$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3130332e302e302e302f31362d3136203d3e2034363038.roa File: 3130332e302e302e302f31362d3136203d3e2034363038.roa (raw, json) Hash identifier: L/el4bzkuzcsjhPMOkht1KvFdFkUsS00ZQpcwoXhNkM= Subject key identifier: 23:28:2F:58:FA:EC:48:C3:4B:5F:B8:05:12:28:46:7A:69:27:B7:67 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 3D62F7879EB2E2F5934EE5B36E0D77B5C67676B2 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3130332e302e302e302f31362d3136203d3e2034363038.roa Signing time: Tue 12 Aug 2025 17:23:13 +0000 ROA not before: Tue 12 Aug 2025 17:18:13 +0000 ROA not after: Tue 11 Aug 2026 17:23:13 +0000 asID: 4608 IP address blocks: 103.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:62:f7:87:9e:b2:e2:f5:93:4e:e5:b3:6e:0d:77:b5:c6:76:76:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Aug 12 17:18:13 2025 GMT Not After : Aug 11 17:23:13 2026 GMT Subject: CN=23282F58FAEC48C34B5FB8051228467A6927B767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:56:87:f3:62:74:65:5c:51:6f:34:83:9f:98: e4:c4:10:eb:2c:77:f8:2f:cf:49:d9:e0:d1:87:d2: da:d8:b0:d0:bb:0e:54:87:08:31:a4:d1:7b:5c:e1: 45:76:fc:91:93:14:7c:6c:bd:4a:1b:9b:c6:f5:ef: 6f:d1:fb:36:94:e6:be:aa:83:be:7d:b5:66:be:f5: 1f:7f:52:fa:ad:7e:1c:eb:88:a1:02:31:da:01:43: c1:c7:a5:65:66:25:1d:11:21:a9:0f:c9:63:d2:53: 2a:bf:ab:7c:32:f4:95:90:18:6a:87:85:d0:5d:34: ee:aa:5b:49:b4:11:cb:c3:c4:cb:dc:d7:97:3d:c4: 6c:e1:9d:f8:bc:0e:50:e2:97:5f:26:11:0b:99:e1: ea:5a:9a:ed:e8:f1:b2:83:33:6b:e0:e3:fb:a5:b5: 6f:0b:14:ac:0e:4d:c4:81:aa:ee:a7:a8:e7:08:2d: e4:fd:48:b5:db:4e:74:7c:d8:a9:bb:6e:bb:bb:db: b6:38:21:9a:41:56:97:6d:17:cd:82:8a:b9:9c:9d: 55:4a:2f:df:37:20:c6:fe:fd:9a:5e:4b:a1:30:98: fd:da:89:99:2d:2d:7e:87:be:dd:df:b8:18:a2:32: 08:28:63:13:d4:19:92:d8:fc:83:b5:05:9d:aa:3b: 47:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:28:2F:58:FA:EC:48:C3:4B:5F:B8:05:12:28:46:7A:69:27:B7:67 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3130332e302e302e302f31362d3136203d3e2034363038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.0.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:d3:9e:03:95:a4:ce:d3:88:0f:09:70:af:21:4d:fe:8a:ba: 2b:81:0f:e2:cf:09:c3:ce:6b:6a:68:92:ae:f2:d1:08:d4:da: ba:e4:96:7d:3a:3a:c1:87:f4:1b:48:ec:17:21:b9:c9:39:ff: 84:29:1c:bd:9c:4e:c1:f6:a2:42:2c:df:58:3c:54:3f:0a:2b: 9a:80:5f:84:d0:77:bb:a5:b2:3c:23:5f:0a:03:f9:38:2f:e7: 17:02:87:74:18:38:b3:48:20:0a:84:97:a6:9f:f7:b6:ad:19: db:36:2e:96:44:4d:85:5e:75:8c:76:2a:87:7a:89:00:0e:67: f3:d6:c6:f6:bc:f1:d1:6f:e1:bb:27:cb:a5:4d:af:1d:c5:8a: e7:3d:7b:c1:fb:c6:77:52:cb:db:52:1e:a1:6b:d6:a3:69:17: 2d:26:1c:2a:18:85:0e:4d:44:b1:f8:b1:0b:b9:a1:3d:ed:0a: 58:7b:f9:68:44:61:fb:0c:2c:c8:1a:e2:2c:2b:ef:76:ef:94: db:c7:c1:37:12:00:fc:cf:33:51:58:1b:d9:4f:f5:fc:55:aa: 79:ca:0d:5c:50:6e:7b:5a:31:74:0b:3f:ff:d8:c9:86:d0:e5: 02:f7:29:ba:37:e9:1a:fe:ab:10:a5:3d:f8:f7:13:b0:c1:bc: 89:80:8b:c0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPWL3h56y4vWTTuWzbg13tcZ2drIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDgxMjE3MTgxM1oX DTI2MDgxMTE3MjMxM1owMzExMC8GA1UEAxMoMjMyODJGNThGQUVDNDhDMzRCNUZC ODA1MTIyODQ2N0E2OTI3Qjc2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlWh/NidGVcUW80g5+Y5MQQ6yx3+C/PSdng0YfS2tiw0LsOVIcIMaTRe1zh RXb8kZMUfGy9ShubxvXvb9H7NpTmvqqDvn21Zr71H39S+q1+HOuIoQIx2gFDwcel ZWYlHREhqQ/JY9JTKr+rfDL0lZAYaoeF0F007qpbSbQRy8PEy9zXlz3EbOGd+LwO UOKXXyYRC5nh6lqa7ejxsoMza+Dj+6W1bwsUrA5NxIGq7qeo5wgt5P1ItdtOdHzY qbtuu7vbtjghmkFWl20XzYKKuZydVUov3zcgxv79ml5LoTCY/dqJmS0tfoe+3d+4 GKIyCChjE9QZktj8g7UFnao7R3cCAwEAAaOCAf0wggH5MB0GA1UdDgQWBBQjKC9Y +uxIw0tfuAUSKEZ6aSe3ZzAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJz eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wLzMx MzAzMzJlMzAyZTMwMmUzMDJmMzEzNjJkMzEzNjIwM2QzZTIwMzQzNjMwMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsE AgABMAUDAwBnADANBgkqhkiG9w0BAQsFAAOCAQEAgNOeA5WkztOIDwlwryFN/oq6 K4EP4s8Jw85ramiSrvLRCNTauuSWfTo6wYf0G0jsFyG5yTn/hCkcvZxOwfaiQizf WDxUPwormoBfhNB3u6WyPCNfCgP5OC/nFwKHdBg4s0ggCoSXpp/3tq0Z2zYulkRN hV51jHYqh3qJAA5n89bG9rzx0W/huyfLpU2vHcWK5z17wfvGd1LL21IeoWvWo2kX LSYcKhiFDk1EsfixC7mhPe0KWHv5aERh+wwsyBriLCvvdu+U28fBNxIA/M8zUVgb 2U/1/FWqecoNXFBue1oxdAs//9jJhtDlAvcpujfpGv6rEKU9+PcTsMG8iYCLwA== -----END CERTIFICATE-----Generated at Sun Aug 24 03:53:01 2025 by rpki-client