$ rpki-client -vvvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa File: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (raw, json) Hash identifier: OiPbhLg0l0qALFaxQ7AiFKzsXkUMsijWogGz/FhHe18= Subject key identifier: B0:12:29:DE:ED:7E:6A:53:C7:92:F2:CC:BE:D6:F2:B1:4C:47:EE:B5 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 484F570BE600206A628847BD81A4A81F3BE27082 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa Signing time: Mon 21 Sep 2026 00:00:01 +0000 ROA not before: Sun 20 Sep 2026 23:55:01 +0000 ROA not after: Mon 20 Sep 2027 00:00:01 +0000 asID: 24021 IP address blocks: 203.147.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4f:57:0b:e6:00:20:6a:62:88:47:bd:81:a4:a8:1f:3b:e2:70:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Sep 20 23:55:01 2026 GMT Not After : Sep 20 00:00:01 2027 GMT Subject: CN=B01229DEED7E6A53C792F2CCBED6F2B14C47EEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a9:39:ae:26:f2:01:29:85:86:03:5b:c3:2a: 8f:08:b8:d0:64:42:ca:6f:ae:63:f1:21:2c:fc:e5: 83:30:5e:3f:e1:fb:c4:1b:1c:80:12:39:e9:9f:9c: bd:48:89:ce:b0:bb:e9:06:52:4c:f8:d4:b7:3a:f1: db:4e:a6:cb:43:d8:2b:b3:15:06:63:d3:3c:a4:fb: e3:4a:82:1f:86:a1:d0:78:99:73:9d:e3:57:f0:58: 72:51:52:88:27:9a:6b:43:7f:f6:22:67:57:f3:48: a6:f6:e3:40:5c:10:03:44:0e:f7:b2:e3:fc:6d:02: 8c:97:86:fe:25:22:60:ca:a7:b1:11:1c:88:6c:1b: 5d:3c:ba:6a:56:11:96:72:e3:d4:56:fe:2f:95:9c: be:c1:5e:93:70:9f:dc:6e:39:39:2c:17:a4:72:c0: 35:7c:62:4f:63:df:fa:f6:9e:7f:9a:3f:82:bd:9f: 22:e9:fd:ca:92:8d:80:a5:9c:a6:29:37:11:0f:e5: 1a:58:0c:eb:0a:94:b9:87:a1:79:3c:a5:99:e4:44: 46:86:a1:9a:ea:a8:37:b5:95:a5:cb:bf:3b:14:ad: 61:84:27:35:12:62:49:94:28:c2:c9:29:18:60:63: 2d:d9:82:42:e7:78:84:c8:6f:da:28:29:fc:95:92: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:12:29:DE:ED:7E:6A:53:C7:92:F2:CC:BE:D6:F2:B1:4C:47:EE:B5 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.147.108.0/23 Signature Algorithm: sha256WithRSAEncryption 45:f2:00:7f:01:25:5e:aa:23:84:43:99:81:6b:89:b3:4d:06: 85:d5:be:37:1b:29:73:77:b4:86:10:2e:34:72:fb:45:30:b2: 80:9f:b7:4e:47:2a:79:cb:ca:67:3c:6a:74:01:00:d4:c2:c2: 05:2e:8f:34:92:be:a3:b5:e0:6b:7c:9e:c2:45:ca:74:bf:80: 80:85:7f:4d:e7:bc:af:60:16:8f:c1:4b:15:f2:1e:01:5f:e4: 26:b1:94:95:db:7d:dd:94:61:5f:c7:3f:d0:94:d8:b8:cb:fa: 60:83:47:07:9c:ea:f6:0a:d9:40:53:c5:c1:e0:84:05:f4:08: f8:f8:b4:c1:c0:6b:2b:cd:3a:58:aa:f7:1c:98:3e:64:f8:e3: da:03:aa:34:3c:65:4a:c7:24:ad:a1:d1:a4:5c:d0:77:49:6e: bd:f0:36:be:3c:f3:9b:b6:20:7f:14:a4:54:7d:aa:28:cf:41: 13:c2:b2:d8:a9:54:26:c9:80:50:e8:47:68:97:c9:92:2c:5a: 91:2f:df:b4:57:15:80:24:4d:4a:3b:b2:ac:8c:77:4f:06:e8: ee:80:31:c6:d3:45:8e:22:00:cb:45:b0:11:6d:f1:7f:08:9d: eb:d8:3f:ab:7d:2b:78:d9:99:d5:67:74:9c:ea:78:93:03:ea: 65:c7:65:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUSE9XC+YAIGpiiEe9gaSoHzvicIIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDkyMDIzNTUwMVoX DTI3MDkyMDAwMDAwMVowMzExMC8GA1UEAxMoQjAxMjI5REVFRDdFNkE1M0M3OTJG MkNDQkVENkYyQjE0QzQ3RUVCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOpOa4m8gEphYYDW8Mqjwi40GRCym+uY/EhLPzlgzBeP+H7xBscgBI56Z+c vUiJzrC76QZSTPjUtzrx206my0PYK7MVBmPTPKT740qCH4ah0HiZc53jV/BYclFS iCeaa0N/9iJnV/NIpvbjQFwQA0QO97Lj/G0CjJeG/iUiYMqnsREciGwbXTy6alYR lnLj1Fb+L5WcvsFek3Cf3G45OSwXpHLANXxiT2Pf+vaef5o/gr2fIun9ypKNgKWc pik3EQ/lGlgM6wqUuYeheTylmeRERoahmuqoN7WVpcu/OxStYYQnNRJiSZQowskp GGBjLdmCQud4hMhv2igp/JWSgeECAwEAAaOCAgkwggIFMB0GA1UdDgQWBBSwEine 7X5qU8eS8sy+1vKxTEfutTAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUFBzALhmxy c3luYzovL3Jwa2kucmFuZC5hcG5pYy5uZXQvcmVwby9BOTE4NzJFRDAwMDEvMC8z MjMwMzMyZTMxMzQzNzJlMzEzMDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIz NDMwMzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEAcuTbDANBgkqhkiG9w0BAQsFAAOCAQEARfIAfwEl XqojhEOZgWuJs00GhdW+Nxspc3e0hhAuNHL7RTCygJ+3TkcqecvKZzxqdAEA1MLC BS6PNJK+o7Xga3yewkXKdL+AgIV/Tee8r2AWj8FLFfIeAV/kJrGUldt93ZRhX8c/ 0JTYuMv6YINHB5zq9grZQFPFweCEBfQI+Pi0wcBrK806WKr3HJg+ZPjj2gOqNDxl SsckraHRpFzQd0luvfA2vjzzm7YgfxSkVH2qKM9BE8Ky2KlUJsmAUOhHaJfJkixa kS/ftFcVgCRNSjuyrIx3Twbo7oAxxtNFjiIAy0WwEW3xfwid69g/q30reNmZ1Wd0 nOp4kwPqZcdlbg== -----END CERTIFICATE-----Generated at Tue Sep 22 03:26:00 2026 by rpki-client