$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/56D3C71687AB11F095613811C4F9AE02.roa File: 56D3C71687AB11F095613811C4F9AE02.roa (raw, json) Hash identifier: /iyD3hld6gjpTGLsl0+ygpbYTM+w2T0GBHJEgaI/WgU= Subject key identifier: 3F:89:7F:1D:0D:15:85:16:48:D5:40:01:90:D9:6E:64:B0:C4:C5:15 Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9 Certificate serial: 07F5 Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/56D3C71687AB11F095613811C4F9AE02.roa Signing time: Mon 27 Apr 2026 23:28:01 +0000 ROA not before: Mon 27 Apr 2026 23:28:01 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 18200 IP address blocks: 43.224.192.0/22 maxlen: 22 43.224.195.0/24 maxlen: 24 61.5.208.0/20 maxlen: 20 61.5.208.0/24 maxlen: 24 101.101.0.0/18 maxlen: 18 103.43.156.0/22 maxlen: 22 114.69.192.0/19 maxlen: 19 114.69.192.0/22 maxlen: 22 114.69.200.0/22 maxlen: 22 114.69.204.0/24 maxlen: 24 114.69.208.0/21 maxlen: 21 114.69.216.0/22 maxlen: 22 180.214.96.0/19 maxlen: 19 180.214.96.0/22 maxlen: 22 180.214.100.0/22 maxlen: 22 202.87.128.0/19 maxlen: 19 202.87.129.0/24 maxlen: 24 202.87.135.0/24 maxlen: 24 202.87.138.0/24 maxlen: 24 202.87.140.0/22 maxlen: 22 202.87.144.0/22 maxlen: 22 202.87.151.0/24 maxlen: 24 202.87.156.0/24 maxlen: 24 2404:2200::/32 maxlen: 32 2404:2200:10::/48 maxlen: 48 2404:2200:17::/48 maxlen: 48 2404:2200:22::/48 maxlen: 48 2404:2200:24::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2037 (0x7f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9 Validity Not Before: Apr 27 23:28:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69eff101-c2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:e5:c4:eb:d4:89:9f:62:6a:45:b5:8c:1e: 8f:97:1a:20:99:88:e6:99:b5:66:03:bf:63:fb:66: 6a:4c:99:59:8a:b9:f1:0b:ed:32:9c:84:c1:86:7d: 3c:02:1d:06:7a:cd:6b:6d:b0:e4:96:df:a5:82:98: 2f:81:22:9a:6b:ae:07:c9:dd:fa:c7:ba:64:a0:8c: e0:bb:d2:f9:7f:b2:f2:a7:2c:84:f4:db:60:66:98: 08:56:7d:37:fe:05:78:d1:b7:4c:85:4c:d9:d2:a0: d4:a7:71:00:c5:44:ff:41:d6:d7:d9:4e:56:2d:7b: 58:0a:4a:3f:03:c1:1e:4e:a5:59:96:85:0b:b2:1f: e6:2b:27:cd:a5:17:bd:42:44:08:00:44:43:e3:70: d2:54:c2:be:ef:fb:e2:64:49:2e:f7:e4:1f:e4:db: 55:33:54:b1:2d:14:83:01:3c:eb:23:22:7c:89:06: 3e:e5:6d:ad:38:3c:94:c2:02:0c:ec:64:d7:95:06: b1:e0:96:01:84:fe:93:72:cf:81:25:07:0e:0d:ac: 52:bb:b1:33:8a:03:63:f0:fb:71:12:8d:4d:5a:56: 7b:29:c6:9f:a3:b9:0f:67:75:b2:5f:0d:c5:c6:5c: 94:19:a2:7a:3e:07:a3:4a:84:02:f5:39:55:46:0c: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:89:7F:1D:0D:15:85:16:48:D5:40:01:90:D9:6E:64:B0:C4:C5:15 X509v3 Authority Key Identifier: keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/56D3C71687AB11F095613811C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.192.0/22 