$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4EDB7B1E1E0111E9A590C837C4F9AE02.roa File: 4EDB7B1E1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: 52P1vdd8Jvqgu0se7fjSPMTypD0XYjJAArL7OApMoUw= Subject key identifier: C9:90:87:5F:A4:AA:38:58:A4:28:03:61:78:0A:6E:EF:D2:39:C8:DF Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B63 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4EDB7B1E1E0111E9A590C837C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:28:45 +0000 ROA not before: Mon 14 Jul 2025 14:51:17 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45806 IP address blocks: 61.90.177.0/24 maxlen: 24 61.90.248.0/24 maxlen: 24 119.46.87.0/24 maxlen: 24 119.46.89.0/24 maxlen: 24 171.102.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15203 (0x3b63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:17 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4936d-cd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:66:fb:41:e0:16:04:10:40:fd:29:54:d6: b2:f1:81:79:61:97:aa:c7:d8:26:3c:f9:ea:e0:8d: 7f:1a:31:8c:a0:32:4c:df:fa:76:fb:88:95:16:26: c0:c8:2d:95:79:8b:d9:3d:e1:cb:68:3e:f2:48:63: 32:a6:48:b5:78:f9:98:a9:e0:6f:13:ba:65:dc:05: ff:12:9c:49:69:61:b7:24:3b:16:49:40:cd:dd:50: 68:bc:c1:71:b0:91:29:bb:b7:44:77:0f:1e:2a:48: 0b:e0:22:c5:66:81:2a:0d:be:44:89:ff:3d:af:d0: 9c:de:ab:60:6a:67:0a:c3:9b:54:ec:c4:0e:1a:d5: 3d:57:c6:fa:f4:8a:98:b6:ad:86:e3:90:dd:f7:ba: 90:5f:6b:c1:97:a7:10:15:36:1a:c9:e0:41:0b:bf: d3:52:cb:19:52:39:b0:db:f6:4b:f9:fe:4d:32:fb: 39:95:50:be:f9:56:f6:32:6f:70:0e:56:f2:4d:9f: 3d:7d:7e:69:f2:75:4c:df:e0:96:d7:dd:cd:8e:05: 26:50:65:40:0c:82:9e:4a:f8:0f:2d:99:29:d6:5f: 67:50:67:63:1e:30:05:91:f7:f1:d1:b1:a4:97:2b: 34:d0:71:b3:fc:39:58:54:e8:09:58:1b:e8:08:66: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:90:87:5F:A4:AA:38:58:A4:28:03:61:78:0A:6E:EF:D2:39:C8:DF X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4EDB7B1E1E0111E9A590C837C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.90.177.0/24 61.90.248.0/24 119.46.87.0/24 119.46.89.0/24 171.102.56.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:d6:a9:b3:69:1f:25:ae:ae:bb:e5:fd:82:9b:b7:55:34:15: e5:a5:6d:8a:77:fa:77:4a:87:8e:cb:2f:c1:d4:ca:a0:7e:3c: 15:93:b0:8b:bc:dd:47:78:66:da:eb:4c:60:05:c3:cd:46:1e: 2b:c5:88:38:29:ad:1c:74:7b:a9:2c:9c:2d:99:e1:17:95:b8: bc:12:4f:69:76:64:30:5a:62:f3:73:bf:06:94:9f:14:50:c2: d8:e9:de:76:33:da:76:76:f3:af:e0:96:eb:b2:64:19:10:c0: e0:83:47:0f:34:df:37:54:63:c9:d8:7b:c5:9f:8c:27:fc:0e: 2b:5a:63:51:17:2a:fe:39:dc:ad:bc:29:4a:fa:08:51:cc:9e: ad:a7:94:34:0b:63:f4:5a:de:51:4a:49:9a:aa:c7:6f:01:0c: 4e:b6:4e:10:41:88:c4:7c:46:ff:f0:48:7e:34:cd:3b:d3:0c: 3e:44:a2:47:1e:d3:1b:b9:3f:ba:17:f5:86:bd:c2:2a:e8:96: 3d:bf:be:39:8a:0a:0a:67:ee:e9:23:fa:a5:db:72:98:70:35: 6f:24:23:c7:ef:11:ad:9d:14:dc:58:ff:7d:bc:af:9b:75:ef: 53:d8:0d:b6:3e:cc:03:ce:f2:38:24:2b:10:e7:65:46:e8:c7: 64:d6:d4:09 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICO2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM2ZC1jZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3dm+0HgFgQQQP0pVNay8YF5YZeqx9gmPPnq4I1/GjGMoDJM3/p2+4iVFibA yC2VeYvZPeHLaD7ySGMypki1ePmYqeBvE7pl3AX/EpxJaWG3JDsWSUDN3VBovMFx sJEpu7dEdw8eKkgL4CLFZoEqDb5Eif89r9Cc3qtgamcKw5tU7MQOGtU9V8b69IqY tq2G45Dd97qQX2vBl6cQFTYayeBBC7/TUssZUjmw2/ZL+f5NMvs5lVC++Vb2Mm9w DlbyTZ89fX5p8nVM3+CW193NjgUmUGVADIKeSvgPLZkp1l9nUGdjHjAFkffx0bGk lys00HGz/DlYVOgJWBvoCGb/hQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFMmQh1+k qjhYpCgDYXgKbu/SOcjfMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEVEQjdCMUUx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAPVqxAwQAPVr4AwQAdy5XAwQAdy5ZAwQAq2Y4MA0GCSqGSIb3DQEB CwUAA4IBAQCN1qmzaR8lrq675f2Cm7dVNBXlpW2Kd/p3SoeOyy/B1MqgfjwVk7CL vN1HeGba60xgBcPNRh4rxYg4Ka0cdHupLJwtmeEXlbi8Ek9pdmQwWmLzc78GlJ8U UMLY6d52M9p2dvOv4JbrsmQZEMDgg0cPNN83VGPJ2HvFn4wn/A4rWmNRFyr+Odyt vClK+ghRzJ6tp5Q0C2P0Wt5RSkmaqsdvAQxOtk4QQYjEfEb/8Eh+NM070ww+RKJH HtMbuT+6F/WGvcIq6JY9v745igoKZ+7pI/ql23KYcDVvJCPH7xGtnRTcWP99vK+b de9T2A22PswDzvI4JCsQ52VG6Mdk1tQJ -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:14 2026 by rpki-client