$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F5F86ADA8C5611E792848B4AC4F9AE02.roa File: F5F86ADA8C5611E792848B4AC4F9AE02.roa (raw, json) Hash identifier: Q+2z8wZLFlDkKJOMBjZqn7jgkCCpibh/fHlvEkrBWSk= Subject key identifier: 34:CE:1F:9A:30:93:3B:C1:13:E9:D1:0A:F6:AC:58:39:22:CA:02:BF Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 286F Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F5F86ADA8C5611E792848B4AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:39:08 +0000 ROA not before: Tue 08 Apr 2025 15:53:49 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 38483 IP address blocks: 210.14.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 15:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10351 (0x286f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 8 15:53:49 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a487cc-92b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:3b:a7:ec:2a:09:14:33:bc:43:c9:20:14: 89:bc:87:96:b4:ee:43:6b:fe:e1:2f:20:6a:d3:62: ed:1e:62:1d:fb:cd:50:20:0e:5c:d4:90:9f:a7:ca: 6a:eb:20:1e:bf:9a:1b:39:b7:ee:dd:29:d6:b4:ba: 8a:4a:51:df:63:63:27:a5:0e:73:80:ef:dd:0c:a7: 4f:1a:d9:ef:66:68:83:76:56:da:7a:22:92:e3:ef: ec:e4:9a:6f:fa:5e:a1:82:35:89:e5:ec:61:7c:8b: a7:c5:d7:ef:70:21:6e:ca:4c:74:8a:f3:09:8d:10: 24:77:4a:57:df:1f:93:c8:45:11:e9:0c:26:ff:40: 29:ed:73:41:7e:82:f9:b7:bb:39:69:8d:f2:17:08: 88:a4:b8:6c:f1:f4:36:fb:fa:29:6d:37:9a:81:db: 3c:f7:67:7a:8b:87:21:d6:08:44:ee:fc:0a:ec:a6: c6:e1:7a:b2:a0:c9:4f:3d:b7:9f:41:47:ef:c9:6c: b2:46:7f:09:cf:f0:e1:52:69:d5:44:e1:bd:3f:92: 2c:bb:52:fd:53:0c:bc:f1:71:6c:bc:ca:0f:91:3c: 94:31:8d:66:4b:50:3f:8f:b9:81:07:2b:0a:ed:a2: 64:91:04:7f:0e:35:bd:6a:16:5f:87:56:49:75:0b: c5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CE:1F:9A:30:93:3B:C1:13:E9:D1:0A:F6:AC:58:39:22:CA:02:BF X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F5F86ADA8C5611E792848B4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.14.21.0/24 Signature Algorithm: sha256WithRSAEncryption a2:3b:a3:6e:3e:aa:55:a0:da:40:37:13:69:4f:09:c1:8e:67: 5f:53:68:57:e2:b3:dd:54:1f:31:ae:77:e0:f3:a4:b6:76:18: 03:28:10:27:bb:4f:6a:a5:f5:23:63:19:a9:a6:83:e6:b9:f5: b2:ee:59:ec:c5:7b:63:fc:c4:3b:bb:be:03:90:33:fd:0e:e4: 3a:3f:78:e1:8d:1f:92:71:a6:81:1d:92:8a:c1:ea:c0:e3:58: 76:5b:0a:f5:12:ca:87:24:3b:0d:ba:11:c0:5f:fd:fc:02:c3: ab:47:d5:45:50:34:15:39:f9:c3:29:9a:fb:6d:53:2b:b0:79: a5:54:16:5c:d1:ee:bc:e4:61:a7:ba:50:12:70:07:a5:cc:8c: 9e:5d:de:be:a6:e0:84:d8:d9:96:e9:d8:be:9c:66:74:1d:f0: 17:29:25:4e:43:44:6a:ed:cd:72:5e:0a:61:fe:02:93:4a:e2: 02:49:7f:d9:a7:74:93:a6:54:5d:ab:3a:50:7e:07:eb:65:b5: a3:24:0a:c1:03:32:69:9e:48:66:47:9e:f0:d5:ee:0b:0c:26: b3:b3:9c:43:f8:d6:52:b0:9e:c6:da:64:b3:6c:96:d4:41:aa: df:88:78:29:90:10:f4:50:79:29:5d:21:89:37:a9:14:5b:4e: 45:5a:94:81 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODdjYy05MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs207p+wqCRQzvEPJIBSJvIeWtO5Da/7hLyBq02LtHmId+81QIA5c1JCfp8pq 6yAev5obObfu3SnWtLqKSlHfY2MnpQ5zgO/dDKdPGtnvZmiDdlbaeiKS4+/s5Jpv +l6hgjWJ5exhfIunxdfvcCFuykx0ivMJjRAkd0pX3x+TyEUR6Qwm/0Ap7XNBfoL5 t7s5aY3yFwiIpLhs8fQ2+/opbTeagds892d6i4ch1ghE7vwK7KbG4XqyoMlPPbef QUfvyWyyRn8Jz/DhUmnVROG9P5Isu1L9Uwy88XFsvMoPkTyUMY1mS1A/j7mBBysK 7aJkkQR/DjW9ahZfh1ZJdQvFIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDTOH5ow kzvBE+nRCvasWDkiygK/MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRjVGODZBREE4 QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA0g4VMA0GCSqGSIb3DQEBCwUAA4IBAQCiO6NuPqpVoNpANxNpTwnB jmdfU2hX4rPdVB8xrnfg86S2dhgDKBAnu09qpfUjYxmppoPmufWy7lnsxXtj/MQ7 u74DkDP9DuQ6P3jhjR+ScaaBHZKKwerA41h2Wwr1EsqHJDsNuhHAX/38AsOrR9VF UDQVOfnDKZr7bVMrsHmlVBZc0e685GGnulAScAelzIyeXd6+puCE2NmW6di+nGZ0 HfAXKSVOQ0Rq7c1yXgph/gKTSuICSX/Zp3STplRdqzpQfgfrZbWjJArBAzJpnkhm R57w1e4LDCazs5xD+NZSsJ7G2mSzbJbUQarfiHgpkBD0UHkpXSGJN6kUW05FWpSB -----END CERTIFICATE-----Generated at Sun Mar 8 03:21:36 2026 by rpki-client