$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38302e302f32342d3234203d3e20323134373636.roa File: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (raw, json) Hash identifier: 5hWADdZsX05Xm71wk93nvrisrc0F3dwJlLqjnpXhvtY= Subject key identifier: 13:C8:D4:C3:FF:E1:08:8D:3C:F3:FB:3F:7F:B1:F3:84:54:05:BA:82 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 5ACFAB885DC2049A74FB69A9512BA9F3313BEA2F Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38302e302f32342d3234203d3e20323134373636.roa Signing time: Sun 13 Oct 2024 10:59:41 +0000 ROA not before: Sun 13 Oct 2024 10:54:41 +0000 ROA not after: Sun 12 Oct 2025 10:59:41 +0000 asID: 214766 IP address blocks: 43.255.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 06:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cf:ab:88:5d:c2:04:9a:74:fb:69:a9:51:2b:a9:f3:31:3b:ea:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Oct 13 10:54:41 2024 GMT Not After : Oct 12 10:59:41 2025 GMT Subject: CN=13C8D4C3FFE1088D3CF3FB3F7FB1F3845405BA82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:83:4d:64:5b:64:60:d4:28:12:c0:9d:16: ee:b3:91:ed:fd:4b:cc:48:da:d7:47:0b:64:5a:5b: 19:a0:b1:34:98:a4:c8:d4:fb:c6:77:ad:7f:fa:71: 56:15:27:03:57:d9:a9:70:ac:d6:74:43:6e:88:e3: 4f:9a:40:a7:fd:1b:78:10:ef:da:27:b2:0a:4d:51: 6e:24:43:96:17:4f:03:41:94:42:06:b1:dd:70:c6: db:d2:b4:70:06:ff:33:92:f6:bc:34:dd:c3:ba:4f: 40:f9:77:92:1d:c8:64:e2:d7:be:30:78:93:0f:54: f0:7b:f4:a6:16:bc:b6:a0:11:2e:87:47:97:4d:d5: 7b:4f:83:78:39:c0:d7:bd:e6:5c:f0:84:c6:b3:4e: 52:d6:2d:90:fe:5c:85:dd:45:ef:88:8e:11:9c:5f: 7e:4b:92:58:a5:8c:af:66:fb:a5:6e:44:a4:29:b0: 07:73:94:08:9a:ae:7f:eb:36:c9:83:6d:83:3f:6b: 55:18:16:62:25:a5:7f:ec:a3:f9:3c:55:b3:70:cb: 1c:d0:ba:b5:17:9f:d4:84:65:c4:31:58:f8:fe:52: 97:72:d6:3c:64:b2:4a:ac:56:a4:05:c9:2b:a3:8b: 34:65:4d:a4:6a:83:11:d9:5a:b9:4e:3b:e8:27:b5: 3c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C8:D4:C3:FF:E1:08:8D:3C:F3:FB:3F:7F:B1:F3:84:54:05:BA:82 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38302e302f32342d3234203d3e20323134373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.80.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:92:e7:4c:eb:1b:33:73:51:a9:c2:06:55:ce:ac:35:6c:1b: c6:f1:b1:dd:8f:6d:e5:d5:e2:df:f5:23:cc:a6:8d:3b:07:29: c6:21:53:5f:49:a3:7f:84:58:dc:07:29:8c:2e:ce:8c:11:f2: 4c:75:8b:ad:7e:dd:7d:35:df:ad:2d:d0:2f:b5:73:fe:8e:8f: d9:e0:5b:04:ff:b3:9e:b2:e8:78:aa:d5:7e:99:a0:b8:f0:3d: e4:5d:3a:c7:b5:33:9e:4e:91:4d:1b:86:52:b7:62:63:02:f4: 2c:3f:bc:d8:c9:3d:87:6a:c3:52:22:ee:3e:ec:f6:12:9f:07: 05:da:e5:4b:0e:91:a4:d2:fe:3a:3e:cb:b5:da:42:c0:51:b0: 67:62:34:03:17:f6:7e:54:9d:0b:d0:0b:a3:66:45:10:92:cf: 76:10:47:11:d1:54:7b:86:77:0c:61:37:fa:2a:23:a6:8b:0b: ea:92:76:f4:33:ca:cf:70:f6:9c:3c:a7:d9:08:c7:17:f3:d0: 33:b9:09:3f:6c:f2:56:44:ba:aa:19:39:a1:7d:bc:6e:b0:65: c7:1c:f1:34:69:e1:34:d4:e5:6a:4f:6e:f7:24:2a:0f:be:ad: 89:7d:b6:e7:86:01:ea:c3:34:8d:2e:4a:cc:b7:54:90:66:fa: 0a:35:82:ed -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUWs+riF3CBJp0+2mpUSup8zE76i8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI0MTAxMzEwNTQ0MVoX DTI1MTAxMjEwNTk0MVowMzExMC8GA1UEAxMoMTNDOEQ0QzNGRkUxMDg4RDNDRjNG QjNGN0ZCMUYzODQ1NDA1QkE4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyAg01kW2Rg1CgSwJ0W7rOR7f1LzEja10cLZFpbGaCxNJikyNT7xnetf/px VhUnA1fZqXCs1nRDbojjT5pAp/0beBDv2ieyCk1RbiRDlhdPA0GUQgax3XDG29K0 cAb/M5L2vDTdw7pPQPl3kh3IZOLXvjB4kw9U8Hv0pha8tqARLodHl03Ve0+DeDnA 173mXPCExrNOUtYtkP5chd1F74iOEZxffkuSWKWMr2b7pW5EpCmwB3OUCJquf+s2 yYNtgz9rVRgWYiWlf+yj+TxVs3DLHNC6tRef1IRlxDFY+P5Sl3LWPGSySqxWpAXJ K6OLNGVNpGqDEdlauU476Ce1PA8CAwEAAaOCAhEwggINMB0GA1UdDgQWBBQTyNTD /+EIjTzz+z9/sfOEVAW6gjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxQTYx MzEwMDAwLzAvMzQzMzJlMzIzNTM1MmUzODMwMmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzIzMTM0MzczNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/9QMA0GCSqGSIb3DQEBCwUAA4IB AQBqkudM6xszc1GpwgZVzqw1bBvG8bHdj23l1eLf9SPMpo07BynGIVNfSaN/hFjc BymMLs6MEfJMdYutft19Nd+tLdAvtXP+jo/Z4FsE/7Oesuh4qtV+maC48D3kXTrH tTOeTpFNG4ZSt2JjAvQsP7zYyT2HasNSIu4+7PYSnwcF2uVLDpGk0v46Psu12kLA UbBnYjQDF/Z+VJ0L0AujZkUQks92EEcR0VR7hncMYTf6KiOmiwvqknb0M8rPcPac PKfZCMcX89AzuQk/bPJWRLqqGTmhfbxusGXHHPE0aeE01OVqT273JCoPvq2Jfbbn hgHqwzSNLkrMt1SQZvoKNYLt -----END CERTIFICATE-----Generated at Sun Apr 27 05:59:42 2025 by rpki-client