$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4BFBBF6C1E0111E9A590C837C4F9AE02.roa File: 4BFBBF6C1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: OsWLgT+UjbrYVa88HZv9LSOUyO2qGfOxcG2hIZJm4FU= Subject key identifier: 38:46:A4:39:25:F8:F4:10:02:70:95:96:A5:37:80:36:F9:62:70:2D Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3C1A Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4BFBBF6C1E0111E9A590C837C4F9AE02.roa Signing time: Mon 06 Jul 2026 15:12:47 +0000 ROA not before: Mon 06 Jul 2026 15:12:47 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 38815 IP address blocks: 61.90.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15386 (0x3c1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 6 15:12:47 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4bc5ef-1e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:26:8e:b7:cc:cd:84:39:d8:72:27:7d:0a: f0:75:7a:17:55:46:e4:10:9d:04:61:71:94:cb:6b: db:e5:fa:3b:c8:52:ee:9b:2c:d9:ec:61:cf:da:5b: 6a:94:08:f4:6e:b9:c1:aa:1a:18:b8:1c:49:50:3d: 4b:98:f1:37:b8:28:69:6f:5d:19:3b:da:18:92:c0: 40:3d:87:3d:ca:9c:b1:9f:6c:58:fe:58:38:20:9b: c2:8b:f3:f1:d1:a1:6e:48:e2:c5:fd:8f:b6:df:2e: cd:ee:b7:c1:c3:47:3c:73:77:9d:08:85:34:e2:23: 24:5c:bc:da:0d:75:dd:f6:b3:90:e2:89:f3:2a:19: c7:d6:8f:0f:5c:13:38:55:08:bf:1d:aa:72:ee:ed: c3:6a:74:0e:fb:07:79:2c:af:1c:6b:6c:af:9e:59: da:35:74:cb:d7:17:a8:5b:d3:52:75:3b:76:04:93: 86:93:78:9f:a7:eb:64:66:8d:f5:f5:bf:ad:78:99: e8:44:c6:c8:bb:3b:06:cb:b9:06:fc:cf:00:5e:d3: 75:bb:89:30:ca:12:ad:15:b9:93:a6:8c:f3:d0:4c: 58:08:51:39:b6:87:20:c8:fb:08:29:ba:57:30:d4: 35:10:3a:c2:32:25:90:2b:51:a3:79:dd:cb:fc:30: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:46:A4:39:25:F8:F4:10:02:70:95:96:A5:37:80:36:F9:62:70:2D X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4BFBBF6C1E0111E9A590C837C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.90.157.0/24 Signature Algorithm: sha256WithRSAEncryption a9:fb:e2:64:e8:11:55:34:b1:3f:c6:86:53:7d:fd:1a:ba:e7: 76:76:bb:af:4b:f6:cf:55:7b:ac:fe:ed:ee:9a:bd:1c:c3:6f: 02:16:0e:4f:e9:cb:f3:fd:40:03:54:84:d4:93:40:61:e3:95: cc:4a:6e:08:9d:7f:19:b0:ed:66:32:99:38:fb:6c:09:2a:d1: 36:1b:b5:9a:77:4a:ab:c9:e6:19:36:36:dc:b4:94:00:da:75: 25:2a:d6:b3:f8:22:00:79:47:c2:cf:b9:6d:50:45:5d:32:f5: 3e:ad:f7:f9:83:46:a1:0f:70:a0:0c:7b:1b:d7:98:e8:3f:b9: a4:11:96:7c:1f:3c:9d:29:11:c8:92:bb:03:3a:1b:c2:a2:d5: 6a:f1:6e:19:ba:70:6b:ed:97:df:8c:96:eb:0d:57:98:20:4a: 7c:3a:8c:b3:5a:f0:a4:f2:37:66:10:ec:36:bb:bd:12:e2:8a: 25:5f:80:14:78:27:a9:81:ca:ba:ee:00:08:a3:e2:e7:bd:6e: d7:36:9a:76:ca:0b:10:1a:bd:73:66:68:23:88:e1:06:27:f2: 90:0c:58:a2:0d:3d:b7:c5:e2:91:a6:d2:46:20:5b:1f:36:a2: 27:c2:7b:03:49:c6:af:1f:5f:92:31:e8:8b:83:5e:0b:38:a4: 70:8c:78:0e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICPBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjYwNzA2MTUxMjQ3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiYzVlZi0xZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAQmjrfMzYQ52HInfQrwdXoXVUbkEJ0EYXGUy2vb5fo7yFLumyzZ7GHP2ltq lAj0brnBqhoYuBxJUD1LmPE3uChpb10ZO9oYksBAPYc9ypyxn2xY/lg4IJvCi/Px 0aFuSOLF/Y+23y7N7rfBw0c8c3edCIU04iMkXLzaDXXd9rOQ4onzKhnH1o8PXBM4 VQi/Hapy7u3DanQO+wd5LK8ca2yvnlnaNXTL1xeoW9NSdTt2BJOGk3ifp+tkZo31 9b+teJnoRMbIuzsGy7kG/M8AXtN1u4kwyhKtFbmTpozz0ExYCFE5tocgyPsIKbpX MNQ1EDrCMiWQK1Gjed3L/DCvGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDhGpDkl +PQQAnCVlqU3gDb5YnAtMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEJGQkJGNkMx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAPVqdMA0GCSqGSIb3DQEBCwUAA4IBAQCp++Jk6BFVNLE/xoZTff0a uud2druvS/bPVXus/u3umr0cw28CFg5P6cvz/UADVITUk0Bh45XMSm4InX8ZsO1m Mpk4+2wJKtE2G7Wad0qryeYZNjbctJQA2nUlKtaz+CIAeUfCz7ltUEVdMvU+rff5 g0ahD3CgDHsb15joP7mkEZZ8HzydKRHIkrsDOhvCotVq8W4ZunBr7ZffjJbrDVeY IEp8OoyzWvCk8jdmEOw2u70S4oolX4AUeCepgcq67gAIo+LnvW7XNpp2ygsQGr1z ZmgjiOEGJ/KQDFiiDT23xeKRptJGIFsfNqInwnsDScavH1+SMeiLg14LOKRwjHgO -----END CERTIFICATE-----Generated at Fri Jul 24 11:08:40 2026 by rpki-client