$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/5870952EC53011EA98D1D651C4F9AE02.roa File: 5870952EC53011EA98D1D651C4F9AE02.roa (raw, json) Hash identifier: M9wrLdqCvf9Rebn1AxQjUYPshDSgwl/PTCAmwfRJfkY= Subject key identifier: 82:EB:19:71:FC:81:43:2D:B2:B5:9D:63:F2:75:B2:9F:E3:5C:89:3C Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 1197 Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/5870952EC53011EA98D1D651C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:00:53 +0000 ROA not before: Sat 24 May 2025 17:49:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10141 IP address blocks: 121.97.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4503 (0x1197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: May 24 17:49:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a470c5-285c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:a5:2c:74:d7:5c:9a:15:1e:22:07:24:73: 1f:2d:55:26:d7:5c:b6:6c:7e:f5:42:44:c2:b2:e6: a3:19:5d:43:bf:dd:33:48:3a:99:ea:d6:12:e8:71: 17:48:a5:99:89:af:13:50:d8:43:77:15:7d:b3:a5: 1d:b9:ac:2b:c6:05:7b:e2:d9:77:b9:e2:b8:fb:45: b5:3b:b5:d0:ea:f1:f5:b4:c6:af:93:54:d4:f2:97: e5:ec:89:9f:d2:21:10:9b:0b:81:4b:bc:62:16:96: b9:10:d5:6d:34:6a:75:14:a4:64:05:01:fe:fa:57: 43:6e:b2:ed:b9:b9:1b:6e:04:9e:24:9d:d5:24:95: 1d:1a:f2:36:83:2a:9d:6f:c8:42:06:a1:42:0a:a2: 14:98:16:3c:31:5b:a8:80:d2:20:f3:9d:4d:71:ab: b1:68:ff:d9:e8:a5:c0:c7:77:bf:9f:4e:0a:79:c8: 1a:97:18:be:c5:ff:af:55:8a:ad:08:f6:cf:be:4d: e6:6a:54:c8:d8:34:14:93:a9:44:3a:1e:29:ae:8a: 10:13:24:45:db:b8:69:40:cd:25:0f:82:30:6e:7f: 8a:09:de:26:cf:3e:16:38:b1:34:5d:d1:45:21:84: ec:d0:14:52:4d:b3:25:87:3c:d2:14:ab:c3:2d:28: e0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EB:19:71:FC:81:43:2D:B2:B5:9D:63:F2:75:B2:9F:E3:5C:89:3C X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/5870952EC53011EA98D1D651C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.97.36.0/24 Signature Algorithm: sha256WithRSAEncryption 33:75:85:51:31:38:73:78:7b:db:58:d9:54:7a:f6:3b:8b:ed: 73:f8:55:75:eb:9c:c5:e7:4e:16:a1:15:96:38:ff:0c:7c:8a: db:d3:1e:15:57:41:2c:02:a7:fa:f0:1c:fa:7c:af:61:b8:88: 3c:e0:b8:9b:90:e6:38:31:da:1c:5e:8c:5f:53:f5:f7:b3:d6: 4d:12:f7:e8:ec:88:cd:5f:29:97:a9:db:39:b2:e3:53:52:44: 99:03:f5:43:1c:f8:85:51:3f:43:cd:c6:27:b0:cd:4b:19:69: f2:60:05:1a:1f:5d:0c:c3:cd:22:7b:14:6f:72:89:88:58:1a: a7:9c:89:9c:1b:d8:46:7c:61:69:1c:ad:82:76:d4:57:a5:c1: 93:31:f4:6a:6a:9c:d6:66:97:3e:7e:4d:4c:50:c0:1f:6f:b4: 78:98:ac:ee:24:68:de:7f:76:63:58:a0:b0:28:d9:9e:e4:14: 1f:ed:44:42:4b:57:19:4c:4e:97:ad:72:8d:a9:44:84:55:a6: 94:d8:ed:8d:17:ea:b3:21:d7:ed:9e:97:70:e9:88:52:6c:38: aa:10:f8:ae:31:ff:ea:14:bd:50:39:78:1b:c8:39:08:01:5b: 84:ac:84:e7:da:70:f9:a2:31:b1:90:79:b4:d2:0f:89:d7:5c: 61:a4:d6:71 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjUwNTI0MTc0OTQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzBjNS0yODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmSlLHTXXJoVHiIHJHMfLVUm11y2bH71QkTCsuajGV1Dv90zSDqZ6tYS6HEX SKWZia8TUNhDdxV9s6UduawrxgV74tl3ueK4+0W1O7XQ6vH1tMavk1TU8pfl7Imf 0iEQmwuBS7xiFpa5ENVtNGp1FKRkBQH++ldDbrLtubkbbgSeJJ3VJJUdGvI2gyqd b8hCBqFCCqIUmBY8MVuogNIg851NcauxaP/Z6KXAx3e/n04Kecgalxi+xf+vVYqt CPbPvk3malTI2DQUk6lEOh4prooQEyRF27hpQM0lD4Iwbn+KCd4mzz4WOLE0XdFF IYTs0BRSTbMlhzzSFKvDLSjgCwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFILrGXH8 gUMtsrWdY/J1sp/jXIk8MB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5QkMvODkyODk3MzAyRTkwMTFFOTkxNzc5NjBGQzRGOUFFMDIvNTg3MDk1MkVD NTMwMTFFQTk4RDFENjUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAeWEkMA0GCSqGSIb3DQEBCwUAA4IBAQAzdYVRMThzeHvbWNlUevY7 i+1z+FV165zF504WoRWWOP8MfIrb0x4VV0EsAqf68Bz6fK9huIg84LibkOY4Mdoc XoxfU/X3s9ZNEvfo7IjNXymXqds5suNTUkSZA/VDHPiFUT9DzcYnsM1LGWnyYAUa H10Mw80iexRvcomIWBqnnImcG9hGfGFpHK2CdtRXpcGTMfRqapzWZpc+fk1MUMAf b7R4mKzuJGjef3ZjWKCwKNme5BQf7URCS1cZTE6XrXKNqUSEVaaU2O2NF+qzIdft npdw6YhSbDiqEPiuMf/qFL1QOXgbyDkIAVuErITn2nD5ojGxkHm00g+J11xhpNZx -----END CERTIFICATE-----Generated at Mon Mar 2 10:21:56 2026 by rpki-client