$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa File: A1FA022EC60C11F08F496250C4F9AE02.roa (raw, json) Hash identifier: 44akUTnCH1HDsJMsoNnyoAJdCMH1NwTn5fLJKlmUzr8= Subject key identifier: 23:1E:24:C9:46:1E:13:C5:92:EF:5A:DB:14:9A:4F:10:FC:4E:AE:26 Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 010F Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa Signing time: Tue 11 Aug 2026 13:09:14 +0000 ROA not before: Tue 11 Aug 2026 13:09:14 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 3491 IP address blocks: 72.57.128.0/22 maxlen: 24 72.57.132.0/23 maxlen: 24 72.57.134.0/24 maxlen: 24 72.57.182.0/24 maxlen: 24 72.57.183.0/24 maxlen: 24 72.57.184.0/24 maxlen: 24 72.57.196.0/24 maxlen: 24 72.57.198.0/24 maxlen: 24 72.57.202.0/24 maxlen: 24 72.57.204.0/24 maxlen: 24 72.57.206.0/24 maxlen: 24 72.57.207.0/24 maxlen: 24 72.57.208.0/24 maxlen: 24 72.57.238.0/23 maxlen: 24 72.57.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 20:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Aug 11 13:09:14 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a7b1ef9-80bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:70:4c:16:27:06:35:f6:ef:ef:7c:66:06: b0:76:e8:d8:d7:02:8c:af:46:43:44:81:12:f7:99: 02:9e:b6:39:70:ac:0c:6b:dd:ef:28:3d:7f:d6:da: ed:72:82:4e:4c:e0:e0:4b:7e:7e:ea:40:38:70:b9: 26:97:8d:43:10:5f:7e:70:ce:94:4e:b7:54:00:7a: a3:6c:7b:d5:a1:86:3a:11:e3:55:75:05:75:5f:39: fe:06:c0:d5:fc:c1:a3:7c:b7:ce:35:63:e8:c0:ef: 92:4e:c7:96:4c:3b:45:2a:40:ab:1d:a9:b6:63:92: f3:d5:40:69:3a:be:71:56:c1:8c:30:46:45:8d:67: a0:0c:44:34:e5:ad:fd:34:2c:2f:da:c5:72:0e:b1: fa:cc:5d:45:0b:9d:43:d4:11:22:5c:b4:bd:29:ae: d6:3c:5c:c3:5b:ad:9d:5c:5c:9c:25:f5:9f:f4:92: 09:f9:c9:7b:67:8b:00:d9:7e:b9:66:46:bf:fe:95: 54:de:d2:77:b6:78:79:de:30:a3:6d:9e:12:e6:12: 90:16:36:19:ab:c7:3a:19:21:4e:5d:02:48:75:f0: 6a:bf:ab:0d:45:52:8d:bc:8c:71:36:cc:a7:10:60: 20:25:71:3a:13:02:d4:16:aa:49:92:a4:de:de:b7: ba:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1E:24:C9:46:1E:13:C5:92:EF:5A:DB:14:9A:4F:10:FC:4E:AE:26 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 72.57.128.0-72.57.134.255 72.57.182.0-72.57.184.255 72.57.196.0/24 72.57.198.0/24 72.57.202.0/24 72.57.204.0/24 72.57.206.0-72.57.208.255 72.57.238.0-72.57.255.255 Signature Algorithm: sha256WithRSAEncryption 52:27:09:29:85:f2:45:fe:8e:ba:da:4d:e2:84:83:e7:57:b5: 51:62:cd:43:c1:e1:47:ae:51:c0:cc:59:23:63:1a:c5:d4:35: 49:1a:69:b2:56:07:0d:13:55:19:be:d4:73:e3:a8:59:47:6a: 98:00:71:85:9b:f9:cf:ef:82:81:33:5f:25:be:b2:e2:6a:7b: 50:05:ca:34:f9:33:50:25:5e:0f:06:16:cc:d6:59:cb:70:32: c0:83:a4:b6:af:a6:ff:a2:58:f8:9a:6d:3c:fc:70:08:c2:37: 22:05:67:48:ab:47:ca:0e:f8:68:c7:c2:37:4e:17:66:8c:e3: a1:91:69:5c:13:e2:8f:78:85:f3:f2:f2:c6:20:48:f0:76:30: 64:ec:a4:6b:80:39:84:20:f1:28:5b:f1:23:f5:13:0e:1d:05: 52:fa:b0:e9:0b:04:1c:66:6a:d8:a1:02:41:a5:33:e9:17:ea: 38:a9:d6:ea:90:73:af:17:aa:55:f4:14:3e:d3:a4:0d:6e:d3: 05:e9:5d:be:9b:ca:e7:58:40:73:fc:3e:22:e3:d9:1a:0a:94: 08:e1:5b:3a:3f:5a:9a:ed:b8:57:50:2b:51:a1:0d:32:df:6e: cc:68:32:c5:70:20:60:d7:b6:d1:24:d3:61:85:d6:19:cc:12: cf:88:11:81 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG Mzc2OUI0REUwHhcNMjYwODExMTMwOTE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdiMWVmOS04MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnX9wTBYnBjX27+98ZgawdujY1wKMr0ZDRIES95kCnrY5cKwMa93vKD1/1trt coJOTODgS35+6kA4cLkml41DEF9+cM6UTrdUAHqjbHvVoYY6EeNVdQV1Xzn+BsDV /MGjfLfONWPowO+STseWTDtFKkCrHam2Y5Lz1UBpOr5xVsGMMEZFjWegDEQ05a39 NCwv2sVyDrH6zF1FC51D1BEiXLS9Ka7WPFzDW62dXFycJfWf9JIJ+cl7Z4sA2X65 Zka//pVU3tJ3tnh53jCjbZ4S5hKQFjYZq8c6GSFOXQJIdfBqv6sNRVKNvIxxNsyn EGAgJXE6EwLUFqpJkqTe3re66QIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFCMeJMlG HhPFku9a2xSaTxD8Tq4mMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvQTFGQTAyMkVD NjBDMTFGMDhGNDk2MjUwQzRGOUFFMDIucm9hMGgGCCsGAQUFBwEHAQH/BFkwVzBV BAIAATBPMAwDBAdIOYADBABIOYYwDAMEAUg5tgMEAEg5uAMEAEg5xAMEAEg5xgME AEg5ygMEAEg5zDAMAwQBSDnOAwQASDnQMAsDBAFIOe4DAwFIODANBgkqhkiG9w0B AQsFAAOCAQEAUicJKYXyRf6OutpN4oSD51e1UWLNQ8HhR65RwMxZI2MaxdQ1SRpp slYHDRNVGb7Uc+OoWUdqmABxhZv5z++CgTNfJb6y4mp7UAXKNPkzUCVeDwYWzNZZ y3AywIOktq+m/6JY+JptPPxwCMI3IgVnSKtHyg74aMfCN04XZozjoZFpXBPij3iF 8/LyxiBI8HYwZOyka4A5hCDxKFvxI/UTDh0FUvqw6QsEHGZq2KECQaUz6RfqOKnW 6pBzrxeqVfQUPtOkDW7TBeldvpvK51hAc/w+IuPZGgqUCOFbOj9amu24V1ArUaEN Mt9uzGgyxXAgYNe20STTYYXWGcwSz4gRgQ== -----END CERTIFICATE-----Generated at Thu Sep 3 20:47:51 2026 by rpki-client