$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/56AAA41CE2BF11EFBAC5A282C4F9AE02.roa File: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (raw, json) Hash identifier: wCl7rXzm53xP5orlsNl4KHMAfPJ5TI2KsLBB3PbjkDA= Subject key identifier: 12:38:75:62:6C:A4:D1:B5:C9:87:45:54:8D:41:1F:4B:CA:81:68:90 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0A42 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/56AAA41CE2BF11EFBAC5A282C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:00:39 +0000 ROA not before: Sun 04 Jan 2026 20:16:13 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 17557 IP address blocks: 43.225.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2626 (0xa42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Jan 4 20:16:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47ec7-37d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:3c:ce:6c:f2:bf:e4:01:44:62:4e:74:c8: 62:6f:5f:13:ba:4a:da:a2:d9:7d:da:07:17:6e:d4: 91:b9:ce:e3:97:13:25:78:e4:9f:2c:8f:67:e8:5e: 28:14:af:fe:ac:f4:80:0d:c8:eb:94:f2:0e:a9:b4: 56:7d:16:e9:e5:69:85:a3:c5:d5:f3:7f:9e:8c:86: 17:da:ac:00:6c:84:f9:44:46:34:90:80:ef:03:72: f0:8d:ea:18:96:93:b3:1d:c9:6f:7d:6b:1f:6a:d0: 82:71:4f:19:92:6b:c0:ab:81:fc:0d:2f:ff:92:0d: 35:a9:34:b4:ae:fd:b0:6b:48:69:c6:c2:5b:c7:3e: f5:0a:02:a0:5a:6c:d2:c2:b2:90:55:e7:ff:9b:c2: 92:54:9d:03:73:f8:a2:bb:60:91:a0:95:2c:d1:14: 50:13:c1:40:e6:5e:08:33:4a:d7:1d:06:3a:af:95: 87:0c:2b:bd:38:06:1c:71:ef:be:4b:a2:af:15:00: 07:29:94:d1:99:46:25:a8:6c:b1:b9:cf:b2:01:ca: 6d:c1:9f:86:51:a1:d5:e6:9f:7e:c2:0a:9e:62:fd: 0b:d4:bc:56:8a:ad:43:e1:7e:e7:f3:30:d8:16:ee: 4f:32:b8:fd:ae:1d:7c:00:f5:92:a0:1a:f6:05:69: 88:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:38:75:62:6C:A4:D1:B5:C9:87:45:54:8D:41:1F:4B:CA:81:68:90 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/56AAA41CE2BF11EFBAC5A282C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.98.0/24 Signature Algorithm: sha256WithRSAEncryption 75:39:3f:e7:ef:8a:08:5a:b7:9f:9e:e0:ae:e5:04:3e:87:5b: 74:e8:4d:f6:65:b7:4a:4b:b8:4b:6b:b6:25:dd:13:b7:d7:45: 3c:66:d9:4b:8e:ac:9a:03:57:98:7e:7d:4e:c9:c9:69:44:7a: d7:42:65:1c:4f:23:cc:d1:d9:f7:c0:92:67:15:f2:01:09:83: a6:0c:fb:45:49:09:d3:8b:59:fc:a4:8d:67:42:bd:44:65:f8: 3b:39:f4:b4:0d:ed:dc:d2:40:b3:75:29:67:0a:75:3c:06:9b: d7:9e:50:f1:61:fb:a3:bc:da:17:ba:ab:f3:bb:89:fc:32:a6: 43:c8:63:6a:8f:30:35:7e:84:0a:94:c5:c1:c0:f3:a2:b7:17: ef:22:b0:57:c4:dd:26:fe:fc:8f:ad:0e:52:7d:24:1c:a3:17: 71:0b:82:15:4b:53:ea:04:78:e6:78:97:4d:cf:2f:c8:14:47: 7a:cf:9e:72:ce:d5:06:4f:91:8a:ae:72:0c:7e:d6:48:d5:62: 4b:6a:29:b1:f2:70:17:81:3d:be:9c:00:09:00:c8:ce:cd:0c: 54:17:89:1f:cd:76:78:80:9e:0c:e5:55:af:7b:4b:45:b0:d4: 35:30:e1:ef:42:3a:55:61:7e:dc:80:12:65:d2:e5:6e:e6:0b: 64:f5:c8:35 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjYwMTA0MjAxNjEzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2VjNy0zN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1o8zmzyv+QBRGJOdMhib18Tukraotl92gcXbtSRuc7jlxMleOSfLI9n6F4o FK/+rPSADcjrlPIOqbRWfRbp5WmFo8XV83+ejIYX2qwAbIT5REY0kIDvA3LwjeoY lpOzHclvfWsfatCCcU8ZkmvAq4H8DS//kg01qTS0rv2wa0hpxsJbxz71CgKgWmzS wrKQVef/m8KSVJ0Dc/iiu2CRoJUs0RRQE8FA5l4IM0rXHQY6r5WHDCu9OAYcce++ S6KvFQAHKZTRmUYlqGyxuc+yAcptwZ+GUaHV5p9+wgqeYv0L1LxWiq1D4X7n8zDY Fu5PMrj9rh18APWSoBr2BWmIJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBI4dWJs pNG1yYdFVI1BH0vKgWiQMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFBMTQvRjdFODY0NDY4RkJDMTFFQUE4QzMxMjdCQzRGOUFFMDIvNTZBQUE0MUNF MkJGMTFFRkJBQzVBMjgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+FiMA0GCSqGSIb3DQEBCwUAA4IBAQB1OT/n74oIWrefnuCu5QQ+ h1t06E32ZbdKS7hLa7Yl3RO310U8ZtlLjqyaA1eYfn1OyclpRHrXQmUcTyPM0dn3 wJJnFfIBCYOmDPtFSQnTi1n8pI1nQr1EZfg7OfS0De3c0kCzdSlnCnU8BpvXnlDx YfujvNoXuqvzu4n8MqZDyGNqjzA1foQKlMXBwPOitxfvIrBXxN0m/vyPrQ5SfSQc oxdxC4IVS1PqBHjmeJdNzy/IFEd6z55yztUGT5GKrnIMftZI1WJLaimx8nAXgT2+ nAAJAMjOzQxUF4kfzXZ4gJ4M5VWve0tFsNQ1MOHvQjpVYX7cgBJl0uVu5gtk9cg1 -----END CERTIFICATE-----Generated at Mon Mar 2 02:15:46 2026 by rpki-client