
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/844A140AC5F111F08382761DC4F9AE02.roa
File: 844A140AC5F111F08382761DC4F9AE02.roa (raw, json)
Hash identifier: i9mhRJ5avRniNa/Or9GSMjn28Yf76/Ztdl3z8dFyYH0=
Subject key identifier: 14:05:86:42:37:8A:C4:E1:C3:E9:F1:C1:06:F7:0E:B5:41:19:99:41
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: 82
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/844A140AC5F111F08382761DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:32:15 +0000
ROA not before: Thu 20 Nov 2025 09:15:55 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 56286
IP address blocks: 72.57.145.0/24 maxlen: 24
72.57.146.0/23 maxlen: 24
72.57.148.0/22 maxlen: 24
72.57.152.0/23 maxlen: 24
72.57.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Nov 20 09:15:55 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4862f-a520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:94:09:0b:05:be:ae:df:09:cc:90:45:c7:
d1:fa:a8:34:2f:25:b9:6a:bb:f8:31:25:c0:8e:e9:
a4:e8:f2:d1:87:25:4c:fb:74:10:25:1c:a6:84:cd:
f8:62:20:e9:05:2e:83:b7:dc:ce:90:7c:c1:94:3d:
5c:bb:67:d5:bc:ae:42:59:00:d6:f4:c8:81:2b:de:
7e:32:09:f5:42:cf:b9:2b:f9:5a:de:66:ca:af:d4:
78:c0:36:0f:03:54:67:86:4b:2e:ef:0c:6c:cb:cd:
47:46:ff:8f:71:40:99:2e:4e:ff:dc:c6:03:a2:a6:
5e:93:e6:f0:48:4f:2d:70:82:4b:50:6e:e3:ea:c2:
d9:58:4f:d3:7e:aa:7f:eb:6d:66:f1:7f:be:fa:5c:
19:bb:d5:58:19:b5:85:87:70:bc:af:63:6d:7b:20:
4a:30:0a:15:de:86:17:64:ab:c9:4a:79:9a:2c:8d:
eb:1e:7d:f1:2a:f6:e4:f0:0d:46:39:15:e2:46:ca:
75:28:a5:77:bb:d5:71:66:45:fa:99:77:fe:c0:a0:
ae:d5:33:9f:9a:f6:71:f0:1d:4a:24:3a:4d:40:01:
84:0f:4a:fa:9f:cd:4c:6d:4b:7f:30:5b:81:21:95:
3b:2a:b7:b8:0b:20:8c:62:68:e8:23:c1:cd:30:a3:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:05:86:42:37:8A:C4:E1:C3:E9:F1:C1:06:F7:0E:B5:41:19:99:41
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/844A140AC5F111F08382761DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
72.57.145.0-72.57.154.255
Signature Algorithm: sha256WithRSAEncryption
b2:ff:38:e3:1e:a3:29:92:d4:68:48:a9:73:89:b2:34:5a:4e:
24:a7:68:fb:da:ef:8c:c6:c3:c0:52:42:63:14:04:d2:e4:e5:
59:ce:4d:14:5d:c5:50:39:ca:ce:39:49:a2:03:9f:72:9e:14:
af:0d:05:f7:85:0c:4a:99:0d:3b:e6:04:df:05:4e:f7:1c:fa:
8a:fd:f1:49:8c:ca:f4:1b:b3:83:44:83:7a:24:00:14:90:f1:
1a:b9:63:cd:b3:c9:e5:26:c6:28:91:d8:e7:6e:2f:c9:df:66:
9a:3b:8d:de:e1:2f:a8:00:a4:79:fc:35:24:68:c8:bf:59:c3:
b5:62:b1:8a:79:9c:0d:e4:d8:7a:19:6f:01:90:b1:06:f0:2e:
98:9c:f7:30:71:3f:45:bc:99:84:46:5e:cd:c3:b0:af:f0:dd:
f0:e0:6b:95:8f:8a:a3:d4:f4:71:39:bb:49:e5:31:0e:bc:10:
49:48:22:27:28:c7:97:99:9e:7a:a0:09:55:5f:52:f0:09:4b:
9a:89:eb:3a:ae:77:c9:f0:de:80:2c:28:3f:35:37:e4:6d:21:
e1:0d:60:4a:33:b7:35:1e:13:c9:5b:21:8a:63:a7:70:91:65:
98:a1:ce:50:3f:f6:47:45:14:b6:20:94:27:3f:49:79:6b:2f:
4b:29:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:51 2026 by rpki-client