$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3136382e302f32322d3234203d3e203337393930.roa File: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (raw, json) Hash identifier: oMfTdg/Rj2XRGxmXU1sElHSlgd2vFn+T0PIYfvXEBg0= Subject key identifier: AE:9E:91:97:DC:01:3C:6C:20:AE:D0:5B:9C:1B:C0:75:FF:1E:2B:AA Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Certificate serial: 030D7F5FF425353A4ECFA52C1AE0B360B0B171A6 Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3136382e302f32322d3234203d3e203337393930.roa Signing time: Sun 06 Sep 2026 05:56:54 +0000 ROA not before: Sun 06 Sep 2026 05:51:54 +0000 ROA not after: Sun 05 Sep 2027 05:56:54 +0000 asID: 37990 IP address blocks: 203.4.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0d:7f:5f:f4:25:35:3a:4e:cf:a5:2c:1a:e0:b3:60:b0:b1:71:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Validity Not Before: Sep 6 05:51:54 2026 GMT Not After : Sep 5 05:56:54 2027 GMT Subject: CN=AE9E9197DC013C6C20AED05B9C1BC075FF1E2BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:14:d9:85:ad:0a:42:6e:c8:07:a9:fb:87: 53:89:3f:b3:9c:9e:44:0d:69:51:d3:c3:4c:a6:a0: d0:25:3d:13:52:67:dd:6f:9d:77:37:f4:aa:5f:25: 75:41:eb:24:b1:8f:d7:1f:18:fd:95:73:a7:c6:44: c7:da:72:e0:c5:58:8b:6f:5b:f8:0c:e0:dc:09:92: 68:c4:bc:76:8e:99:a3:4b:a1:89:08:f2:66:11:fb: e7:17:64:b0:61:73:a1:c9:8a:7e:25:17:c3:81:1f: 8a:3f:88:a9:cb:a9:f8:ed:92:fa:9c:1e:d1:e5:8b: c5:69:9e:ee:95:15:ae:89:13:2f:89:71:25:c3:df: fb:79:e2:e4:0a:b4:b9:19:67:bb:f5:56:f1:d5:6e: da:a0:72:61:58:52:5e:85:78:5e:56:c0:45:dc:db: 19:9a:b4:af:d1:c1:16:4a:ef:24:8d:54:62:38:1e: d7:4c:71:4f:0a:7e:b7:c6:c1:ee:48:cb:8e:9d:b4: c3:bc:cf:78:6c:73:69:07:63:6b:5c:c6:a4:ff:18: 33:98:94:a5:a3:1a:0a:e9:41:1f:18:78:6a:c6:85: 2e:da:ea:15:3c:60:bf:62:05:77:05:d1:6a:73:f3: 60:37:24:60:60:40:f6:27:85:8b:67:5c:d1:39:ca: 70:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9E:91:97:DC:01:3C:6C:20:AE:D0:5B:9C:1B:C0:75:FF:1E:2B:AA X509v3 Authority Key Identifier: keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3136382e302f32322d3234203d3e203337393930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.4.168.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:96:ff:a8:7b:9d:54:94:9a:b3:c6:fe:84:b2:9d:43:e7:9b: 2e:5c:18:75:02:01:4d:47:09:ad:c8:87:fb:3e:ac:13:73:32: b0:e2:7f:91:96:09:54:98:2c:35:69:c6:3d:b4:cc:4e:b9:9c: bb:74:da:c8:af:20:cf:1e:bb:1c:58:f7:42:ef:70:20:ee:bf: 84:b6:31:27:7c:45:ff:5d:7e:1e:48:55:bd:3c:1d:bd:67:a2: 08:cc:22:eb:3a:53:1a:e5:7b:65:f2:fb:9c:d0:c9:a4:1c:bd: 09:6e:5e:70:a5:4d:53:fe:df:23:c0:05:0b:0e:ce:9c:8f:4b: c8:b8:0f:2a:57:18:1f:cd:72:9e:50:8a:db:90:82:a6:ab:ea: fe:0d:d0:d8:ed:90:ef:a2:fe:52:43:6b:d1:2d:1e:65:54:99: b7:04:24:37:5e:08:8a:63:0b:35:05:30:af:62:f0:71:03:7f: b3:1b:b0:c2:36:f2:f1:58:fb:2c:a1:34:cc:9f:2b:81:d8:ae: 85:9c:e6:84:b9:d9:8f:23:d9:c3:99:39:8a:a3:35:49:3b:4c: ab:ab:6e:16:5a:90:66:89:3c:09:73:07:6b:5d:04:9c:53:93: 09:f8:bc:89:4d:0c:1e:6c:c6:28:0d:b8:a4:f1:cf:27:e8:c1: a9:e5:3f:91 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUAw1/X/QlNTpOz6UsGuCzYLCxcaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3 RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI2MDkwNjA1NTE1NFoX DTI3MDkwNTA1NTY1NFowMzExMC8GA1UEAxMoQUU5RTkxOTdEQzAxM0M2QzIwQUVE MDVCOUMxQkMwNzVGRjFFMkJBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2vFNmFrQpCbsgHqfuHU4k/s5yeRA1pUdPDTKag0CU9E1Jn3W+ddzf0ql8l dUHrJLGP1x8Y/ZVzp8ZEx9py4MVYi29b+Azg3AmSaMS8do6Zo0uhiQjyZhH75xdk sGFzocmKfiUXw4Efij+Iqcup+O2S+pwe0eWLxWme7pUVrokTL4lxJcPf+3ni5Aq0 uRlnu/VW8dVu2qByYVhSXoV4XlbARdzbGZq0r9HBFkrvJI1UYjge10xxTwp+t8bB 7kjLjp20w7zPeGxzaQdja1zGpP8YM5iUpaMaCulBHxh4asaFLtrqFTxgv2IFdwXR anPzYDckYGBA9ieFi2dc0TnKcK0CAwEAAaOCAg8wggILMB0GA1UdDgQWBBSunpGX 3AE8bCCu0FucG8B1/x4rqjAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5 OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5 VUo0OUtYQjhYNFcxOXIyMjguY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzMvMzIzMDMzMmUzNDJlMzEzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2Qz ZTIwMzMzNzM5MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAssEqDANBgkqhkiG9w0BAQsFAAOCAQEA apb/qHudVJSas8b+hLKdQ+ebLlwYdQIBTUcJrciH+z6sE3MysOJ/kZYJVJgsNWnG PbTMTrmcu3TayK8gzx67HFj3Qu9wIO6/hLYxJ3xF/11+HkhVvTwdvWeiCMwi6zpT GuV7ZfL7nNDJpBy9CW5ecKVNU/7fI8AFCw7OnI9LyLgPKlcYH81ynlCK25CCpqvq /g3Q2O2Q76L+UkNr0S0eZVSZtwQkN14IimMLNQUwr2LwcQN/sxuwwjby8Vj7LKE0 zJ8rgdiuhZzmhLnZjyPZw5k5iqM1STtMq6tuFlqQZok8CXMHa10EnFOTCfi8iU0M HmzGKA24pPHPJ+jBqeU/kQ== -----END CERTIFICATE-----Generated at Wed Sep 23 21:23:27 2026 by rpki-client