$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32322e302f32342d3234203d3e203438323636.roa File: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (raw, json) Hash identifier: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ= Subject key identifier: BE:A6:FB:A5:05:6A:C2:F6:4F:8E:1B:74:B9:57:EC:5D:8B:8C:8E:AE Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 4A9017C768376B351C248834AE3F9AF2D900C5EC Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32322e302f32342d3234203d3e203438323636.roa Signing time: Mon 02 Mar 2026 01:53:45 +0000 ROA not before: Mon 02 Mar 2026 01:48:45 +0000 ROA not after: Mon 01 Mar 2027 01:53:45 +0000 asID: 48266 IP address blocks: 43.252.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:90:17:c7:68:37:6b:35:1c:24:88:34:ae:3f:9a:f2:d9:00:c5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Mar 2 01:48:45 2026 GMT Not After : Mar 1 01:53:45 2027 GMT Subject: CN=BEA6FBA5056AC2F64F8E1B74B957EC5D8B8C8EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:c6:b6:6f:e5:cc:72:61:2c:b7:81:9f:8c: 8c:8b:52:8a:aa:b3:70:97:3b:73:fb:b2:5c:37:71: db:a1:12:83:2d:86:df:4f:b2:39:30:03:af:4c:69: 20:5f:e2:8f:a4:cc:12:f5:ca:34:5f:57:0b:41:80: d8:95:ff:51:6d:b3:0a:16:7a:46:9e:db:e0:1c:1b: c6:30:31:6b:16:11:91:41:11:39:43:f3:eb:c7:02: ab:72:fe:1a:e6:2f:a5:38:55:52:37:62:0b:89:8f: ba:7f:d6:36:83:02:27:5d:b3:68:65:2d:41:de:2b: 71:3c:78:80:ce:62:37:0c:25:7f:6b:3b:00:7e:a9: f2:28:70:a7:b0:6a:b9:14:52:4f:ea:28:56:cf:3d: 04:bb:a8:a2:be:de:7b:4c:28:8c:10:f9:e5:c9:f3: b6:04:25:87:de:0b:62:44:7a:dc:98:2d:17:f2:09: 40:ff:9e:85:4f:1f:47:6f:db:ae:ab:81:a3:9b:5c: 43:c6:3d:12:24:12:00:84:d8:ed:d2:a1:52:e2:24: 0c:5d:e1:df:b8:8c:f1:6f:c1:d6:3e:c9:ed:cc:1f: fe:d6:22:c0:9f:67:76:33:e5:7d:d1:9b:8a:c4:27: 38:ec:47:e4:db:c4:d1:b3:90:75:9e:77:3a:35:03: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A6:FB:A5:05:6A:C2:F6:4F:8E:1B:74:B9:57:EC:5D:8B:8C:8E:AE X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32322e302f32342d3234203d3e203438323636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.22.0/24 Signature Algorithm: sha256WithRSAEncryption 70:eb:98:32:6e:e6:f0:d3:dc:f6:92:ad:00:be:cf:08:00:fc: df:41:4a:ff:af:19:c8:d1:71:7f:f8:18:2e:d9:1d:89:81:33: 72:71:2f:a5:0e:da:8f:cf:44:15:40:7d:70:5c:e4:0d:ca:97: 57:26:30:30:7f:43:f1:30:d8:59:f5:15:00:9b:37:91:79:eb: e1:0c:63:47:46:58:42:22:16:56:a7:50:72:92:b8:89:e6:24: ac:1b:76:2e:9a:1d:a1:bd:75:b3:6d:fa:16:f5:81:d2:bd:2c: 7d:5a:54:95:3c:94:33:2c:f3:5c:b0:a7:fd:31:ef:ea:79:15: 12:85:57:1a:f3:64:96:c5:a3:f5:33:35:41:65:2c:38:7f:e7: 16:72:74:1c:f1:26:c4:54:b0:86:b2:7f:93:83:54:2a:d0:0b: ab:b3:79:18:02:41:c5:da:62:5e:f7:09:f6:f2:08:f2:c5:74: 6d:da:3a:0d:b0:18:43:fc:0d:4b:8d:bf:2a:d7:1c:14:8e:17: 9c:80:41:e7:bd:86:b8:15:82:4e:31:a2:dc:8a:a7:c0:c4:ff: 51:b7:2b:81:7f:78:69:6b:0e:57:c6:68:5e:89:eb:10:84:ba: 3b:f1:93:ca:3c:6b:0d:de:a4:65:f3:5f:43:e0:f9:64:ed:ae: a5:83:dd:15 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUSpAXx2g3azUcJIg0rj+a8tkAxewwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI2MDMwMjAxNDg0NVoX DTI3MDMwMTAxNTM0NVowMzExMC8GA1UEAxMoQkVBNkZCQTUwNTZBQzJGNjRGOEUx Qjc0Qjk1N0VDNUQ4QjhDOEVBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiRxrZv5cxyYSy3gZ+MjItSiqqzcJc7c/uyXDdx26ESgy2G30+yOTADr0xp IF/ij6TMEvXKNF9XC0GA2JX/UW2zChZ6Rp7b4BwbxjAxaxYRkUEROUPz68cCq3L+ GuYvpThVUjdiC4mPun/WNoMCJ12zaGUtQd4rcTx4gM5iNwwlf2s7AH6p8ihwp7Bq uRRST+ooVs89BLuoor7ee0wojBD55cnztgQlh94LYkR63JgtF/IJQP+ehU8fR2/b rquBo5tcQ8Y9EiQSAITY7dKhUuIkDF3h37iM8W/B1j7J7cwf/tYiwJ9ndjPlfdGb isQnOOxH5NvE0bOQdZ53OjUDmacCAwEAAaOCAg8wggILMB0GA1UdDgQWBBS+pvul BWrC9k+OG3S5V+xdi4yOrjAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxREQ1 MTAwMDAwLzAvMzQzMzJlMzIzNTMyMmUzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzQzODMyMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8FjANBgkqhkiG9w0BAQsFAAOCAQEA cOuYMm7m8NPc9pKtAL7PCAD830FK/68ZyNFxf/gYLtkdiYEzcnEvpQ7aj89EFUB9 cFzkDcqXVyYwMH9D8TDYWfUVAJs3kXnr4QxjR0ZYQiIWVqdQcpK4ieYkrBt2Lpod ob11s236FvWB0r0sfVpUlTyUMyzzXLCn/THv6nkVEoVXGvNklsWj9TM1QWUsOH/n FnJ0HPEmxFSwhrJ/k4NUKtALq7N5GAJBxdpiXvcJ9vII8sV0bdo6DbAYQ/wNS42/ KtccFI4XnIBB572GuBWCTjGi3IqnwMT/UbcrgX94aWsOV8ZoXonrEIS6O/GTyjxr Dd6kZfNfQ+D5ZO2upYPdFQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:49:52 2026 by rpki-client