$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139372e302f32342d3234203d3e20313334303930.roa File: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (raw, json) Hash identifier: a7JbZMr92zzHbEOXrpI0N91OQAaQL4UiyFM6BOscqZE= Subject key identifier: E0:E5:AA:93:22:E0:E1:36:AD:75:C7:6B:43:C1:59:F1:02:9B:3A:78 Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 3C3B9902BB20DA603FB871A56CC895F350E66DFC Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139372e302f32342d3234203d3e20313334303930.roa Signing time: Sun 13 Sep 2026 01:57:00 +0000 ROA not before: Sun 13 Sep 2026 01:52:00 +0000 ROA not after: Sun 12 Sep 2027 01:57:00 +0000 asID: 134090 IP address blocks: 203.7.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3b:99:02:bb:20:da:60:3f:b8:71:a5:6c:c8:95:f3:50:e6:6d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: Sep 13 01:52:00 2026 GMT Not After : Sep 12 01:57:00 2027 GMT Subject: CN=E0E5AA9322E0E136AD75C76B43C159F1029B3A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:06:15:ac:d4:9d:e4:26:56:03:d9:83:e5: ff:bb:fc:24:c5:19:9e:e7:b5:59:24:c3:42:60:92: 80:d1:00:9a:68:82:7b:a7:96:9a:9b:63:88:05:8e: 70:75:53:75:2b:0e:bd:c1:ac:cb:20:52:d1:36:27: 4c:ba:5b:d4:1e:95:3b:69:43:e6:ee:5f:1c:04:14: e5:d2:06:a2:b6:7b:ff:61:8d:ed:53:49:af:ba:fa: 74:9e:f9:9a:28:e6:2d:e5:c6:aa:bb:f9:07:0b:bc: a8:e0:6f:66:68:7f:31:7b:39:9a:8c:90:39:81:5a: fe:bc:8c:ae:da:83:ee:8c:89:e1:a6:4c:3f:c0:aa: ad:e2:60:23:65:28:db:43:a2:4b:6f:23:9c:01:5c: ad:ac:6a:ac:47:15:43:75:f3:12:71:96:1e:94:7f: 08:6e:ce:67:3f:fa:1c:71:3b:94:bf:99:a7:63:6a: 19:3e:90:79:b9:0f:d1:cc:be:de:8a:f9:95:6d:cd: 13:83:c3:40:70:b7:2a:0c:ee:a1:d1:09:62:67:11: 21:5c:35:3e:78:11:a9:a7:40:0e:fe:a2:23:2d:cd: 0c:6d:c6:d5:a1:c7:39:55:c1:be:d5:52:e3:ae:0a: 1e:9a:ff:ed:9a:32:16:f2:c9:38:21:3a:a4:d4:02: 37:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E5:AA:93:22:E0:E1:36:AD:75:C7:6B:43:C1:59:F1:02:9B:3A:78 X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139372e302f32342d3234203d3e20313334303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.7.197.0/24 Signature Algorithm: sha256WithRSAEncryption bc:a8:30:8a:72:78:ba:84:55:fd:53:17:0e:6a:ba:7e:8b:76: bf:58:aa:b4:f3:99:06:dc:c7:87:19:cf:8a:7c:d4:2e:e1:5d: 24:b1:3a:25:e8:d0:94:d8:68:70:1b:00:e5:4c:2c:e2:bb:07: 70:7a:77:48:4a:d3:0a:93:84:e2:be:d2:c5:0d:c5:85:b5:7b: b1:ac:91:2f:4e:54:76:12:0f:bd:66:71:5e:24:ec:a2:cb:1b: 88:81:fe:a6:5a:90:be:49:30:4a:b8:76:e1:e6:9c:39:77:9a: 42:15:a8:6a:b6:6c:30:9c:31:79:4e:ae:49:79:37:b9:3b:2c: 74:02:55:83:a2:4f:9e:89:00:e1:2a:4f:a4:aa:90:ca:00:ed: b8:9a:77:a2:db:c5:b5:d9:39:da:2e:bc:ae:c2:b9:53:55:5a: e3:b4:4a:fd:68:b2:71:e4:02:bc:51:bf:19:66:c4:66:0f:37: 6d:27:cd:f7:16:c6:cd:2c:b5:31:3f:14:ab:17:95:3c:d3:2f: e8:52:43:90:56:ac:8c:23:0b:70:b0:fa:a3:12:85:04:a5:a4: ed:4f:62:0b:a6:11:8e:13:2f:0e:c0:1e:e5:80:3d:cf:c1:91: 3b:d3:38:70:51:93:79:b4:da:ca:1c:c0:c6:13:fe:eb:65:fe: a3:46:64:47 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUPDuZArsg2mA/uHGlbMiV81DmbfwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI2MDkxMzAxNTIwMFoX DTI3MDkxMjAxNTcwMFowMzExMC8GA1UEAxMoRTBFNUFBOTMyMkUwRTEzNkFENzVD NzZCNDNDMTU5RjEwMjlCM0E3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQxBhWs1J3kJlYD2YPl/7v8JMUZnue1WSTDQmCSgNEAmmiCe6eWmptjiAWO cHVTdSsOvcGsyyBS0TYnTLpb1B6VO2lD5u5fHAQU5dIGorZ7/2GN7VNJr7r6dJ75 mijmLeXGqrv5Bwu8qOBvZmh/MXs5moyQOYFa/ryMrtqD7oyJ4aZMP8CqreJgI2Uo 20OiS28jnAFcraxqrEcVQ3XzEnGWHpR/CG7OZz/6HHE7lL+Zp2NqGT6QebkP0cy+ 3or5lW3NE4PDQHC3KgzuodEJYmcRIVw1PngRqadADv6iIy3NDG3G1aHHOVXBvtVS 464KHpr/7ZoyFvLJOCE6pNQCN2ECAwEAAaOCAhEwggINMB0GA1UdDgQWBBTg5aqT IuDhNq11x2tDwVnxAps6eDAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzQvMzIzMDMzMmUzNzJlMzEzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzEzMzM0MzAzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAywfFMA0GCSqGSIb3DQEBCwUAA4IB AQC8qDCKcni6hFX9UxcOarp+i3a/WKq085kG3MeHGc+KfNQu4V0ksTol6NCU2Ghw GwDlTCziuwdwendIStMKk4TivtLFDcWFtXuxrJEvTlR2Eg+9ZnFeJOyiyxuIgf6m WpC+STBKuHbh5pw5d5pCFahqtmwwnDF5Tq5JeTe5Oyx0AlWDok+eiQDhKk+kqpDK AO24mnei28W12TnaLryuwrlTVVrjtEr9aLJx5AK8Ub8ZZsRmDzdtJ833FsbNLLUx PxSrF5U80y/oUkOQVqyMIwtwsPqjEoUEpaTtT2ILphGOEy8OwB7lgD3PwZE70zhw UZN5tNrKHMDGE/7rZf6jRmRH -----END CERTIFICATE-----Generated at Mon Sep 21 13:32:32 2026 by rpki-client