$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/D2647EFC503711F19AF4DBDECC833773.roa File: D2647EFC503711F19AF4DBDECC833773.roa (raw, json) Hash identifier: 96j5AlvWgWDsKvFFoC2LPQsYZNPXjF7kiQ3FirxrpKk= Subject key identifier: 39:96:65:82:48:67:C9:BC:7E:B2:5E:0A:2D:CF:15:6F:F5:7D:2D:95 Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 0150 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/D2647EFC503711F19AF4DBDECC833773.roa Signing time: Sun 04 Oct 2026 20:40:38 +0000 ROA not before: Sun 04 Oct 2026 20:40:38 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 154335 IP address blocks: 74.52.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 20:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Oct 4 20:40:38 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac2b9c6-b521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:d2:03:90:57:a7:08:0e:61:71:ab:02:72: f4:07:c0:32:05:d5:2f:f5:99:2d:1c:13:f7:79:b4: b5:a4:3e:ec:02:33:03:0d:25:60:34:13:ce:ed:79: 4e:2f:60:1d:b0:ed:73:92:35:98:60:18:ec:e4:75: 83:e1:14:39:48:c2:5a:cd:a3:24:c6:01:e3:2d:2d: 91:c1:5f:07:4c:fb:c7:4c:20:fd:21:14:e6:d0:3d: 03:11:67:a2:40:f5:ea:8f:0b:02:7b:aa:84:4b:70: bf:d5:69:b9:a9:39:8b:70:63:5d:43:58:c9:30:3b: 2e:e4:42:99:47:fe:d5:0d:ea:69:42:31:8f:4c:84: 13:23:31:cc:e5:31:a7:0e:34:d8:b8:68:b6:9c:d8: cd:a7:2c:e2:48:6c:5a:ef:b0:ff:39:64:46:40:b4: eb:43:74:57:d9:03:cd:a1:af:7e:92:26:57:75:fe: 63:d8:c0:fb:23:5e:02:cd:9d:70:51:d1:53:b8:6d: ff:eb:18:03:3a:92:7e:d2:a1:a1:8f:53:dd:ed:2b: e0:91:1b:4d:50:aa:0e:1f:3f:a5:35:37:af:b0:e2: e2:e6:d1:f1:63:d0:54:85:4d:03:06:1b:17:20:05: b2:79:b5:75:d5:c9:19:7e:3e:b4:46:e1:7d:71:f3: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:96:65:82:48:67:C9:BC:7E:B2:5E:0A:2D:CF:15:6F:F5:7D:2D:95 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/D2647EFC503711F19AF4DBDECC833773.roa sbgp-ipAddrBlock: critical IPv4: 74.52.16.0/22 Signature Algorithm: sha256WithRSAEncryption 72:4d:ed:72:f0:1f:70:48:13:b7:bb:3e:8b:dc:e4:36:cd:61: b9:f1:5e:a3:63:f6:1a:3f:94:b8:60:dd:7a:54:b8:d3:6b:9f: 2c:f6:42:92:b0:bf:5a:ea:5d:54:bb:9d:a2:07:31:28:1a:3e: 6f:f4:2b:fc:d2:da:bd:81:3d:f6:49:f6:fe:47:cc:10:f2:a0: 39:e5:e8:77:d9:3a:93:1b:e9:16:d0:47:f3:55:6c:2f:fa:6b: 82:4e:6f:78:85:24:cd:cb:43:c7:a8:e6:2e:6a:98:37:d2:28: ca:e9:3d:40:d2:dd:e9:dd:25:df:3c:ef:82:9c:81:6f:d1:f8: 12:82:78:00:7b:ff:47:57:cc:cd:01:41:ce:01:78:f5:cb:3d: 15:33:aa:f3:78:c5:43:38:81:65:a0:da:b5:f2:98:a3:cf:0f: eb:56:ef:ac:86:bc:3e:6d:1c:5c:e1:c9:16:bb:8b:ba:03:ca: 02:87:2f:fe:9f:2d:c8:2a:64:5b:d5:63:11:95:22:aa:a6:e0: c2:86:66:76:fe:e3:4f:df:25:ae:9c:2c:0e:72:df:de:55:3e: 02:6f:f6:c1:7c:74:4a:82:20:19:31:47:f4:35:45:6f:e6:72: 36:4a:b3:45:a9:b8:b6:c6:e8:38:5d:1f:01:7a:82:6f:1f:62: 9f:3c:76:78 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG Mzc2OUI0REUwHhcNMjYxMDA0MjA0MDM4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyYjljNi1iNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUzSA5BXpwgOYXGrAnL0B8AyBdUv9ZktHBP3ebS1pD7sAjMDDSVgNBPO7XlO L2AdsO1zkjWYYBjs5HWD4RQ5SMJazaMkxgHjLS2RwV8HTPvHTCD9IRTm0D0DEWei QPXqjwsCe6qES3C/1Wm5qTmLcGNdQ1jJMDsu5EKZR/7VDeppQjGPTIQTIzHM5TGn DjTYuGi2nNjNpyziSGxa77D/OWRGQLTrQ3RX2QPNoa9+kiZXdf5j2MD7I14CzZ1w UdFTuG3/6xgDOpJ+0qGhj1Pd7SvgkRtNUKoOHz+lNTevsOLi5tHxY9BUhU0DBhsX IAWyebV11ckZfj60RuF9cfNKoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDmWZYJI Z8m8frJeCi3PFW/1fS2VMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvRDI2NDdFRkM1 MDM3MTFGMTlBRjREQkRFQ0M4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCSjQQMA0GCSqGSIb3DQEBCwUAA4IBAQByTe1y8B9wSBO3uz6L3OQ2 zWG58V6jY/YaP5S4YN16VLjTa58s9kKSsL9a6l1Uu52iBzEoGj5v9Cv80tq9gT32 Sfb+R8wQ8qA55eh32TqTG+kW0EfzVWwv+muCTm94hSTNy0PHqOYuapg30ijK6T1A 0t3p3SXfPO+CnIFv0fgSgngAe/9HV8zNAUHOAXj1yz0VM6rzeMVDOIFloNq18pij zw/rVu+shrw+bRxc4ckWu4u6A8oChy/+ny3IKmRb1WMRlSKqpuDChmZ2/uNP3yWu nCwOct/eVT4Cb/bBfHRKgiAZMUf0NUVv5nI2SrNFqbi2xug4XR8BeoJvH2KfPHZ4 -----END CERTIFICATE-----Generated at Wed Oct 21 09:25:53 2026 by rpki-client