$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa File: 58226FA0060B11EFA116B11FC4F9AE02.roa (raw, json) Hash identifier: DOvM5GBPsKQ35h2y+PbOV0j23xhzuRQ2iNRUd5CUMdo= Subject key identifier: 7F:5C:EC:12:36:AB:A7:29:E9:2B:45:A1:5F:8E:9F:BA:CF:BB:05:30 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B81 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:29:12 +0000 ROA not before: Fri 22 Aug 2025 05:16:56 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9587 IP address blocks: 58.97.124.0/24 maxlen: 24 58.97.125.0/24 maxlen: 24 119.46.15.0/24 maxlen: 24 2001:fb0:101::/48 maxlen: 48 2001:fb0:102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15233 (0x3b81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Aug 22 05:16:56 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a49388-3019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:eb:d8:87:57:c5:2f:4e:2f:6e:45:29:52:79: 2c:c5:21:31:de:22:77:64:0b:3a:6e:bf:b0:b3:98: 8d:f5:4e:66:c1:1e:81:bc:34:78:19:f2:db:50:32: 8b:88:63:a5:8f:32:ca:06:a0:2f:d2:88:6b:f4:7f: 4f:e5:61:3a:d7:40:a7:6e:ad:c6:a8:68:d9:25:a5: 35:c1:83:0a:98:e4:19:62:b1:2f:4b:5f:7d:5e:bd: b9:20:06:06:82:86:a2:1a:7b:13:60:7a:7d:28:2c: 54:c6:0e:33:ce:bc:c3:03:94:ec:7f:04:84:af:7d: f5:dd:35:61:8a:7a:f9:d5:31:3f:bc:24:9a:e6:5d: d7:1f:6d:25:0b:40:2a:e9:9e:d5:7b:36:d9:13:5a: 75:71:a9:1e:19:1c:53:e4:d0:0e:17:8d:c7:4f:da: a3:6e:c2:cc:76:b1:48:f5:eb:f6:4b:9f:3d:46:83: 9c:89:0e:cb:e1:8a:b7:c5:ab:15:4a:bc:22:09:6e: 4f:6f:e1:16:09:c3:de:de:8b:71:f5:4d:1a:b3:d1: 0a:b7:95:cf:01:6f:7e:dd:49:86:26:f9:29:cb:d0: 88:f7:34:a3:d6:ed:74:59:c5:ca:6d:78:9a:5a:01: 4b:ae:7b:5e:ff:d1:34:ef:db:3a:b5:f1:e5:8d:7c: 0b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5C:EC:12:36:AB:A7:29:E9:2B:45:A1:5F:8E:9F:BA:CF:BB:05:30 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.97.124.0/23 119.46.15.0/24 IPv6: 2001:fb0:101::-2001:fb0:102:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 31:49:da:0c:3d:8b:3a:8a:1b:21:a8:3a:f8:79:1d:a2:28:19: 0e:64:df:c5:c8:72:3a:73:f7:62:cd:57:80:87:9c:a8:ba:04: 1a:3f:9a:18:df:4c:72:9a:b7:44:e5:af:af:76:20:45:09:81: f4:63:39:d0:1c:cd:b3:08:ef:46:1b:d8:7b:2f:f1:1f:3c:7d: 0a:8f:9d:a5:b1:7c:6a:85:3b:46:c6:e9:02:46:60:e3:60:a6: 00:5e:90:3d:f5:89:66:e3:29:49:f4:3a:22:62:01:1b:00:31: f5:11:ee:c8:69:4c:fa:e6:12:78:22:ea:71:d4:a9:1e:c3:7a: 58:29:aa:be:4c:94:67:8e:d2:06:f2:22:13:e8:84:00:de:8f: 3d:77:e6:73:10:9f:17:3b:2a:eb:c7:2d:d1:c0:cd:6a:c8:70: 03:16:ef:7a:db:27:42:f9:3b:90:29:91:7d:29:97:94:69:13: b9:48:a9:56:d2:16:7c:62:dc:6d:7e:30:1d:68:50:d5:b3:e4: ff:76:cc:9a:a7:2d:45:4b:1d:62:17:02:5a:4f:09:74:e2:df: 8e:55:9b:3c:3c:f7:80:dc:ba:1e:a0:f3:ad:c4:8f:ac:c5:ba: e3:0f:06:86:54:3c:d0:30:4b:52:18:a1:b7:9b:95:f1:b5:74: f7:a3:43:74 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICO4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwODIyMDUxNjU2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM4OC0zMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uvYh1fFL04vbkUpUnksxSEx3iJ3ZAs6br+ws5iN9U5mwR6BvDR4GfLbUDKL iGOljzLKBqAv0ohr9H9P5WE610Cnbq3GqGjZJaU1wYMKmOQZYrEvS199Xr25IAYG goaiGnsTYHp9KCxUxg4zzrzDA5TsfwSEr3313TVhinr51TE/vCSa5l3XH20lC0Aq 6Z7VezbZE1p1cakeGRxT5NAOF43HT9qjbsLMdrFI9ev2S589RoOciQ7L4Yq3xasV SrwiCW5Pb+EWCcPe3otx9U0as9EKt5XPAW9+3UmGJvkpy9CI9zSj1u10WcXKbXia WgFLrnte/9E079s6tfHljXwLywIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFH9c7BI2 q6cp6StFoV+On7rPuwUwMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTgyMjZGQTAw NjBCMTFFRkExMTZCMTFGQzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAS BAIAATAMAwQBOmF8AwQAdy4PMBoEAgACMBQwEgMHACABD7ABAQMHACABD7ABAjAN BgkqhkiG9w0BAQsFAAOCAQEAMUnaDD2LOoobIag6+HkdoigZDmTfxchyOnP3Ys1X gIecqLoEGj+aGN9Mcpq3ROWvr3YgRQmB9GM50BzNswjvRhvYey/xHzx9Co+dpbF8 aoU7RsbpAkZg42CmAF6QPfWJZuMpSfQ6ImIBGwAx9RHuyGlM+uYSeCLqcdSpHsN6 WCmqvkyUZ47SBvIiE+iEAN6PPXfmcxCfFzsq68ct0cDNashwAxbvetsnQvk7kCmR fSmXlGkTuUipVtIWfGLcbX4wHWhQ1bPk/3bMmqctRUsdYhcCWk8JdOLfjlWbPDz3 gNy6HqDzrcSPrMW64w8GhlQ80DBLUhiht5uV8bV096NDdA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:00 2026 by rpki-client