$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137312e302f32342d3234203d3e2039343439.roa File: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (raw, json) Hash identifier: /tPPfFvPJE3axlLl1Fjq/BkPqBuOvwfzjmPSaqQFGVg= Subject key identifier: 4A:B4:4F:47:D4:10:F2:AA:CE:16:83:1A:6C:7B:2B:24:6F:A4:09:D3 Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Certificate serial: 2F8B95E81C902D109AD38680A8CBCF5D5669EBB9 Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137312e302f32342d3234203d3e2039343439.roa Signing time: Sun 06 Sep 2026 05:56:53 +0000 ROA not before: Sun 06 Sep 2026 05:51:53 +0000 ROA not after: Sun 05 Sep 2027 05:56:53 +0000 asID: 9449 IP address blocks: 203.4.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8b:95:e8:1c:90:2d:10:9a:d3:86:80:a8:cb:cf:5d:56:69:eb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Validity Not Before: Sep 6 05:51:53 2026 GMT Not After : Sep 5 05:56:53 2027 GMT Subject: CN=4AB44F47D410F2AACE16831A6C7B2B246FA409D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:5d:bf:20:78:44:0a:74:e7:4b:0b:ad:4d: 7d:6a:b6:8c:ad:a3:73:a0:f1:e1:fc:30:39:4d:6c: c1:b7:94:95:47:38:aa:79:30:5b:59:ef:47:25:25: 7c:11:1a:e0:6d:68:32:8d:16:87:1f:33:e0:6d:1c: 27:48:3f:d5:0f:ca:b7:59:99:c3:0c:aa:ce:cb:93: e2:e7:a6:92:0f:bc:3a:3f:9b:64:67:30:d4:02:a6: ec:4a:a9:89:91:47:80:40:34:b8:d9:a7:92:65:e5: 84:d3:52:9b:85:ce:18:e2:80:9e:e4:d0:1a:e1:0c: 3a:78:52:34:bf:9b:68:7f:7e:3a:85:52:4a:a3:de: 52:99:c5:d5:fb:e0:fd:52:b3:58:8a:7e:3b:a6:e9: d7:37:3c:7e:bc:ea:3c:ff:d5:e0:b6:2a:d6:44:6f: 09:c1:29:9b:f5:ea:2c:bc:00:13:b5:87:7a:7a:94: d7:cb:7e:cd:a1:5b:ac:2a:50:7c:eb:a4:13:28:e9: 4b:30:6a:68:62:31:29:64:2a:77:91:5c:c0:34:04: d2:ac:52:c1:d3:ea:b4:4d:5b:5e:8c:a0:c2:b2:80: ba:6b:8d:58:b3:06:7c:d5:70:1d:71:20:ba:0e:14: db:85:84:62:a4:ec:8f:a8:ad:92:e7:c1:5c:aa:bb: d7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B4:4F:47:D4:10:F2:AA:CE:16:83:1A:6C:7B:2B:24:6F:A4:09:D3 X509v3 Authority Key Identifier: keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137312e302f32342d3234203d3e2039343439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.4.171.0/24 Signature Algorithm: sha256WithRSAEncryption 38:94:3c:17:7b:3e:21:c8:00:4b:d4:f3:e8:1d:35:78:8c:3d: 44:b0:8e:06:9a:9d:8c:d4:0c:d5:6e:1d:a0:a6:79:0a:c0:8e: 71:ed:3f:4e:40:ee:d9:07:49:33:0b:57:d8:b9:d7:b2:a8:53: 10:cf:63:ff:05:96:c7:a2:72:16:be:0f:8a:e3:60:47:c5:ac: e2:c4:a1:a9:a9:a6:2b:e9:67:81:56:70:e2:bb:a2:5c:49:c0: 58:16:74:c6:21:0d:40:70:85:17:a6:ae:47:07:32:52:e6:3e: 94:3c:4d:ae:fe:ff:d9:77:15:3a:97:be:2a:8f:d3:46:48:b5: e3:0a:8d:6c:46:90:99:fd:e1:46:5a:3c:05:20:47:35:57:29: 96:85:95:3f:32:42:ca:f1:84:ae:97:52:68:70:e9:aa:eb:e9: a1:25:c1:b4:ae:f9:8d:ac:32:cc:fa:7e:c4:3f:ee:a5:2b:ff: ee:b3:42:2d:6d:2b:c8:6e:86:1f:73:25:b2:5d:13:d2:9c:f0: 3d:d8:3b:6b:d5:9c:04:80:a1:e1:3b:71:e8:5a:7e:41:55:b0: c3:d3:02:34:2c:c4:df:51:25:65:29:36:44:05:9b:18:06:22: 24:ff:8f:61:2b:4b:eb:6e:c9:91:23:d7:57:ac:b8:d0:e4:ce: 22:b5:0d:4f -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUL4uV6ByQLRCa04aAqMvPXVZp67kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3 RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI2MDkwNjA1NTE1M1oX DTI3MDkwNTA1NTY1M1owMzExMC8GA1UEAxMoNEFCNDRGNDdENDEwRjJBQUNFMTY4 MzFBNkM3QjJCMjQ2RkE0MDlEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPRXb8geEQKdOdLC61NfWq2jK2jc6Dx4fwwOU1swbeUlUc4qnkwW1nvRyUl fBEa4G1oMo0Whx8z4G0cJ0g/1Q/Kt1mZwwyqzsuT4uemkg+8Oj+bZGcw1AKm7Eqp iZFHgEA0uNmnkmXlhNNSm4XOGOKAnuTQGuEMOnhSNL+baH9+OoVSSqPeUpnF1fvg /VKzWIp+O6bp1zc8frzqPP/V4LYq1kRvCcEpm/XqLLwAE7WHenqU18t+zaFbrCpQ fOukEyjpSzBqaGIxKWQqd5FcwDQE0qxSwdPqtE1bXoygwrKAumuNWLMGfNVwHXEg ug4U24WEYqTsj6itkufBXKq712UCAwEAAaOCAg0wggIJMB0GA1UdDgQWBBRKtE9H 1BDyqs4Wgxpseyskb6QJ0zAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5 OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5 VUo0OUtYQjhYNFcxOXIyMjguY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzMvMzIzMDMzMmUzNDJlMzEzNzMxMmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzkzNDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBADLBKswDQYJKoZIhvcNAQELBQADggEBADiU PBd7PiHIAEvU8+gdNXiMPUSwjgaanYzUDNVuHaCmeQrAjnHtP05A7tkHSTMLV9i5 17KoUxDPY/8Flseicha+D4rjYEfFrOLEoamppivpZ4FWcOK7olxJwFgWdMYhDUBw hRemrkcHMlLmPpQ8Ta7+/9l3FTqXviqP00ZIteMKjWxGkJn94UZaPAUgRzVXKZaF lT8yQsrxhK6XUmhw6arr6aElwbSu+Y2sMsz6fsQ/7qUr/+6zQi1tK8huhh9zJbJd E9Kc8D3YO2vVnASAoeE7cehafkFVsMPTAjQsxN9RJWUpNkQFmxgGIiT/j2ErS+tu yZEj11esuNDkziK1DU8= -----END CERTIFICATE-----Generated at Wed Sep 23 15:07:06 2026 by rpki-client