$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/844A140AC5F111F08382761DC4F9AE02.roa File: 844A140AC5F111F08382761DC4F9AE02.roa (raw, json) Hash identifier: rBbLnyvsSpyoqt+1Znxybq65uALelom0MON/ooqRZ2Q= Subject key identifier: AE:E6:B0:57:68:62:26:E9:DB:22:3D:17:2B:59:50:9F:F1:14:86:DC Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 0161 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/844A140AC5F111F08382761DC4F9AE02.roa Signing time: Sun 04 Oct 2026 20:41:14 +0000 ROA not before: Sun 04 Oct 2026 20:41:14 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 56286 IP address blocks: 72.57.145.0/24 maxlen: 24 72.57.146.0/23 maxlen: 24 72.57.148.0/22 maxlen: 24 72.57.152.0/23 maxlen: 24 72.57.154.0/24 maxlen: 24 72.57.248.0/24 maxlen: 24 72.57.249.0/24 maxlen: 24 72.57.250.0/24 maxlen: 24 72.57.252.0/24 maxlen: 24 72.57.253.0/24 maxlen: 24 72.57.254.0/24 maxlen: 24 72.57.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 20:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Oct 4 20:41:14 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac2b9ea-214f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:8a:d4:2b:c9:8d:be:8e:37:96:c6:7b:dc: e1:b8:33:48:82:b1:e8:2e:1a:4b:bf:10:da:24:65: df:12:a9:33:b2:0e:af:3f:ed:90:95:20:0a:3d:26: b4:a9:92:3e:12:b6:ba:a4:ee:2c:90:16:b1:3f:31: fc:c4:d7:bf:01:fe:33:92:f0:88:ad:74:2a:f1:d5: d9:c4:e0:e4:bc:f3:d4:d0:5c:74:3e:ce:f2:1f:fc: 19:bc:02:ef:14:59:b0:6d:4c:b0:47:ab:7e:a9:8e: a8:0c:fd:a2:03:01:80:6f:69:24:70:2f:99:b5:28: 56:6a:b4:6e:e1:7f:b4:b5:c1:11:30:73:b4:99:b6: 2c:43:71:a6:d6:73:b5:61:a1:26:24:b4:14:f7:27: 55:74:78:e9:55:2c:87:02:56:a6:4b:41:96:4a:9d: b4:b5:20:bc:4e:fb:45:7e:1c:56:c0:0e:b4:55:aa: b4:82:e8:b3:4b:cf:5e:d0:58:4f:2a:db:2f:34:05: ff:95:9d:b1:4d:03:ee:b5:26:4c:24:ff:3e:a0:ba: 17:ee:24:30:55:f5:ed:ee:be:08:5b:82:a4:d7:99: 0c:7b:45:e3:ad:13:11:44:93:2c:00:c3:b7:26:39: 32:0d:0b:48:25:6a:55:20:07:97:ee:17:9f:82:17: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E6:B0:57:68:62:26:E9:DB:22:3D:17:2B:59:50:9F:F1:14:86:DC X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/844A140AC5F111F08382761DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 72.57.145.0-72.57.154.255 72.57.248.0-72.57.250.255 72.57.252.0/22 Signature Algorithm: sha256WithRSAEncryption 29:48:29:88:fb:a7:1f:89:8e:92:52:80:4c:5f:d5:90:c8:7f: 86:27:1e:06:4c:66:ac:cf:ee:19:04:3a:45:23:1b:a6:5d:9f: ef:e6:7f:52:8a:66:bd:6d:4d:51:a7:2a:65:e2:e2:bf:01:47: b5:4f:24:d0:fe:d3:74:43:62:86:f7:92:df:be:23:81:ed:60: 30:f0:4d:3b:6b:13:bf:df:d9:8e:13:f9:9b:9e:d6:ef:69:5a: cf:1a:03:52:b9:3d:2d:fa:e5:1f:6f:69:33:bd:d0:5b:46:0c: 36:4a:88:20:d5:6d:a4:ec:23:7d:d8:9a:30:4d:9a:92:54:3c: 6e:03:af:64:b4:46:4a:b0:8d:89:bf:fc:eb:fd:f9:7d:11:c5: 6c:9f:b4:0f:de:09:49:b9:4f:43:6a:47:e3:53:51:0d:24:51: db:86:73:19:bc:11:90:cb:b3:7e:57:e3:5b:57:19:1f:cd:15: 80:a7:67:36:a5:e9:fb:7d:bc:c1:b4:1f:84:52:04:14:b2:b0: 47:24:50:bf:46:4b:13:15:53:6a:5d:4e:d4:2f:b3:1f:f7:58: 6e:42:30:07:05:b3:a0:10:b2:84:b6:e0:21:8e:15:93:4d:ba: 90:01:74:d3:22:76:22:ab:34:bb:6b:60:18:31:fd:ca:e2:bb: a6:11:6d:3e -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG Mzc2OUI0REUwHhcNMjYxMDA0MjA0MTE0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyYjllYS0yMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoj+K1CvJjb6ON5bGe9zhuDNIgrHoLhpLvxDaJGXfEqkzsg6vP+2QlSAKPSa0 qZI+Era6pO4skBaxPzH8xNe/Af4zkvCIrXQq8dXZxODkvPPU0Fx0Ps7yH/wZvALv FFmwbUywR6t+qY6oDP2iAwGAb2kkcC+ZtShWarRu4X+0tcERMHO0mbYsQ3Gm1nO1 YaEmJLQU9ydVdHjpVSyHAlamS0GWSp20tSC8TvtFfhxWwA60Vaq0guizS89e0FhP KtsvNAX/lZ2xTQPutSZMJP8+oLoX7iQwVfXt7r4IW4Kk15kMe0XjrRMRRJMsAMO3 JjkyDQtIJWpVIAeX7hefghc/SwIDAQABo4ICfDCCAngwHQYDVR0OBBYEFK7msFdo Yibp2yI9FytZUJ/xFIbcMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvODQ0QTE0MEFD NUYxMTFGMDgzODI3NjFEQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAo BAIAATAiMAwDBABIOZEDBABIOZowDAMEA0g5+AMEAEg5+gMEAkg5/DANBgkqhkiG 9w0BAQsFAAOCAQEAKUgpiPunH4mOklKATF/VkMh/hiceBkxmrM/uGQQ6RSMbpl2f 7+Z/UopmvW1NUacqZeLivwFHtU8k0P7TdENihveS374jge1gMPBNO2sTv9/ZjhP5 m57W72lazxoDUrk9LfrlH29pM73QW0YMNkqIINVtpOwjfdiaME2aklQ8bgOvZLRG SrCNib/86/35fRHFbJ+0D94JSblPQ2pH41NRDSRR24ZzGbwRkMuzflfjW1cZH80V gKdnNqXp+328wbQfhFIEFLKwRyRQv0ZLExVTal1O1C+zH/dYbkIwBwWzoBCyhLbg IY4Vk026kAF00yJ2Iqs0u2tgGDH9yuK7phFtPg== -----END CERTIFICATE-----Generated at Tue Oct 20 09:20:29 2026 by rpki-client