$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa File: A1FA022EC60C11F08F496250C4F9AE02.roa (raw, json) Hash identifier: MDzGdNCdYO5kEPXtS7TyIQqy0+x2zenoCh7GnwVkOyk= Subject key identifier: 97:13:C5:DC:FA:78:A5:88:B9:8D:2A:41:13:BF:E1:49:28:5A:A2:D7 Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 85 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:32:18 +0000 ROA not before: Fri 19 Dec 2025 19:35:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 3491 IP address blocks: 72.57.128.0/22 maxlen: 24 72.57.132.0/23 maxlen: 24 72.57.134.0/24 maxlen: 24 72.57.238.0/23 maxlen: 24 72.57.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 20:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Dec 19 19:35:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48632-39ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:91:ed:df:c5:c1:4c:70:f6:f2:14:67:fe: 08:a1:ff:35:ac:fe:a5:aa:30:54:62:e7:ee:49:a6: ab:ff:4d:3a:b0:45:6e:88:1a:46:83:c4:ce:36:25: e6:b2:d0:42:5f:72:9a:fa:96:37:83:02:a5:d8:3f: 6d:3d:82:c1:66:98:7f:bd:43:51:de:1d:86:07:1b: ad:dd:ea:2b:15:c0:e5:a6:26:b3:a2:9a:26:63:a0: 00:7d:77:c3:48:3f:c8:a2:78:19:69:92:c1:1b:de: 3f:5a:27:70:08:b4:50:21:50:d4:61:4e:09:a6:fb: 21:2b:37:44:df:ff:1f:6b:50:1d:a5:b3:97:38:63: 08:d8:d3:cb:b5:d3:79:27:54:b7:11:31:94:23:a9: 58:68:f8:e4:f0:90:c4:aa:cb:77:1c:46:70:2f:2b: 70:7e:79:f2:88:bf:aa:57:63:0c:52:7b:91:8e:5a: 6f:92:28:fb:ba:06:c3:81:17:72:4e:c4:a8:06:10: 00:e4:69:d7:c2:da:d2:d5:be:f9:9b:2b:76:8f:66: d1:66:71:ea:97:39:0a:a1:78:92:95:5d:30:9d:36: fb:05:29:1c:24:85:a6:46:62:c4:32:89:ec:f1:d8: 27:6a:52:31:fc:77:43:ed:f7:67:8d:c5:ec:cf:b1: 27:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:13:C5:DC:FA:78:A5:88:B9:8D:2A:41:13:BF:E1:49:28:5A:A2:D7 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 72.57.128.0-72.57.134.255 72.57.238.0-72.57.255.255 Signature Algorithm: sha256WithRSAEncryption 4e:e4:7c:cb:ca:69:35:0e:08:41:41:9f:69:5c:72:c6:ab:3c: 70:32:83:a0:ca:4a:ff:3e:52:9a:0b:14:50:ac:14:ef:84:c2: 39:9a:63:42:a7:91:ea:bd:d8:c5:43:dd:22:3a:ab:b0:66:af: c3:38:66:f6:a1:15:3b:a1:9e:3f:22:7e:f8:d4:35:7d:e2:f1: e4:0e:ae:63:81:18:32:28:a8:d6:c3:8f:d6:ce:49:b3:15:c1: a1:db:95:15:e6:97:2c:53:e1:24:02:92:ba:96:64:ea:34:a6: 44:7c:d2:46:6c:13:1f:86:52:03:30:5f:bf:ee:15:30:d4:1e: a0:d9:24:80:c4:df:99:35:97:c7:af:b4:03:da:59:04:a5:f8: 86:a4:1e:40:37:c5:14:11:26:f0:35:4e:72:21:46:27:0e:09: 1a:0f:cf:69:48:0b:ef:bd:2e:75:f6:c1:f2:ba:81:d7:18:b0: 07:e9:71:5b:dd:f0:fb:d4:09:50:0a:2c:2e:aa:29:64:65:8f: 64:b5:de:ab:f1:88:5b:1d:d9:5f:0a:fc:18:a5:a6:92:3f:c4: cb:e1:e5:58:27:bd:32:3a:b9:d7:03:e3:5e:af:8c:00:f1:ca: cd:a8:1f:8c:82:b1:9d:c1:72:67:47:c5:32:cf:1a:4f:ec:be: 91:b5:08:95 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG Mzc2OUI0REUwHhcNMjUxMjE5MTkzNTUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODYzMi0zOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UGR7d/FwUxw9vIUZ/4Iof81rP6lqjBUYufuSaar/006sEVuiBpGg8TONiXm stBCX3Ka+pY3gwKl2D9tPYLBZph/vUNR3h2GBxut3eorFcDlpiazopomY6AAfXfD SD/IongZaZLBG94/WidwCLRQIVDUYU4JpvshKzdE3/8fa1AdpbOXOGMI2NPLtdN5 J1S3ETGUI6lYaPjk8JDEqst3HEZwLytwfnnyiL+qV2MMUnuRjlpvkij7ugbDgRdy TsSoBhAA5GnXwtrS1b75myt2j2bRZnHqlzkKoXiSlV0wnTb7BSkcJIWmRmLEMons 8dgnalIx/HdD7fdnjcXsz7EnpQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJcTxdz6 eKWIuY0qQRO/4UkoWqLXMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvQTFGQTAyMkVD NjBDMTFGMDhGNDk2MjUwQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAh BAIAATAbMAwDBAdIOYADBABIOYYwCwMEAUg57gMDAUg4MA0GCSqGSIb3DQEBCwUA A4IBAQBO5HzLymk1DghBQZ9pXHLGqzxwMoOgykr/PlKaCxRQrBTvhMI5mmNCp5Hq vdjFQ90iOquwZq/DOGb2oRU7oZ4/In741DV94vHkDq5jgRgyKKjWw4/WzkmzFcGh 25UV5pcsU+EkApK6lmTqNKZEfNJGbBMfhlIDMF+/7hUw1B6g2SSAxN+ZNZfHr7QD 2lkEpfiGpB5AN8UUESbwNU5yIUYnDgkaD89pSAvvvS519sHyuoHXGLAH6XFb3fD7 1AlQCiwuqilkZY9ktd6r8YhbHdlfCvwYpaaSP8TL4eVYJ70yOrnXA+Ner4wA8crN qB+MgrGdwXJnR8UyzxpP7L6RtQiV -----END CERTIFICATE-----Generated at Wed Mar 4 10:08:55 2026 by rpki-client