$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/D56B4ABED54E11EFAD8C4E52C4F9AE02.roa File: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (raw, json) Hash identifier: blF9ljxGk0SSZ87INU+o+RPso+OfA6xAz0M9+p2Ct40= Subject key identifier: 46:EE:BD:74:22:5A:1A:AC:CC:32:E5:D7:5F:44:7D:A9:B9:00:79:DD Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0463 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/D56B4ABED54E11EFAD8C4E52C4F9AE02.roa Signing time: Wed 11 Nov 2026 00:47:13 +0000 ROA not before: Wed 11 Nov 2026 00:47:13 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 153494 IP address blocks: 43.241.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: Nov 11 00:47:13 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6af3bb11-e9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bb:cd:a3:0f:2a:da:ab:c6:ef:97:43:6e:62: cf:35:b5:ad:4a:c1:0d:d4:27:f0:97:54:54:f8:2b: dd:4e:f6:97:27:41:aa:6c:19:34:3d:99:88:d7:0e: 2b:81:0b:26:fa:b9:f7:c4:6a:c9:d9:9d:9e:a2:4c: 72:a6:9b:1d:35:26:cd:92:b0:f4:0b:2d:87:5a:45: 0a:00:a7:ea:52:11:74:4d:a6:7f:22:3f:6d:f2:47: 56:89:12:7f:c0:af:19:06:1d:01:3c:18:32:35:c3: 2d:e9:60:12:dd:56:97:fe:eb:fc:29:31:5d:22:0b: fa:f2:46:b7:e7:e9:a6:eb:ce:ed:81:35:75:50:21: 1d:18:5e:fa:61:72:6f:21:f8:b2:c9:a4:d6:77:15: 8d:69:be:da:ba:62:51:7f:1b:5c:51:38:cb:98:5f: 0e:3c:7a:7b:86:ed:5e:82:e4:70:9d:78:f0:59:1c: d2:95:5d:4e:c4:47:51:44:08:d6:e2:1e:50:79:9a: 9a:4a:8e:e8:88:a0:51:f5:6a:77:15:12:69:43:10: 33:3f:96:71:e8:37:1a:05:bb:66:64:cd:59:1b:b2: 0a:c0:f6:19:a3:51:11:17:fe:55:66:bf:70:7b:9d: 5a:71:0c:fc:ec:0f:d9:56:47:07:25:14:c0:0d:6f: 3b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EE:BD:74:22:5A:1A:AC:CC:32:E5:D7:5F:44:7D:A9:B9:00:79:DD X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/D56B4ABED54E11EFAD8C4E52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.241.252.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:ae:d0:94:a0:8a:c8:a5:81:55:d8:29:11:5a:9a:b4:9e:a4: 35:d8:45:ee:40:84:e3:33:05:b0:49:d5:e6:be:b0:25:fe:10: 40:7f:c3:2c:f1:6c:5b:eb:6a:4f:37:d4:3f:76:45:2c:f2:60: 7c:9d:77:0f:b5:c8:54:6a:7e:1d:b6:70:23:22:9d:97:ce:70: 5c:da:36:c6:ab:6a:60:f5:ec:d7:c4:6e:cb:de:5d:77:d7:11: 5f:44:bc:6d:68:8f:c4:01:f4:95:f4:04:b8:73:e2:40:a8:44: 3d:40:ce:eb:63:23:ef:8c:0f:2d:ed:93:9c:0d:84:43:b8:b1: bd:97:c8:b2:9e:23:8d:74:a7:de:e3:54:a4:e9:e8:be:08:ce: 36:6b:73:30:66:5a:1c:ba:16:0d:11:c4:c6:fd:9e:39:d3:6b: 1b:03:2c:a5:9a:18:2c:01:eb:bf:01:7e:26:a5:08:9b:6d:57: ef:3d:08:17:a7:a3:de:1e:6e:d9:f6:ae:7f:f1:55:4c:12:f8: ec:45:e2:61:6e:49:59:81:1a:2e:5c:e3:92:4d:50:60:08:c1: e0:03:60:ac:69:08:39:43:8b:f8:da:58:9c:0b:22:ed:0a:d9: ca:8b:76:be:5d:94:bd:83:eb:f9:50:94:02:17:c9:9b:8e:70: 7c:d6:28:b8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYxMTExMDA0NzEzWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWYzYmIxMS1lOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rvNow8q2qvG75dDbmLPNbWtSsEN1Cfwl1RU+CvdTvaXJ0GqbBk0PZmI1w4r gQsm+rn3xGrJ2Z2eokxyppsdNSbNkrD0Cy2HWkUKAKfqUhF0TaZ/Ij9t8kdWiRJ/ wK8ZBh0BPBgyNcMt6WAS3VaX/uv8KTFdIgv68ka35+mm687tgTV1UCEdGF76YXJv IfiyyaTWdxWNab7aumJRfxtcUTjLmF8OPHp7hu1eguRwnXjwWRzSlV1OxEdRRAjW 4h5QeZqaSo7oiKBR9Wp3FRJpQxAzP5Zx6DcaBbtmZM1ZG7IKwPYZo1ERF/5VZr9w e51acQz87A/ZVkcHJRTADW873QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEbuvXQi WhqszDLl119Efam5AHndMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0NDYvMkExRkY1NkVDNTM1MTFFQzhFNUEwMzEzQzRGOUFFMDIvRDU2QjRBQkVE NTRFMTFFRkFEOEM0RTUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/H8MA0GCSqGSIb3DQEBCwUAA4IBAQCdrtCUoIrIpYFV2CkRWpq0 nqQ12EXuQITjMwWwSdXmvrAl/hBAf8Ms8Wxb62pPN9Q/dkUs8mB8nXcPtchUan4d tnAjIp2XznBc2jbGq2pg9ezXxG7L3l131xFfRLxtaI/EAfSV9AS4c+JAqEQ9QM7r YyPvjA8t7ZOcDYRDuLG9l8iyniONdKfe41Sk6ei+CM42a3MwZlocuhYNEcTG/Z45 02sbAyylmhgsAeu/AX4mpQibbVfvPQgXp6PeHm7Z9q5/8VVMEvjsReJhbklZgRou XOOSTVBgCMHgA2CsaQg5Q4v42licCyLtCtnKi3a+XZS9g+v5UJQCF8mbjnB81ii4 -----END CERTIFICATE-----Generated at Sun Nov 15 22:34:53 2026 by rpki-client