$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32302e302f32342d3234203d3e203136353039.roa File: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: XCFQR4hI12Tjgtit3SEE2XJc52bIvb2OFixoEnv1lfk= Subject key identifier: 62:6B:4B:35:C2:6D:B8:A0:F0:42:C9:53:76:1A:67:BF:FF:F3:04:1B Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 3435D7FF6D509C52E264A4DCD3DA4783C27EE251 Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32302e302f32342d3234203d3e203136353039.roa Signing time: Mon 10 Aug 2026 10:03:55 +0000 ROA not before: Mon 10 Aug 2026 09:58:55 +0000 ROA not after: Mon 09 Aug 2027 10:03:55 +0000 asID: 16509 IP address blocks: 43.252.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:35:d7:ff:6d:50:9c:52:e2:64:a4:dc:d3:da:47:83:c2:7e:e2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Aug 10 09:58:55 2026 GMT Not After : Aug 9 10:03:55 2027 GMT Subject: CN=626B4B35C26DB8A0F042C953761A67BFFFF3041B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:e3:80:b7:28:5a:0c:18:63:9a:07:89:3f: 0d:90:ab:12:f7:d9:35:62:ba:58:94:9e:7e:e3:25: a3:c9:71:cd:84:c9:01:6f:91:3c:f2:0e:58:e0:5e: 47:5f:19:81:aa:a1:c5:7b:16:ac:c9:2e:85:1f:4f: 36:7e:de:9c:49:d3:a9:5c:ce:79:f5:c0:e8:9e:19: f7:78:c8:4d:c3:ba:77:5d:71:10:e5:da:6b:2a:be: 2b:9f:1b:45:32:42:6b:41:4c:73:ca:97:3d:54:8f: 73:22:53:0d:46:a1:b4:68:aa:2b:20:7c:08:a5:93: 69:25:31:71:21:d2:2b:7f:7b:f0:5f:cb:5d:57:25: 47:00:e6:13:88:24:0f:d5:7a:27:27:a2:27:0d:ed: f3:ff:1c:25:56:ab:95:20:fe:33:e5:a7:ef:b8:aa: e2:9b:5d:4a:65:f8:a0:8e:5c:aa:dd:db:b2:e4:8a: 1b:1a:1c:06:19:f9:e7:6a:b0:65:00:df:a0:64:55: cb:86:4f:66:83:f6:53:dd:e6:ad:1a:9b:40:eb:bd: 3d:a6:22:7e:72:28:31:20:e3:d2:fe:36:c5:8f:0e: aa:56:25:a6:4f:3e:cc:77:ea:fb:9e:bf:f0:ac:f0: ed:58:7d:6d:0d:17:23:24:de:a6:b6:20:bc:ff:f7: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6B:4B:35:C2:6D:B8:A0:F0:42:C9:53:76:1A:67:BF:FF:F3:04:1B X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32302e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.20.0/24 Signature Algorithm: sha256WithRSAEncryption c3:b9:28:bb:f9:e0:dd:80:4c:e7:92:0c:12:c0:80:b5:54:38: 07:c7:ae:88:91:86:6d:27:0c:33:b3:9e:b5:1d:fe:46:ef:43: 31:2e:3a:6c:f8:35:77:39:81:5f:e6:4c:02:bd:43:29:c9:a1: 43:e8:f4:ae:30:ce:8c:ee:68:12:e5:8c:5e:d2:cb:47:f1:d5: c8:7c:58:ec:26:e4:81:69:ea:f5:a2:df:a2:66:fc:ec:1e:65: 2e:75:57:62:00:18:cb:46:a8:fa:0d:e5:b4:7b:4c:f3:bb:f7: dd:33:43:0f:0e:66:ca:d5:27:49:22:31:c9:d4:04:e5:2e:c9: 4b:d4:d4:d7:cd:67:4b:53:52:e6:66:f7:bf:6f:07:94:b2:79: d7:f2:ba:c3:d8:c7:84:3b:be:eb:1d:88:95:dd:9d:2e:48:7b: c4:a1:1d:84:8e:17:0d:31:9d:08:ae:51:0a:a8:80:fa:1e:34: 94:86:c9:68:af:78:e5:05:83:5f:30:11:bd:14:d5:17:f9:9d: 7d:67:b8:f7:84:06:2d:08:9e:a7:a5:01:22:ae:6f:c9:18:b6: 91:d3:c7:09:4d:35:03:60:33:f0:00:80:79:37:55:d5:3c:34: d1:d8:bc:d3:32:4f:06:f0:2f:9d:06:1e:ee:ca:2f:eb:e5:92: e0:74:e8:75 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUNDXX/21QnFLiZKTc09pHg8J+4lEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI2MDgxMDA5NTg1NVoX DTI3MDgwOTEwMDM1NVowMzExMC8GA1UEAxMoNjI2QjRCMzVDMjZEQjhBMEYwNDJD OTUzNzYxQTY3QkZGRkYzMDQxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFh44C3KFoMGGOaB4k/DZCrEvfZNWK6WJSefuMlo8lxzYTJAW+RPPIOWOBe R18ZgaqhxXsWrMkuhR9PNn7enEnTqVzOefXA6J4Z93jITcO6d11xEOXaayq+K58b RTJCa0FMc8qXPVSPcyJTDUahtGiqKyB8CKWTaSUxcSHSK3978F/LXVclRwDmE4gk D9V6JyeiJw3t8/8cJVarlSD+M+Wn77iq4ptdSmX4oI5cqt3bsuSKGxocBhn552qw ZQDfoGRVy4ZPZoP2U93mrRqbQOu9PaYifnIoMSDj0v42xY8OqlYlpk8+zHfq+56/ 8Kzw7Vh9bQ0XIyTeprYgvP/3fC8CAwEAAaOCAg8wggILMB0GA1UdDgQWBBRia0s1 wm24oPBCyVN2Gme///MEGzAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxREQ1 MTAwMDAwLzAvMzQzMzJlMzIzNTMyMmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzEzNjM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8FDANBgkqhkiG9w0BAQsFAAOCAQEA w7kou/ng3YBM55IMEsCAtVQ4B8euiJGGbScMM7OetR3+Ru9DMS46bPg1dzmBX+ZM Ar1DKcmhQ+j0rjDOjO5oEuWMXtLLR/HVyHxY7CbkgWnq9aLfomb87B5lLnVXYgAY y0ao+g3ltHtM87v33TNDDw5mytUnSSIxydQE5S7JS9TU181nS1NS5mb3v28HlLJ5 1/K6w9jHhDu+6x2Ild2dLkh7xKEdhI4XDTGdCK5RCqiA+h40lIbJaK945QWDXzAR vRTVF/mdfWe494QGLQiep6UBIq5vyRi2kdPHCU01A2Az8ACAeTdV1Tw00di80zJP BvAvnQYe7sov6+WS4HTodQ== -----END CERTIFICATE-----Generated at Mon Sep 21 03:37:13 2026 by rpki-client