$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa File: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (raw, json) Hash identifier: Vg+3UEU28kUVBfAjWiElgD4QvPYtjgOIKdHI6i8KBtw= Subject key identifier: 67:E0:49:1A:21:C4:6A:00:70:81:D4:CC:43:5C:80:3E:38:11:BA:5E Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Certificate serial: 0527 Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:47:04 +0000 ROA not before: Fri 06 Feb 2026 09:03:01 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9891 IP address blocks: 147.50.224.0/19 maxlen: 19 147.50.224.0/22 maxlen: 22 147.50.226.0/23 maxlen: 23 147.50.228.0/24 maxlen: 24 147.50.230.0/24 maxlen: 24 147.50.231.0/24 maxlen: 24 147.50.232.0/22 maxlen: 22 147.50.232.0/24 maxlen: 24 147.50.236.0/23 maxlen: 23 147.50.239.0/24 maxlen: 24 147.50.240.0/22 maxlen: 22 147.50.246.0/24 maxlen: 24 147.50.247.0/24 maxlen: 24 147.50.248.0/22 maxlen: 22 147.50.254.0/24 maxlen: 24 147.50.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Validity Not Before: Feb 6 09:03:01 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a586c8-79f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:09:ee:ff:85:41:12:33:f6:f7:5a:d3:7b:e1: 83:e1:3b:94:a8:b4:44:37:3d:05:57:e6:67:cf:db: eb:a6:96:ae:5a:02:30:ee:c7:89:18:ed:52:8b:6e: c0:78:85:ec:cd:0d:d6:50:7e:0a:fa:24:b5:d5:15: b0:36:27:c6:89:7b:2e:66:b2:1a:fd:4d:00:cf:66: 03:64:0d:a4:a2:3b:b7:6f:61:ce:9e:98:c1:6a:20: 42:c6:0a:df:ee:5e:42:02:df:ea:c5:93:2f:67:f2: 81:2e:7e:ee:b9:8b:9c:d1:ae:27:e8:4c:e0:84:95: 96:36:42:0f:18:a4:b4:e8:e6:a9:a7:15:71:f8:25: b7:b4:7d:44:3d:99:4b:07:09:93:1a:08:54:1d:a5: fa:8c:0b:4c:c9:82:83:ed:1e:29:37:bf:bd:d9:f4: 9c:fc:c8:19:02:09:dc:ff:29:eb:44:81:2c:1a:f6: 42:82:a1:8a:e4:b6:94:ac:d6:45:db:9c:16:f5:b3: 94:8b:9a:7a:2e:c4:62:6d:bb:ac:89:5e:7a:b6:06: 48:9e:43:5b:4d:0b:33:79:bc:a9:e2:c3:d0:eb:fa: 94:0a:a6:01:af:e2:ab:81:1e:c1:01:d5:35:b2:66: 34:0e:e7:6c:36:ab:24:fd:bd:bf:53:07:7c:3f:04: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E0:49:1A:21:C4:6A:00:70:81:D4:CC:43:5C:80:3E:38:11:BA:5E X509v3 Authority Key Identifier: keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 147.50.224.0/19 Signature Algorithm: sha256WithRSAEncryption 3b:94:89:db:b1:09:a8:93:f1:7b:de:e4:2d:44:fa:68:41:ee: 99:57:c3:b9:1a:21:b1:f7:4a:49:c4:fb:4c:00:04:6e:d7:46: 5d:e7:dd:5b:6b:d8:17:ab:53:28:1a:53:55:99:13:88:3c:55: f0:7b:85:53:f1:1d:9f:bb:09:eb:98:07:3e:7f:22:14:d9:91: 25:dd:d5:18:63:8f:a9:55:af:52:9b:52:7c:f8:48:b7:b0:76: b1:78:85:67:42:d9:4d:a1:ea:cb:c7:e5:82:07:c5:e6:f8:60: da:06:c2:18:64:2f:95:ca:ea:70:7a:da:c6:cc:64:75:9e:69: 40:f8:b4:82:ec:cd:33:c6:c5:1a:cb:46:ca:e8:af:35:3f:7e: 19:52:1c:3a:ee:66:70:01:de:5f:b4:ab:8d:5f:91:23:16:8b: e8:7c:c5:0e:5f:a7:ba:10:bd:6a:07:1c:94:ec:1c:57:99:5c: 98:f4:f3:72:57:8f:03:61:7a:7d:d5:e4:bc:25:2b:1d:72:87: c4:e0:62:11:61:38:5b:d1:39:b1:77:e9:c8:ee:19:44:31:1c: 6d:7c:1e:74:ea:d5:aa:4a:cf:d5:e5:30:89:99:e2:af:a9:87: 6b:63:c4:24:2c:c3:1c:7b:21:fa:3c:a0:e8:11:24:d3:5f:e4: ea:ac:06:89 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF NjdCQTRCQTYwHhcNMjYwMjA2MDkwMzAxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODZjOC03OWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Anu/4VBEjP291rTe+GD4TuUqLRENz0FV+Znz9vrppauWgIw7seJGO1Si27A eIXszQ3WUH4K+iS11RWwNifGiXsuZrIa/U0Az2YDZA2koju3b2HOnpjBaiBCxgrf 7l5CAt/qxZMvZ/KBLn7uuYuc0a4n6EzghJWWNkIPGKS06OappxVx+CW3tH1EPZlL BwmTGghUHaX6jAtMyYKD7R4pN7+92fSc/MgZAgnc/ynrRIEsGvZCgqGK5LaUrNZF 25wW9bOUi5p6LsRibbusiV56tgZInkNbTQszebyp4sPQ6/qUCqYBr+KrgR7BAdU1 smY0DudsNqsk/b2/Uwd8PwS9AwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGfgSRoh xGoAcIHUzENcgD44EbpeMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvNTZFQzRDQjQ5 Mjc5MTFFRkFCRUMyRDQ2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFkzLgMA0GCSqGSIb3DQEBCwUAA4IBAQA7lInbsQmok/F73uQtRPpo Qe6ZV8O5GiGx90pJxPtMAARu10Zd591ba9gXq1MoGlNVmROIPFXwe4VT8R2fuwnr mAc+fyIU2ZEl3dUYY4+pVa9Sm1J8+Ei3sHaxeIVnQtlNoerLx+WCB8Xm+GDaBsIY ZC+VyupwetrGzGR1nmlA+LSC7M0zxsUay0bK6K81P34ZUhw67mZwAd5ftKuNX5Ej FovofMUOX6e6EL1qBxyU7BxXmVyY9PNyV48DYXp91eS8JSsdcofE4GIRYThb0Tmx d+nI7hlEMRxtfB506tWqSs/V5TCJmeKvqYdrY8QkLMMceyH6PKDoESTTX+TqrAaJ -----END CERTIFICATE-----Generated at Sun Mar 15 01:44:53 2026 by rpki-client