$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/56FB3BA630DB11EBB36CAB54C4F9AE02.roa File: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (raw, json) Hash identifier: +dqj5dUwvw+xC7YK9g1ktDdByBUDI++m9TD2lt9C0Io= Subject key identifier: 61:A2:2D:DF:C9:47:51:7D:91:FE:68:D6:0F:CD:C4:F0:B2:65:25:59 Certificate issuer: /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Certificate serial: 07C8 Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/56FB3BA630DB11EBB36CAB54C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:27:10 +0000 ROA not before: Thu 04 Dec 2025 20:34:42 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138333 IP address blocks: 103.159.26.0/23 maxlen: 23 103.159.26.0/24 maxlen: 24 103.159.27.0/24 maxlen: 24 2406:c8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Validity Not Before: Dec 4 20:34:42 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4309e-205d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:55:a7:c2:bb:a8:71:6a:c0:12:0a:14:59: ff:b1:08:ad:d1:f1:aa:15:da:99:df:c3:1e:a3:ff: 09:33:b8:cd:ab:98:e8:be:ca:29:d8:84:e1:e7:04: 0f:ee:68:3a:64:82:52:76:d4:5b:48:f0:01:02:a2: ba:b1:21:d5:82:15:3c:58:85:4f:82:9d:02:01:3b: 66:b9:5a:e8:db:08:13:ab:74:ce:3d:c7:76:7a:df: 66:cb:96:94:bf:c1:99:60:3a:da:6d:94:4c:09:0d: d6:c9:dd:40:2c:48:e9:78:ff:c7:95:cb:a2:ff:36: e7:d0:3c:93:8c:4a:96:d8:d4:47:5f:94:4b:34:58: 0b:12:d7:33:66:3f:44:04:47:85:ea:87:73:e2:b8: 5d:e7:00:03:89:19:80:01:e9:6b:b1:b3:c3:2f:3b: 5c:ea:07:fe:f5:af:ee:65:fb:68:f0:2e:12:46:19: fb:c4:89:ff:6a:c9:8e:d7:e6:25:c8:e3:8e:7f:18: 36:02:8b:a4:5e:b0:56:1b:7d:1c:1c:b9:23:3e:2a: ec:92:2a:2e:e2:b4:48:76:e0:8b:2e:64:19:bd:fd: 07:17:8d:00:9a:72:be:5f:69:f3:91:5f:4f:b0:1d: bf:cc:da:02:3a:7a:5c:2a:b2:f1:8b:33:27:44:c7: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A2:2D:DF:C9:47:51:7D:91:FE:68:D6:0F:CD:C4:F0:B2:65:25:59 X509v3 Authority Key Identifier: keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/56FB3BA630DB11EBB36CAB54C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.159.26.0/23 IPv6: 2406:c8c0::/32 Signature Algorithm: sha256WithRSAEncryption 1a:41:a5:a6:41:71:64:69:44:28:80:02:79:73:d0:c7:c2:35: b9:d1:7e:75:b9:a1:07:31:a3:52:ec:d2:18:d9:15:f4:7f:45: a7:07:0d:57:7e:85:ed:46:3e:43:55:e6:74:e1:f0:e5:d1:cf: 5e:eb:cb:05:7d:2a:d1:a6:25:86:54:6b:93:26:08:3b:e7:82: f8:56:7f:f0:31:72:0c:4b:fd:46:1a:4c:22:9e:3f:8a:27:1b: 47:40:b0:46:eb:6a:76:67:10:34:a0:da:11:eb:69:5a:d4:e6: 58:57:96:be:69:4f:7c:3e:fe:2c:4a:7a:fd:c9:e4:83:38:b2: d7:71:41:bd:17:9d:6a:72:1c:22:7d:91:d3:16:20:84:8a:f6: 24:9c:a5:22:ea:09:e9:4a:e1:7b:44:72:77:39:60:2e:80:69: 1f:27:c5:ab:01:b3:38:cc:58:0e:fc:38:e0:ee:d5:a2:ad:7f: 05:01:86:11:b3:2e:95:33:9d:ba:d6:76:92:68:71:32:03:5e: 3e:ce:a6:01:05:b9:75:1b:b3:ef:5c:fd:c0:15:c1:32:50:24: fd:be:28:ba:1a:e8:5e:0f:d7:bb:68:39:5f:ad:a2:82:e5:31: f6:67:e8:5c:bf:ef:a4:42:69:e1:5b:97:4f:2c:13:0c:4f:e9: 64:f2:f9:a1 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0 MjY1QTI2N0IwHhcNMjUxMjA0MjAzNDQyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzA5ZS0yMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvP9Vp8K7qHFqwBIKFFn/sQit0fGqFdqZ38Meo/8JM7jNq5jovsop2ITh5wQP 7mg6ZIJSdtRbSPABAqK6sSHVghU8WIVPgp0CATtmuVro2wgTq3TOPcd2et9my5aU v8GZYDrabZRMCQ3Wyd1ALEjpeP/Hlcui/zbn0DyTjEqW2NRHX5RLNFgLEtczZj9E BEeF6odz4rhd5wADiRmAAelrsbPDLztc6gf+9a/uZfto8C4SRhn7xIn/asmO1+Yl yOOOfxg2AoukXrBWG30cHLkjPirskiou4rRIduCLLmQZvf0HF40AmnK+X2nzkV9P sB2/zNoCOnpcKrLxizMnRMfXMQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGGiLd/J R1F9kf5o1g/NxPCyZSVZMB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg4QzQvRDg5NDdFQjgzMEQ5MTFFQjg3RTA5MzUzQzRGOUFFMDIvNTZGQjNCQTYz MERCMTFFQkIzNkNBQjU0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ58aMA0EAgACMAcDBQAkBsjAMA0GCSqGSIb3DQEBCwUAA4IBAQAa QaWmQXFkaUQogAJ5c9DHwjW50X51uaEHMaNS7NIY2RX0f0WnBw1XfoXtRj5DVeZ0 4fDl0c9e68sFfSrRpiWGVGuTJgg754L4Vn/wMXIMS/1GGkwinj+KJxtHQLBG62p2 ZxA0oNoR62la1OZYV5a+aU98Pv4sSnr9yeSDOLLXcUG9F51qchwifZHTFiCEivYk nKUi6gnpSuF7RHJ3OWAugGkfJ8WrAbM4zFgO/Djg7tWirX8FAYYRsy6VM5261naS aHEyA14+zqYBBbl1G7PvXP3AFcEyUCT9vii6GuheD9e7aDlfraKC5TH2Z+hcv++k QmnhW5dPLBMMT+lk8vmh -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:21 2026 by rpki-client