$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa File: 3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa (raw, json) Hash identifier: Nte6tD3FfFQqKxwU8oQv3wOReI9lQjoX5L/BgCuBpxg= Subject key identifier: 09:02:17:9F:D8:84:EA:0F:CC:18:46:22:4B:48:40:39:FA:6D:7E:1D Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 0D3201E9A96407CD8D5347C1DF8F9841448EB454 Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa Signing time: Mon 10 Mar 2025 13:28:10 +0000 ROA not before: Mon 10 Mar 2025 13:23:10 +0000 ROA not after: Mon 09 Mar 2026 13:28:10 +0000 asID: 146859 IP address blocks: 103.25.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:32:01:e9:a9:64:07:cd:8d:53:47:c1:df:8f:98:41:44:8e:b4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Mar 10 13:23:10 2025 GMT Not After : Mar 9 13:28:10 2026 GMT Subject: CN=0902179FD884EA0FCC1846224B484039FA6D7E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:15:9b:5c:83:e2:42:86:99:90:bf:bc:96: a6:30:65:4a:5e:94:b0:56:61:f8:c9:09:42:46:ff: 9a:d6:4c:53:33:97:2a:7d:b8:52:95:4c:5a:3e:c0: 3a:92:06:76:38:66:09:60:6b:62:7d:95:c9:22:b8: 52:47:c7:32:02:d8:76:f1:f4:c1:1b:31:0e:db:8d: 66:75:5e:60:ed:a4:e7:eb:7c:e1:80:25:84:c8:e2: 4b:8f:97:90:89:02:b6:e4:c8:96:70:4a:ec:45:cb: 3a:79:49:30:ea:c9:8c:c9:2e:bd:a6:2f:f7:ed:11: ee:b6:0d:2f:7f:79:c7:f7:91:09:8c:13:02:6c:fa: 7f:b3:12:d1:10:be:37:ab:84:da:6a:0f:dd:b1:71: ca:0c:fb:d1:36:75:1e:f6:20:8c:92:47:98:d2:17: 16:13:f9:18:7f:b2:52:e2:28:37:47:8f:45:a5:2c: 3f:c1:57:1c:27:33:9a:e3:de:0b:88:4b:51:34:2d: aa:87:b5:68:10:90:ae:c1:e3:13:20:8a:64:79:4e: ac:93:1e:46:e5:d4:b3:ff:48:26:cf:82:36:f5:6a: ed:64:16:f2:70:ee:a1:7d:79:f8:28:fa:bd:ab:bc: d7:a5:6c:ed:6c:bb:52:73:a0:7a:c0:62:c2:96:01: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:02:17:9F:D8:84:EA:0F:CC:18:46:22:4B:48:40:39:FA:6D:7E:1D X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132362e302f32342d3234203d3e20313436383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.126.0/24 Signature Algorithm: sha256WithRSAEncryption 94:96:5c:22:f5:d2:eb:3d:93:e2:84:55:b9:4c:05:36:ae:f4: 81:50:84:09:5e:8e:20:3b:d9:cf:1d:ca:1b:38:22:35:3f:01: b1:98:ac:00:71:4c:c2:89:93:ae:f8:d8:e7:e4:b7:a1:3a:33: c6:8f:57:d1:0d:46:ff:6a:3f:f3:46:5e:2d:0d:0c:63:c4:ce: 1d:07:ac:3d:41:ae:d6:f6:a2:8c:c0:38:67:ef:b7:43:88:0f: 98:97:d6:1c:3e:b4:95:8c:2a:77:5b:81:c3:b1:8e:8e:66:4d: 2e:dc:5f:77:00:6c:66:9c:fa:46:83:a8:08:4a:d0:01:fb:7b: d1:54:94:c6:a1:e7:9d:6c:1f:e8:07:cd:12:3b:e4:e5:37:82: f9:7d:b8:ae:88:19:e3:4d:8c:ab:10:de:b8:ca:36:19:b5:40: ce:e3:a6:0b:53:57:57:a2:07:01:51:93:2f:ad:75:dc:17:2c: eb:99:76:bb:d3:3b:c3:25:3e:1c:ac:c2:ff:b2:d8:35:97:de: f5:56:e1:09:04:3b:fb:cd:98:c5:eb:81:7c:a1:bc:07:51:d3: a8:3e:2b:ad:c8:69:ea:f7:ef:a6:a1:24:3b:54:49:11:ec:cf: b9:ee:c6:3d:42:7f:8a:3c:a6:c9:b9:61:b2:81:17:2b:75:5b: 34:c7:c8:26 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUDTIB6alkB82NU0fB34+YQUSOtFQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MDMxMDEzMjMxMFoX DTI2MDMwOTEzMjgxMFowMzExMC8GA1UEAxMoMDkwMjE3OUZEODg0RUEwRkNDMTg0 NjIyNEI0ODQwMzlGQTZEN0UxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7HFZtcg+JChpmQv7yWpjBlSl6UsFZh+MkJQkb/mtZMUzOXKn24UpVMWj7A OpIGdjhmCWBrYn2VySK4UkfHMgLYdvH0wRsxDtuNZnVeYO2k5+t84YAlhMjiS4+X kIkCtuTIlnBK7EXLOnlJMOrJjMkuvaYv9+0R7rYNL395x/eRCYwTAmz6f7MS0RC+ N6uE2moP3bFxygz70TZ1HvYgjJJHmNIXFhP5GH+yUuIoN0ePRaUsP8FXHCczmuPe C4hLUTQtqoe1aBCQrsHjEyCKZHlOrJMeRuXUs/9IJs+CNvVq7WQW8nDuoX15+Cj6 vau816Vs7Wy7UnOgesBiwpYBYnUCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQJAhef 2ITqD8wYRiJLSEA5+m1+HTAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTI2 REE4MDAwMC8xLzMxMzAzMzJlMzIzNTJlMzEzMjM2MmUzMDJmMzIzNDJkMzIzNDIw M2QzZTIwMzEzNDM2MzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxl+MA0GCSqGSIb3DQEBCwUA A4IBAQCUllwi9dLrPZPihFW5TAU2rvSBUIQJXo4gO9nPHcobOCI1PwGxmKwAcUzC iZOu+Njn5LehOjPGj1fRDUb/aj/zRl4tDQxjxM4dB6w9Qa7W9qKMwDhn77dDiA+Y l9YcPrSVjCp3W4HDsY6OZk0u3F93AGxmnPpGg6gIStAB+3vRVJTGoeedbB/oB80S O+TlN4L5fbiuiBnjTYyrEN64yjYZtUDO46YLU1dXogcBUZMvrXXcFyzrmXa70zvD JT4crML/stg1l971VuEJBDv7zZjF64F8obwHUdOoPiutyGnq9++moSQ7VEkR7M+5 7sY9Qn+KPKbJuWGygRcrdVs0x8gm -----END CERTIFICATE-----Generated at Sat Apr 26 20:02:30 2025 by rpki-client