$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/85DF1F2852C911EA93D1814FC4F9AE02.roa File: 85DF1F2852C911EA93D1814FC4F9AE02.roa (raw, json) Hash identifier: XkGDuPLll5R6276bBy26BECvXJwNv4GaIlSb9abItME= Subject key identifier: DD:87:74:10:4C:89:E7:3E:5D:CE:8B:D8:4C:59:40:0F:7E:3F:D2:4F Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3C03 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/85DF1F2852C911EA93D1814FC4F9AE02.roa Signing time: Mon 06 Jul 2026 15:11:58 +0000 ROA not before: Mon 06 Jul 2026 15:11:58 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 21734 IP address blocks: 61.90.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15363 (0x3c03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 6 15:11:58 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4bc5be-fd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:74:e9:28:a7:a8:45:4f:6c:6c:df:fc:68: c1:8f:9d:8c:77:4d:c6:10:c5:88:70:d6:a0:14:5e: 2e:aa:eb:2a:13:1c:aa:e1:d8:33:cb:cd:10:af:df: cd:73:61:bd:a1:2b:12:d1:0d:33:a9:85:55:59:8a: c5:6b:2d:e5:9f:0c:09:c5:ed:29:57:0b:67:1b:d5: 84:ad:7d:42:4d:fd:c3:91:e4:3c:c5:99:ad:86:ae: 5f:ec:d4:2f:4d:d0:7e:28:c2:0a:7b:e7:a4:b8:52: f6:9d:40:9f:aa:cb:20:7b:0d:0a:45:75:5b:1b:d0: fb:f7:03:36:73:8a:37:e5:f4:f0:7a:cb:e5:42:84: 09:d6:ea:6e:fc:8b:36:52:dd:db:72:11:87:a8:7e: f3:da:16:3c:55:33:e0:9d:ba:0d:84:9b:8d:be:58: e1:bd:f5:a6:25:7a:79:1a:f9:ea:29:c6:63:5e:1e: 9d:94:35:43:c8:21:15:ea:e1:5d:c0:37:93:e3:33: 3f:0a:a4:2e:e8:4f:a4:c9:6c:91:5a:18:16:a7:5f: c5:31:78:53:cd:f4:8b:4a:2a:8e:63:77:ea:59:9b: ba:d1:92:e3:b0:f3:bd:29:0b:6a:af:a8:5b:a0:1a: 99:3c:3e:25:60:49:62:ac:7b:c1:8e:e6:a2:07:fe: 0d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:74:10:4C:89:E7:3E:5D:CE:8B:D8:4C:59:40:0F:7E:3F:D2:4F X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/85DF1F2852C911EA93D1814FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.90.251.0/24 Signature Algorithm: sha256WithRSAEncryption af:6a:85:14:f9:b4:be:8c:21:62:d4:68:9d:72:3c:2a:45:9c: 8f:6c:97:b5:38:30:07:cf:9d:d0:27:8b:de:4e:20:e6:63:09: 0e:69:9e:9a:0c:d0:f8:7a:89:10:49:d3:8f:50:be:8e:1b:bf: 3f:0d:74:99:bb:9e:c1:1e:79:6b:9d:36:b0:a2:1a:37:7f:8a: 5d:f2:49:91:f3:2a:d0:26:74:3b:3d:73:f6:c6:03:19:42:77: 99:27:89:56:54:c5:22:01:50:93:6c:79:fd:04:b7:41:8d:b6: 13:f3:0a:6a:fb:94:a6:32:46:3e:f5:d6:8b:ab:e1:30:cb:44: da:29:05:6b:51:8c:6c:72:67:dc:49:7d:84:71:eb:fb:d0:90: b1:ac:e3:a1:6d:63:91:cc:03:7d:6f:bd:49:02:85:29:78:d9: 50:fb:b1:99:78:b7:93:e5:37:50:f8:ee:dc:02:53:ee:84:2a: ce:79:51:3c:cb:b4:eb:74:23:4d:3d:39:ec:f0:2e:b4:8d:12: 53:d7:db:76:3f:96:c8:32:90:19:e0:ca:39:69:b0:4a:76:d5: ef:bb:a6:0b:06:f7:be:b4:3b:14:f4:ad:97:46:2b:2b:87:40: 1a:ca:43:73:5d:74:66:3f:56:19:4c:a4:83:6f:e0:2a:94:93: 3e:61:44:a3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICPAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjYwNzA2MTUxMTU4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiYzViZS1mZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqN06SinqEVPbGzf/GjBj52Md03GEMWIcNagFF4uqusqExyq4dgzy80Qr9/N c2G9oSsS0Q0zqYVVWYrFay3lnwwJxe0pVwtnG9WErX1CTf3DkeQ8xZmthq5f7NQv TdB+KMIKe+ekuFL2nUCfqssgew0KRXVbG9D79wM2c4o35fTwesvlQoQJ1upu/Is2 Ut3bchGHqH7z2hY8VTPgnboNhJuNvljhvfWmJXp5GvnqKcZjXh6dlDVDyCEV6uFd wDeT4zM/CqQu6E+kyWyRWhgWp1/FMXhTzfSLSiqOY3fqWZu60ZLjsPO9KQtqr6hb oBqZPD4lYElirHvBjuaiB/4N0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN2HdBBM iec+Xc6L2ExZQA9+P9JPMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvODVERjFGMjg1 MkM5MTFFQTkzRDE4MTRGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAPVr7MA0GCSqGSIb3DQEBCwUAA4IBAQCvaoUU+bS+jCFi1Gidcjwq RZyPbJe1ODAHz53QJ4veTiDmYwkOaZ6aDND4eokQSdOPUL6OG78/DXSZu57BHnlr nTawoho3f4pd8kmR8yrQJnQ7PXP2xgMZQneZJ4lWVMUiAVCTbHn9BLdBjbYT8wpq +5SmMkY+9daLq+Ewy0TaKQVrUYxscmfcSX2Ecev70JCxrOOhbWORzAN9b71JAoUp eNlQ+7GZeLeT5TdQ+O7cAlPuhCrOeVE8y7TrdCNNPTns8C60jRJT19t2P5bIMpAZ 4Mo5abBKdtXvu6YLBve+tDsU9K2XRisrh0AaykNzXXRmP1YZTKSDb+AqlJM+YUSj -----END CERTIFICATE-----Generated at Fri Jul 24 11:20:22 2026 by rpki-client