$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/53797E321E0111E9A590C837C4F9AE02.roa File: 53797E321E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: 6Q+fXGnSP468nX2o6Yt0P7S3CJ0XXwBrtfcssH/+q88= Subject key identifier: 3F:B5:A2:E2:62:7B:FB:5E:B4:7B:7A:C1:2A:D5:19:49:1D:9B:6F:AD Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B6F Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/53797E321E0111E9A590C837C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:28:55 +0000 ROA not before: Mon 14 Jul 2025 14:51:26 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55646 IP address blocks: 58.97.123.0/24 maxlen: 24 61.91.186.0/24 maxlen: 24 119.46.173.0/24 maxlen: 24 171.102.28.0/24 maxlen: 24 171.102.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15215 (0x3b6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:26 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a49377-c14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:a2:61:6e:c3:c8:72:68:83:df:75:6b:34: 89:e2:5b:f7:73:f5:b7:93:26:21:bb:b4:92:92:d7: 07:12:4b:9c:bf:2c:38:56:f6:48:10:db:4d:d0:a2: 69:49:de:e1:f5:f1:f5:9b:9b:29:e9:cd:a4:47:0d: 05:08:42:9b:83:84:11:5f:8d:ff:75:b5:e1:c1:6b: a3:16:e0:7e:23:ae:21:1c:e7:3c:ac:4a:5b:55:c7: 2d:3b:ff:69:80:d3:88:4f:8f:46:b4:2a:cd:07:4d: ed:e7:bc:42:cc:65:38:f5:40:20:ab:75:ad:d2:ce: 98:c7:57:2b:08:f6:fc:eb:78:bd:be:d4:df:68:0a: 1b:9d:5d:d0:61:45:5a:eb:6c:b8:f4:56:56:dd:68: 01:6e:0f:4a:de:50:b6:a4:cf:bb:21:56:f2:c4:a0: 5e:e7:08:81:b9:b8:65:99:e2:c8:76:4f:57:15:bb: 3e:b2:37:3d:cc:5b:45:e8:e9:42:19:46:eb:6f:e7: 7f:c0:b0:87:c1:17:e4:f5:d2:9c:01:1a:d8:c7:0f: 86:29:0f:4b:c0:dd:2f:45:6c:19:b7:3a:e9:82:66: 0a:a8:ec:d6:d4:0f:a2:57:84:e0:7c:61:f1:27:1e: c0:d4:e4:e5:86:0d:c4:c4:39:2a:1e:d3:51:04:67: 79:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B5:A2:E2:62:7B:FB:5E:B4:7B:7A:C1:2A:D5:19:49:1D:9B:6F:AD X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/53797E321E0111E9A590C837C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.97.123.0/24 61.91.186.0/24 119.46.173.0/24 171.102.28.0/23 Signature Algorithm: sha256WithRSAEncryption 21:96:b4:ec:92:8f:a6:b9:83:0b:11:f9:9e:98:9a:ba:46:10: f8:6c:51:bc:e4:ac:11:76:16:9e:68:15:59:ed:fc:31:33:3a: 1d:f0:4d:06:0b:c1:9e:71:15:cb:d4:98:bd:28:c5:c6:55:3a: 6f:f5:ea:9c:56:c9:c9:5b:fc:a5:d0:41:79:8f:9f:2d:34:99: b2:90:2a:13:93:89:8d:94:96:0e:d7:e4:ba:b3:02:ca:9d:6f: 80:40:06:58:a0:da:66:df:51:0b:7c:57:09:37:a3:80:bf:5e: 05:5b:d2:59:e4:f4:4a:74:85:55:d1:96:a4:c4:f8:46:4c:2c: 40:59:e3:6d:01:3c:29:d0:4a:be:22:08:4d:71:c2:fe:25:6e: 98:99:4a:f9:c1:19:af:4d:d5:d5:15:84:2d:10:1d:23:67:2c: 6c:44:05:be:c2:96:63:13:23:8d:79:25:94:03:ed:40:1f:5a: 27:8b:22:4e:58:71:a1:27:56:5c:00:b3:45:50:f5:11:93:dc: 34:b1:a5:a7:37:fb:f5:73:fd:44:ac:c0:f3:72:af:a2:f3:03: 35:05:5c:51:bc:d2:3a:48:e7:37:6e:a1:04:f9:27:ee:f8:3e: 55:4f:bc:55:d4:5e:8e:fd:e7:83:a5:29:e4:82:e5:8d:8e:1b: f3:69:9d:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICO28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTI2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM3Ny1jMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPmiYW7DyHJog991azSJ4lv3c/W3kyYhu7SSktcHEkucvyw4VvZIENtN0KJp Sd7h9fH1m5sp6c2kRw0FCEKbg4QRX43/dbXhwWujFuB+I64hHOc8rEpbVcctO/9p gNOIT49GtCrNB03t57xCzGU49UAgq3Wt0s6Yx1crCPb863i9vtTfaAobnV3QYUVa 62y49FZW3WgBbg9K3lC2pM+7IVbyxKBe5wiBubhlmeLIdk9XFbs+sjc9zFtF6OlC GUbrb+d/wLCHwRfk9dKcARrYxw+GKQ9LwN0vRWwZtzrpgmYKqOzW1A+iV4TgfGHx Jx7A1OTlhg3ExDkqHtNRBGd5sQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFD+1ouJi e/tetHt6wSrVGUkdm2+tMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTM3OTdFMzIx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAOmF7AwQAPVu6AwQAdy6tAwQBq2YcMA0GCSqGSIb3DQEBCwUAA4IB AQAhlrTsko+muYMLEfmemJq6RhD4bFG85KwRdhaeaBVZ7fwxMzod8E0GC8GecRXL 1Ji9KMXGVTpv9eqcVsnJW/yl0EF5j58tNJmykCoTk4mNlJYO1+S6swLKnW+AQAZY oNpm31ELfFcJN6OAv14FW9JZ5PRKdIVV0ZakxPhGTCxAWeNtATwp0Eq+IghNccL+ JW6YmUr5wRmvTdXVFYQtEB0jZyxsRAW+wpZjEyONeSWUA+1AH1oniyJOWHGhJ1Zc ALNFUPURk9w0saWnN/v1c/1ErMDzcq+i8wM1BVxRvNI6SOc3bqEE+Sfu+D5VT7xV 1F6O/eeDpSnkguWNjhvzaZ3i -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:07 2026 by rpki-client