$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa File: 56C4925E3B0711EC9715501EC4F9AE02.roa (raw, json) Hash identifier: 3/W6rA2EZQ9LTmSbpHpq8E02n0iBtefklJIZbF4CvQI= Subject key identifier: 58:B6:66:DF:44:5D:72:8B:EA:04:6E:AC:CE:AE:52:A3:EB:0D:A6:E5 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 0532 Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:57:50 +0000 ROA not before: Thu 03 Apr 2025 00:25:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23669 IP address blocks: 202.14.138.0/23 maxlen: 23 202.93.160.0/19 maxlen: 24 203.18.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: Apr 3 00:25:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a40d9e-aad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:05:ff:98:30:e2:e2:c1:a6:ab:b5:88:4a: 03:44:ab:02:2e:51:39:76:61:0d:df:14:8d:d4:0b: d8:40:22:5a:8d:f7:63:30:55:45:34:2b:2d:e9:bf: 61:30:61:c9:0f:c4:47:6a:ac:ea:f6:ac:08:93:b4: 7c:1c:84:63:8b:79:2e:a5:36:82:20:4d:7d:12:c5: 4d:05:4b:23:81:e2:e9:35:ff:fb:12:d2:42:f4:79: b2:9a:03:a8:4a:7a:7b:2f:52:d1:ea:89:b9:97:bf: 66:f3:dd:08:08:b8:68:66:ee:c3:de:a6:16:d0:b5: 5c:cb:4c:21:f5:ac:a2:b7:5a:87:8b:76:a1:3c:6e: e0:52:ea:30:1b:9d:84:04:ff:cc:39:c2:17:91:ca: d6:1e:c1:02:13:a6:eb:9d:b9:57:01:74:00:e2:0a: 66:05:ff:4b:d9:b9:8a:0b:b6:5d:20:c8:85:e4:f7: eb:4f:f3:2c:01:f8:e2:5e:65:bd:37:cb:95:c3:42: 14:dc:a4:04:e9:40:0d:2c:dc:0f:2b:0f:ea:f6:18: ad:78:02:2c:ce:32:fc:65:6a:b7:31:84:77:48:71: 28:3b:87:0c:e3:15:ac:19:b1:ae:e7:c6:1a:b9:e6: 33:91:1c:f4:d3:bf:ed:72:25:31:48:2f:f5:2b:b5: 47:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B6:66:DF:44:5D:72:8B:EA:04:6E:AC:CE:AE:52:A3:EB:0D:A6:E5 X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/56C4925E3B0711EC9715501EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.14.138.0/23 202.93.160.0/19 203.18.22.0/24 Signature Algorithm: sha256WithRSAEncryption b4:6d:96:71:f8:e9:30:a1:58:72:79:54:54:10:bf:8b:61:ef: bc:80:87:dd:2c:5c:1b:97:53:fe:ce:02:da:73:e3:bf:0b:4f: c9:b1:3c:c9:5b:02:5e:1d:f6:0b:26:6c:3b:d4:6d:fa:9f:aa: e5:fe:7c:ca:6d:d0:1b:ec:3b:84:60:3f:68:73:a3:35:dc:1d: 1f:0b:a8:28:07:a6:da:9d:20:55:a0:2d:80:2d:8d:14:b7:7c: d0:bd:0e:c3:04:28:32:23:44:6d:9c:7c:c1:54:10:98:d3:57: 8c:57:16:55:1c:2e:3f:9b:f2:d4:27:c3:c6:6b:f8:b5:81:95: d9:5d:21:cf:bb:8f:96:99:b3:d1:56:c0:1e:3c:04:5a:ca:5e: a1:77:c4:a5:21:ee:e5:b6:b1:59:68:e1:00:4a:e4:49:3f:2a: ec:93:68:b4:98:86:8a:3c:7e:92:1c:ce:f2:e7:8e:73:66:ba: f1:1f:ba:07:ad:02:d9:ac:06:26:75:d9:27:7c:4a:5f:0f:60: b9:92:cd:71:9b:6c:61:b2:f6:f8:13:84:e8:fe:2a:f3:59:ad: 0b:d7:6f:ef:c6:9f:ee:74:a3:73:8f:e0:78:c9:91:cb:ac:5b: 63:32:4c:36:66:9d:bc:03:d5:1f:fe:80:e6:18:01:56:f8:34: ea:d3:14:18 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjUwNDAzMDAyNTQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGQ5ZS1hYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2gF/5gw4uLBpqu1iEoDRKsCLlE5dmEN3xSN1AvYQCJajfdjMFVFNCst6b9h MGHJD8RHaqzq9qwIk7R8HIRji3kupTaCIE19EsVNBUsjgeLpNf/7EtJC9HmymgOo Snp7L1LR6om5l79m890ICLhoZu7D3qYW0LVcy0wh9ayit1qHi3ahPG7gUuowG52E BP/MOcIXkcrWHsECE6brnblXAXQA4gpmBf9L2bmKC7ZdIMiF5PfrT/MsAfjiXmW9 N8uVw0IU3KQE6UANLNwPKw/q9hiteAIszjL8ZWq3MYR3SHEoO4cM4xWsGbGu58Ya ueYzkRz007/tciUxSC/1K7VHNwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFi2Zt9E XXKL6gRurM6uUqPrDablMB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFEQ0UvMEY3MjgxQkMzQUY0MTFFQzg5Q0UwNzJGQzRGOUFFMDIvNTZDNDkyNUUz QjA3MTFFQzk3MTU1MDFFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQByg6KAwQFyl2gAwQAyxIWMA0GCSqGSIb3DQEBCwUAA4IBAQC0bZZx +OkwoVhyeVRUEL+LYe+8gIfdLFwbl1P+zgLac+O/C0/JsTzJWwJeHfYLJmw71G36 n6rl/nzKbdAb7DuEYD9oc6M13B0fC6goB6banSBVoC2ALY0Ut3zQvQ7DBCgyI0Rt nHzBVBCY01eMVxZVHC4/m/LUJ8PGa/i1gZXZXSHPu4+WmbPRVsAePARayl6hd8Sl Ie7ltrFZaOEASuRJPyrsk2i0mIaKPH6SHM7y545zZrrxH7oHrQLZrAYmddknfEpf D2C5ks1xm2xhsvb4E4To/irzWa0L12/vxp/udKNzj+B4yZHLrFtjMkw2Zp28A9Uf /oDmGAFW+DTq0xQY -----END CERTIFICATE-----Generated at Mon Mar 2 12:35:37 2026 by rpki-client