$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa File: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (raw, json) Hash identifier: 8+0jL3+NbfciLcZgupy5BXboLJIz0oZxaOC4vwv27Cg= Subject key identifier: D5:04:CF:B8:F9:4F:54:67:52:C8:FC:12:64:89:D6:DE:69:1E:BA:EC Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Certificate serial: 7AA350DE5546EB438E32F3F6D86E05E4BF90D153 Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa Signing time: Sun 06 Sep 2026 05:56:53 +0000 ROA not before: Sun 06 Sep 2026 05:51:53 +0000 ROA not after: Sun 05 Sep 2027 05:56:53 +0000 asID: 37990 IP address blocks: 2001:df0:206::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a3:50:de:55:46:eb:43:8e:32:f3:f6:d8:6e:05:e4:bf:90:d1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Validity Not Before: Sep 6 05:51:53 2026 GMT Not After : Sep 5 05:56:53 2027 GMT Subject: CN=D504CFB8F94F546752C8FC126489D6DE691EBAEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d9:be:c0:c8:d5:3a:14:34:19:7f:b0:a3:dd: 39:e5:a9:89:81:34:11:17:0d:86:8f:ff:6b:d3:32: 56:5d:e9:52:32:26:43:65:0a:53:b0:81:6d:83:69: f4:c1:ed:6e:ff:09:7e:5a:00:d7:61:55:04:ed:3f: 4a:78:93:8d:24:f6:ae:d7:98:c6:96:26:df:c4:7d: fe:a1:a8:6a:d8:ce:54:8b:9f:24:66:93:91:89:89: 97:71:3e:39:b0:e7:12:77:af:b0:d0:8b:6b:42:b3: 67:5d:59:ce:c6:d5:6d:a8:40:c7:88:f1:39:ce:70: 5d:fe:08:d6:5e:af:df:39:c3:a5:08:51:7c:5e:c3: c2:1b:6d:c1:42:51:b8:7c:ed:fc:57:5f:ea:22:9f: 89:33:79:4f:45:c1:8b:76:7a:1e:38:b5:68:36:00: b7:b9:e6:77:d4:12:a4:eb:14:9a:58:2d:b9:df:6e: 44:f8:b7:a1:51:90:57:cf:8a:0c:7a:ed:e8:63:87: 8e:0a:17:1c:6d:87:22:9f:50:8e:5b:9a:91:22:16: 76:bf:dd:09:b5:05:af:da:ef:bd:41:8a:7b:76:6d: 98:ca:11:c0:59:e4:ac:d9:52:12:6a:3c:e5:5a:cc: 92:39:9a:26:87:c7:42:97:45:df:34:9d:33:fe:5b: 85:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:04:CF:B8:F9:4F:54:67:52:C8:FC:12:64:89:D6:DE:69:1E:BA:EC X509v3 Authority Key Identifier: keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:206::/48 Signature Algorithm: sha256WithRSAEncryption dc:7d:76:f3:a2:f8:3f:4e:39:80:5c:28:b0:99:29:c6:8b:5a: 65:df:ed:dd:e8:58:56:d6:c1:2b:b7:60:59:22:dd:f6:0b:b3: 5f:36:f2:1a:a2:e1:7b:29:81:de:d1:64:19:4c:d0:25:05:36: 84:7d:f3:0a:4c:d9:5a:d6:4b:bd:17:2d:05:63:c9:b9:ba:04: 1a:d0:52:04:59:7d:2a:1a:84:1a:06:74:9d:e9:95:f2:e7:4c: 5a:29:bb:0e:73:1b:45:43:4b:5c:9f:ec:a6:ae:8f:71:96:fc: d8:10:dd:0f:3d:4d:37:c5:75:98:93:d6:32:e0:1e:52:ea:52: c9:f7:ee:a5:45:72:d3:30:81:76:8f:74:c0:9a:ca:61:16:20: ae:49:11:44:fd:44:8c:05:1e:43:82:cc:e1:02:21:49:6f:0c: f1:67:c2:88:95:fe:93:84:1b:24:8a:96:d0:b9:62:9d:a8:9f: 3f:27:d3:51:ca:12:90:7a:90:f4:06:62:08:a4:13:53:48:f6: c1:82:ef:09:b9:c8:61:df:c3:93:a7:b1:9f:58:ae:ee:dd:86: f5:1d:ea:05:44:ee:94:75:f0:ed:07:5e:d4:c5:15:07:36:02: 3a:81:2f:af:cf:2c:ed:b6:0d:9c:d5:42:62:12:9b:1f:f8:12: 03:3f:e8:8a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUeqNQ3lVG60OOMvP22G4F5L+Q0VMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3 RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI2MDkwNjA1NTE1M1oX DTI3MDkwNTA1NTY1M1owMzExMC8GA1UEAxMoRDUwNENGQjhGOTRGNTQ2NzUyQzhG QzEyNjQ4OUQ2REU2OTFFQkFFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI3ZvsDI1ToUNBl/sKPdOeWpiYE0ERcNho//a9MyVl3pUjImQ2UKU7CBbYNp 9MHtbv8JfloA12FVBO0/SniTjST2rteYxpYm38R9/qGoatjOVIufJGaTkYmJl3E+ ObDnEnevsNCLa0KzZ11ZzsbVbahAx4jxOc5wXf4I1l6v3znDpQhRfF7DwhttwUJR uHzt/Fdf6iKfiTN5T0XBi3Z6Hji1aDYAt7nmd9QSpOsUmlgtud9uRPi3oVGQV8+K DHrt6GOHjgoXHG2HIp9QjluakSIWdr/dCbUFr9rvvUGKe3ZtmMoRwFnkrNlSEmo8 5VrMkjmaJofHQpdF3zSdM/5bhQECAwEAAaOCAhowggIWMB0GA1UdDgQWBBTVBM+4 +U9UZ1LI/BJkidbeaR667DAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5 OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5 VUo0OUtYQjhYNFcxOXIyMjguY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5 MDUzMDAwMDAvMy8zMjMwMzAzMTNhNjQ2NjMwM2EzMjMwMzYzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMzM3MzkzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8AIGMA0GCSqGSIb3 DQEBCwUAA4IBAQDcfXbzovg/TjmAXCiwmSnGi1pl3+3d6FhW1sErt2BZIt32C7Nf NvIaouF7KYHe0WQZTNAlBTaEffMKTNla1ku9Fy0FY8m5ugQa0FIEWX0qGoQaBnSd 6ZXy50xaKbsOcxtFQ0tcn+ymro9xlvzYEN0PPU03xXWYk9Yy4B5S6lLJ9+6lRXLT MIF2j3TAmsphFiCuSRFE/USMBR5DgszhAiFJbwzxZ8KIlf6ThBskipbQuWKdqJ8/ J9NRyhKQepD0BmIIpBNTSPbBgu8Juchh38OTp7GfWK7u3Yb1HeoFRO6UdfDtB17U xRUHNgI6gS+vzyzttg2c1UJiEpsf+BIDP+iK -----END CERTIFICATE-----Generated at Thu Sep 24 04:41:55 2026 by rpki-client