$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32302e302f32342d3234203d3e203134363138.roa File: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: VcmsnRsgmQnBSJtXlXxQZTY4P3vXZvCafvFQMqv4vfA= Subject key identifier: 10:E5:36:5B:47:9F:C5:27:1E:39:1C:81:A9:DB:EC:A0:57:FC:76:6E Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 4FDDFF47326876B71E908DC289CFF91021174135 Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32302e302f32342d3234203d3e203134363138.roa Signing time: Mon 10 Aug 2026 10:03:55 +0000 ROA not before: Mon 10 Aug 2026 09:58:55 +0000 ROA not after: Mon 09 Aug 2027 10:03:55 +0000 asID: 14618 IP address blocks: 43.252.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:dd:ff:47:32:68:76:b7:1e:90:8d:c2:89:cf:f9:10:21:17:41:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Aug 10 09:58:55 2026 GMT Not After : Aug 9 10:03:55 2027 GMT Subject: CN=10E5365B479FC5271E391C81A9DBECA057FC766E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:43:d9:44:b2:15:df:9e:03:92:14:5f:ec: b7:22:14:77:a4:b1:80:7d:be:b1:e3:9a:4b:c1:f9: 2f:c7:34:bf:ee:7d:46:2d:31:57:8b:ff:ae:64:6d: 9c:7f:e7:ca:22:44:fe:0f:3f:20:a3:90:0a:76:bf: 7b:3d:b6:60:47:fc:a0:dc:9c:73:fd:32:af:78:69: 2c:03:13:02:a3:a4:26:61:4c:c7:4b:c2:76:c3:9b: fb:56:9d:ce:d2:50:bf:48:e1:b2:51:bf:69:46:c1: 0f:63:81:ac:46:5d:fe:59:cd:37:ae:fd:31:03:07: 16:5d:fb:8d:a5:7f:6e:b4:ea:8d:3c:6e:1f:8e:a9: 52:25:0d:e0:52:0d:53:4c:30:ee:aa:19:ac:e0:16: 13:42:02:3c:1f:9b:00:11:ab:6a:e1:7f:0d:ba:0f: 2c:30:97:62:2f:cb:5f:0a:f0:2c:28:a7:cd:e6:df: 2c:ef:7b:c9:eb:cd:3e:e0:30:22:31:ce:f4:4b:47: 57:cd:b5:93:e1:09:db:39:10:46:9a:80:b4:15:c7: ed:fc:e2:18:c7:9b:a2:f7:eb:78:f5:92:21:89:07: a9:a3:46:0e:c1:04:2f:73:57:75:99:bd:7f:f8:61: 9b:3c:f5:b4:7a:ec:16:98:b2:81:df:b0:cb:1a:3c: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E5:36:5B:47:9F:C5:27:1E:39:1C:81:A9:DB:EC:A0:57:FC:76:6E X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32302e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.20.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:9b:ef:a8:eb:76:57:e2:61:59:4e:d7:18:7e:8c:f9:1b:f8: c6:08:fa:a0:6f:21:74:6d:97:92:21:01:0d:3c:69:23:ec:3c: 62:9f:8e:79:ff:c7:57:08:67:c6:fb:c1:e8:e0:8f:70:c9:96: 05:d8:ba:26:a1:b3:00:16:90:50:c4:aa:1f:e1:c5:17:bd:d7: 1b:c9:7b:52:54:21:0e:78:09:4e:37:14:71:1b:48:eb:2c:3a: b3:0b:70:c4:ad:bc:3b:f9:35:e0:45:6f:9f:41:8a:a8:a5:7b: a3:87:e8:f9:6e:44:d3:03:9a:8d:cd:8a:2a:9a:e3:be:d8:88: 39:14:4f:89:31:06:0e:59:41:d7:42:f8:88:89:24:4f:83:2e: 27:55:75:43:65:82:10:79:13:e7:64:0a:1a:1d:51:c8:26:97: 04:2c:8e:87:80:46:15:32:8b:87:7c:0e:62:b8:66:4a:1d:f1: 93:2b:74:82:dc:3e:0b:93:3c:72:ff:a6:38:80:af:f7:04:49: 55:69:03:42:b4:95:1c:67:de:67:30:fa:16:c9:74:18:31:3b: a2:b9:62:c3:25:35:ad:53:5c:8a:da:0a:3b:8a:70:ed:2d:f2: 9b:fb:84:25:8a:1f:27:8d:42:7f:f8:c2:e0:5c:8f:76:9a:8a: 34:93:58:56 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUT93/RzJodrcekI3Cic/5ECEXQTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI2MDgxMDA5NTg1NVoX DTI3MDgwOTEwMDM1NVowMzExMC8GA1UEAxMoMTBFNTM2NUI0NzlGQzUyNzFFMzkx QzgxQTlEQkVDQTA1N0ZDNzY2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYUQ9lEshXfngOSFF/styIUd6SxgH2+seOaS8H5L8c0v+59Ri0xV4v/rmRt nH/nyiJE/g8/IKOQCna/ez22YEf8oNycc/0yr3hpLAMTAqOkJmFMx0vCdsOb+1ad ztJQv0jhslG/aUbBD2OBrEZd/lnNN679MQMHFl37jaV/brTqjTxuH46pUiUN4FIN U0ww7qoZrOAWE0ICPB+bABGrauF/DboPLDCXYi/LXwrwLCinzebfLO97yevNPuAw IjHO9EtHV821k+EJ2zkQRpqAtBXH7fziGMebovfrePWSIYkHqaNGDsEEL3NXdZm9 f/hhmzz1tHrsFpiygd+wyxo8pGkCAwEAAaOCAg8wggILMB0GA1UdDgQWBBQQ5TZb R5/FJx45HIGp2+ygV/x2bjAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxREQ1 MTAwMDAwLzAvMzQzMzJlMzIzNTMyMmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzEzNDM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8FDANBgkqhkiG9w0BAQsFAAOCAQEA XZvvqOt2V+JhWU7XGH6M+Rv4xgj6oG8hdG2XkiEBDTxpI+w8Yp+Oef/HVwhnxvvB 6OCPcMmWBdi6JqGzABaQUMSqH+HFF73XG8l7UlQhDngJTjcUcRtI6yw6swtwxK28 O/k14EVvn0GKqKV7o4fo+W5E0wOajc2KKprjvtiIORRPiTEGDllB10L4iIkkT4Mu J1V1Q2WCEHkT52QKGh1RyCaXBCyOh4BGFTKLh3wOYrhmSh3xkyt0gtw+C5M8cv+m OICv9wRJVWkDQrSVHGfeZzD6Fsl0GDE7orliwyU1rVNcitoKO4pw7S3ym/uEJYof J41Cf/jC4FyPdpqKNJNYVg== -----END CERTIFICATE-----Generated at Tue Sep 22 10:20:22 2026 by rpki-client