$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/12A52794DD1211F0B41550BC5F6F56BC.roa File: 12A52794DD1211F0B41550BC5F6F56BC.roa (raw, json) Hash identifier: lew++iLuTuVRoqC+xKEJRL86TGNnlYqrVaVSmjno5u8= Subject key identifier: 22:D3:67:D9:84:F3:F2:30:AD:61:7E:E1:13:92:4B:8C:31:6C:5B:3F Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 0165 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/12A52794DD1211F0B41550BC5F6F56BC.roa Signing time: Sun 04 Oct 2026 20:41:23 +0000 ROA not before: Sun 04 Oct 2026 20:41:23 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 984 IP address blocks: 72.57.135.0/24 maxlen: 24 72.57.136.0/21 maxlen: 24 72.57.144.0/24 maxlen: 24 72.57.145.0/24 maxlen: 24 72.57.146.0/23 maxlen: 24 72.57.148.0/22 maxlen: 24 72.57.152.0/23 maxlen: 24 72.57.154.0/24 maxlen: 24 72.57.155.0/24 maxlen: 24 72.57.156.0/22 maxlen: 24 72.57.160.0/22 maxlen: 24 72.57.164.0/24 maxlen: 24 72.57.165.0/24 maxlen: 24 72.57.166.0/23 maxlen: 24 72.57.168.0/21 maxlen: 24 72.57.176.0/22 maxlen: 24 72.57.180.0/24 maxlen: 24 72.57.181.0/24 maxlen: 24 72.57.182.0/23 maxlen: 24 72.57.184.0/23 maxlen: 24 72.57.186.0/23 maxlen: 24 72.57.188.0/22 maxlen: 24 72.57.192.0/22 maxlen: 24 72.57.196.0/22 maxlen: 24 72.57.200.0/21 maxlen: 24 72.57.208.0/20 maxlen: 24 72.57.224.0/22 maxlen: 24 72.57.228.0/22 maxlen: 24 72.57.232.0/22 maxlen: 24 72.57.236.0/23 maxlen: 24 72.57.238.0/23 maxlen: 24 72.57.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Oct 4 20:41:23 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac2b9f2-5b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:71:02:44:17:37:9b:74:69:60:a5:08:8e: 66:11:ad:b0:ba:4d:5d:97:24:e0:91:65:85:e0:ec: d7:de:e9:db:0e:42:cb:0e:f1:2f:fa:bf:33:bc:14: 0b:82:61:3f:3e:17:17:84:96:eb:e4:64:2b:d8:bf: 58:a5:6a:a9:9c:b2:10:00:14:13:85:f9:35:73:78: 13:5a:51:b9:b6:dc:f0:6e:96:f8:55:9e:12:f0:db: 63:10:ea:e7:3c:97:31:e5:03:9d:30:44:bb:81:70: d2:1f:5b:3c:7f:2a:2f:10:c2:93:69:9f:3c:ef:39: 3b:e8:ec:42:9d:3f:e1:03:80:0a:3a:05:9f:40:18: 9a:1b:23:c2:c8:2d:fd:cd:8e:3b:5e:25:2b:91:5f: 77:f7:2e:b4:23:f8:d6:64:3c:cc:86:40:cd:ee:f4: 65:10:a6:24:a4:20:f3:a6:66:45:5c:1e:5a:36:81: b4:d7:8e:ed:cf:5c:78:8b:2e:e1:7e:be:46:d7:14: 06:03:e9:b3:da:e2:cb:a9:3b:b9:1f:2a:8d:8b:d4: c5:27:4c:a8:5b:01:99:41:26:e6:85:15:0f:1e:d2: 9e:af:99:d5:f0:2b:d6:d9:84:71:28:2c:79:e3:f3: