$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e20383334.roa File: 34332e3235352e38312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: nTO2Wp5t/vnjKSirqYrsazXOeWW5zUknKZBPOvMogcU= Subject key identifier: 0A:AA:F3:34:04:A1:43:ED:3F:DD:7B:EE:69:DE:52:CB:62:61:D9:21 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 1BFCCF56B7F6F6B3B5600A21A003ADAB9A1BC721 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e20383334.roa Signing time: Mon 02 Nov 2026 00:03:30 +0000 ROA not before: Sun 01 Nov 2026 23:58:30 +0000 ROA not after: Mon 01 Nov 2027 00:03:30 +0000 asID: 834 IP address blocks: 43.255.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fc:cf:56:b7:f6:f6:b3:b5:60:0a:21:a0:03:ad:ab:9a:1b:c7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Nov 1 23:58:30 2026 GMT Not After : Nov 1 00:03:30 2027 GMT Subject: CN=0AAAF33404A143ED3FDD7BEE69DE52CB6261D921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:8e:7e:53:49:4a:49:ab:c8:b4:e0:1b:a8: be:88:6b:62:81:30:aa:f3:68:d2:98:04:6b:47:76: c9:9d:fe:57:c4:07:c1:7f:09:36:4e:cf:ec:5d:04: c0:da:0a:f4:f1:b2:94:b2:c6:25:3a:a5:fa:53:2e: 32:26:40:b9:aa:a6:54:47:5e:99:a7:b7:b4:b0:59: b1:92:a1:c2:bc:f2:59:04:02:7f:f5:32:9e:d3:99: 8d:cb:54:67:d7:b2:c6:10:1f:87:8b:5c:d3:31:ff: 72:f8:ad:e8:28:b7:3c:7c:40:0d:c9:78:73:a0:89: 5b:9d:be:3f:35:89:4a:80:b5:a6:f7:bf:f7:b1:b8: ec:a4:26:ab:3b:72:67:89:5f:78:f5:a8:fb:a2:91: 7b:af:d8:a0:a8:ae:aa:bf:39:aa:30:90:78:12:42: c5:5c:ae:da:7d:ea:ed:ca:8e:e5:1f:a8:7f:37:8f: d6:06:9e:9d:d6:49:e8:b0:21:0e:b6:a2:f7:39:5b: b4:0b:87:e8:9d:5e:bf:4b:d6:8e:27:66:25:53:c6: 0e:2c:c3:f4:5d:d0:d1:2e:78:38:fb:3c:7c:73:a1: e1:4d:45:d2:05:90:8d:3f:46:83:b8:e5:9a:39:19: 5f:7b:6f:83:ec:85:de:40:1f:cb:2f:fb:f6:63:7f: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AA:F3:34:04:A1:43:ED:3F:DD:7B:EE:69:DE:52:CB:62:61:D9:21 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.81.0/24 Signature Algorithm: sha256WithRSAEncryption 64:a5:7a:69:d4:cf:29:a4:47:5b:ad:ed:a3:49:2e:a3:65:77: 79:d9:ab:c5:dc:83:c7:8e:c8:b6:51:ca:6b:cd:22:84:54:fb: fc:96:49:1c:cf:d0:b7:0e:6e:25:c7:e5:45:65:57:47:b5:37: dc:36:9c:0c:3a:6b:84:10:8e:91:49:99:4a:32:0e:32:a1:91: a8:02:b3:a8:6f:17:00:09:09:40:04:8a:76:2e:d6:3d:80:ee: b7:57:45:7f:a2:68:c6:c7:da:d2:66:30:c5:56:a9:6c:36:50: e1:64:c8:04:58:00:ae:54:f5:51:59:1e:f1:56:b8:0f:71:cb: f3:fa:0e:1a:e5:73:b7:15:6e:8d:d4:cb:b2:dc:7c:67:c3:ff: 19:a5:d8:7e:4f:fa:97:84:8a:54:aa:97:fe:83:4a:44:f0:de: 8e:e8:f4:d2:52:d8:f4:ca:0e:55:be:67:e3:1b:0d:36:91:78: 36:2c:31:4e:f4:af:95:19:5e:0c:e2:a7:69:8d:62:65:d2:b6: 77:d5:dd:ef:da:44:01:63:52:98:d3:93:f8:9d:35:88:f1:eb: bf:9a:a1:05:b7:4c:e6:14:67:ae:0d:8e:50:9c:5f:6b:91:4b: 70:80:7c:33:bd:18:c8:19:24:33:d2:6c:fa:fa:ff:f5:34:52: 9a:36:21:0b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUG/zPVrf29rO1YAohoAOtq5obxyEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MTEwMTIzNTgzMFoX DTI3MTEwMTAwMDMzMFowMzExMC8GA1UEAxMoMEFBQUYzMzQwNEExNDNFRDNGREQ3 QkVFNjlERTUyQ0I2MjYxRDkyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDQjn5TSUpJq8i04BuovohrYoEwqvNo0pgEa0d2yZ3+V8QHwX8JNk7P7F0E wNoK9PGylLLGJTql+lMuMiZAuaqmVEdemae3tLBZsZKhwrzyWQQCf/UyntOZjctU Z9eyxhAfh4tc0zH/cvit6Ci3PHxADcl4c6CJW52+PzWJSoC1pve/97G47KQmqzty Z4lfePWo+6KRe6/YoKiuqr85qjCQeBJCxVyu2n3q7cqO5R+ofzeP1gaendZJ6LAh Drai9zlbtAuH6J1ev0vWjidmJVPGDizD9F3Q0S54OPs8fHOh4U1F0gWQjT9Gg7jl mjkZX3tvg+yF3kAfyy/79mN/aMMCAwEAAaOCAgswggIHMB0GA1UdDgQWBBQKqvM0 BKFD7T/de+5p3lLLYmHZITAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUH MAuGaXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxQTYx MzEwMDAwLzAvMzQzMzJlMzIzNTM1MmUzODMxMmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAK/9RMA0GCSqGSIb3DQEBCwUAA4IBAQBkpXpp 1M8ppEdbre2jSS6jZXd52avF3IPHjsi2UcprzSKEVPv8lkkcz9C3Dm4lx+VFZVdH tTfcNpwMOmuEEI6RSZlKMg4yoZGoArOobxcACQlABIp2LtY9gO63V0V/omjGx9rS ZjDFVqlsNlDhZMgEWACuVPVRWR7xVrgPccvz+g4a5XO3FW6N1Muy3Hxnw/8Zpdh+ T/qXhIpUqpf+g0pE8N6O6PTSUtj0yg5VvmfjGw02kXg2LDFO9K+VGV4M4qdpjWJl 0rZ31d3v2kQBY1KY05P4nTWI8eu/mqEFt0zmFGeuDY5QnF9rkUtwgHwzvRjIGSQz 0mz6+v/1NFKaNiEL -----END CERTIFICATE-----Generated at Sun Nov 15 13:08:58 2026 by rpki-client