$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/56094384320611EA84C94231C4F9AE02.roa File: 56094384320611EA84C94231C4F9AE02.roa (raw, json) Hash identifier: XDtAQp9b5mDKow63ETAdi74o5CpTFjvFQYx58JxRZGs= Subject key identifier: 50:F9:54:06:40:A8:A7:23:0D:90:E4:63:C5:6A:88:B5:53:D0:7D:B2 Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Certificate serial: 13F8 Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/56094384320611EA84C94231C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:19:14 +0000 ROA not before: Wed 28 Jan 2026 17:14:24 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45170 IP address blocks: 36.0.4.0/22 maxlen: 23 101.251.4.0/22 maxlen: 22 183.91.132.0/22 maxlen: 22 183.91.132.0/24 maxlen: 24 202.52.0.0/23 maxlen: 23 2404:2c00::/32 maxlen: 32 2404:2c00:8000::/47 maxlen: 47 2404:2c00:8000::/48 maxlen: 48 2404:2c00:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5112 (0x13f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Validity Not Before: Jan 28 17:14:24 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5aa72-4c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:29:c0:20:0a:ad:a2:08:87:7d:83:ec:4d: db:6a:52:d2:37:e5:31:e9:6f:b0:69:82:fa:b8:0d: a9:bc:01:bd:84:fb:36:4b:03:1b:1c:20:22:c3:ac: 05:81:e4:9a:28:d1:5e:a5:89:8d:64:d3:99:25:c7: 86:ba:c4:17:98:40:8a:e3:e1:9a:9c:5c:c1:8f:e1: 9e:17:68:e0:e7:52:a6:93:28:bd:c8:f9:3c:53:8b: 47:bd:d9:0e:53:8e:fb:d7:f9:93:9d:b8:f7:61:14: 85:17:f3:f6:38:d2:f1:00:da:b1:f8:bd:57:f2:c7: 9d:68:4b:2b:4e:ae:f9:69:3e:6b:4c:2e:77:f5:fb: 66:5e:6b:54:d0:5c:a5:55:f5:b7:28:cf:99:19:51: 16:49:e2:54:0f:57:3e:b4:0f:f8:80:1d:2c:a4:f0: 3b:a4:33:d6:7c:cc:1b:39:ff:ca:b0:ef:ce:8a:9b: e7:ef:61:34:96:d6:b5:29:38:d4:3e:60:07:eb:5d: 23:8a:54:a1:ff:ae:dd:0f:0c:40:82:89:70:37:f6: 0e:ce:95:ef:46:6b:c1:d4:f6:09:ef:81:70:47:4c: 3f:bb:88:28:e6:6f:bd:cb:fb:6f:cb:7e:18:5b:7c: a2:a1:66:01:4f:7d:3a:80:7b:de:3c:99:29:78:63: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F9:54:06:40:A8:A7:23:0D:90:E4:63:C5:6A:88:B5:53:D0:7D:B2 X509v3 Authority Key Identifier: keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/56094384320611EA84C94231C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.0.4.0/22 101.251.4.0/22 183.91.132.0/22 202.52.0.0/23 IPv6: 2404:2c00::/32 Signature Algorithm: sha256WithRSAEncryption 5f:9b:e5:5f:32:e2:6a:e8:d3:38:d0:ea:71:b8:50:af:92:2a: c5:d7:23:8f:bc:99:58:14:f1:f3:24:a5:53:5c:ec:29:ed:b0: 02:c5:c3:d8:f7:a3:1c:ec:f5:73:4b:d1:42:68:3d:89:e2:71: 6c:f6:56:d3:07:21:7e:a3:af:bd:f2:33:96:df:8e:67:31:ec: 13:b0:a8:87:db:af:99:df:44:32:b5:6f:ab:da:3a:4e:08:d5: b5:af:fc:bd:a7:1d:88:96:76:0f:09:71:ea:62:46:ef:97:42: a7:59:eb:a1:13:80:cd:3c:ea:6a:80:9c:45:0b:a2:c2:1c:46: f1:9a:54:8c:8a:13:63:ff:27:40:ea:90:95:01:44:4a:7d:23: 67:58:9a:15:d5:ca:5e:b4:79:2e:9e:1a:71:b1:4e:85:62:46: d1:de:f0:0f:b6:d5:c5:d0:00:42:89:82:21:b3:9c:7e:5d:c2: 3b:02:66:4d:03:b6:a9:0e:91:11:81:4e:9b:41:e9:47:c2:0f: 72:7f:c2:e0:96:ee:07:78:f1:1c:ef:87:7d:61:14:e6:05:5d: 2e:b3:9c:34:2a:92:30:93:c4:c3:ce:89:66:2f:78:80:6b:03: 29:52:5b:78:07:46:18:c6:39:d3:13:9a:eb:df:dd:c2:cb:13: a0:e0:bd:1c -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICE/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz NDEzNzAxQTUwHhcNMjYwMTI4MTcxNDI0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YWE3Mi00YzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KopwCAKraIIh32D7E3balLSN+Ux6W+waYL6uA2pvAG9hPs2SwMbHCAiw6wF geSaKNFepYmNZNOZJceGusQXmECK4+GanFzBj+GeF2jg51Kmkyi9yPk8U4tHvdkO U4771/mTnbj3YRSFF/P2ONLxANqx+L1X8sedaEsrTq75aT5rTC539ftmXmtU0Fyl VfW3KM+ZGVEWSeJUD1c+tA/4gB0spPA7pDPWfMwbOf/KsO/Oipvn72E0lta1KTjU PmAH610jilSh/67dDwxAgolwN/YOzpXvRmvB1PYJ74FwR0w/u4go5m+9y/tvy34Y W3yioWYBT306gHvePJkpeGMMMQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFFD5VAZA qKcjDZDkY8VqiLVT0H2yMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcxRTMvOTM4M0U2NDZBRDY1MTFFOEFDQkQwRDZBQzRGOUFFMDIvNTYwOTQzODQz MjA2MTFFQTg0Qzk0MjMxQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCJAAEAwQCZfsEAwQCt1uEAwQByjQAMA0EAgACMAcDBQAkBCwAMA0G CSqGSIb3DQEBCwUAA4IBAQBfm+VfMuJq6NM40OpxuFCvkirF1yOPvJlYFPHzJKVT XOwp7bACxcPY96Mc7PVzS9FCaD2J4nFs9lbTByF+o6+98jOW345nMewTsKiH26+Z 30QytW+r2jpOCNW1r/y9px2IlnYPCXHqYkbvl0KnWeuhE4DNPOpqgJxFC6LCHEbx mlSMihNj/ydA6pCVAURKfSNnWJoV1cpetHkunhpxsU6FYkbR3vAPttXF0ABCiYIh s5x+XcI7AmZNA7apDpERgU6bQelHwg9yf8Lglu4HePEc74d9YRTmBV0us5w0KpIw k8TDzolmL3iAawMpUlt4B0YYxjnTE5rr393CyxOg4L0c -----END CERTIFICATE-----Generated at Thu Mar 26 21:37:24 2026 by rpki-client