$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/56C8FCACE38011EFBF195482C4F9AE02.roa File: 56C8FCACE38011EFBF195482C4F9AE02.roa (raw, json) Hash identifier: kQYmT0giN3DcUmq1KqBz8CC3sS+kF2//fGtT//aW/DY= Subject key identifier: F3:A9:4A:7D:1C:21:BD:5A:88:D5:D3:0F:65:65:F4:9B:C4:9A:DD:48 Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Certificate serial: 170F Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/56C8FCACE38011EFBF195482C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:25:37 +0000 ROA not before: Sat 12 Jul 2025 16:55:28 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 15830 IP address blocks: 27.111.160.0/21 maxlen: 21 27.111.168.0/22 maxlen: 22 27.111.173.0/24 maxlen: 24 27.111.174.0/23 maxlen: 23 27.111.176.0/20 maxlen: 20 27.111.192.0/20 maxlen: 20 45.126.14.0/23 maxlen: 23 103.14.116.0/22 maxlen: 22 113.59.240.0/20 maxlen: 20 113.59.240.0/23 maxlen: 23 113.59.243.0/24 maxlen: 24 113.59.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5903 (0x170f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Validity Not Before: Jul 12 16:55:28 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a46881-3d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bc:c0:cb:89:26:dd:79:1d:9f:f5:15:b5:dc: 03:6d:2e:e8:27:ec:3f:3d:2c:e3:51:d1:4d:40:88: 5a:a0:58:85:b2:d3:76:ba:55:10:85:ed:92:d7:6e: 1a:40:26:af:27:99:88:8f:b4:c6:87:7d:c2:3b:09: 77:32:01:af:6a:a1:b3:fa:34:a0:e0:e4:46:ec:94: fc:34:80:40:9b:6e:4a:9f:a0:4b:8b:4b:d1:66:60: a2:11:1b:f9:bf:f2:5c:73:fa:63:3f:12:0a:53:42: d9:f8:68:74:a1:4c:2e:49:83:30:f6:ce:39:66:00: 8b:e1:07:9d:94:e4:55:eb:9e:a1:a1:4d:87:a7:a1: 22:ee:df:29:06:ae:78:84:e5:0e:1a:8e:e6:c2:59: fc:67:bf:cd:fe:dc:f2:22:eb:b9:0f:fe:63:f4:71: 9d:95:a4:2d:c6:0f:99:46:5f:07:1f:74:38:00:ee: 9a:74:ed:c4:32:80:18:ee:e2:71:0f:64:2b:7d:9c: ca:26:bd:f1:69:1c:30:78:3b:00:97:77:14:96:fa: f6:31:3c:6f:1d:67:91:39:0b:43:7b:12:53:a5:ee: 26:ba:d5:63:3d:d1:5a:0d:c1:0a:f9:59:cf:f2:64: d5:16:43:5f:1d:9c:66:c1:34:83:50:80:dc:c7:9d: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A9:4A:7D:1C:21:BD:5A:88:D5:D3:0F:65:65:F4:9B:C4:9A:DD:48 X509v3 Authority Key Identifier: keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/56C8FCACE38011EFBF195482C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.111.160.0-27.111.171.255 27.111.173.0-27.111.207.255 45.126.14.0/23 103.14.116.0/22 113.59.240.0/20 Signature Algorithm: sha256WithRSAEncryption 43:5c:53:30:04:5f:fb:0a:83:9a:53:18:13:8b:40:38:84:ec: 10:e7:f4:28:1d:f0:e9:ba:46:57:56:41:17:99:b4:27:74:30: 0c:62:f5:5b:8a:d2:95:a3:21:4e:74:ab:87:25:6d:32:a7:54: 5a:55:78:62:ef:33:ff:f5:af:fc:b0:81:9e:83:1a:ee:e4:ea: 75:98:1d:d5:44:50:b6:d4:46:d1:3b:9c:b3:ec:1d:30:7b:88: 36:49:ce:15:6a:b9:ba:f9:91:53:8d:52:7a:b5:4f:25:bd:e5: e2:8e:b7:11:27:94:1d:3b:40:e0:42:87:7b:df:e6:d5:fa:66: ee:63:26:ea:83:8c:82:24:c8:03:46:9b:bc:92:d2:74:32:b3: 13:ac:d3:0e:ff:8a:42:6d:fe:b3:c7:a8:88:d7:f0:e9:81:c9: 91:cf:3d:e9:c3:b0:c9:03:ca:47:1d:18:53:94:fd:90:d7:da: 06:13:18:52:11:a0:a7:89:c1:55:18:f3:56:55:f4:f4:09:e3: e2:e6:58:54:76:7f:f0:9d:cf:29:53:19:69:87:68:ea:32:cf: 94:61:cb:59:6a:6a:35:23:60:b7:c4:6b:aa:63:23:18:67:74: ce:af:67:34:83:9c:74:3b:9c:8a:0b:2d:e5:d9:a7:a2:d3:0f: a3:79:d8:31 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICFw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0 QjkwREE4OTcwHhcNMjUwNzEyMTY1NTI4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njg4MS0zZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LzAy4km3Xkdn/UVtdwDbS7oJ+w/PSzjUdFNQIhaoFiFstN2ulUQhe2S124a QCavJ5mIj7TGh33COwl3MgGvaqGz+jSg4ORG7JT8NIBAm25Kn6BLi0vRZmCiERv5 v/Jcc/pjPxIKU0LZ+Gh0oUwuSYMw9s45ZgCL4QedlORV656hoU2Hp6Ei7t8pBq54 hOUOGo7mwln8Z7/N/tzyIuu5D/5j9HGdlaQtxg+ZRl8HH3Q4AO6adO3EMoAY7uJx D2QrfZzKJr3xaRwweDsAl3cUlvr2MTxvHWeROQtDexJTpe4mutVjPdFaDcEK+VnP 8mTVFkNfHZxmwTSDUIDcx50yhwIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFPOpSn0c Ib1aiNXTD2Vl9JvEmt1IMB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5 RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJEOTEvRUE2NzJBNUMxOUU3MTFFOEIyNDNENTdDQzRGOUFFMDIvNTZDOEZDQUNF MzgwMTFFRkJGMTk1NDgyQzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuMAwDBAUbb6ADBAIbb6gwDAMEABtvrQMEBBtvwAMEAS1+DgMEAmcOdAME BHE78DANBgkqhkiG9w0BAQsFAAOCAQEAQ1xTMARf+wqDmlMYE4tAOITsEOf0KB3w 6bpGV1ZBF5m0J3QwDGL1W4rSlaMhTnSrhyVtMqdUWlV4Yu8z//Wv/LCBnoMa7uTq dZgd1URQttRG0Tucs+wdMHuINknOFWq5uvmRU41SerVPJb3l4o63ESeUHTtA4EKH e9/m1fpm7mMm6oOMgiTIA0abvJLSdDKzE6zTDv+KQm3+s8eoiNfw6YHJkc896cOw yQPKRx0YU5T9kNfaBhMYUhGgp4nBVRjzVlX09Anj4uZYVHZ/8J3PKVMZaYdo6jLP lGHLWWpqNSNgt8RrqmMjGGd0zq9nNIOcdDucigst5dmnotMPo3nYMQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:26:39 2026 by rpki-client