$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a3a2f33322d3438203d3e2037353436.roa File: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (raw, json) Hash identifier: fDoR67VqgO4UC2WoFr3onY00uK4pxdsfonbFV6yqmUw= Subject key identifier: 61:35:E4:0B:95:78:3E:E6:6F:36:72:EB:EE:5F:85:07:5E:0F:32:93 Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 5BB82058EA157890929F5518324968E06D0EE5E7 Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a3a2f33322d3438203d3e2037353436.roa Signing time: Sun 06 Sep 2026 05:56:54 +0000 ROA not before: Sun 06 Sep 2026 05:51:54 +0000 ROA not after: Sun 05 Sep 2027 05:56:54 +0000 asID: 7546 IP address blocks: 2403:7e00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b8:20:58:ea:15:78:90:92:9f:55:18:32:49:68:e0:6d:0e:e5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: Sep 6 05:51:54 2026 GMT Not After : Sep 5 05:56:54 2027 GMT Subject: CN=6135E40B95783EE66F3672EBEE5F85075E0F3293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:b2:f3:56:2a:50:c7:ba:4c:c4:18:6f:0e: f7:c4:92:bc:9a:2e:3f:f9:3e:53:f6:11:d1:9e:c9: a9:80:35:6a:72:5b:4a:1b:ba:4b:81:b2:f3:67:75: 9a:82:fa:43:78:af:c1:aa:c7:bf:ec:ca:9a:91:af: 36:07:3b:e6:72:6f:c4:1d:50:e4:0d:fa:ac:79:89: a0:2d:b3:e6:57:87:eb:3e:94:14:54:67:28:13:4a: 57:91:18:4d:d9:17:c8:50:66:9e:70:49:c8:0f:4e: 09:6b:3e:a2:23:0d:09:69:39:25:5c:c8:66:93:4b: 2e:7b:5d:f4:5c:43:95:b7:f2:5b:23:c0:3b:da:2d: 50:74:0e:a7:b5:d2:ad:7a:fb:13:11:1d:43:e6:65: c8:96:e0:d4:85:f4:b6:22:11:ff:6d:db:8f:74:8e: 09:63:24:15:e3:26:ec:fd:da:7c:21:ea:54:73:85: d6:30:c6:26:25:29:3e:07:ab:52:19:5a:e7:03:35: 2f:aa:f5:ad:e7:e3:42:41:4a:b8:e8:48:c2:36:4e: e8:e8:3d:de:3c:c7:ed:c5:ee:f3:70:67:47:c1:c3: 24:1b:51:cf:1e:10:61:bd:22:91:ab:23:a9:0c:b8: 69:b0:02:b5:e2:8d:15:8e:13:7f:9b:97:8b:98:82: 31:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:35:E4:0B:95:78:3E:E6:6F:36:72:EB:EE:5F:85:07:5E:0F:32:93 X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a3a2f33322d3438203d3e2037353436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:7e00::/32 Signature Algorithm: sha256WithRSAEncryption 14:8e:98:b3:10:3a:63:97:cb:8d:8e:24:15:d2:b4:9d:7b:ad: 40:84:65:7f:bc:ae:c7:2b:d9:51:49:26:e3:1d:60:b7:6a:e9: df:91:51:1a:8c:18:8d:a9:46:2a:55:a3:b9:28:53:da:ed:e1: 63:db:32:ff:65:2d:6a:ae:7b:c1:a2:80:26:f9:ac:a3:61:3a: a9:5d:f3:8e:f9:8a:83:91:d2:8c:d3:db:9b:83:b8:1e:95:42: e6:02:d5:16:3e:0b:bb:20:7b:9e:c5:ce:ff:58:db:66:57:db: 78:b9:5c:2b:f1:93:59:77:ca:8d:0d:4e:1c:05:c2:5d:9d:e1: f6:34:7e:c0:fd:a1:5a:27:26:6c:26:0d:30:04:d9:c2:a5:e3: 58:c3:93:99:f6:a0:e7:48:5e:ba:e9:0d:c5:f2:6e:7e:02:d7: 0e:a5:0c:40:85:36:d7:12:c0:5c:4c:89:48:a3:b2:43:c8:5c: 10:ee:87:f7:c1:0c:72:89:20:ac:94:c9:a0:f6:72:be:e5:93: 5a:ee:db:36:d4:ce:e8:a6:a4:72:de:3e:dd:e2:1d:ba:b4:12: d9:ab:81:50:c3:05:e8:f4:20:8c:7d:91:2f:65:73:8e:13:52: 82:be:03:0f:91:01:59:44:a3:b4:20:d7:a8:8b:a3:47:e1:b6: 29:cc:aa:09 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUW7ggWOoVeJCSn1UYMklo4G0O5ecwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI2MDkwNjA1NTE1NFoX DTI3MDkwNTA1NTY1NFowMzExMC8GA1UEAxMoNjEzNUU0MEI5NTc4M0VFNjZGMzY3 MkVCRUU1Rjg1MDc1RTBGMzI5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuxsvNWKlDHukzEGG8O98SSvJouP/k+U/YR0Z7JqYA1anJbShu6S4Gy82d1 moL6Q3ivwarHv+zKmpGvNgc75nJvxB1Q5A36rHmJoC2z5leH6z6UFFRnKBNKV5EY TdkXyFBmnnBJyA9OCWs+oiMNCWk5JVzIZpNLLntd9FxDlbfyWyPAO9otUHQOp7XS rXr7ExEdQ+ZlyJbg1IX0tiIR/23bj3SOCWMkFeMm7P3afCHqVHOF1jDGJiUpPger Uhla5wM1L6r1refjQkFKuOhIwjZO6Og93jzH7cXu83BnR8HDJBtRzx4QYb0ikasj qQy4abACteKNFY4Tf5uXi5iCMdUCAwEAAaOCAg4wggIKMB0GA1UdDgQWBBRhNeQL lXg+5m82cuvuX4UHXg8ykzAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzQvMzIzNDMwMzMzYTM3NjUzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2Qz ZTIwMzczNTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYB BQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA34AMA0GCSqGSIb3DQEBCwUAA4IBAQAU jpizEDpjl8uNjiQV0rSde61AhGV/vK7HK9lRSSbjHWC3aunfkVEajBiNqUYqVaO5 KFPa7eFj2zL/ZS1qrnvBooAm+ayjYTqpXfOO+YqDkdKM09ubg7gelULmAtUWPgu7 IHuexc7/WNtmV9t4uVwr8ZNZd8qNDU4cBcJdneH2NH7A/aFaJyZsJg0wBNnCpeNY w5OZ9qDnSF666Q3F8m5+AtcOpQxAhTbXEsBcTIlIo7JDyFwQ7of3wQxyiSCslMmg 9nK+5ZNa7ts21M7opqRy3j7d4h26tBLZq4FQwwXo9CCMfZEvZXOOE1KCvgMPkQFZ RKO0INeoi6NH4bYpzKoJ -----END CERTIFICATE-----Generated at Mon Sep 21 19:57:28 2026 by rpki-client