$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/147B50A8D70411EFA945F56EC4F9AE02.roa File: 147B50A8D70411EFA945F56EC4F9AE02.roa (raw, json) Hash identifier: xXg5LKqrNFr97kzU6vwPgTe9mcIPR6Zh6X95Hn8j0Lc= Subject key identifier: 97:BF:10:E6:14:E9:E7:BD:A2:04:55:83:3A:0C:6B:F3:5B:DF:FC:90 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3C00 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/147B50A8D70411EFA945F56EC4F9AE02.roa Signing time: Mon 06 Jul 2026 15:11:52 +0000 ROA not before: Mon 06 Jul 2026 15:11:52 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 17556 IP address blocks: 58.97.124.0/24 maxlen: 24 58.97.125.0/24 maxlen: 24 114.109.249.0/24 maxlen: 24 115.87.70.0/24 maxlen: 24 115.87.71.0/24 maxlen: 24 115.87.72.0/24 maxlen: 24 115.87.73.0/24 maxlen: 24 119.46.99.0/24 maxlen: 24 119.46.255.0/24 maxlen: 24 124.120.219.0/24 maxlen: 24 210.86.191.0/24 maxlen: 24 2001:fb0:101::/48 maxlen: 48 2001:fb0:102::/48 maxlen: 48 2001:fb0:10b2::/48 maxlen: 48 2001:fb1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15360 (0x3c00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 6 15:11:52 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4bc5b8-f076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:15:35:e1:e4:6b:d7:06:54:ec:7f:25:16: 7e:8c:c1:b8:a1:b9:1b:b7:99:4a:a4:2b:dc:31:20: 26:a3:cb:f3:20:df:70:05:bc:01:e5:57:06:b3:97: d9:66:bb:e6:4d:ec:5e:44:2b:04:95:67:c5:e9:83: 87:88:21:38:60:58:d8:e4:99:e9:8e:5b:db:df:7f: 8d:8b:da:53:d5:86:80:3f:4f:82:67:8a:70:89:29: 97:ec:1d:2e:36:7f:fc:58:c8:1e:22:e5:ed:53:c8: 69:14:b6:3f:ba:c0:98:0b:9d:1f:76:9a:08:c0:e2: 08:1b:2a:d7:8a:a7:67:6c:f2:36:f8:d9:a0:95:68: ab:b4:54:ac:79:f9:d4:bc:4e:68:88:85:67:ac:25: 40:ec:50:76:57:08:8f:f1:79:b6:1b:c1:ac:df:e3: 35:f9:46:cb:c3:d4:ae:df:88:c3:4e:ed:62:5c:e3: ed:3b:d1:2b:bd:88:ed:dd:60:0e:ad:0b:8b:73:8a: 4d:47:37:83:9f:6e:78:b8:62:7c:f5:f6:0e:5a:5a: 54:af:d1:7b:33:23:15:be:9f:e6:ac:c1:3c:32:55: f1:d4:dd:74:03:00:56:dd:eb:5b:75:e5:8e:57:61: 77:89:f2:b0:c9:69:72:31:89:ef:99:12:42:dd:29: 66:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BF:10:E6:14:E9:E7:BD:A2:04:55:83:3A:0C:6B:F3:5B:DF:FC:90 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/147B50A8D70411EFA945F56EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.97.124.0/23 114.109.249.0/24 115.87.70.0-115.87.73.255 119.46.99.0/24 119.46.255.0/24 