$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4B5400D81E0111E9A590C837C4F9AE02.roa File: 4B5400D81E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: 1rU4NHwzU6NdWM+ka7a/m8DWfthha6uQi8GmGTq/OtQ= Subject key identifier: B6:77:A4:69:AD:F9:7D:33:A9:FA:20:AE:0C:10:2F:B4:CC:5C:EE:04 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39F8 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4B5400D81E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:51:12 +0000 ROA not before: Mon 14 Jul 2025 14:51:12 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38599 IP address blocks: 58.97.39.0/24 maxlen: 24 61.91.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14840 (0x39f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:12 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751960-5401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bc:2e:86:c6:ed:cd:ef:96:83:1f:28:30:54: 53:f5:a8:e5:38:7c:c3:93:18:74:09:6a:0f:04:95: cd:71:95:52:70:93:28:12:11:09:cd:e3:0a:24:71: 6a:8e:3f:17:df:9d:46:b3:1c:0c:51:9f:42:b5:93: 26:51:a2:6c:cf:67:88:42:7b:fb:08:56:77:66:b7: 13:70:1d:e6:40:5c:f1:71:d4:2f:0c:36:96:21:f8: 88:30:bc:e2:86:ec:f5:fe:94:6d:40:14:56:dd:42: 48:29:98:f0:a3:5f:8f:f7:b4:04:8e:b7:0f:7f:cf: 8a:6c:50:62:15:7d:1d:45:94:fe:94:fe:ab:21:70: f3:c2:ef:91:f3:4e:21:a4:89:76:40:24:ac:e7:1e: 6d:bf:f0:7d:47:62:da:ca:43:f1:0f:09:3c:7e:28: 19:ef:dc:a1:ed:0b:62:23:62:8b:00:0b:82:bb:64: 72:8e:53:ca:48:96:47:73:50:ea:62:1a:7d:f7:ca: 55:db:46:d9:a0:f0:5c:27:82:d2:09:36:f0:86:41: 47:be:1a:6b:cf:8f:64:02:0e:79:81:e8:7d:db:cb: 11:93:0d:d2:f5:e3:23:23:71:a4:75:eb:71:87:49: 3f:8e:b4:58:23:80:94:5f:1b:24:71:76:06:44:2f: 3f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:77:A4:69:AD:F9:7D:33:A9:FA:20:AE:0C:10:2F:B4:CC:5C:EE:04 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4B5400D81E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.97.39.0/24 61.91.104.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a8:b1:9d:a8:17:10:34:9f:03:67:96:d6:c5:36:47:74:48: 92:45:8c:1b:f0:3e:1b:f3:1c:c0:25:34:16:4d:f5:e7:95:7e: 4f:e2:72:4f:1f:33:7e:9c:fb:64:3c:7c:c2:9e:34:69:bc:e4: e3:ce:41:51:3c:9e:3b:30:65:8c:7a:6b:e9:0c:10:3a:32:68: 25:a3:8d:bc:91:0f:75:43:49:4c:27:6a:9a:65:91:ab:fa:be: 0e:2c:28:0b:a0:c4:15:29:8b:54:36:f4:7c:f7:5a:1d:1d:26: c5:f9:09:3b:c4:6b:e6:63:34:73:0a:ec:d8:e1:8e:aa:e0:99: 0e:ff:cb:ee:7c:ba:6f:9d:73:96:8c:cd:5b:43:b7:f2:de:2a: 1c:32:c2:9b:63:e0:df:aa:ec:08:7c:b6:f4:f0:38:38:4d:d7: a8:fb:5d:ce:f3:c4:f4:1a:ba:65:aa:34:30:7a:6b:02:7e:eb: 83:3c:3c:f1:4d:b8:5c:bd:48:f5:a4:e5:12:e2:86:8b:23:7c: f4:39:d3:d9:9a:7f:50:59:70:9b:53:58:6b:2f:b3:dd:c5:3e: 64:b4:c4:b2:43:1b:3a:9e:e4:5a:5d:ec:69:ff:34:7f:aa:a0: 48:10:4e:f1:8e:f2:94:c8:3f:a4:c6:ac:0f:67:2f:63:42:f1: d4:8d:ec:1a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICOfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTEyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk2MC01NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rwuhsbtze+Wgx8oMFRT9ajlOHzDkxh0CWoPBJXNcZVScJMoEhEJzeMKJHFq jj8X351GsxwMUZ9CtZMmUaJsz2eIQnv7CFZ3ZrcTcB3mQFzxcdQvDDaWIfiIMLzi huz1/pRtQBRW3UJIKZjwo1+P97QEjrcPf8+KbFBiFX0dRZT+lP6rIXDzwu+R804h pIl2QCSs5x5tv/B9R2LaykPxDwk8figZ79yh7QtiI2KLAAuCu2RyjlPKSJZHc1Dq Yhp998pV20bZoPBcJ4LSCTbwhkFHvhprz49kAg55geh928sRkw3S9eMjI3Gkdetx h0k/jrRYI4CUXxskcXYGRC8/8QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLZ3pGmt +X0zqfogrgwQL7TMXO4EMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEI1NDAwRDgx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAA6YScDBAA9W2gwDQYJKoZIhvcNAQELBQADggEBADSosZ2o FxA0nwNnltbFNkd0SJJFjBvwPhvzHMAlNBZN9eeVfk/ick8fM36c+2Q8fMKeNGm8 5OPOQVE8njswZYx6a+kMEDoyaCWjjbyRD3VDSUwnapplkav6vg4sKAugxBUpi1Q2 9Hz3Wh0dJsX5CTvEa+ZjNHMK7NjhjqrgmQ7/y+58um+dc5aMzVtDt/LeKhwywptj 4N+q7Ah8tvTwODhN16j7Xc7zxPQaumWqNDB6awJ+64M8PPFNuFy9SPWk5RLihosj fPQ509maf1BZcJtTWGsvs93FPmS0xLJDGzqe5Fpd7Gn/NH+qoEgQTvGO8pTIP6TG rA9nL2NC8dSN7Bo= -----END CERTIFICATE-----Generated at Sun Jul 20 22:45:34 2025 by rpki-client