$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B1DF5F34686B11F189F82205A247A888.roa File: B1DF5F34686B11F189F82205A247A888.roa (raw, json) Hash identifier: mU4R87DuJLyj/JNQSQ+p33/47i5SjPvVktLf6I2bCgs= Subject key identifier: 47:73:8C:9A:40:81:77:AA:E2:A6:09:AF:AA:3D:35:76:A5:F0:D0:62 Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 0109 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B1DF5F34686B11F189F82205A247A888.roa Signing time: Mon 10 Aug 2026 07:52:54 +0000 ROA not before: Mon 10 Aug 2026 07:52:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 214432 IP address blocks: 74.52.7.0/24 maxlen: 24 74.52.28.0/24 maxlen: 24 74.52.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 20:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Aug 10 07:52:54 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a798356-0b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:74:0d:76:52:06:64:1d:08:04:46:73:d2: de:7d:27:b6:9e:26:84:e6:8b:a7:e1:16:ba:e8:9f: ef:cc:7e:b1:f8:bc:7b:44:67:6b:fd:46:b6:f6:47: 5b:d9:f4:69:94:c7:c2:fb:44:a6:f9:05:78:8a:55: 42:8e:7e:dd:4d:7f:ce:f3:a3:46:13:9e:6a:52:d5: 0a:dc:bd:49:e8:25:5d:49:3b:00:16:6a:2c:79:a5: 5a:be:d2:8c:d7:48:8d:49:c5:1b:1c:cf:a5:2d:e5: d3:13:db:2c:37:38:55:25:53:8d:3a:bf:05:18:58: 29:74:54:53:69:1f:c7:fd:4e:da:76:33:ab:b7:b5: 82:48:e4:61:64:44:cc:31:ef:9d:1b:79:e7:40:00: de:09:1a:33:3e:e7:cf:ba:9a:95:1a:59:e2:3b:6c: b1:f2:03:8e:61:5f:84:4a:4c:4c:4c:81:30:80:6c: 19:06:fb:18:fc:4e:ce:e1:86:3d:9e:ad:2e:3f:7d: 94:7e:d4:c9:c7:cd:4d:26:be:63:6c:00:55:c2:4f: f2:e7:6a:b9:a5:ed:16:5d:8c:25:bd:9d:82:38:6e: 9f:1f:2d:0c:a1:d5:a1:26:cd:15:69:9f:cd:43:23: 39:9c:66:de:74:f0:22:b9:ad:e5:7c:16:b0:d5:9b: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:73:8C:9A:40:81:77:AA:E2:A6:09:AF:AA:3D:35:76:A5:F0:D0:62 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B1DF5F34686B11F189F82205A247A888.roa sbgp-ipAddrBlock: critical IPv4: 74.52.7.0/24 74.52.28.0/23 Signature Algorithm: sha256WithRSAEncryption 20:19:0f:e8:f0:b6:a1:64:29:4b:a7:8a:b2:77:b9:c6:91:b5: 1c:3c:51:b3:51:25:04:8a:6f:29:53:f7:30:97:73:83:23:55: bc:22:19:bd:8a:ae:f3:0c:01:0f:f1:98:31:06:b7:d7:a7:81: 24:f9:a4:31:d0:94:e7:48:2d:a9:d1:fc:fa:68:7f:65:2e:90: 86:89:52:3d:4e:79:a2:a7:dc:bd:6b:16:4f:d7:e0:20:a8:ec: 5d:64:e7:63:75:49:b5:c6:79:9c:73:3b:69:e4:ef:6e:a5:28: 2e:7a:a3:9f:f2:5d:da:c4:54:92:18:96:c9:02:f8:bb:2f:29: 2d:2f:32:74:a6:ba:af:97:2c:7b:4d:ce:df:6e:f3:36:87:3b: 81:f4:aa:96:67:d8:4c:7c:cc:db:39:ba:2f:0d:35:9f:83:fc: 85:27:89:68:3c:5b:95:ba:30:59:cd:9e:0a:b7:9d:01:a7:74: fd:92:f1:2c:a5:8c:ff:c7:81:ac:39:fa:f8:81:cf:47:19:05: d0:92:0e:d1:f0:ab:d1:8e:4c:08:38:83:bd:0a:18:ab:e5:cf: e5:15:d0:c4:cb:ed:98:9e:3c:32:6f:09:ed:88:c9:e0:1a:16: 8e:be:71:9f:b9:d1:1e:ca:bb:49:7f:3e:fb:6b:c1:e6:8f:cf: 1a:8c:9f:79 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG Mzc2OUI0REUwHhcNMjYwODEwMDc1MjU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc5ODM1Ni0wYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokJ0DXZSBmQdCARGc9LefSe2niaE5oun4Ra66J/vzH6x+Lx7RGdr/Ua29kdb 2fRplMfC+0Sm+QV4ilVCjn7dTX/O86NGE55qUtUK3L1J6CVdSTsAFmoseaVavtKM 10iNScUbHM+lLeXTE9ssNzhVJVONOr8FGFgpdFRTaR/H/U7adjOrt7WCSORhZETM Me+dG3nnQADeCRozPufPupqVGlniO2yx8gOOYV+ESkxMTIEwgGwZBvsY/E7O4YY9 nq0uP32UftTJx81NJr5jbABVwk/y52q5pe0WXYwlvZ2COG6fHy0ModWhJs0VaZ/N QyM5nGbedPAiua3lfBaw1ZuyMQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEdzjJpA gXeq4qYJr6o9NXal8NBiMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvQjFERjVGMzQ2 ODZCMTFGMTg5RjgyMjA1QTI0N0E4ODgucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQASjQHAwQBSjQcMA0GCSqGSIb3DQEBCwUAA4IBAQAgGQ/o8LahZClL p4qyd7nGkbUcPFGzUSUEim8pU/cwl3ODI1W8Ihm9iq7zDAEP8ZgxBrfXp4Ek+aQx 0JTnSC2p0fz6aH9lLpCGiVI9Tnmip9y9axZP1+AgqOxdZOdjdUm1xnmccztp5O9u pSgueqOf8l3axFSSGJbJAvi7LyktLzJ0prqvlyx7Tc7fbvM2hzuB9KqWZ9hMfMzb ObovDTWfg/yFJ4loPFuVujBZzZ4Kt50Bp3T9kvEspYz/x4GsOfr4gc9HGQXQkg7R 8KvRjkwIOIO9Chir5c/lFdDEy+2YnjwybwntiMngGhaOvnGfudEeyrtJfz77a8Hm j88ajJ95 -----END CERTIFICATE-----Generated at Thu Sep 3 20:05:42 2026 by rpki-client