61.5.208.0/20 101.101.0.0/18 103.43.156.0/22 114.69.192.0/19 180.214.96.0/19 202.87.128.0/19 IPv6: 2404:2200::/32 Signature Algorithm: sha256WithRSAEncryption 18:89:98:09:cf:7e:9f:02:73:8d:55:13:ac:51:68:9f:05:94: dd:f9:64:c6:6f:2d:cd:92:7b:3b:28:e2:82:7c:56:73:0a:f9: 67:08:59:ad:50:50:f5:56:f6:49:6a:0f:37:22:ad:5c:c3:1b: 23:70:f7:1f:26:98:c7:0c:f1:0a:bf:3c:2e:71:ff:83:f1:c9: 5f:12:60:d5:70:18:c6:42:88:58:5a:fc:30:56:23:d8:59:03: 50:e9:1b:41:b4:47:41:ad:62:8d:3e:d8:38:62:fa:91:19:44: bb:2c:df:a7:c0:32:51:43:48:e9:89:c9:f2:2e:38:27:68:36: 9d:90:36:01:64:aa:0d:08:67:0a:84:1e:7e:3e:9d:91:0c:c4: bd:18:d9:be:73:52:3f:38:69:cb:25:00:3d:19:79:98:1e:e6: fe:2e:d5:23:ea:fc:ad:2d:7e:e1:67:15:a0:56:47:32:28:c0: 07:c2:a9:52:0e:05:1d:2f:5a:64:fa:a6:65:91:0b:e7:58:2b: 8c:94:cb:81:8c:40:47:b9:f5:45:46:4e:44:b0:5c:bc:54:c0: 7b:3d:b6:a6:e1:bc:dc:1f:bc:da:1e:55:2c:74:2c:4e:c8:41: 9a:0f:5a:c0:33:1e:96:1a:9c:5a:42:d0:f1:00:83:d7:93:ca: f2:0b:26:24 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVGMTUxMTAvBgNVBAUTKEFCNTM1RTEzMjg4NEJDQTM0NUY3QUY2OTEzQUIwQTM5 Nzc2NUU3QTkwHhcNMjYwNDI3MjMyODAxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWVmZjEwMS1jMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIjlxOvUiZ9iakW1jB6PlxogmYjmmbVmA79j+2ZqTJlZirnxC+0ynITBhn08 Ah0Ges1rbbDklt+lgpgvgSKaa64Hyd36x7pkoIzgu9L5f7LypyyE9NtgZpgIVn03 /gV40bdMhUzZ0qDUp3EAxUT/QdbX2U5WLXtYCko/A8EeTqVZloULsh/mKyfNpRe9 QkQIAERD43DSVMK+7/viZEku9+Qf5NtVM1SxLRSDATzrIyJ8iQY+5W2tODyUwgIM 7GTXlQax4JYBhP6Tcs+BJQcODaxSu7EzigNj8PtxEo1NWlZ7Kcafo7kPZ3WyXw3F xlyUGaJ6PgejSoQC9TlVRgx8yQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFD+Jfx0N FYUWSNVAAZDZbmSwxMUVMB8GA1UdIwQYMBaAFKtTXhMohLyjRfevaROrCjl3Zeep MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYxNS9GRkVEMjc5NDNB OTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZLTkY5NjlwRTZzS09YZGw1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ExTmVFeWlFdktORjk2OXBFNnNLT1hkbDU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTVGMTUvRkZFRDI3OTQzQTkzMTFFQkFCREUyMzJGQzRGOUFFMDIvNTZEM0M3MTY4 N0FCMTFGMDk1NjEzODExQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCK+DAAwQEPQXQAwQGZWUAAwQCZyucAwQFckXAAwQFtNZgAwQFyleA MA0EAgACMAcDBQAkBCIAMA0GCSqGSIb3DQEBCwUAA4IBAQAYiZgJz36fAnONVROs UWifBZTd+WTGby3Nkns7KOKCfFZzCvlnCFmtUFD1VvZJag83Iq1cwxsjcPcfJpjH DPEKvzwucf+D8clfEmDVcBjGQohYWvwwViPYWQNQ6RtBtEdBrWKNPtg4YvqRGUS7 LN+nwDJRQ0jpicnyLjgnaDadkDYBZKoNCGcKhB5+Pp2RDMS9GNm+c1I/OGnLJQA9 GXmYHub+LtUj6vytLX7hZxWgVkcyKMAHwqlSDgUdL1pk+qZlkQvnWCuMlMuBjEBH ufVFRk5EsFy8VMB7Pbam4bzcH7zaHlUsdCxOyEGaD1rAMx6WGpxaQtDxAIPXk8ry CyYk -----END CERTIFICATE-----Generated at Wed May 13 14:06:35 2026 by rpki-client