$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/0228453AC5F811F08FFA5F38C4F9AE02.roa File: 0228453AC5F811F08FFA5F38C4F9AE02.roa (raw, json) Hash identifier: IWJWh705c8m4FHfmtsytROQ/5ReiulZR0f5Dck9Oj7A= Subject key identifier: 62:64:E2:45:0B:73:95:F1:BA:13:49:6D:25:47:02:AC:76:16:C0:C9 Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 014E Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/0228453AC5F811F08FFA5F38C4F9AE02.roa Signing time: Sun 04 Oct 2026 20:40:34 +0000 ROA not before: Sun 04 Oct 2026 20:40:34 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 138077 IP address blocks: 72.57.155.0/24 maxlen: 24 72.57.156.0/22 maxlen: 24 72.57.160.0/22 maxlen: 24 72.57.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 20:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Oct 4 20:40:34 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac2b9c2-3c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:34:d8:06:59:ca:de:68:a0:15:ad:19:45: af:0d:3a:6c:14:b6:7f:1a:b4:16:b5:45:98:ec:97: 1f:16:8c:82:0f:e0:5d:2e:95:60:12:ed:60:89:f8: 68:22:97:68:33:a2:c5:e2:5f:e4:ce:9b:66:7c:d5: 58:9b:d6:c3:ef:24:41:8b:bb:2a:c4:9a:e5:f9:12: 1e:54:ca:24:b2:2b:f0:a7:07:55:eb:c2:ac:65:fe: c6:5b:91:a5:41:79:23:e1:6a:64:67:72:bc:9d:fb: 83:4a:7e:19:eb:ff:1f:95:90:9a:12:3e:aa:82:dd: b1:e2:9a:db:8f:3d:0b:23:87:ff:40:1f:87:5c:9c: c9:1f:c0:ec:5d:34:db:c5:ed:5f:89:e2:ad:08:bc: ac:16:2d:1b:47:1b:a0:5c:ba:dd:8c:99:f1:ed:5d: d4:a3:b2:6f:8f:91:bf:86:a4:df:34:68:2b:69:0c: 7a:98:24:08:9e:32:77:b6:11:87:f1:d1:46:c0:ba: 02:d2:da:87:c9:44:87:58:02:ab:98:ef:e6:dc:57: 9d:21:9e:77:18:bc:be:53:13:5c:27:be:e7:7a:8a: 3e:2c:bc:f0:58:4b:d2:23:fe:04:15:91:ab:d6:3b: 10:03:ce:d8:ac:18:42:fb:34:1f:d0:c0:2b:a1:44: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:64:E2:45:0B:73:95:F1:BA:13:49:6D:25:47:02:AC:76:16:C0:C9 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/0228453AC5F811F08FFA5F38C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 72.57.155.0-72.57.164.255 Signature Algorithm: sha256WithRSAEncryption a1:d6:0d:23:34:f2:72:83:6c:1c:3e:aa:3f:60:c8:26:3a:4a: 2c:63:95:7a:c5:83:2f:e4:51:1e:c5:c9:7e:3c:c4:ba:38:13: de:7f:14:7d:2b:eb:10:c8:a2:4f:6c:d6:b1:c5:42:41:77:5f: 9d:32:ff:cf:ce:0a:99:e7:8d:15:d6:03:4b:3e:4f:62:16:60: 13:dc:a3:f0:da:6a:d6:63:67:68:6d:4b:0e:3f:6d:15:51:93: 3e:d2:ba:31:75:8f:6e:31:81:74:42:18:b9:8b:54:88:08:8f: f1:de:30:43:f5:96:6f:62:c3:d6:66:f1:db:8f:35:de:2f:0a: 44:2d:bd:1c:4c:60:90:1a:56:27:02:7f:25:bf:0c:30:24:27: 3e:5f:4a:bb:f3:96:38:6d:5c:ce:b6:f3:6b:3f:25:83:fb:8c: 11:43:94:79:e2:d1:ca:1b:52:69:61:38:56:64:9f:4d:79:87: 8a:53:50:4a:07:f0:80:7b:d5:89:0a:58:15:de:cd:c9:71:4c: 78:51:af:2e:2e:bc:84:e7:d6:83:6b:b8:a0:76:14:fc:bb:8a: 21:ca:91:20:02:c5:86:dd:cf:77:62:71:ee:b5:02:b1:89:95: e5:34:8e:82:b6:85:e9:a7:de:96:57:4f:7c:b2:73:f7:02:27: 0c:7f:85:47 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG Mzc2OUI0REUwHhcNMjYxMDA0MjA0MDM0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyYjljMi0zYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuU02AZZyt5ooBWtGUWvDTpsFLZ/GrQWtUWY7JcfFoyCD+BdLpVgEu1gifho IpdoM6LF4l/kzptmfNVYm9bD7yRBi7sqxJrl+RIeVMoksivwpwdV68KsZf7GW5Gl QXkj4WpkZ3K8nfuDSn4Z6/8flZCaEj6qgt2x4prbjz0LI4f/QB+HXJzJH8DsXTTb xe1fieKtCLysFi0bRxugXLrdjJnx7V3Uo7Jvj5G/hqTfNGgraQx6mCQInjJ3thGH 8dFGwLoC0tqHyUSHWAKrmO/m3FedIZ53GLy+UxNcJ77neoo+LLzwWEvSI/4EFZGr 1jsQA87YrBhC+zQf0MAroUSEEQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFGJk4kUL c5XxuhNJbSVHAqx2FsDJMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvMDIyODQ1M0FD NUY4MTFGMDhGRkE1RjM4QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBABIOZsDBABIOaQwDQYJKoZIhvcNAQELBQADggEBAKHWDSM08nKD bBw+qj9gyCY6SixjlXrFgy/kUR7FyX48xLo4E95/FH0r6xDIok9s1rHFQkF3X50y /8/OCpnnjRXWA0s+T2IWYBPco/DaatZjZ2htSw4/bRVRkz7SujF1j24xgXRCGLmL VIgIj/HeMEP1lm9iw9Zm8duPNd4vCkQtvRxMYJAaVicCfyW/DDAkJz5fSrvzljht XM6282s/JYP7jBFDlHni0cobUmlhOFZkn015h4pTUEoH8IB71YkKWBXezclxTHhR ry4uvITn1oNruKB2FPy7iiHKkSACxYbdz3dice61ArGJleU0joK2hemn3pZXT3yy c/cCJwx/hUc= -----END CERTIFICATE-----Generated at Wed Oct 21 15:33:04 2026 by rpki-client