$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/56C8FCACE38011EFBF195482C4F9AE02.roa File: 56C8FCACE38011EFBF195482C4F9AE02.roa (raw, json) Hash identifier: oSFgPCqeP9MX4SXg+dflVuexvyuqHsHFM2t2SZop3Uk= Subject key identifier: 41:7B:40:A9:09:D9:5C:C4:E2:B0:13:4C:23:78:DE:84:6F:B6:60:1F Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Certificate serial: 171B Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/56C8FCACE38011EFBF195482C4F9AE02.roa Signing time: Mon 16 Mar 2026 04:07:27 +0000 ROA not before: Mon 16 Mar 2026 04:07:27 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 15830 IP address blocks: 27.111.160.0/21 maxlen: 21 27.111.168.0/22 maxlen: 22 27.111.173.0/24 maxlen: 24 27.111.174.0/23 maxlen: 23 27.111.176.0/20 maxlen: 20 27.111.192.0/20 maxlen: 20 45.126.14.0/23 maxlen: 23 103.14.116.0/22 maxlen: 22 113.59.240.0/20 maxlen: 20 113.59.240.0/23 maxlen: 23 113.59.243.0/24 maxlen: 24 113.59.248.0/21 maxlen: 21 2404:6900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5915 (0x171b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Validity Not Before: Mar 16 04:07:27 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69b781ff-63fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:4e:99:a7:b4:9e:59:10:75:ab:7f:58:68: 5a:ca:bd:88:3f:e8:3b:4c:73:4f:f8:a0:5d:0f:94: fc:d3:1f:5e:16:a0:11:88:2f:4d:cb:30:7d:78:b3: fc:ba:8d:d0:f5:63:e9:53:38:c1:d4:8d:a9:9e:a9: ac:a6:97:74:f0:26:5b:10:8e:26:08:cf:3a:f1:12: 02:97:54:48:d9:93:dd:95:67:55:2c:85:2f:67:2c: 7e:d6:4b:92:da:b1:ae:d4:63:22:ee:43:d9:a0:ee: 3d:5e:cf:48:40:d2:b8:6f:6a:a9:77:39:ea:10:38: 98:a4:e6:7e:56:f6:12:9e:11:9c:ab:a9:ef:02:05: 9e:02:01:42:c1:c8:bb:8d:e0:3d:0b:21:ac:46:f1: f9:e5:05:45:1e:7f:ac:df:67:5b:6a:96:85:ef:6c: 37:c7:04:d6:ca:2f:b6:c9:7e:01:d0:12:e9:48:98: 3e:9a:37:55:ca:c6:f2:d4:6b:fc:d0:99:fb:4b:d3: 3c:39:52:f1:e1:05:98:28:76:25:06:da:cc:ad:8c: 82:a3:bf:df:3e:8a:33:5a:25:81:af:b0:49:ab:bb: e7:32:01:a8:7c:4d:1b:83:7a:a7:21:e1:c0:55:c0: ee:61:0b:cb:99:76:6e:a8:83:a4:f7:54:c1:5a:7f: 95:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7B:40:A9:09:D9:5C:C4:E2:B0:13:4C:23:78:DE:84:6F:B6:60:1F X509v3 Authority Key Identifier: keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/56C8FCACE38011EFBF195482C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.111.160.0-27.111.171.255 27.111.173.0-27.111.207.255 45.126.14.0/23 103.14.116.0/22 113.59.240.0/20 IPv6: 2404:6900::/32 Signature Algorithm: sha256WithRSAEncryption 74:99:5d:94:6c:e5:57:fc:53:98:24:e0:5b:be:6e:f9:2c:3b: 54:20:37:c2:d6:e6:2d:11:6e:81:31:8a:c5:ae:b6:68:ee:85: cf:42:6a:f7:66:64:4a:ae:5c:1e:6b:81:24:97:6e:6b:6a:5a: 71:4b:3e:32:81:64:21:d0:d0:f8:99:65:a9:d0:7f:01:9a:72: 28:30:8c:d0:3b:78:bd:41:61:20:67:f1:53:20:98:62:a8:97: 64:6d:ff:a2:75:74:ab:d0:67:bb:a6:82:99:c4:5b:23:83:c3: 35:5b:ba:de:70:7b:d1:3f:61:3f:7c:2e:45:a8:95:cf:10:21: 63:4e:c1:e2:20:5d:6f:10:a1:95:bc:7b:b6:be:6b:d7:8f:02: 7a:07:a5:66:ec:6f:85:23:60:a9:83:bf:bc:34:0e:3f:29:57: 52:30:ec:07:c8:70:8b:dd:a3:39:b7:e8:e1:23:72:c6:9d:37: 9a:d4:1b:ae:9c:60:fe:48:eb:ff:3d:03:7e:c6:74:0b:b8:e5: 24:6d:95:7f:08:fe:fb:fd:83:7d:b3:a4:fb:d6:d2:1d:ce:66: 9b:bc:a2:c4:a1:41:5d:10:13:08:47:d9:4e:a1:b6:5f:0b:6c: 18:ec:af:85:fc:f5:5b:9e:a7:b5:75:2c:60:f6:27:92:b5:64: 20:a8:26:e7 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICFxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0 QjkwREE4OTcwHhcNMjYwMzE2MDQwNzI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI3ODFmZi02M2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6JOmae0nlkQdat/WGhayr2IP+g7THNP+KBdD5T80x9eFqARiC9NyzB9eLP8 uo3Q9WPpUzjB1I2pnqmsppd08CZbEI4mCM868RICl1RI2ZPdlWdVLIUvZyx+1kuS 2rGu1GMi7kPZoO49Xs9IQNK4b2qpdznqEDiYpOZ+VvYSnhGcq6nvAgWeAgFCwci7 jeA9CyGsRvH55QVFHn+s32dbapaF72w3xwTWyi+2yX4B0BLpSJg+mjdVysby1Gv8 0Jn7S9M8OVLx4QWYKHYlBtrMrYyCo7/fPoozWiWBr7BJq7vnMgGofE0bg3qnIeHA VcDuYQvLmXZuqIOk91TBWn+VCQIDAQABo4IClzCCApMwHQYDVR0OBBYEFEF7QKkJ 2VzE4rATTCN43oRvtmAfMB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5 RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJEOTEvRUE2NzJBNUMxOUU3MTFFOEIyNDNENTdDQzRGOUFFMDIvNTZDOEZDQUNF MzgwMTFFRkJGMTk1NDgyQzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTA0 BAIAATAuMAwDBAUbb6ADBAIbb6gwDAMEABtvrQMEBBtvwAMEAS1+DgMEAmcOdAME BHE78DANBAIAAjAHAwUAJARpADANBgkqhkiG9w0BAQsFAAOCAQEAdJldlGzlV/xT mCTgW75u+Sw7VCA3wtbmLRFugTGKxa62aO6Fz0Jq92ZkSq5cHmuBJJdua2pacUs+ MoFkIdDQ+JllqdB/AZpyKDCM0Dt4vUFhIGfxUyCYYqiXZG3/onV0q9Bnu6aCmcRb I4PDNVu63nB70T9hP3wuRaiVzxAhY07B4iBdbxChlbx7tr5r148CegelZuxvhSNg qYO/vDQOPylXUjDsB8hwi92jObfo4SNyxp03mtQbrpxg/kjr/z0DfsZ0C7jlJG2V fwj++/2DfbOk+9bSHc5mm7yixKFBXRATCEfZTqG2XwtsGOyvhfz1W56ntXUsYPYn krVkIKgm5w== -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:11 2026 by rpki-client