$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20343031333632.roa File: 3130332e3233382e3132382e302f32342d3234203d3e20343031333632.roa (raw, json) Hash identifier: P5xfE/35+9mCNNnRvCUJHBuEvQxYIb/KToGW491AoaM= Subject key identifier: 25:8E:F0:95:9A:B0:13:C3:F7:31:4F:17:A5:F3:59:02:AA:0C:00:B2 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 47658680B6657AE527D469FE63DE2BF669EF5993 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20343031333632.roa Signing time: Tue 15 Sep 2026 11:15:04 +0000 ROA not before: Tue 15 Sep 2026 11:10:04 +0000 ROA not after: Tue 14 Sep 2027 11:15:04 +0000 asID: 401362 IP address blocks: 103.238.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:65:86:80:b6:65:7a:e5:27:d4:69:fe:63:de:2b:f6:69:ef:59:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Sep 15 11:10:04 2026 GMT Not After : Sep 14 11:15:04 2027 GMT Subject: CN=258EF0959AB013C3F7314F17A5F35902AA0C00B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:5c:60:5d:29:03:ff:82:37:0b:d2:f4:d7: 3d:4b:c5:e4:94:ea:00:a2:ed:60:99:3f:e6:70:8c: 56:80:17:59:4b:26:c5:e5:b6:41:0e:13:17:ab:e4: 72:df:db:e6:23:19:82:38:aa:bc:6c:02:91:99:18: 7d:11:5b:ae:0d:fb:3c:f4:82:4c:93:07:37:00:d4: f0:e3:8a:60:ee:28:1c:1f:c3:01:1e:5a:9f:27:ad: b7:a8:48:69:81:10:ad:8e:23:8f:f1:56:b5:80:de: d4:24:90:a9:19:53:30:5a:a1:b7:d7:78:2f:55:56: 0b:5c:1e:f7:d7:d4:26:83:26:39:f7:4b:b2:28:5f: 57:15:56:6e:e2:4a:f6:40:b0:9d:bc:d5:eb:e4:ba: 95:44:5f:f0:f4:6d:f1:e4:ad:b4:74:e2:dc:0b:a6: c3:16:2c:b2:ca:2d:5e:7f:3c:97:9c:c5:ad:4d:d0: 36:81:b9:ff:43:ab:2e:6b:b8:87:4a:da:6c:5d:46: 03:33:d9:67:85:0d:27:01:df:d3:4b:2e:b4:2f:85: 09:6f:b6:db:5f:ec:f2:64:b0:d1:79:21:40:06:b6: e5:f3:4b:f1:a2:fe:bd:6c:75:c8:25:f7:75:0c:87: 94:f7:c1:ad:3a:28:66:b4:6d:6c:fa:55:b5:9d:c9: c1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8E:F0:95:9A:B0:13:C3:F7:31:4F:17:A5:F3:59:02:AA:0C:00:B2 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20343031333632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.128.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:bc:32:0f:12:9a:a0:18:d9:ef:92:cd:ca:20:1a:a4:01:58: 13:35:ce:90:37:38:57:bc:44:53:ed:14:47:74:4a:f9:41:76: 3b:f6:41:a8:a8:e4:69:65:b9:e1:b8:0e:69:89:47:f4:29:09: 1a:63:83:91:b8:a7:1f:74:a5:86:dc:c5:be:94:6b:ae:b4:ee: 3e:8d:45:60:af:55:06:19:c8:da:98:76:9e:e1:d3:53:76:5c: 57:86:88:09:7e:8c:f3:ca:5b:5a:8a:4b:89:75:5f:90:dc:11: dc:39:48:40:95:ae:68:70:a7:5e:d1:66:69:0b:f5:4a:c1:7e: 01:41:b3:20:43:f5:0a:5d:7d:0e:be:1c:b6:35:0e:5a:55:a2: 12:98:88:05:f6:a2:d7:94:87:c6:e4:1f:80:06:dc:82:27:7e: 14:16:6e:35:08:d2:8b:dd:ed:37:40:73:4a:fb:2b:0f:c5:71: e7:2e:64:88:b1:21:de:16:b3:97:e7:17:f7:32:b5:64:16:dc: f5:40:9f:23:af:a5:b2:2b:2b:56:76:4a:53:96:8c:89:74:92: d1:e1:d9:1d:a0:07:ec:05:e6:96:1f:c6:53:56:97:2c:d2:97: 28:0b:b8:ee:58:60:2d:5e:8d:e8:01:bf:e2:47:53:17:b1:e0: e4:06:e8:00 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUR2WGgLZleuUn1Gn+Y94r9mnvWZMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDkxNTExMTAwNFoX DTI3MDkxNDExMTUwNFowMzExMC8GA1UEAxMoMjU4RUYwOTU5QUIwMTNDM0Y3MzE0 RjE3QTVGMzU5MDJBQTBDMDBCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALftXGBdKQP/gjcL0vTXPUvF5JTqAKLtYJk/5nCMVoAXWUsmxeW2QQ4TF6vk ct/b5iMZgjiqvGwCkZkYfRFbrg37PPSCTJMHNwDU8OOKYO4oHB/DAR5anyett6hI aYEQrY4jj/FWtYDe1CSQqRlTMFqht9d4L1VWC1we99fUJoMmOfdLsihfVxVWbuJK 9kCwnbzV6+S6lURf8PRt8eSttHTi3AumwxYsssotXn88l5zFrU3QNoG5/0OrLmu4 h0rabF1GAzPZZ4UNJwHf00sutC+FCW+221/s8mSw0XkhQAa25fNL8aL+vWx1yCX3 dQyHlPfBrTooZrRtbPpVtZ3JwQsCAwEAAaOCAhcwggITMB0GA1UdDgQWBBQljvCV mrATw/cxTxel81kCqgwAsjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFB NjEzMTAwMDAvMC8zMTMwMzMyZTMyMzMzODJlMzEzMjM4MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzQzMDMxMzMzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+6AMA0GCSqGSIb3DQEB CwUAA4IBAQBbvDIPEpqgGNnvks3KIBqkAVgTNc6QNzhXvERT7RRHdEr5QXY79kGo qORpZbnhuA5piUf0KQkaY4ORuKcfdKWG3MW+lGuutO4+jUVgr1UGGcjamHae4dNT dlxXhogJfozzyltaikuJdV+Q3BHcOUhAla5ocKde0WZpC/VKwX4BQbMgQ/UKXX0O vhy2NQ5aVaISmIgF9qLXlIfG5B+ABtyCJ34UFm41CNKL3e03QHNK+ysPxXHnLmSI sSHeFrOX5xf3MrVkFtz1QJ8jr6WyKytWdkpTloyJdJLR4dkdoAfsBeaWH8ZTVpcs 0pcoC7juWGAtXo3oAb/iR1MXseDkBugA -----END CERTIFICATE-----Generated at Mon Sep 21 18:59:39 2026 by rpki-client