$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa File: A1FA022EC60C11F08F496250C4F9AE02.roa (raw, json) Hash identifier: n2RtfX9lDmWPEncMTV8M7H8XKQDC6atYp58DA958e60= Subject key identifier: 3F:BA:6F:BE:D6:79:0D:63:26:5B:F7:F7:6A:00:7E:9D:EC:3D:37:5F Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 015C Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa Signing time: Sun 04 Oct 2026 20:41:04 +0000 ROA not before: Sun 04 Oct 2026 20:41:04 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 3491 IP address blocks: 72.57.128.0/22 maxlen: 24 72.57.132.0/23 maxlen: 24 72.57.134.0/24 maxlen: 24 72.57.182.0/24 maxlen: 24 72.57.183.0/24 maxlen: 24 72.57.184.0/24 maxlen: 24 72.57.196.0/24 maxlen: 24 72.57.198.0/24 maxlen: 24 72.57.202.0/24 maxlen: 24 72.57.204.0/24 maxlen: 24 72.57.206.0/24 maxlen: 24 72.57.207.0/24 maxlen: 24 72.57.208.0/24 maxlen: 24 72.57.238.0/23 maxlen: 24 72.57.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 20:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Oct 4 20:41:04 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac2b9e0-6a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:3d:e3:91:07:d9:0e:56:15:f1:09:b2:7c: 8c:6c:48:35:14:ce:9b:c6:eb:f0:92:64:a5:c9:a0: 35:80:e9:15:5f:7e:83:ab:37:ac:80:08:5f:82:40: 54:39:31:3d:23:65:e7:86:e6:96:c1:fa:d2:83:a5: e9:f4:45:b6:b3:a5:50:66:91:83:1b:b4:1d:2d:69: 9a:c7:6a:f0:b3:e7:e5:64:ef:2c:f1:2f:03:58:41: c7:44:45:2f:57:0f:d1:fe:db:15:a7:df:a8:37:79: e1:59:40:c0:7a:5f:b5:65:58:a0:9e:4f:f8:99:b9: e9:f5:74:d9:8c:73:ca:89:8f:a9:19:38:0f:7c:39: 08:d9:51:e3:07:b6:fd:c6:3f:bc:f1:81:51:47:dc: 31:00:5f:5a:d2:fc:09:62:3b:04:87:8b:9b:ff:21: 9f:42:99:60:9c:6e:00:0a:88:57:4a:cb:8f:f3:e1: 8c:4d:61:b4:40:a1:ae:3c:7e:10:7e:bb:a3:45:fc: 44:ca:75:f9:06:db:d1:7b:07:87:25:cd:08:8b:f8: 38:3f:51:80:6c:96:6b:40:e3:e2:58:bb:76:f5:76: 53:02:5f:f2:ff:b5:ce:ac:5c:d9:0f:38:af:2e:b3: 4b:0c:39:66:f8:39:97:6d:81:97:94:e1:24:e4:18: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BA:6F:BE:D6:79:0D:63:26:5B:F7:F7:6A:00:7E:9D:EC:3D:37:5F X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 72.57.128.0-72.57.134.255 72.57.182.0-72.57.184.255 72.57.196.0/24 72.57.198.0/24 72.57.202.0/24 72.57.204.0/24 72.57.206.0-72.57.208.255 72.57.238.0-72.57.255.255 Signature Algorithm: sha256WithRSAEncryption 57:aa:de:ba:32:ae:0d:30:34:f6:f4:2e:0c:cd:5d:63:d0:35: 96:2c:79:1d:f1:03:6f:ca:87:22:c1:80:57:4e:16:1b:c7:8e: 72:27:c9:5e:60:12:6c:4c:5d:6a:22:b7:34:40:f2:9b:c7:09: 26:4f:28:24:38:c9:32:9e:b8:82:21:0b:97:54:6f:4a:2d:e8: 75:82:8b:7c:bb:8d:e1:af:2b:97:b1:bd:c5:1c:ff:24:7a:6c: 12:9d:82:cd:71:b5:20:17:27:8b:c3:16:c8:df:ee:4b:3c:fb: 8a:bb:5a:cd:b6:a5:10:30:af:ed:0e:33:72:18:1d:e6:73:41: 31:da:39:d7:bb:e4:86:ee:97:72:68:d2:1a:a6:c9:95:cc:80: 6d:46:0d:d9:d9:2f:49:41:9c:aa:24:8e:44:f1:09:6c:2f:09: fb:39:7e:60:9e:5e:7b:8c:72:b4:4c:c1:59:dc:89:6a:8e:60: fd:6e:d7:b7:43:15:c3:19:f8:58:64:d0:72:c6:cd:cb:d4:6f: 2e:bb:68:2e:c3:04:1a:69:3c:bb:6b:83:5c:98:98:37:23:39: 43:9b:36:55:8c:aa:33:58:c6:2b:95:98:08:cf:68:fe:e1:96: 87:92:f7:a0:c7:62:63:bf:17:ce:f9:a0:91:dc:da:d6:84:8c: 17:0f:df:8a -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG Mzc2OUI0REUwHhcNMjYxMDA0MjA0MTA0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyYjllMC02YTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpQ945EH2Q5WFfEJsnyMbEg1FM6bxuvwkmSlyaA1gOkVX36DqzesgAhfgkBU OTE9I2XnhuaWwfrSg6Xp9EW2s6VQZpGDG7QdLWmax2rws+flZO8s8S8DWEHHREUv Vw/R/tsVp9+oN3nhWUDAel+1ZVignk/4mbnp9XTZjHPKiY+pGTgPfDkI2VHjB7b9 xj+88YFRR9wxAF9a0vwJYjsEh4ub/yGfQplgnG4ACohXSsuP8+GMTWG0QKGuPH4Q frujRfxEynX5BtvReweHJc0Ii/g4P1GAbJZrQOPiWLt29XZTAl/y/7XOrFzZDziv LrNLDDlm+DmXbYGXlOEk5BiPVwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFD+6b77W eQ1jJlv392oAfp3sPTdfMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvQTFGQTAyMkVD NjBDMTFGMDhGNDk2MjUwQzRGOUFFMDIucm9hMGgGCCsGAQUFBwEHAQH/BFkwVzBV BAIAATBPMAwDBAdIOYADBABIOYYwDAMEAUg5tgMEAEg5uAMEAEg5xAMEAEg5xgME AEg5ygMEAEg5zDAMAwQBSDnOAwQASDnQMAsDBAFIOe4DAwFIODANBgkqhkiG9w0B AQsFAAOCAQEAV6reujKuDTA09vQuDM1dY9A1lix5HfEDb8qHIsGAV04WG8eOcifJ XmASbExdaiK3NEDym8cJJk8oJDjJMp64giELl1RvSi3odYKLfLuN4a8rl7G9xRz/ JHpsEp2CzXG1IBcni8MWyN/uSzz7irtazbalEDCv7Q4zchgd5nNBMdo517vkhu6X cmjSGqbJlcyAbUYN2dkvSUGcqiSORPEJbC8J+zl+YJ5ee4xytEzBWdyJao5g/W7X t0MVwxn4WGTQcsbNy9RvLrtoLsMEGmk8u2uDXJiYNyM5Q5s2VYyqM1jGK5WYCM9o /uGWh5L3oMdiY78Xzvmgkdza1oSMFw/fig== -----END CERTIFICATE-----Generated at Wed Oct 21 15:27:33 2026 by rpki-client