$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/56C8FCACE38011EFBF195482C4F9AE02.roa File: 56C8FCACE38011EFBF195482C4F9AE02.roa (raw, json) Hash identifier: J0L9nDFdFV6ZiImc3zHe9UUNBLYublvIh0RA4SsVHPQ= Subject key identifier: 0C:ED:B8:EA:E1:D0:EE:4F:00:10:EB:7D:75:43:A4:2B:35:5D:E7:94 Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Certificate serial: 168F Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/56C8FCACE38011EFBF195482C4F9AE02.roa Signing time: Sat 12 Jul 2025 16:55:28 +0000 ROA not before: Sat 12 Jul 2025 16:55:28 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 15830 IP address blocks: 27.111.160.0/21 maxlen: 21 27.111.168.0/22 maxlen: 22 27.111.173.0/24 maxlen: 24 27.111.174.0/23 maxlen: 23 27.111.176.0/20 maxlen: 20 27.111.192.0/20 maxlen: 20 45.126.14.0/23 maxlen: 23 103.14.116.0/22 maxlen: 22 113.59.240.0/20 maxlen: 20 113.59.240.0/23 maxlen: 23 113.59.243.0/24 maxlen: 24 113.59.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5775 (0x168f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Validity Not Before: Jul 12 16:55:28 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68729380-4ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:e1:63:db:78:34:43:03:af:3d:95:cc:3d: a9:26:90:b5:f4:1d:54:ed:38:b1:1c:73:97:ce:ec: 6c:90:75:a5:3f:52:89:7e:0f:ba:ea:64:b6:46:f3: f8:c4:53:2c:9b:f9:ba:79:07:8c:9b:e1:87:45:4e: 88:be:35:e1:bb:9f:4f:13:36:8d:10:18:32:ed:c2: 97:2d:bd:18:ca:8c:5e:66:6b:90:1d:e3:0f:7d:99: 90:c0:ed:a7:71:fa:61:97:12:c2:ad:a9:a8:7d:c8: b6:a6:48:f5:5c:e0:c7:53:17:e3:60:f0:48:ff:ce: a1:ff:bb:92:cd:66:76:e7:3a:33:bd:ad:b1:26:bc: ec:d8:e9:f3:d5:89:c4:45:80:9c:01:db:29:92:61: 2b:f0:55:a7:1e:06:f0:6c:c7:73:ea:2d:33:5c:8f: 44:e0:36:4c:65:cc:c9:1e:13:a3:63:dc:a1:bc:5c: 09:45:dc:2d:ae:20:a1:b8:b0:d6:9d:67:40:4b:f4: 4b:f5:64:8a:92:d1:38:2a:95:80:45:05:f6:10:a4: 0d:ca:4e:aa:34:c7:cb:01:a4:e7:2b:60:ac:ee:5e: f2:ea:b9:7f:5f:5a:d0:45:6e:2d:29:21:82:2e:0d: 36:aa:a5:00:36:b4:2b:a4:8d:88:ab:2f:39:a2:98: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:ED:B8:EA:E1:D0:EE:4F:00:10:EB:7D:75:43:A4:2B:35:5D:E7:94 X509v3 Authority Key Identifier: keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/56C8FCACE38011EFBF195482C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.160.0-27.111.171.255 27.111.173.0-27.111.207.255 45.126.14.0/23 103.14.116.0/22 113.59.240.0/20 Signature Algorithm: sha256WithRSAEncryption 8f:18:49:48:58:95:91:c5:81:8d:6d:f6:36:41:5c:72:a4:2e: df:fe:64:ff:15:dd:b5:e4:03:68:f4:2f:9b:cf:c7:de:ce:9f: 2f:c0:40:9d:f0:57:cb:00:4e:91:ff:08:a3:af:0d:b8:0d:20: 57:f9:d6:98:00:00:b7:57:a8:3c:45:3b:c1:b1:be:31:45:71: ea:7c:69:80:7b:74:d5:7a:9f:8a:0f:40:62:f9:7b:35:c7:3e: 6a:ab:71:b4:d5:5c:28:d4:77:41:70:ff:32:f9:6a:fe:9f:59: fb:a8:3b:70:f5:fc:19:28:a7:97:61:6a:c7:33:b0:42:c3:d7: 49:41:07:86:55:9e:39:53:8a:5c:42:0f:6a:ae:04:0b:3e:db: 85:5a:c0:6f:38:1d:b0:1e:20:e9:d0:a7:5b:39:2d:62:f9:ae: 03:79:38:74:4f:b3:4c:0a:e5:d3:08:f1:30:fc:d4:ed:01:6c: d6:37:ec:09:2b:8b:91:cc:c5:ed:62:6e:93:9d:e8:81:1c:f6: 7d:5a:a6:d2:23:f2:d3:98:15:3d:dc:bb:20:0a:e8:d2:ac:62: 49:b5:2a:79:f9:2d:a3:d2:01:9a:ff:e5:e4:09:de:f5:35:0d: a3:e7:6c:65:ef:70:70:cf:dc:62:39:12:6a:12:65:05:3e:ff: 8c:2b:0f:71 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICFo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0 QjkwREE4OTcwHhcNMjUwNzEyMTY1NTI4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcyOTM4MC00ZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcPhY9t4NEMDrz2VzD2pJpC19B1U7TixHHOXzuxskHWlP1KJfg+66mS2RvP4 xFMsm/m6eQeMm+GHRU6IvjXhu59PEzaNEBgy7cKXLb0YyoxeZmuQHeMPfZmQwO2n cfphlxLCramofci2pkj1XODHUxfjYPBI/86h/7uSzWZ25zozva2xJrzs2Onz1YnE RYCcAdspkmEr8FWnHgbwbMdz6i0zXI9E4DZMZczJHhOjY9yhvFwJRdwtriChuLDW nWdAS/RL9WSKktE4KpWARQX2EKQNyk6qNMfLAaTnK2Cs7l7y6rl/X1rQRW4tKSGC Lg02qqUANrQrpI2Iqy85ophlKQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFAztuOrh 0O5PABDrfXVDpCs1XeeUMB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5 RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJEOTEvRUE2NzJBNUMxOUU3MTFFOEIyNDNENTdDQzRGOUFFMDIvNTZDOEZDQUNF MzgwMTFFRkJGMTk1NDgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MDQEAgABMC4wDAMEBRtvoAMEAhtvqDAMAwQAG2+tAwQEG2/AAwQBLX4OAwQC Zw50AwQEcTvwMA0GCSqGSIb3DQEBCwUAA4IBAQCPGElIWJWRxYGNbfY2QVxypC7f /mT/Fd215ANo9C+bz8fezp8vwECd8FfLAE6R/wijrw24DSBX+daYAAC3V6g8RTvB sb4xRXHqfGmAe3TVep+KD0Bi+Xs1xz5qq3G01Vwo1HdBcP8y+Wr+n1n7qDtw9fwZ KKeXYWrHM7BCw9dJQQeGVZ45U4pcQg9qrgQLPtuFWsBvOB2wHiDp0KdbOS1i+a4D eTh0T7NMCuXTCPEw/NTtAWzWN+wJK4uRzMXtYm6TneiBHPZ9WqbSI/LTmBU93Lsg CujSrGJJtSp5+S2j0gGa/+XkCd71NQ2j52xl73Bwz9xiORJqEmUFPv+MKw9x -----END CERTIFICATE-----Generated at Sun Aug 10 19:55:08 2025 by rpki-client