124.120.219.0/24 210.86.191.0/24 IPv6: 2001:fb0:101::-2001:fb0:102:ffff:ffff:ffff:ffff:ffff 2001:fb0:10b2::/48 2001:fb1::/32 Signature Algorithm: sha256WithRSAEncryption 5c:8f:58:fc:a6:8b:01:14:d6:d7:9a:4c:0d:77:25:e5:a3:4c: c3:23:eb:8e:cd:17:6e:90:4a:5c:d2:89:45:0f:0c:af:4b:58: 25:06:5c:82:a7:a0:95:ec:3d:7a:20:46:5d:22:b1:5f:f1:74: 1b:b6:f7:71:42:08:53:98:e2:08:73:1f:3b:30:af:e6:74:10: c3:3d:50:e6:d9:f0:29:d7:e6:bf:e1:d9:9e:c2:1a:c6:92:02: 48:3b:13:a7:7a:d8:c1:ef:5b:99:18:ae:88:d2:ef:52:b2:a8: e8:8e:f2:20:1f:d9:83:b0:f8:65:32:7c:d5:61:ac:ca:06:0d: d8:5f:29:f3:89:ad:d9:15:fd:28:d2:93:0a:53:e1:d2:fc:1c: 85:c2:d8:02:fd:1e:4e:4e:b5:ed:49:cb:64:23:7d:2e:ab:0f: e8:1d:0a:49:8a:23:c6:f2:f9:f4:a4:11:ef:c1:9e:a0:00:2f: 9b:da:49:5a:56:05:20:74:93:8e:bc:5f:74:f3:7d:e7:bc:fc: b1:1a:3b:2c:e4:e0:a0:c6:00:68:d9:cc:25:19:2f:dd:e8:14: 5b:b6:a8:92:21:49:2a:66:06:4f:8d:b9:2a:1a:42:5f:36:e1: da:4d:50:cd:72:13:10:0e:ef:8c:2a:0a:8c:03:d5:26:45:74: d0:59:dc:c3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICPAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjYwNzA2MTUxMTUyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiYzViOC1mMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vQVNeHka9cGVOx/JRZ+jMG4obkbt5lKpCvcMSAmo8vzIN9wBbwB5VcGs5fZ ZrvmTexeRCsElWfF6YOHiCE4YFjY5Jnpjlvb33+Ni9pT1YaAP0+CZ4pwiSmX7B0u Nn/8WMgeIuXtU8hpFLY/usCYC50fdpoIwOIIGyrXiqdnbPI2+NmglWirtFSsefnU vE5oiIVnrCVA7FB2VwiP8Xm2G8Gs3+M1+UbLw9Su34jDTu1iXOPtO9ErvYjt3WAO rQuLc4pNRzeDn254uGJ89fYOWlpUr9F7MyMVvp/mrME8MlXx1N10AwBW3etbdeWO V2F3ifKwyWlyMYnvmRJC3SlmjwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFJe/EOYU 6ee9ogRVgzoMa/Nb3/yQMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMTQ3QjUwQThE NzA0MTFFRkE5NDVGNTZFQzRGOUFFMDIucm9hMHcGCCsGAQUFBwEHAQH/BGgwZjA4 BAIAATAyAwQBOmF8AwQAcm35MAwDBAFzV0YDBAFzV0gDBAB3LmMDBAB3Lv8DBAB8 eNsDBADSVr8wKgQCAAIwJDASAwcAIAEPsAEBAwcAIAEPsAECAwcAIAEPsBCyAwUA IAEPsTANBgkqhkiG9w0BAQsFAAOCAQEAXI9Y/KaLARTW15pMDXcl5aNMwyPrjs0X bpBKXNKJRQ8Mr0tYJQZcgqeglew9eiBGXSKxX/F0G7b3cUIIU5jiCHMfOzCv5nQQ wz1Q5tnwKdfmv+HZnsIaxpICSDsTp3rYwe9bmRiuiNLvUrKo6I7yIB/Zg7D4ZTJ8 1WGsygYN2F8p84mt2RX9KNKTClPh0vwchcLYAv0eTk617UnLZCN9LqsP6B0KSYoj xvL59KQR78GeoAAvm9pJWlYFIHSTjrxfdPN957z8sRo7LOTgoMYAaNnMJRkv3egU W7aokiFJKmYGT425KhpCXzbh2k1QzXITEA7vjCoKjAPVJkV00Fncww== -----END CERTIFICATE-----Generated at Tue Jul 21 19:38:42 2026 by rpki-client