$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa File: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (raw, json) Hash identifier: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc= Subject key identifier: BB:E6:4B:5F:77:94:6D:91:80:72:9A:5E:93:21:0E:D0:62:7F:20:29 Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 67DFBF7804C048E4CB97E316ED0B60D26EF5A1B0 Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa Signing time: Sun 05 Oct 2025 05:27:57 +0000 ROA not before: Sun 05 Oct 2025 05:22:57 +0000 ROA not after: Sun 04 Oct 2026 05:27:57 +0000 asID: 9449 IP address blocks: 2403:7e00:f001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:df:bf:78:04:c0:48:e4:cb:97:e3:16:ed:0b:60:d2:6e:f5:a1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: Oct 5 05:22:57 2025 GMT Not After : Oct 4 05:27:57 2026 GMT Subject: CN=BBE64B5F77946D9180729A5E93210ED0627F2029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:cc:7e:b1:0e:86:b4:41:36:cd:ac:b7:7b: 17:42:a6:8a:fc:8e:59:c7:2c:7f:91:06:be:cc:5b: 70:11:5b:a5:a4:bc:ed:fb:09:68:a3:9e:41:aa:ec: 8d:78:9d:fc:a4:a2:3e:0d:00:61:a6:65:a0:e1:47: 3c:e6:cd:f5:9e:56:50:cf:09:17:f4:d6:56:61:0c: c5:58:68:57:81:5b:ea:33:16:80:6f:af:86:7b:f1: ee:2a:e8:a0:4d:a7:b7:70:65:cb:8a:6d:90:ef:31: 74:60:78:47:3c:f5:c5:95:32:db:90:38:27:ce:79: a4:9d:59:a6:53:42:88:49:3a:8b:11:df:d8:21:27: 5f:0f:4e:49:38:79:eb:bc:e9:5e:0e:49:a0:dc:f6: 5e:d8:43:e0:51:2b:42:2c:8c:79:b9:f8:08:6c:2f: e5:39:cf:56:d8:a5:5e:70:3a:14:41:12:ba:60:fd: f2:a1:c3:1b:f1:dc:46:78:89:5c:46:04:5b:81:35: 59:e9:64:8a:21:63:b7:e5:02:99:bc:70:9a:c5:bf: b5:4f:42:8a:64:39:1a:e8:dd:41:6f:d6:78:07:d7: da:be:ab:cb:7e:17:16:13:a6:44:1b:ac:83:6e:08: 29:47:3a:a8:31:ca:13:e4:68:0f:a8:d8:c8:5d:96: b6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E6:4B:5F:77:94:6D:91:80:72:9A:5E:93:21:0E:D0:62:7F:20:29 X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:7e00:f001::/48 Signature Algorithm: sha256WithRSAEncryption 8e:ce:75:33:d2:49:68:05:91:84:5b:4e:87:d1:d4:c8:fd:8f: 2d:fc:63:2d:5d:5e:fe:68:be:a9:c6:34:ff:17:12:96:99:e4: ed:46:c1:6f:96:85:7e:23:46:ba:2f:cf:4c:86:a0:4d:44:05: ab:00:69:bb:ad:18:08:f0:f4:05:6b:ff:4b:f3:6b:90:ca:2e: 40:0d:6a:74:b8:c7:69:f1:f5:83:30:b1:14:81:f6:7b:45:78: 13:1d:12:79:24:9f:16:ec:45:e2:34:4d:7a:0a:3c:91:89:b9: ac:0d:ba:db:74:39:ef:d4:75:cc:04:18:a6:8a:e4:a9:6e:9c: f1:d4:b1:06:a5:21:cd:f3:9d:37:5f:54:cb:e6:26:4f:7f:5c: aa:2b:97:e4:21:37:6d:fa:3f:40:67:8c:1e:a7:fe:4b:d5:14: 77:30:19:8d:1b:78:d8:d7:2b:e0:61:e8:1b:19:ca:08:87:1d: 6e:60:f9:00:a8:a9:28:98:c6:91:3d:f9:f6:50:a2:d5:12:01: 76:f3:e0:63:4b:d5:e6:98:d5:fd:58:3a:44:13:6a:f8:41:79: df:9a:f2:95:82:e9:fe:a6:05:ad:97:98:4e:f0:6a:e2:4a:7d: 9b:fa:d1:81:76:ab:2e:82:5c:51:44:90:2c:ce:e2:cf:a5:46: 7d:77:01:76 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZ9+/eATASOTLl+MW7Qtg0m71obAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI1MTAwNTA1MjI1N1oX DTI2MTAwNDA1Mjc1N1owMzExMC8GA1UEAxMoQkJFNjRCNUY3Nzk0NkQ5MTgwNzI5 QTVFOTMyMTBFRDA2MjdGMjAyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwIzH6xDoa0QTbNrLd7F0KmivyOWccsf5EGvsxbcBFbpaS87fsJaKOeQars jXid/KSiPg0AYaZloOFHPObN9Z5WUM8JF/TWVmEMxVhoV4Fb6jMWgG+vhnvx7iro oE2nt3Bly4ptkO8xdGB4Rzz1xZUy25A4J855pJ1ZplNCiEk6ixHf2CEnXw9OSTh5 67zpXg5JoNz2XthD4FErQiyMebn4CGwv5TnPVtilXnA6FEESumD98qHDG/HcRniJ XEYEW4E1WelkiiFjt+UCmbxwmsW/tU9CimQ5GujdQW/WeAfX2r6ry34XFhOmRBus g24IKUc6qDHKE+RoD6jYyF2Wtr8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBS75ktf d5RtkYByml6TIQ7QYn8gKTAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYB BQUHMAuGdXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx OTA1MzAwMDAwLzQvMzIzNDMwMzMzYTM3NjUzMDMwM2E2NjMwMzAzMTNhM2EyZjM0 MzgyZDM0MzgyMDNkM2UyMDM5MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAN+APABMA0GCSqG SIb3DQEBCwUAA4IBAQCOznUz0kloBZGEW06H0dTI/Y8t/GMtXV7+aL6pxjT/FxKW meTtRsFvloV+I0a6L89MhqBNRAWrAGm7rRgI8PQFa/9L82uQyi5ADWp0uMdp8fWD MLEUgfZ7RXgTHRJ5JJ8W7EXiNE16CjyRibmsDbrbdDnv1HXMBBimiuSpbpzx1LEG pSHN8503X1TL5iZPf1yqK5fkITdt+j9AZ4wep/5L1RR3MBmNG3jY1yvgYegbGcoI hx1uYPkAqKkomMaRPfn2UKLVEgF28+BjS9XmmNX9WDpEE2r4QXnfmvKVgun+pgWt l5hO8GriSn2b+tGBdqsuglxRRJAszuLPpUZ9dwF2 -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:28 2025 by rpki-client