: Sun 30 Aug 2026 16:32:38 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 38910 IP address blocks: 161.121.128.0/19 maxlen: 19 161.121.128.0/20 maxlen: 20 161.121.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 16:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Aug 30 16:32:38 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a945b25-2f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:3c:f7:6a:21:ca:49:27:cb:d7:dc:6e:54: 7c:94:e0:f5:05:81:91:b7:1c:07:13:f4:aa:7e:3f: 5f:c8:ee:c2:ff:f7:e4:77:a9:80:83:50:65:52:1b: e0:22:10:71:e2:23:0f:e1:87:c1:c2:f6:61:5c:c4: 82:54:8d:ee:7e:6f:3c:b0:c6:a1:f0:9d:0f:e8:7d: 22:44:cc:f1:ed:f3:c6:33:a4:79:13:04:dd:5e:25: ec:ac:49:87:93:cb:d0:ef:e4:40:f2:61:f7:19:9c: 95:02:a0:b0:50:40:aa:64:73:5e:dc:0a:c0:1c:82: a3:a8:98:4c:49:7c:70:a1:fe:c7:c9:78:24:c2:aa: c7:2c:af:bd:37:25:2a:fc:c1:86:ca:c2:b5:a1:3c: 59:44:cc:70:f4:2d:a4:2f:51:2d:f6:98:9f:ab:11: 5d:83:27:7f:21:03:8c:ef:0e:84:ea:ee:34:f3:b7: ed:29:f0:72:05:3a:dd:5c:0d:e3:a4:16:a8:b2:19: f6:f4:09:d5:ea:35:78:83:c9:77:41:6a:6c:f2:8c: 62:bb:0a:87:51:4c:98:40:d5:fb:9c:e9:cb:80:de: 41:ea:38:5b:f1:30:b5:c3:ba:86:42:4d:22:74:83: b1:00:62:c0:f2:66:81:b8:c1:5e:b8:03:95:e7:ef: 69:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0E:54:60:B1:E8:42:10:5B:68:34:21:39:F0:B3:BA:26:B7:B3:5D X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.121.128.0/19 Signature Algorithm: sha256WithRSAEncryption 14:71:9b:33:62:90:09:93:fd:72:bd:9e:de:76:86:a7:05:87: 8a:78:8c:00:52:8b:29:d0:b0:a2:2d:e6:ff:de:ac:ab:e5:3f: 89:5a:8a:ff:b5:ab:38:0e:a5:81:e1:bd:b9:e5:40:67:3a:91: 94:c9:74:43:53:2c:a3:ca:b5:f5:f9:b9:d8:70:85:25:bf:93: ea:a0:9a:8c:70:34:b6:0b:86:3f:2c:65:9d:1d:ed:f4:b9:44: 6c:65:c5:d6:c7:ed:d9:5a:7e:08:1a:1a:e7:71:dd:84:06:dc: 53:b5:e6:3e:df:2f:2b:bc:bb:0b:fa:fb:ac:dc:46:ec:5d:14: e5:29:50:d3:18:89:e3:66:24:4b:fb:0a:69:e0:4e:60:fc:ff: f5:08:bf:e1:ee:73:5c:be:a5:20:ff:e4:9d:e2:09:6a:a9:77: 36:29:47:ac:3b:8f:af:5a:fe:41:57:94:27:45:3e:d6:74:56: 4f:16:70:23:ce:24:3a:0d:dc:1e:31:03:7c:ec:59:52:cd:3e: c4:03:f7:86:2e:db:f3:6f:5d:44:88:be:d5:2f:47:f9:3a:a2: ce:9e:b1:3d:6c:d2:4b:0d:10:98:04:b3:23:9a:28:5f:ca:f5: d7:13:73:ae:dd:87:46:a6:e5:02:80:50:8c:18:f7:2b:d9:b0: 28:62:d2:89 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjYwODMwMTYzMjM4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0NWIyNS0yZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+M892ohykkny9fcblR8lOD1BYGRtxwHE/Sqfj9fyO7C//fkd6mAg1BlUhvg IhBx4iMP4YfBwvZhXMSCVI3ufm88sMah8J0P6H0iRMzx7fPGM6R5EwTdXiXsrEmH k8vQ7+RA8mH3GZyVAqCwUECqZHNe3ArAHIKjqJhMSXxwof7HyXgkwqrHLK+9NyUq /MGGysK1oTxZRMxw9C2kL1Et9pifqxFdgyd/IQOM7w6E6u4087ftKfByBTrdXA3j pBaoshn29AnV6jV4g8l3QWps8oxiuwqHUUyYQNX7nOnLgN5B6jhb8TC1w7qGQk0i dIOxAGLA8maBuMFeuAOV5+9puwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOwOVGCx 6EIQW2g0ITnws7omt7NdMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQzNkEvQzZERDUxQjQ3MzZGMTFFRTkxN0QwMzM0QzRGOUFFMDIvMjFBOTcwQkM3 MzcyMTFFRUIzMTEyNDM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFoXmAMA0GCSqGSIb3DQEBCwUAA4IBAQAUcZszYpAJk/1yvZ7edoan BYeKeIwAUosp0LCiLeb/3qyr5T+JWor/tas4DqWB4b255UBnOpGUyXRDUyyjyrX1 +bnYcIUlv5PqoJqMcDS2C4Y/LGWdHe30uURsZcXWx+3ZWn4IGhrncd2EBtxTteY+ 3y8rvLsL+vus3EbsXRTlKVDTGInjZiRL+wpp4E5g/P/1CL/h7nNcvqUg/+Sd4glq qXc2KUesO4+vWv5BV5QnRT7WdFZPFnAjziQ6DdweMQN87FlSzT7EA/eGLtvzb11E iL7VL0f5OqLOnrE9bNJLDRCYBLMjmihfyvXXE3Ou3YdGpuUCgFCMGPcr2bAoYtKJ -----END CERTIFICATE-----Generated at Mon Aug 31 12:42:27 2026 by rpki-client