$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa File: 56C4925E3B0711EC9715501EC4F9AE02.roa (raw, json) Hash identifier: t3chBruHTyyhjmWGr7PACIhRpSOcddPnItF52cMQU50= Subject key identifier: 34:71:04:89:81:E0:94:91:16:57:21:66:DD:AF:82:DF:D0:9C:4A:B7 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 054C Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa Signing time: Sat 11 Apr 2026 00:30:08 +0000 ROA not before: Sat 11 Apr 2026 00:30:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23669 IP address blocks: 202.14.138.0/23 maxlen: 23 202.93.160.0/19 maxlen: 24 203.18.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1356 (0x54c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: Apr 11 00:30:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d99610-7d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:4c:cc:e6:32:37:e1:47:67:1f:35:df:34: b8:46:8e:13:87:b5:a1:b2:21:1f:88:90:f8:db:4f: f5:5f:50:2f:5e:02:54:00:f2:af:aa:34:9c:d2:76: 4b:f0:4e:70:af:88:16:cf:d6:9b:bb:cb:7c:2d:87: e6:4e:5d:4b:89:1c:af:14:e2:97:16:c0:7d:45:b4: af:d6:6f:c0:66:c1:ac:7a:d9:33:a7:e0:d7:89:fd: 6a:20:d9:39:8d:a0:94:a6:17:52:22:54:a2:9d:c6: f7:1b:17:9a:8c:02:fa:3e:42:d3:b3:fe:0c:34:e0: 9b:07:94:80:1c:44:8e:a2:66:29:90:33:72:c0:10: 44:42:36:be:13:00:e3:ab:1b:10:2b:67:26:c7:7d: bc:b2:ed:a6:b6:15:bc:5d:ca:a5:b8:05:14:d3:f9: b8:52:81:7c:66:71:9a:f4:4f:e1:67:05:53:6b:2b: 41:18:2a:83:31:76:42:65:2a:b9:c4:f6:f4:10:f1: b1:11:f5:3f:65:ba:27:98:95:ca:2f:52:61:32:87: c6:6b:fe:c7:74:5f:b1:bf:eb:06:67:81:af:06:de: 13:4b:5a:c5:62:b3:72:f4:e2:89:ac:86:29:85:63: 97:1d:1f:f9:2f:f1:51:7f:43:83:5f:61:a5:04:91: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:71:04:89:81:E0:94:91:16:57:21:66:DD:AF:82:DF:D0:9C:4A:B7 X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.14.138.0/23 202.93.160.0/19 203.18.22.0/24 Signature Algorithm: sha256WithRSAEncryption 53:7e:04:c1:e4:2e:8f:32:bb:5d:a2:34:82:20:36:74:08:9f: 07:5a:81:e6:d2:dc:6b:ef:dc:20:61:c0:64:0a:1a:04:43:21: 91:8d:25:b5:af:ba:bf:df:a8:9c:97:fd:e7:36:95:25:ab:83: 6c:2d:54:87:d8:66:1c:83:1a:b1:f5:ef:19:1d:8f:34:11:7d: 87:e2:e4:42:f4:ac:de:05:06:6f:ae:13:e8:48:ea:e1:f9:be: 7d:6f:2b:bc:bb:05:4a:2d:29:55:09:40:51:42:97:3e:a7:9f: 05:c5:80:cd:f3:0b:a1:cd:c4:95:0c:6c:f2:9f:28:08:98:98: 02:32:10:3b:3f:fa:44:29:71:f1:34:9a:a8:82:1a:ca:2a:a7: 88:68:b6:da:d3:ec:8a:c0:a0:17:b1:6c:15:cc:59:ed:0f:9b: 88:c8:b9:f1:b2:a6:c3:b0:93:7e:08:12:c0:fd:03:17:47:26: e1:62:f0:c0:3c:82:8f:e0:e8:69:28:fe:a4:6a:5e:16:df:47: bd:48:cd:c9:cb:68:75:b8:6c:f0:43:53:ba:f1:b2:39:ab:69: 99:78:1f:25:6d:85:f7:02:2b:66:56:27:da:a0:ab:0f:68:e3: 3d:f6:82:fd:40:4f:e8:cd:37:b5:25:16:25:87:e5:54:20:26: 98:10:d3:5f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjYwNDExMDAzMDA4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5OTYxMC03ZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlq9MzOYyN+FHZx813zS4Ro4Th7WhsiEfiJD420/1X1AvXgJUAPKvqjSc0nZL 8E5wr4gWz9abu8t8LYfmTl1LiRyvFOKXFsB9RbSv1m/AZsGsetkzp+DXif1qINk5 jaCUphdSIlSincb3GxeajAL6PkLTs/4MNOCbB5SAHESOomYpkDNywBBEQja+EwDj qxsQK2cmx328su2mthW8XcqluAUU0/m4UoF8ZnGa9E/hZwVTaytBGCqDMXZCZSq5 xPb0EPGxEfU/ZbonmJXKL1JhMofGa/7HdF+xv+sGZ4GvBt4TS1rFYrNy9OKJrIYp hWOXHR/5L/FRf0ODX2GlBJFsbQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDRxBImB 4JSRFlchZt2vgt/QnEq3MB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFEQ0UvMEY3MjgxQkMzQUY0MTFFQzg5Q0UwNzJGQzRGOUFFMDIvNTZDNDkyNUUz QjA3MTFFQzk3MTU1MDFFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQByg6KAwQFyl2gAwQAyxIWMA0GCSqGSIb3DQEBCwUAA4IBAQBTfgTB 5C6PMrtdojSCIDZ0CJ8HWoHm0txr79wgYcBkChoEQyGRjSW1r7q/36icl/3nNpUl q4NsLVSH2GYcgxqx9e8ZHY80EX2H4uRC9KzeBQZvrhPoSOrh+b59byu8uwVKLSlV CUBRQpc+p58FxYDN8wuhzcSVDGzynygImJgCMhA7P/pEKXHxNJqoghrKKqeIaLba 0+yKwKAXsWwVzFntD5uIyLnxsqbDsJN+CBLA/QMXRybhYvDAPIKP4OhpKP6kal4W 30e9SM3Jy2h1uGzwQ1O68bI5q2mZeB8lbYX3AitmVifaoKsPaOM99oL9QE/ozTe1 JRYlh+VUICaYENNf -----END CERTIFICATE-----Generated at Fri Apr 17 13:48:03 2026 by rpki-client