$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/C3CEEDC47DF011F097DBDD12C4F9AE02.roa File: C3CEEDC47DF011F097DBDD12C4F9AE02.roa (raw, json) Hash identifier: UAqsRf7T5xk/tW0W7gNLXY7xtnRSTJeiphCUdFbB9X0= Subject key identifier: 92:1C:97:3E:36:50:E5:B2:03:56:61:70:62:E0:1B:AC:A3:AA:33:8D Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Certificate serial: 7D Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/C3CEEDC47DF011F097DBDD12C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:43:07 +0000 ROA not before: Mon 13 Oct 2025 17:49:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154120 IP address blocks: 210.56.144.0/23 maxlen: 23 210.56.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Validity Not Before: Oct 13 17:49:32 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a585db-afbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:1f:4a:27:2b:19:3a:1e:6a:cb:aa:3e:70: 75:61:81:1b:70:3e:9f:7a:f0:4f:eb:f4:39:df:4b: 46:5c:80:13:99:79:5c:cb:59:be:21:27:15:ae:a7: f4:95:77:1a:3b:4e:f9:53:e3:37:bc:86:54:f9:81: 5d:b8:b6:3f:ba:ef:f4:7b:a2:2c:ac:87:97:ed:ed: 3a:9b:1c:ba:20:8c:4b:ad:75:7c:65:da:c2:a0:28: e4:8a:1c:12:0a:cb:b9:e0:73:73:d3:73:8e:9d:74: 72:9f:40:f6:b2:f4:17:86:12:b1:a1:3b:08:3c:21: 82:f9:bb:29:63:ab:eb:33:f7:03:a3:9f:84:21:3c: 2e:31:c8:71:14:24:37:42:06:0f:ac:bc:23:55:39: 72:8d:9e:da:73:7c:3c:19:55:d5:5e:12:82:7a:03: 53:dc:fd:fa:83:5b:0e:74:65:65:1c:18:b6:1d:9d: 33:cb:24:09:58:74:91:7f:5b:c9:7e:1e:8c:fe:0d: 24:26:ef:7a:db:b4:41:d4:83:69:b7:ad:8f:39:bc: 5a:93:9b:02:a1:0e:0d:e3:85:f4:cc:10:1e:d6:68: 4a:c5:c4:00:a4:83:ca:4e:f4:03:d1:8b:24:b6:8b: a0:d4:ec:42:2d:b5:26:27:a3:9b:1b:b3:d1:b5:69: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1C:97:3E:36:50:E5:B2:03:56:61:70:62:E0:1B:AC:A3:AA:33:8D X509v3 Authority Key Identifier: keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/C3CEEDC47DF011F097DBDD12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.56.144.0/23 Signature Algorithm: sha256WithRSAEncryption 95:38:30:91:9d:61:70:31:e6:54:d4:d5:f3:b1:5c:1e:22:4d: 4a:53:56:ae:93:60:6b:88:9d:0f:c2:b7:d5:c0:13:fe:10:8b: 33:ce:56:06:8e:ad:9d:dd:8d:de:42:5e:58:2a:20:a7:f2:01: 88:f8:23:98:52:a7:8f:ce:06:dc:29:9c:75:7a:e7:80:12:6f: a7:06:ef:8b:a3:25:35:cf:0d:70:72:2a:a4:ba:42:e2:82:83: 4e:24:93:1c:01:73:a6:0e:91:f4:aa:7d:37:36:05:e8:19:63: 2a:05:e2:bc:36:e3:da:63:db:70:18:dc:66:51:65:e8:3f:e0: 46:68:97:f3:c9:4c:7b:5d:7d:7a:97:af:6e:fd:24:93:64:35: 3c:1b:d3:8d:c9:46:75:24:82:ea:14:ef:d5:25:ba:4e:1b:ee: b0:92:49:68:03:3d:71:d1:e2:7c:05:bd:cf:4b:38:c9:dd:6f: dc:d0:09:95:b2:4e:05:36:6f:2d:45:1b:a7:87:ba:e3:54:d5: dc:f0:f0:fa:84:95:35:b5:57:cb:dd:f2:87:8e:77:fa:4e:73: 14:37:af:0d:2c:ec:df:df:2e:7c:62:08:49:cb:6b:1e:0a:22: 74:ee:fb:fa:d3:e0:f2:a9:3d:0f:76:63:96:69:8e:e1:8f:1c: 80:7d:39:26 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzVERTExMC8GA1UEBRMoQTYxMzZFNTBFOTQ5OEUwNDlEMEI0RDJGMTg2N0ZBMUIx ODkxQzRFRjAeFw0yNTEwMTMxNzQ5MzJaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU4NWRiLWFmYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9LB9KJysZOh5qy6o+cHVhgRtwPp968E/r9DnfS0ZcgBOZeVzLWb4hJxWup/SV dxo7TvlT4ze8hlT5gV24tj+67/R7oiysh5ft7TqbHLogjEutdXxl2sKgKOSKHBIK y7ngc3PTc46ddHKfQPay9BeGErGhOwg8IYL5uyljq+sz9wOjn4QhPC4xyHEUJDdC Bg+svCNVOXKNntpzfDwZVdVeEoJ6A1Pc/fqDWw50ZWUcGLYdnTPLJAlYdJF/W8l+ Hoz+DSQm73rbtEHUg2m3rY85vFqTmwKhDg3jhfTMEB7WaErFxACkg8pO9APRiyS2 i6DU7EIttSYno5sbs9G1aWB5AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUkhyXPjZQ 5bIDVmFwYuAbrKOqM40wHwYDVR0jBBgwFoAUphNuUOlJjgSdC00vGGf6GxiRxO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDNURFLzg3NjJDRDFBNzQy MjExRjA4NzVDQUMzM0M0RjlBRTAyL3BoTnVVT2xKamdTZEMwMHZHR2Y2R3hpUnhP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGhOdVVPbEpqZ1NkQzAwdkdHZjZHeGlSeE84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzVERS84NzYyQ0QxQTc0MjIxMUYwODc1Q0FDMzNDNEY5QUUwMi9DM0NFRURDNDdE RjAxMUYwOTdEQkREMTJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAHSOJAwDQYJKoZIhvcNAQELBQADggEBAJU4MJGdYXAx5lTU1fOxXB4i TUpTVq6TYGuInQ/Ct9XAE/4QizPOVgaOrZ3djd5CXlgqIKfyAYj4I5hSp4/OBtwp nHV654ASb6cG74ujJTXPDXByKqS6QuKCg04kkxwBc6YOkfSqfTc2BegZYyoF4rw2 49pj23AY3GZRZeg/4EZol/PJTHtdfXqXr279JJNkNTwb043JRnUkguoU79Uluk4b 7rCSSWgDPXHR4nwFvc9LOMndb9zQCZWyTgU2by1FG6eHuuNU1dzw8PqElTW1V8vd 8oeOd/pOcxQ3rw0s7N/fLnxiCEnLax4KInTu+/rT4PKpPQ92Y5ZpjuGPHIB9OSY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:20:38 2026 by rpki-client