$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa File: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (raw, json) Hash identifier: LRGLmwGa2a/I5gvOrv+UPiIF3N2WlDmpx8kIsDZcKzI= Subject key identifier: 42:7E:33:6D:40:5E:62:68:F0:A5:18:3A:0E:50:6F:28:8D:B3:01:7E Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Certificate serial: 012F Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:08:49 +0000 ROA not before: Sun 01 Mar 2026 07:24:56 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 26658 IP address blocks: 103.207.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Validity Not Before: Mar 1 07:24:56 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a41e41-6e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:4c:71:8c:c8:2f:de:ef:f3:13:18:ac:e9: 05:a6:83:74:ca:d5:00:04:1e:bd:01:4c:18:cd:83: f7:44:c8:11:06:56:01:1a:ed:e4:29:ea:ba:9c:c1: 65:58:78:e8:a5:8d:06:8e:ba:ac:cf:7d:67:5e:b1: 0f:e5:5a:32:c7:8e:a5:9a:7d:4b:9d:a5:94:0f:1c: 69:a0:ed:58:33:ee:7b:d8:aa:98:4c:6d:24:78:8c: a3:ef:ae:76:90:8c:2b:a3:30:56:c8:49:9e:fd:b1: 2a:80:68:af:08:b9:9a:11:d8:49:bd:77:3b:99:16: c9:b7:bc:29:b3:38:bf:68:1f:63:70:84:d2:29:49: 21:71:ca:c6:41:31:88:72:17:bf:98:0d:07:e1:78: d8:8d:6c:f6:0f:89:09:a4:8c:77:52:fc:c3:54:fd: 74:90:b8:20:1d:e9:50:28:48:85:82:69:9c:ba:2b: 9a:d5:48:2e:06:92:87:e8:e8:10:12:fb:38:ac:f6: 16:90:86:3a:60:e9:76:28:cd:03:9d:7d:41:ef:e0: e8:7c:9b:6f:86:34:4c:4c:05:d1:79:cb:db:f3:f0: 77:24:6b:5a:df:69:b9:16:cd:72:ba:bc:a0:3a:95: 53:75:38:78:a2:13:c8:4d:84:4e:e6:0a:f2:15:79: 65:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7E:33:6D:40:5E:62:68:F0:A5:18:3A:0E:50:6F:28:8D:B3:01:7E X509v3 Authority Key Identifier: keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/56EC0F5EABD411F0ADCDD73CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.207.116.0/22 Signature Algorithm: sha256WithRSAEncryption b7:9f:b8:8b:1a:0e:a3:49:d0:3a:cc:f7:01:9e:2a:fe:32:1d: 00:a3:d8:80:5c:78:9e:e4:44:ca:07:09:31:f2:5e:fe:43:0d: ff:97:d4:7f:06:34:80:e4:32:89:f1:79:4c:cd:cc:bc:be:d5: 10:a6:11:2c:aa:84:82:9b:96:9b:ec:3d:83:e9:06:53:62:92: 1d:a0:84:3d:70:80:7b:6f:a4:8e:2a:26:6b:d4:ad:3a:ef:a6: a9:c6:4c:9c:ab:aa:b0:d9:b9:ad:24:48:ce:ff:5d:46:1b:8b: 88:ec:7e:19:67:f5:2b:2c:8f:6e:cc:92:95:31:69:d4:8c:5d: b3:56:44:57:7b:ea:64:87:43:2d:25:a3:c1:c6:ef:cc:4d:eb: 11:ee:e2:da:d9:4a:2f:ca:f1:b2:c9:0c:b3:dd:3d:2a:83:64: a3:18:ce:40:be:1b:6a:d3:b1:31:73:64:9c:43:23:dd:90:93: 0b:fb:ed:b4:ab:e5:09:d6:4b:5b:57:5e:b1:86:e3:4e:6e:ad: 5f:ca:56:d6:46:a7:b7:d6:ef:de:b3:ad:3b:4e:5a:4b:fd:8f: 83:40:03:1e:a3:93:c5:2d:61:a9:04:23:29:c9:3f:1b:e4:1c: 8f:0e:a1:1e:bc:c8:75:13:7a:56:10:9a:dc:9e:c9:e6:13:d7: 64:ff:4e:71 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5RjUxMTAvBgNVBAUTKDg3QjFFRTNFOUVFMkFEMUExMTNGMjdBMkE1NEUyQzBC OEQ1QUZCMzQwHhcNMjYwMzAxMDcyNDU2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWU0MS02ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDlMcYzIL97v8xMYrOkFpoN0ytUABB69AUwYzYP3RMgRBlYBGu3kKeq6nMFl WHjopY0Gjrqsz31nXrEP5Voyx46lmn1LnaWUDxxpoO1YM+572KqYTG0keIyj7652 kIwrozBWyEme/bEqgGivCLmaEdhJvXc7mRbJt7wpszi/aB9jcITSKUkhccrGQTGI che/mA0H4XjYjWz2D4kJpIx3UvzDVP10kLggHelQKEiFgmmcuiua1UguBpKH6OgQ Evs4rPYWkIY6YOl2KM0DnX1B7+DofJtvhjRMTAXRecvb8/B3JGta32m5Fs1yuryg OpVTdTh4ohPITYRO5gryFXllkQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEJ+M21A XmJo8KUYOg5QbyiNswF+MB8GA1UdIwQYMBaAFIex7j6e4q0aET8noqVOLAuNWvs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlGNS84QjkyNkQyQTVC OUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJSb1JQeWVpcFU0c0M0MWEt elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3SHVQcDdpclJvUlB5ZWlwVTRzQzQxYS16US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y5RjUvOEI5MjZEMkE1QjlFMTFFRjhCRjkxNzVCQzRGOUFFMDIvNTZFQzBGNUVB QkQ0MTFGMEFEQ0RENzNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ890MA0GCSqGSIb3DQEBCwUAA4IBAQC3n7iLGg6jSdA6zPcBnir+ Mh0Ao9iAXHie5ETKBwkx8l7+Qw3/l9R/BjSA5DKJ8XlMzcy8vtUQphEsqoSCm5ab 7D2D6QZTYpIdoIQ9cIB7b6SOKiZr1K0676apxkycq6qw2bmtJEjO/11GG4uI7H4Z Z/UrLI9uzJKVMWnUjF2zVkRXe+pkh0MtJaPBxu/MTesR7uLa2UovyvGyyQyz3T0q g2SjGM5Avhtq07Exc2ScQyPdkJML++20q+UJ1ktbV16xhuNObq1fylbWRqe31u/e s607TlpL/Y+DQAMeo5PFLWGpBCMpyT8b5ByPDqEevMh1E3pWEJrcnsnmE9dk/05x -----END CERTIFICATE-----Generated at Sat Mar 21 20:02:47 2026 by rpki-client