$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A96C25C1E0111E9A590C837C4F9AE02.roa File: 4A96C25C1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: Ue1xTcukt+7+/0QDZsMRWXLPSmGQszxsts6pmhLq23g= Subject key identifier: 7E:38:19:D3:5A:56:D6:86:D0:42:4F:13:35:FF:67:18:24:65:E2:75 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B5B Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A96C25C1E0111E9A590C837C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:28:38 +0000 ROA not before: Mon 14 Jul 2025 14:51:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38554 IP address blocks: 58.97.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15195 (0x3b5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a49366-75d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:4d:46:6f:5a:66:b5:a2:60:89:ec:e1:bb: 77:16:a8:6b:83:de:01:fd:d1:b5:25:3d:ea:20:fe: e4:00:0e:34:58:d8:5b:28:98:6f:09:59:bf:6b:8e: c5:22:69:cf:f6:c7:27:8d:3a:06:79:1a:81:20:dc: dd:c5:7d:19:83:6a:eb:51:2e:d0:f2:f6:17:34:10: 0c:24:c5:f6:ec:25:7f:f8:e1:af:98:97:5b:8b:3b: cd:e1:0c:43:48:7e:a6:bf:69:19:c5:91:46:dd:af: cc:3a:36:54:7c:d1:d8:ed:46:a4:e4:eb:85:90:ef: a4:1f:59:9f:15:71:06:d8:13:78:f2:cf:36:48:e5: c6:5a:f0:28:9f:3f:ca:5e:91:17:9c:5f:45:1d:36: ed:39:59:9b:e6:58:87:a9:07:6a:46:ca:c0:68:e3: 23:b0:02:35:9f:ee:7d:ec:75:1a:a0:58:89:18:0a: 4c:39:9d:ec:b1:d0:a3:47:ef:b4:33:d7:4b:8c:b3: 8f:a6:9f:d6:b0:08:1b:7f:bb:85:78:62:aa:af:1c: c1:cd:73:c8:0c:61:90:32:21:99:94:17:34:26:f3: 4d:59:42:2e:65:8f:eb:9f:90:ce:2d:65:7a:9d:a1: d6:2a:1e:fb:fe:2e:45:ba:18:7a:37:19:cb:84:37: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:38:19:D3:5A:56:D6:86:D0:42:4F:13:35:FF:67:18:24:65:E2:75 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A96C25C1E0111E9A590C837C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.97.20.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:17:60:2a:64:dd:af:de:35:4f:b5:54:ce:63:46:62:37:d5: 08:2a:fc:da:dd:57:1b:05:e6:28:4e:17:14:94:20:d4:eb:33: f3:ed:b6:fa:14:bb:36:c4:f4:a0:d6:fe:06:80:3e:03:f4:1e: 8d:a2:2d:e2:02:5e:b4:bf:51:a6:c1:38:8e:46:75:57:96:11: c7:e4:10:b4:d8:ef:09:3d:ce:85:ab:11:d3:3d:be:b4:cb:87: a2:30:1a:97:c6:ec:fe:d2:1c:75:29:c1:04:bb:de:ad:91:57: ad:87:c0:20:bd:ba:28:ba:fa:23:b6:69:3c:af:18:0c:06:24: 6f:17:b9:1e:ca:34:06:1b:c5:d9:f7:4a:a6:41:d0:de:cc:bd: 6a:73:69:06:cc:61:c2:87:2f:ed:5a:16:d0:92:71:60:18:7b: 55:31:6b:79:ae:20:d2:ad:b0:a0:1c:09:e7:6b:c3:c3:58:cf: 49:8d:b3:64:29:88:e2:17:79:8d:7e:00:33:f6:97:e1:0e:c5: a4:6a:7b:32:bc:27:6f:f9:a6:1c:63:d9:4f:6c:ac:b0:d3:3d: 57:f9:d2:76:21:f9:68:16:c9:51:e0:47:12:19:24:13:d3:28: ec:b0:a5:db:53:51:1e:cc:8c:b4:b8:02:62:f4:4b:b1:d3:96: 94:28:31:af -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICO1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM2Ni03NWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdhNRm9aZrWiYIns4bt3Fqhrg94B/dG1JT3qIP7kAA40WNhbKJhvCVm/a47F ImnP9scnjToGeRqBINzdxX0Zg2rrUS7Q8vYXNBAMJMX27CV/+OGvmJdbizvN4QxD SH6mv2kZxZFG3a/MOjZUfNHY7Uak5OuFkO+kH1mfFXEG2BN48s82SOXGWvAonz/K XpEXnF9FHTbtOVmb5liHqQdqRsrAaOMjsAI1n+597HUaoFiJGApMOZ3ssdCjR++0 M9dLjLOPpp/WsAgbf7uFeGKqrxzBzXPIDGGQMiGZlBc0JvNNWUIuZY/rn5DOLWV6 naHWKh77/i5Fuhh6NxnLhDcjAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH44GdNa VtaG0EJPEzX/ZxgkZeJ1MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEE5NkMyNUMx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAOmEUMA0GCSqGSIb3DQEBCwUAA4IBAQBMF2AqZN2v3jVPtVTOY0Zi N9UIKvza3VcbBeYoThcUlCDU6zPz7bb6FLs2xPSg1v4GgD4D9B6Noi3iAl60v1Gm wTiORnVXlhHH5BC02O8JPc6FqxHTPb60y4eiMBqXxuz+0hx1KcEEu96tkVeth8Ag vboouvojtmk8rxgMBiRvF7keyjQGG8XZ90qmQdDezL1qc2kGzGHChy/tWhbQknFg GHtVMWt5riDSrbCgHAnna8PDWM9JjbNkKYjiF3mNfgAz9pfhDsWkansyvCdv+aYc Y9lPbKyw0z1X+dJ2IfloFslR4EcSGSQT0yjssKXbU1EezIy0uAJi9Eux05aUKDGv -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:05 2026 by rpki-client