ca:f4:2e:ba:e5:54:36:c0:8f:d4:a3:00:3d:5d:54: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D3:67:D9:84:F3:F2:30:AD:61:7E:E1:13:92:4B:8C:31:6C:5B:3F X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/12A52794DD1211F0B41550BC5F6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 72.57.135.0-72.57.255.255 Signature Algorithm: sha256WithRSAEncryption a1:56:7e:09:ea:ee:0d:66:83:5e:4e:52:89:ae:df:f4:e4:2a: f5:ef:7f:fe:9a:e4:ae:5c:86:d5:41:ea:35:84:8a:a4:2c:94: ee:cd:1a:00:88:ec:ed:41:ab:58:19:64:fe:d7:ab:ef:93:00: 7a:46:17:32:c1:99:cb:e8:87:1b:55:45:80:14:be:15:c1:b1: 52:1e:98:f9:1c:d8:28:a0:9d:6f:be:96:43:40:01:4e:66:04: 43:15:79:c6:af:73:17:c6:6f:f3:6b:13:3a:f7:7d:5f:7e:8d: 01:02:08:57:c5:18:51:77:f0:a4:8f:8c:d8:50:08:dc:6a:98: 4b:99:39:24:da:8e:68:8d:e2:d0:61:b1:da:54:c5:96:3b:80: 9c:41:af:60:b8:c2:7d:0d:ae:1c:3f:3e:85:27:ab:46:f3:4a: 00:c8:a0:cc:1b:c2:bf:17:af:3c:bc:4e:7d:d4:3b:59:59:ca: b5:5a:f3:d0:b8:82:74:45:0b:ab:70:a0:20:40:f3:69:d1:e8: 4c:6c:7f:23:3e:56:3c:88:2e:5a:7e:d4:07:9f:21:c5:a5:00: 39:d1:43:58:e2:c7:23:26:ec:8b:8f:59:23:21:8f:93:35:99: 79:dd:37:01:96:d6:51:d4:a5:d1:7e:3a:50:97:3c:3c:87:ce: 5b:1e:97:e5 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG Mzc2OUI0REUwHhcNMjYxMDA0MjA0MTIzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyYjlmMi01YjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQZxAkQXN5t0aWClCI5mEa2wuk1dlyTgkWWF4OzX3unbDkLLDvEv+r8zvBQL gmE/PhcXhJbr5GQr2L9YpWqpnLIQABQThfk1c3gTWlG5ttzwbpb4VZ4S8NtjEOrn PJcx5QOdMES7gXDSH1s8fyovEMKTaZ887zk76OxCnT/hA4AKOgWfQBiaGyPCyC39 zY47XiUrkV939y60I/jWZDzMhkDN7vRlEKYkpCDzpmZFXB5aNoG0147tz1x4iy7h fr5G1xQGA+mz2uLLqTu5HyqNi9TFJ0yoWwGZQSbmhRUPHtKer5nV8CvW2YRxKCx5 4/PK9C665VQ2wI/UowA9XVQmxQIDAQABo4ICZzCCAmMwHQYDVR0OBBYEFCLTZ9mE 8/IwrWF+4ROSS4wxbFs/MB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvMTJBNTI3OTRE RDEyMTFGMEI0MTU1MEJDNUY2RjU2QkMucm9hMCYGCCsGAQUFBwEHAQH/BBcwFTAT BAIAATANMAsDBABIOYcDAwFIODANBgkqhkiG9w0BAQsFAAOCAQEAoVZ+CeruDWaD Xk5Sia7f9OQq9e9//prkrlyG1UHqNYSKpCyU7s0aAIjs7UGrWBlk/ter75MAekYX MsGZy+iHG1VFgBS+FcGxUh6Y+RzYKKCdb76WQ0ABTmYEQxV5xq9zF8Zv82sTOvd9 X36NAQIIV8UYUXfwpI+M2FAI3GqYS5k5JNqOaI3i0GGx2lTFljuAnEGvYLjCfQ2u HD8+hSerRvNKAMigzBvCvxevPLxOfdQ7WVnKtVrz0LiCdEULq3CgIEDzadHoTGx/ Iz5WPIguWn7UB58hxaUAOdFDWOLHIybsi49ZIyGPkzWZed03AZbWUdSl0X46UJc8 PIfOWx6X5Q== -----END CERTIFICATE-----Generated at Sun Oct 11 09:14:08 2026 by rpki-client