$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A96C25C1E0111E9A590C837C4F9AE02.roa File: 4A96C25C1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: Ad7d8yDCTQK6/yPiaVuNNIHZx5fridQeswvZ1H2sI7k= Subject key identifier: 78:BD:70:6A:4D:F9:67:50:C0:B9:43:F5:57:6D:42:8C:0F:AA:F9:41 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3C17 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A96C25C1E0111E9A590C837C4F9AE02.roa Signing time: Mon 06 Jul 2026 15:12:40 +0000 ROA not before: Mon 06 Jul 2026 15:12:40 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 38554 IP address blocks: 58.97.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15383 (0x3c17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 6 15:12:40 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4bc5e8-c0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:27:32:dd:cf:ed:8d:06:f0:2b:3f:2d:d1: 21:06:bc:3e:06:2d:bf:a6:9a:3b:ad:3b:32:0a:7f: eb:12:6a:2d:f7:89:8e:db:ae:c8:72:42:a9:16:21: 81:d8:21:15:30:bd:cb:4d:b7:b1:28:e6:89:36:4a: de:2c:dc:83:c3:55:61:56:35:8b:98:db:53:49:5b: 65:e9:1f:1c:b3:c8:22:5f:3e:99:b3:98:66:a8:5d: ec:18:a7:87:68:4e:1e:82:eb:12:c8:26:a3:e6:1d: 6a:44:62:96:06:12:c8:b5:d8:d6:d8:7c:4e:59:95: 9f:e3:dc:e7:11:4e:44:4f:8e:c1:dd:b6:eb:ac:5e: 90:83:e1:08:8f:9e:eb:68:c9:f2:e8:b9:c4:8a:b2: 10:8a:03:b3:dd:dd:40:71:40:54:ce:3c:28:30:db: 64:3e:82:52:fe:8c:6f:0a:b8:53:97:c0:43:97:d0: ec:b7:e8:69:42:99:0e:ae:b0:55:f3:f7:2e:72:91: a4:4e:7f:62:18:a6:34:f1:25:59:98:42:59:56:a2: 7c:89:cd:4a:5a:f6:9b:1a:14:71:ad:e5:8b:b7:08: 5c:73:05:e8:97:44:1b:a6:9f:69:49:dd:df:88:a4: ec:07:50:c8:96:f6:ee:67:d1:25:c8:37:e0:68:5e: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BD:70:6A:4D:F9:67:50:C0:B9:43:F5:57:6D:42:8C:0F:AA:F9:41 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A96C25C1E0111E9A590C837C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.97.20.0/24 Signature Algorithm: sha256WithRSAEncryption b8:5e:61:16:11:4e:ff:b8:8a:45:b8:71:84:1b:2c:bf:70:3d: 27:95:09:02:23:d2:5d:dd:af:c3:a3:a5:6f:7e:83:8e:80:74: 28:07:35:e7:a9:8b:24:a2:c6:23:e5:85:29:52:a8:0d:e3:85: 24:4b:02:b3:0d:05:39:d1:f5:2a:99:9a:07:68:a4:3a:b9:ec: f6:11:1e:c1:cf:b0:78:d3:37:7a:da:ac:16:41:2c:eb:49:8d: 74:70:cd:11:48:81:7b:c9:66:64:d7:45:6c:b6:11:ef:86:6f: 12:e4:b4:25:c1:1b:52:9e:99:f8:b2:d3:d7:bd:96:41:ed:1c: 37:68:1e:03:0f:6e:13:88:e0:4e:a3:d6:aa:6a:b5:22:56:50: b2:d0:c2:5f:be:7d:89:af:21:bd:65:2b:67:0a:66:3d:1d:27: e8:59:81:da:08:c0:ce:21:ec:e1:28:0e:d4:69:0e:ec:5e:7a: 19:ad:2f:9d:39:39:63:2b:19:8d:bd:74:68:4b:68:ee:a1:93: 19:ed:0b:71:17:a0:2b:d0:d6:c9:13:82:75:36:51:2c:b1:9d: 1b:f1:89:89:15:f2:ee:7d:3b:33:76:20:0b:e6:50:ce:2a:5c: a6:38:07:88:6a:77:94:49:45:b6:99:20:d4:92:3c:0d:8b:f3: 06:a4:24:17 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICPBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjYwNzA2MTUxMjQwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiYzVlOC1jMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxQnMt3P7Y0G8Cs/LdEhBrw+Bi2/ppo7rTsyCn/rEmot94mO267IckKpFiGB 2CEVML3LTbexKOaJNkreLNyDw1VhVjWLmNtTSVtl6R8cs8giXz6Zs5hmqF3sGKeH aE4egusSyCaj5h1qRGKWBhLItdjW2HxOWZWf49znEU5ET47B3bbrrF6Qg+EIj57r aMny6LnEirIQigOz3d1AcUBUzjwoMNtkPoJS/oxvCrhTl8BDl9Dst+hpQpkOrrBV 8/cucpGkTn9iGKY08SVZmEJZVqJ8ic1KWvabGhRxreWLtwhccwXol0Qbpp9pSd3f iKTsB1DIlvbuZ9ElyDfgaF6qjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHi9cGpN +WdQwLlD9VdtQowPqvlBMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEE5NkMyNUMx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAOmEUMA0GCSqGSIb3DQEBCwUAA4IBAQC4XmEWEU7/uIpFuHGEGyy/ cD0nlQkCI9Jd3a/Do6VvfoOOgHQoBzXnqYskosYj5YUpUqgN44UkSwKzDQU50fUq mZoHaKQ6uez2ER7Bz7B40zd62qwWQSzrSY10cM0RSIF7yWZk10VsthHvhm8S5LQl wRtSnpn4stPXvZZB7Rw3aB4DD24TiOBOo9aqarUiVlCy0MJfvn2JryG9ZStnCmY9 HSfoWYHaCMDOIezhKA7UaQ7sXnoZrS+dOTljKxmNvXRoS2juoZMZ7QtxF6Ar0NbJ E4J1NlEssZ0b8YmJFfLufTszdiAL5lDOKlymOAeIaneUSUW2mSDUkjwNi/MGpCQX -----END CERTIFICATE-----Generated at Tue Jul 21 19:38:55 2026 by rpki-client