$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CAD34861E0111E9A590C837C4F9AE02.roa File: 4CAD34861E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: +bsdvXU3gEnqOrBci2zE6cM+KLK8PtCXn7rXe6mPyy0= Subject key identifier: 41:EF:CF:FD:D2:AD:3B:2D:A6:09:5E:88:AF:72:CE:49:C5:C2:8B:53 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B5F Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CAD34861E0111E9A590C837C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:28:42 +0000 ROA not before: Mon 14 Jul 2025 14:51:14 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45173 IP address blocks: 58.97.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15199 (0x3b5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:14 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4936a-a45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:69:66:fb:d1:ff:1b:49:7e:b1:82:df:60: e9:31:ab:05:76:17:0b:2f:e1:b2:f1:9b:3c:0b:87: cc:1d:3e:b1:98:df:fa:49:ea:64:12:5a:3a:aa:b2: 51:a2:f3:8d:9e:8e:f8:75:8b:dc:22:e4:61:d1:23: 90:1b:45:55:b0:24:b4:1d:59:be:02:d1:36:3a:62: 70:8c:42:01:9e:c6:e8:2b:7c:8e:2a:6f:fb:97:d8: 4f:cb:95:f3:77:ef:41:ce:12:d8:37:c8:db:07:7f: b6:25:ec:09:05:fe:bd:f6:49:ec:4b:e3:a2:d9:3d: dc:e0:6b:77:ab:cb:d8:6f:b5:9f:9c:4c:57:b9:78: 7e:93:31:9c:df:65:9a:ee:c1:cb:59:a1:7f:7d:82: dd:2a:b9:63:9a:b8:93:db:22:4d:1e:47:de:80:23: a4:4b:43:f0:f2:08:0c:2f:4a:11:ec:89:05:c1:80: 85:ba:a5:fa:db:72:25:57:a0:e6:71:93:93:8a:2b: b8:57:18:39:11:87:5b:4c:db:18:a8:18:86:2f:8a: b4:0d:9e:38:87:42:93:06:d4:af:74:a9:30:10:c0: c2:10:56:63:d0:37:7b:4f:12:6b:f2:cd:8d:72:bf: 4e:7f:34:d5:40:c1:0c:22:2c:5d:21:12:75:fb:92: 57:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EF:CF:FD:D2:AD:3B:2D:A6:09:5E:88:AF:72:CE:49:C5:C2:8B:53 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CAD34861E0111E9A590C837C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.97.9.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:0a:ca:f1:2a:4b:11:6e:ce:32:9e:69:ac:37:64:53:7e:e1: 9d:ce:a6:9a:c0:12:80:60:ea:e8:9f:b5:72:e1:29:17:2b:19: 09:8b:f8:39:10:75:a7:9d:a3:e6:09:55:0c:5f:62:4b:52:cb: a7:e6:97:2f:9c:56:13:64:f9:4f:b6:4a:9e:ce:05:eb:1d:b6: 13:34:15:40:dc:6b:64:df:ae:7d:62:3a:ce:fb:d9:1b:ae:64: 36:60:24:e3:6b:89:08:2d:26:cb:a3:05:73:91:33:2f:5c:25: b6:22:e5:17:9f:c7:9c:45:68:56:13:fe:08:0d:7a:7b:16:a9: d6:0b:35:15:71:eb:e5:87:f9:4e:12:08:96:1d:6c:b0:c8:41: 74:df:ea:d6:a8:e5:9f:0f:e1:fa:00:1e:83:2d:0f:be:da:f2: d2:f4:23:63:75:ee:ab:e6:61:9a:7b:fa:2d:27:69:0f:9a:aa: 70:d3:2d:80:34:87:c1:3c:f5:d5:9f:40:c9:66:aa:e1:0b:f4: b2:f2:dd:83:64:88:4b:7c:77:3d:cb:56:96:a6:f8:d0:0d:b7: b7:b1:60:1b:12:af:c9:f5:87:d9:9c:82:8c:82:f8:50:bd:34: 3c:8f:71:43:10:45:54:f8:e4:cd:1d:f7:d9:00:0c:29:91:92: ca:f2:65:b5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICO18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTE0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM2YS1hNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbppZvvR/xtJfrGC32DpMasFdhcLL+Gy8Zs8C4fMHT6xmN/6SepkElo6qrJR ovONno74dYvcIuRh0SOQG0VVsCS0HVm+AtE2OmJwjEIBnsboK3yOKm/7l9hPy5Xz d+9BzhLYN8jbB3+2JewJBf699knsS+Oi2T3c4Gt3q8vYb7WfnExXuXh+kzGc32Wa 7sHLWaF/fYLdKrljmriT2yJNHkfegCOkS0Pw8ggML0oR7IkFwYCFuqX623IlV6Dm cZOTiiu4Vxg5EYdbTNsYqBiGL4q0DZ44h0KTBtSvdKkwEMDCEFZj0Dd7TxJr8s2N cr9OfzTVQMEMIixdIRJ1+5JXzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEHvz/3S rTstpgleiK9yzknFwotTMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNENBRDM0ODYx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAOmEJMA0GCSqGSIb3DQEBCwUAA4IBAQCPCsrxKksRbs4ynmmsN2RT fuGdzqaawBKAYOron7Vy4SkXKxkJi/g5EHWnnaPmCVUMX2JLUsun5pcvnFYTZPlP tkqezgXrHbYTNBVA3Gtk3659YjrO+9kbrmQ2YCTja4kILSbLowVzkTMvXCW2IuUX n8ecRWhWE/4IDXp7FqnWCzUVcevlh/lOEgiWHWywyEF03+rWqOWfD+H6AB6DLQ++ 2vLS9CNjde6r5mGae/otJ2kPmqpw0y2ANIfBPPXVn0DJZqrhC/Sy8t2DZIhLfHc9 y1aWpvjQDbe3sWAbEq/J9YfZnIKMgvhQvTQ8j3FDEEVU+OTNHffZAAwpkZLK8mW1 -----END CERTIFICATE-----Generated at Mon Mar 2 08:08:09 2026 by rpki-client