$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/53797E321E0111E9A590C837C4F9AE02.roa File: 53797E321E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: 2gK5tAJQxR7XdWZu8LnTU3Z1NwsX9ndEnuGUPbC1h/I= Subject key identifier: 92:09:D3:C6:A4:C8:A8:EE:59:31:45:AB:87:96:67:42:4A:11:D0:AB Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3A0B Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/53797E321E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:51:26 +0000 ROA not before: Mon 14 Jul 2025 14:51:26 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55646 IP address blocks: 58.97.123.0/24 maxlen: 24 61.91.186.0/24 maxlen: 24 119.46.173.0/24 maxlen: 24 171.102.28.0/24 maxlen: 24 171.102.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14859 (0x3a0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:26 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6875196e-e478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:4c:93:55:35:bf:9a:91:e0:66:0c:85:fe: ab:62:0c:9c:65:87:b4:48:a5:2e:38:06:87:f7:f5: d1:8f:a5:ad:e9:14:56:7d:f2:b8:0a:c1:09:fb:e5: f2:94:1d:4d:ec:60:b3:12:60:c0:36:5c:fc:8b:ea: 5f:c0:db:48:5c:d1:1c:92:51:9b:09:58:db:00:dd: 93:a0:07:48:f2:96:f4:92:52:9d:de:7c:09:b3:5b: d7:16:29:48:82:c0:34:88:c5:49:8b:3d:2e:4e:ff: ab:6d:ee:4b:ea:93:f1:04:dc:13:10:1f:2e:43:c3: b5:c6:d7:0e:29:0d:c3:35:f4:32:de:94:84:cc:91: e7:c8:62:71:69:80:6a:ef:c4:af:43:e4:76:ee:9c: 5e:eb:6e:67:7b:b0:42:b6:6b:ce:94:02:4c:2e:58: b4:83:73:ee:11:4a:ae:e6:f3:06:d7:07:62:42:8b: 20:89:fb:c6:ad:4a:7b:1b:d0:2b:66:10:6f:4f:c3: 57:be:8e:25:b5:55:2b:e1:c4:94:43:52:ea:0a:6f: 88:60:84:22:93:c0:45:10:ea:03:08:52:10:a6:94: a3:97:42:0d:e4:1d:8d:2e:17:b4:8b:92:fa:40:0d: 2c:2c:8e:1d:fb:26:27:12:cf:68:9d:ed:50:96:fb: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:09:D3:C6:A4:C8:A8:EE:59:31:45:AB:87:96:67:42:4A:11:D0:AB X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/53797E321E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.97.123.0/24 61.91.186.0/24 119.46.173.0/24 171.102.28.0/23 Signature Algorithm: sha256WithRSAEncryption 09:4a:5a:71:a1:f5:cd:b0:b7:02:a2:05:e9:4e:1d:e5:f0:b7: 2a:a8:2d:f0:2e:b2:ce:0f:d9:80:d7:e5:b8:c8:16:13:a6:b6: de:57:94:72:69:1d:bf:a7:2a:93:bb:42:3f:54:a3:bd:d9:ff: 32:8b:05:c7:f4:67:e3:61:67:0d:f3:66:fe:97:62:97:cb:dd: c7:1a:70:93:e8:3d:b7:24:96:65:ae:b3:33:5e:9f:ed:42:b8: 92:5f:9e:3a:56:94:f7:62:3f:ee:27:42:41:2b:f6:d6:05:f0: b3:b3:e1:48:57:83:ca:bd:94:90:0c:6b:a0:5f:e3:4c:1a:e8: 4d:be:36:34:e5:ca:84:dc:f5:f9:13:e1:87:1f:ca:6d:71:70: 51:f8:ec:0f:20:bb:52:97:3e:c5:8e:d3:80:40:82:78:78:6d: 70:4d:81:93:8f:f0:06:07:47:6b:ca:1b:1a:cf:7c:9e:03:b4: 31:f3:f3:f8:da:47:1f:cd:38:67:f5:aa:09:80:cb:82:f4:a8: 2a:75:99:13:7e:d8:6b:97:52:fa:67:b1:a0:a9:aa:44:88:89: 16:71:ec:b4:bd:6e:16:07:6e:c5:13:b7:f0:63:f4:42:2b:f6: f5:55:e4:b5:24:c4:5a:bf:2f:ac:73:11:96:97:42:bf:14:a1: 7c:3d:49:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICOgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTI2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk2ZS1lNDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2RMk1U1v5qR4GYMhf6rYgycZYe0SKUuOAaH9/XRj6Wt6RRWffK4CsEJ++Xy lB1N7GCzEmDANlz8i+pfwNtIXNEcklGbCVjbAN2ToAdI8pb0klKd3nwJs1vXFilI gsA0iMVJiz0uTv+rbe5L6pPxBNwTEB8uQ8O1xtcOKQ3DNfQy3pSEzJHnyGJxaYBq 78SvQ+R27pxe625ne7BCtmvOlAJMLli0g3PuEUqu5vMG1wdiQosgifvGrUp7G9Ar ZhBvT8NXvo4ltVUr4cSUQ1LqCm+IYIQik8BFEOoDCFIQppSjl0IN5B2NLhe0i5L6 QA0sLI4d+yYnEs9one1QlvuBEQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFJIJ08ak yKjuWTFFq4eWZ0JKEdCrMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTM3OTdFMzIx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAA6YXsDBAA9W7oDBAB3Lq0DBAGrZhwwDQYJKoZIhvcNAQEL BQADggEBAAlKWnGh9c2wtwKiBelOHeXwtyqoLfAuss4P2YDX5bjIFhOmtt5XlHJp Hb+nKpO7Qj9Uo73Z/zKLBcf0Z+NhZw3zZv6XYpfL3ccacJPoPbcklmWuszNen+1C uJJfnjpWlPdiP+4nQkEr9tYF8LOz4UhXg8q9lJAMa6Bf40wa6E2+NjTlyoTc9fkT 4Ycfym1xcFH47A8gu1KXPsWO04BAgnh4bXBNgZOP8AYHR2vKGxrPfJ4DtDHz8/ja Rx/NOGf1qgmAy4L0qCp1mRN+2GuXUvpnsaCpqkSIiRZx7LS9bhYHbsUTt/Bj9EIr 9vVV5LUkxFq/L6xzEZaXQr8UoXw9Sc8= -----END CERTIFICATE-----Generated at Fri Oct 24 07:09:07 2025 by rpki-client