$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa File: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (raw, json) Hash identifier: 45qX+XGqxCtDzsxlyTpzd4A9iCQp1Kx2SECxGbiiC1I= Subject key identifier: D7:73:D6:61:D8:01:37:58:91:55:E1:4F:E4:BC:2D:86:24:93:2C:A9 Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Certificate serial: 04B1 Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa Signing time: Fri 03 Oct 2025 08:35:38 +0000 ROA not before: Fri 03 Oct 2025 08:35:38 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9891 IP address blocks: 147.50.224.0/19 maxlen: 19 147.50.224.0/22 maxlen: 22 147.50.228.0/24 maxlen: 24 147.50.230.0/24 maxlen: 24 147.50.231.0/24 maxlen: 24 147.50.232.0/22 maxlen: 22 147.50.236.0/23 maxlen: 23 147.50.239.0/24 maxlen: 24 147.50.240.0/22 maxlen: 22 147.50.246.0/24 maxlen: 24 147.50.247.0/24 maxlen: 24 147.50.248.0/22 maxlen: 22 147.50.254.0/24 maxlen: 24 147.50.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Validity Not Before: Oct 3 08:35:38 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68df8ad9-4d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bf:89:2a:33:11:7b:d7:f6:00:9e:1f:1a:5d: e5:a3:bf:44:b2:0c:00:92:76:97:02:b7:3d:e3:70: e0:e8:1e:94:40:dc:4a:03:fd:d5:ec:63:13:ce:1a: eb:8a:5f:72:02:ab:07:ab:83:66:1e:0e:f4:42:00: b7:4b:b7:46:ee:f9:5a:60:86:55:4f:c5:73:2e:82: 2c:9f:6e:d7:b4:09:cf:9d:8d:21:37:66:a4:fe:84: 1a:20:e6:d1:1a:67:8c:e0:14:40:db:16:fc:3b:9b: 77:e6:63:a3:50:b6:32:ba:43:c7:86:68:b4:8d:93: 72:a3:70:37:cf:2a:82:ae:da:82:99:28:f7:24:39: 63:77:e9:2d:f1:c6:06:86:7d:48:36:3d:92:c9:b8: 17:25:6a:6d:59:80:70:39:65:09:97:73:c1:e7:1b: 40:76:fc:5c:cf:b1:09:46:1c:78:d3:65:61:c5:55: b7:d0:f2:19:c9:f1:5b:46:dc:c6:c4:38:1a:26:9c: e4:c0:02:1c:fb:9b:88:ac:98:93:39:c5:f6:be:4b: c1:6e:40:79:4c:32:bf:4e:9c:13:26:e7:70:13:df: 76:0c:a3:da:3f:3f:18:ad:a2:40:ee:69:ce:12:1c: f0:f5:1c:bd:8a:cf:aa:15:3b:05:54:0b:1f:65:5e: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:73:D6:61:D8:01:37:58:91:55:E1:4F:E4:BC:2D:86:24:93:2C:A9 X509v3 Authority Key Identifier: keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.50.224.0/19 Signature Algorithm: sha256WithRSAEncryption 76:b6:29:ab:04:27:3c:39:9d:82:ef:51:ff:44:e2:a5:d9:8d: 80:c4:51:f3:c5:82:04:d9:87:ee:4a:d4:e6:46:7c:bf:40:01: b7:63:21:21:27:05:83:95:71:45:1e:1e:84:a1:f8:64:30:bf: 36:e6:e2:9d:41:02:f3:f6:67:a5:29:31:b9:7d:03:7a:ef:df: d4:df:d4:ae:c2:dd:a8:9b:14:ce:e0:b2:3c:d5:95:7c:89:a2: b8:28:c5:a1:48:8b:cf:16:b4:76:8b:85:85:54:8d:6c:02:31: 75:32:72:c7:1e:c2:67:5d:ac:7d:f5:02:08:57:38:9d:57:11: a0:bb:a1:10:33:dc:ec:e5:12:2b:0a:71:e5:ef:91:a9:a8:7f: 88:cb:75:b5:4f:80:e8:df:e2:7e:79:d1:ca:46:8e:2a:bd:cb: 59:0a:c8:78:b8:30:5c:30:f4:38:bb:ab:d1:88:fc:8a:05:ba: d1:65:78:8d:2b:d2:ed:67:68:f7:ad:aa:58:be:1b:99:18:e3: d5:1a:0e:82:d7:9f:84:3c:d4:a2:d8:a9:0b:23:a6:eb:97:ef: ac:ad:d1:c8:ef:1a:8b:fc:b3:7e:07:d5:d6:17:86:01:67:e2: fd:94:db:40:11:12:36:74:1c:a7:0f:a4:ac:5c:19:3d:4c:f8: 0e:52:93:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF NjdCQTRCQTYwHhcNMjUxMDAzMDgzNTM4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmOGFkOS00ZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17+JKjMRe9f2AJ4fGl3lo79EsgwAknaXArc943Dg6B6UQNxKA/3V7GMTzhrr il9yAqsHq4NmHg70QgC3S7dG7vlaYIZVT8VzLoIsn27XtAnPnY0hN2ak/oQaIObR GmeM4BRA2xb8O5t35mOjULYyukPHhmi0jZNyo3A3zyqCrtqCmSj3JDljd+kt8cYG hn1INj2SybgXJWptWYBwOWUJl3PB5xtAdvxcz7EJRhx402VhxVW30PIZyfFbRtzG xDgaJpzkwAIc+5uIrJiTOcX2vkvBbkB5TDK/TpwTJudwE992DKPaPz8YraJA7mnO Ehzw9Ry9is+qFTsFVAsfZV5VCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNdz1mHY ATdYkVXhT+S8LYYkkyypMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvNTZFQzRDQjQ5 Mjc5MTFFRkFCRUMyRDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAWTMuAwDQYJKoZIhvcNAQELBQADggEBAHa2KasEJzw5nYLv Uf9E4qXZjYDEUfPFggTZh+5K1OZGfL9AAbdjISEnBYOVcUUeHoSh+GQwvzbm4p1B AvP2Z6UpMbl9A3rv39Tf1K7C3aibFM7gsjzVlXyJorgoxaFIi88WtHaLhYVUjWwC MXUycscewmddrH31AghXOJ1XEaC7oRAz3OzlEisKceXvkamof4jLdbVPgOjf4n55 0cpGjiq9y1kKyHi4MFww9Di7q9GI/IoFutFleI0r0u1naPetqli+G5kY49UaDoLX n4Q81KLYqQsjpuuX76yt0cjvGov8s34H1dYXhgFn4v2U20AREjZ0HKcPpKxcGT1M +A5Skzw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:11 2025 by rpki-client