$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa File: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (raw, json) Hash identifier: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg= Subject key identifier: E4:1F:A4:54:3E:35:9E:78:64:A4:E0:2C:BC:65:54:A0:C8:C2:4D:65 Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Certificate serial: 45144250140370F19961A176DBF2313AA5D517D6 Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa Signing time: Fri 19 Sep 2025 01:50:19 +0000 ROA not before: Fri 19 Sep 2025 01:45:19 +0000 ROA not after: Fri 18 Sep 2026 01:50:19 +0000 asID: 153346 IP address blocks: 2001:df4:5140::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:14:42:50:14:03:70:f1:99:61:a1:76:db:f2:31:3a:a5:d5:17:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Validity Not Before: Sep 19 01:45:19 2025 GMT Not After : Sep 18 01:50:19 2026 GMT Subject: CN=E41FA4543E359E7864A4E02CBC6554A0C8C24D65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:67:17:a7:4c:f5:d9:4b:9e:6b:72:16:d0: 2f:16:94:4f:21:e8:29:38:4a:39:bc:ab:f9:c4:f3: d9:69:9f:12:00:65:d2:0b:a3:fc:35:e3:dd:32:a6: 96:89:82:97:7e:39:37:82:b7:99:72:80:0d:fb:e6: f8:8f:61:3a:2a:31:69:f9:72:25:9d:ce:f7:2b:13: 5b:a6:34:b8:e8:bd:c7:f8:5f:cb:b7:82:91:ff:88: c5:71:22:ab:e6:6b:cc:db:a0:9d:7d:ff:1e:23:a5: e1:47:f3:d9:ba:f4:b9:00:c1:44:8f:95:ec:0a:76: 6d:31:8d:45:16:23:a2:c4:a2:31:aa:52:47:1f:31: 52:4c:ec:b2:3d:3b:04:e5:ff:00:4d:c4:9d:c2:2d: a7:13:12:c0:07:0d:7b:e1:f9:d5:ff:c0:78:81:21: a6:46:b1:3f:0f:de:bf:fd:be:c2:5d:31:6a:eb:53: ae:cc:b1:9d:05:5a:2f:93:97:df:d2:35:ba:11:1e: 05:3d:25:64:35:eb:2c:4b:0c:3f:27:2b:9b:53:f1: 46:0b:8d:fa:30:12:62:d6:bb:09:60:ff:bf:06:3e: fa:8b:10:41:f5:3e:ec:c8:cd:4c:4a:22:bb:3c:23: d6:b9:f7:cd:1c:2d:88:e6:7b:31:6f:a5:6d:22:ef: 2c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1F:A4:54:3E:35:9E:78:64:A4:E0:2C:BC:65:54:A0:C8:C2:4D:65 X509v3 Authority Key Identifier: keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:5140::/44 Signature Algorithm: sha256WithRSAEncryption 98:eb:2b:32:64:eb:c7:ea:e5:29:2d:07:bd:db:94:10:c4:1c: b3:1e:1d:c2:d7:8a:95:75:35:11:8a:25:eb:4e:7d:5f:0a:96: 8d:0d:bd:50:f9:13:86:0c:c7:f4:f0:2e:13:a3:2a:3d:40:97: b6:e5:e3:02:d4:a0:03:74:5e:03:4f:e2:bd:a5:d6:2b:35:0d: 2d:45:56:e4:81:25:7c:1b:71:d4:b0:52:0d:58:41:84:6d:72: 57:db:e3:6c:ae:ce:01:f6:80:35:f1:d0:31:cf:e2:65:28:fb: c7:68:3f:09:90:c3:ed:73:20:d5:33:ed:18:fe:4b:37:de:5f: 43:69:fb:bf:4d:a5:d2:0e:b9:9d:9b:c5:1b:65:56:c5:7c:9b: 26:f2:c9:bc:a5:0a:c3:0d:cb:51:e0:34:79:f5:8d:71:19:74: 56:76:65:b6:d0:b6:ae:31:47:9d:ee:ee:7b:1a:e3:4e:e1:6d: c3:21:36:cc:d7:3a:84:72:a6:9c:1e:58:3e:e1:38:de:b7:c8: 48:1f:c5:c8:7c:a3:0b:b4:de:55:b1:49:81:5f:96:17:f7:15: 06:e6:db:cb:4e:3f:c3:07:ea:01:3d:ec:da:3b:93:94:83:d7: ac:08:9f:fc:ba:d9:74:67:ad:af:df:24:13:2a:c1:f0:42:0a: 1c:1f:14:e1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURRRCUBQDcPGZYaF22/IxOqXVF9YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI1MDkxOTAxNDUxOVoX DTI2MDkxODAxNTAxOVowMzExMC8GA1UEAxMoRTQxRkE0NTQzRTM1OUU3ODY0QTRF MDJDQkM2NTU0QTBDOEMyNEQ2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0rZxenTPXZS55rchbQLxaUTyHoKThKObyr+cTz2WmfEgBl0guj/DXj3TKm lomCl345N4K3mXKADfvm+I9hOioxaflyJZ3O9ysTW6Y0uOi9x/hfy7eCkf+IxXEi q+ZrzNugnX3/HiOl4Ufz2br0uQDBRI+V7Ap2bTGNRRYjosSiMapSRx8xUkzssj07 BOX/AE3EncItpxMSwAcNe+H51f/AeIEhpkaxPw/ev/2+wl0xautTrsyxnQVaL5OX 39I1uhEeBT0lZDXrLEsMPycrm1PxRguN+jASYta7CWD/vwY++osQQfU+7MjNTEoi uzwj1rn3zRwtiOZ7MW+lbSLvLFkCAwEAAaOCAh8wggIbMB0GA1UdDgQWBBTkH6RU PjWeeGSk4Cy8ZVSgyMJNZTAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT +jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV OWlTUUJ0aVRodmh4dVdrX28uY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYB BQUHMAuGd3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx NzQ0N0IwMDAwLzEvMzIzMDMwMzEzYTY0NjYzNDNhMzUzMTM0MzAzYTNhMmYzNDM0 MmQzNDM0MjAzZDNlMjAzMTM1MzMzMzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQgAQ30UUAwDQYJ KoZIhvcNAQELBQADggEBAJjrKzJk68fq5SktB73blBDEHLMeHcLXipV1NRGKJetO fV8Klo0NvVD5E4YMx/TwLhOjKj1Al7bl4wLUoAN0XgNP4r2l1is1DS1FVuSBJXwb cdSwUg1YQYRtclfb42yuzgH2gDXx0DHP4mUo+8doPwmQw+1zINUz7Rj+SzfeX0Np +79NpdIOuZ2bxRtlVsV8mybyybylCsMNy1HgNHn1jXEZdFZ2ZbbQtq4xR53u7nsa 407hbcMhNszXOoRyppweWD7hON63yEgfxch8owu03lWxSYFflhf3FQbm28tOP8MH 6gE97No7k5SD16wIn/y62XRnra/fJBMqwfBCChwfFOE= -----END CERTIFICATE-----Generated at Wed Nov 5 20:41:29 2025 by rpki-client