$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa File: 3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa (raw, json) Hash identifier: 46x9LKwAZ2Y3xvalDObplUimvA4+JGL0XtTt44DkfKM= Subject key identifier: 93:86:31:32:18:70:5D:82:19:AB:8E:CA:90:38:D1:99:8C:4E:EF:A7 Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Certificate serial: 3F2692DD4C7EB5C04E69ED005B8585CA8F1CFC2D Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa Signing time: Tue 18 Mar 2025 16:26:45 +0000 ROA not before: Tue 18 Mar 2025 16:21:45 +0000 ROA not after: Tue 17 Mar 2026 16:26:45 +0000 asID: 142565 IP address blocks: 103.25.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 01:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:26:92:dd:4c:7e:b5:c0:4e:69:ed:00:5b:85:85:ca:8f:1c:fc:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112 Validity Not Before: Mar 18 16:21:45 2025 GMT Not After : Mar 17 16:26:45 2026 GMT Subject: CN=9386313218705D8219AB8ECA9038D1998C4EEFA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:e4:66:c9:b4:6e:80:3f:df:b2:05:7c:83: 74:da:d9:09:c4:88:47:3e:99:a2:7f:1d:6e:cd:49: cb:fb:fa:06:8b:2c:f4:c4:d9:63:9e:6a:ec:15:c8: 97:aa:ad:9d:6b:c8:29:ef:eb:e5:da:15:3e:30:f9: 06:f4:08:54:4c:ea:71:56:8b:dc:5f:6d:b8:53:89: 56:65:ce:33:ef:f3:68:9b:e7:5a:69:6a:2a:17:62: ac:b1:a9:61:c3:b6:b9:f9:6c:ac:36:b4:de:2d:37: 24:f2:7d:33:39:00:3d:00:c4:11:c5:b6:12:ca:48: 66:4e:74:09:4c:fd:79:5f:23:4c:53:39:79:e5:15: 1e:70:51:36:02:27:57:54:14:94:e6:ce:5b:33:4b: 44:43:25:c0:06:61:11:4e:54:2b:74:db:d0:07:2a: 41:64:c9:58:5a:3b:8c:61:69:05:7d:77:99:c4:23: bf:a5:32:20:04:49:e4:28:51:be:e1:89:bf:1e:d3: 59:9a:f8:72:14:42:36:f7:0a:3e:a8:d4:68:06:b9: 0e:50:ce:2c:13:56:e0:69:4a:f8:60:1a:72:22:ba: e7:85:27:ae:50:6d:d5:4f:3d:ce:6d:47:20:43:94: 50:5d:ca:62:1e:12:65:d6:46:a1:83:80:19:e3:a8: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:86:31:32:18:70:5D:82:19:AB:8E:CA:90:38:D1:99:8C:4E:EF:A7 X509v3 Authority Key Identifier: keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313432353635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.127.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:58:d6:d3:6b:43:45:c9:79:22:71:85:7d:02:e1:01:94:d8: 9f:83:c2:ea:fe:50:63:a6:d9:c5:39:8d:b3:16:a3:ed:d2:ad: fc:93:9b:bb:7d:ad:de:d1:62:04:05:d8:09:b9:4a:c3:8d:7f: ed:0f:f4:6b:ed:09:bf:8b:69:06:f9:96:e0:4d:27:51:19:c2: ae:76:3e:50:cb:b4:5c:94:7d:f5:38:82:bd:11:54:77:86:86: c9:9c:b5:4f:37:06:ef:e1:80:0d:61:4b:e0:6c:09:ef:f9:cc: 63:5a:47:83:ca:93:ac:f1:d1:5a:2c:67:a0:39:08:b1:56:2e: e4:f5:c2:86:07:d4:1e:c1:5a:20:6f:56:98:de:1e:6c:2d:51: 1f:49:4c:fd:af:ff:9c:71:ee:1c:d0:25:d0:ea:ac:f4:95:c2: ca:3c:69:fb:24:84:ea:0a:04:2f:a9:9f:0a:96:0b:68:ef:9b: c9:bf:3c:07:a9:dc:e8:8c:03:eb:03:15:18:0a:11:62:5a:1b: 2c:78:29:6d:69:57:b3:37:60:b3:1d:96:84:27:9b:30:7b:1b: 43:88:97:58:44:73:24:70:36:cf:6b:9c:6f:6a:46:05:82:cd: 0a:83:88:b5:12:a1:ed:f3:ba:cc:fd:34:87:cb:fa:44:80:96: 59:1c:e3:72 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUPyaS3Ux+tcBOae0AW4WFyo8c/C0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjZEQTgwMDAwMTEwLwYDVQQFEyhDOUYwMzYyMEEy N0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyMB4XDTI1MDMxODE2MjE0NVoX DTI2MDMxNzE2MjY0NVowMzExMC8GA1UEAxMoOTM4NjMxMzIxODcwNUQ4MjE5QUI4 RUNBOTAzOEQxOTk4QzRFRUZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALC15GbJtG6AP9+yBXyDdNrZCcSIRz6Zon8dbs1Jy/v6Boss9MTZY55q7BXI l6qtnWvIKe/r5doVPjD5BvQIVEzqcVaL3F9tuFOJVmXOM+/zaJvnWmlqKhdirLGp YcO2uflsrDa03i03JPJ9MzkAPQDEEcW2EspIZk50CUz9eV8jTFM5eeUVHnBRNgIn V1QUlObOWzNLREMlwAZhEU5UK3Tb0AcqQWTJWFo7jGFpBX13mcQjv6UyIARJ5ChR vuGJvx7TWZr4chRCNvcKPqjUaAa5DlDOLBNW4GlK+GAaciK654UnrlBt1U89zm1H IEOUUF3KYh4SZdZGoYOAGeOo/pMCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBSThjEy GHBdghmrjsqQONGZjE7vpzAfBgNVHSMEGDAWgBTJ8DYgonzOrabn4s7Gxa2MuT/h EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyNkRBODAwMDAvMS9DOUYwMzYy MEEyN0NDRUFEQTZFN0UyQ0VDNkM1QUQ4Q0I5M0ZFMTEyLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi95ZkEySUtKOHpx Mm01LUxPeHNXdGpMa180UkkuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTI2 REE4MDAwMC8xLzMxMzAzMzJlMzIzNTJlMzEzMjM3MmUzMDJmMzIzNDJkMzIzNDIw M2QzZTIwMzEzNDMyMzUzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxl/MA0GCSqGSIb3DQEBCwUA A4IBAQAaWNbTa0NFyXkicYV9AuEBlNifg8Lq/lBjptnFOY2zFqPt0q38k5u7fa3e 0WIEBdgJuUrDjX/tD/Rr7Qm/i2kG+ZbgTSdRGcKudj5Qy7RclH31OIK9EVR3hobJ nLVPNwbv4YANYUvgbAnv+cxjWkeDypOs8dFaLGegOQixVi7k9cKGB9QewVogb1aY 3h5sLVEfSUz9r/+cce4c0CXQ6qz0lcLKPGn7JITqCgQvqZ8Klgto75vJvzwHqdzo jAPrAxUYChFiWhsseCltaVezN2CzHZaEJ5swextDiJdYRHMkcDbPa5xvakYFgs0K g4i1EqHt87rM/TSHy/pEgJZZHONy -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:13 2025 by rpki-client