$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa File: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (raw, json) Hash identifier: 5zHOEOxJKaIhKLayeVIBDopY9PzfhKKvix+Lfzwib5g= Subject key identifier: 79:DE:05:CA:D6:41:B1:87:7E:94:50:67:DD:52:B1:98:CE:EA:32:0B Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 568440EE18F05663EBE69F3CB4B80937437598A1 Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa Signing time: Fri 11 Sep 2026 04:33:06 +0000 ROA not before: Fri 11 Sep 2026 04:28:06 +0000 ROA not after: Fri 10 Sep 2027 04:33:06 +0000 asID: 153346 IP address blocks: 160.187.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:84:40:ee:18:f0:56:63:eb:e6:9f:3c:b4:b8:09:37:43:75:98:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Sep 11 04:28:06 2026 GMT Not After : Sep 10 04:33:06 2027 GMT Subject: CN=79DE05CAD641B1877E945067DD52B198CEEA320B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:13:36:d6:de:99:0a:bd:ad:01:63:d2:c8: d0:a4:5c:9f:0a:72:d8:d0:c7:6d:c2:f0:3c:76:de: db:af:99:d9:b7:11:d5:84:a5:86:e8:64:cb:33:23: a6:54:07:93:15:61:99:b6:c5:51:79:74:d9:82:76: 14:f1:c1:cf:d3:f4:24:de:d0:1d:45:07:a9:97:4d: 65:a4:8d:0d:8b:6e:57:22:4b:39:63:28:63:16:b2: 88:ba:12:78:df:6c:23:85:ca:a9:47:b8:c8:ab:55: be:1a:f0:bd:f8:8e:a4:e0:a2:63:8f:00:d3:0c:7c: c0:e6:2d:b6:9b:2b:a7:f7:76:18:f9:22:53:18:79: 9c:8a:05:76:a0:a9:f9:bc:f3:f5:b2:55:27:51:2b: 3e:7f:a7:92:9f:7b:1f:c8:d5:50:e6:58:98:72:16: 01:1f:c9:0a:e2:07:7e:42:7a:72:cb:34:bc:09:3e: c6:b9:39:8e:96:02:ee:3a:87:bf:c3:0f:44:e8:97: 2f:0f:ea:a2:3e:5a:45:db:c1:16:8f:cb:11:21:bd: 2c:a7:fb:1e:8f:a1:90:2a:bb:1d:8f:76:9c:19:f5: a4:bc:58:12:d5:50:71:95:6a:0d:85:ad:c7:8f:24: a6:55:5f:ff:cf:30:7b:c1:9a:8e:8d:fd:22:f0:40: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DE:05:CA:D6:41:B1:87:7E:94:50:67:DD:52:B1:98:CE:EA:32:0B X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.124.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:f3:2c:fd:5f:5b:59:62:49:81:c9:c9:9b:3c:a7:5b:db:15: 72:36:a6:ca:d2:f8:31:4b:58:5a:86:b4:6f:f6:40:06:e6:f3: d1:65:e2:4e:a4:e4:3e:ee:ef:01:ab:e3:b4:da:9c:9f:a8:d3: 92:95:c5:c4:df:9f:48:12:96:23:e5:40:23:bd:fe:4b:68:e7: d6:c1:12:76:ec:b6:e4:76:c5:4c:32:84:d4:bb:eb:c7:f3:fb: ef:51:39:4d:01:85:cb:50:3d:83:83:b6:d4:e7:10:c1:87:4a: f2:16:98:03:6e:4f:3b:ed:a1:32:64:dc:92:2d:be:94:b9:7e: 0c:1d:7d:83:d7:1b:24:21:86:e9:be:96:7b:07:f5:e2:ab:3f: 6f:47:e6:50:91:d5:85:38:df:17:af:1a:f2:9f:6d:13:be:82: 10:1c:41:2c:08:72:dd:b7:b2:c1:c8:58:2b:d0:e5:ec:3f:6d: 83:f2:a1:c5:d9:97:8a:e2:bd:52:cf:e5:82:9f:49:f7:5a:47: aa:6c:b0:03:d2:bc:49:4d:91:db:6f:6a:5c:ef:f1:b7:81:c9: 6c:9d:d1:73:48:55:ff:bd:97:9c:e3:32:e4:d4:ca:bf:af:e7: e9:7e:2e:65:07:4c:16:04:60:52:46:d8:fa:16:5a:ea:79:8c: 73:bf:76:a3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUVoRA7hjwVmPr5p88tLgJN0N1mKEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI2MDkxMTA0MjgwNloX DTI3MDkxMDA0MzMwNlowMzExMC8GA1UEAxMoNzlERTA1Q0FENjQxQjE4NzdFOTQ1 MDY3REQ1MkIxOThDRUVBMzIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2ZEzbW3pkKva0BY9LI0KRcnwpy2NDHbcLwPHbe26+Z2bcR1YSlhuhkyzMj plQHkxVhmbbFUXl02YJ2FPHBz9P0JN7QHUUHqZdNZaSNDYtuVyJLOWMoYxayiLoS eN9sI4XKqUe4yKtVvhrwvfiOpOCiY48A0wx8wOYttpsrp/d2GPkiUxh5nIoFdqCp +bzz9bJVJ1ErPn+nkp97H8jVUOZYmHIWAR/JCuIHfkJ6css0vAk+xrk5jpYC7jqH v8MPROiXLw/qoj5aRdvBFo/LESG9LKf7Ho+hkCq7HY92nBn1pLxYEtVQcZVqDYWt x48kplVf/88we8Gajo39IvBAbXsCAwEAAaOCAhcwggITMB0GA1UdDgQWBBR53gXK 1kGxh36UUGfdUrGYzuoyCzAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3 NDQ3QjAwMDAvMC8zMTM2MzAyZTMxMzgzNzJlMzEzMjM0MmUzMDJmMzIzMzJkMzIz NDIwM2QzZTIwMzEzNTMzMzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoLt8MA0GCSqGSIb3DQEB CwUAA4IBAQAa8yz9X1tZYkmBycmbPKdb2xVyNqbK0vgxS1hahrRv9kAG5vPRZeJO pOQ+7u8Bq+O02pyfqNOSlcXE359IEpYj5UAjvf5LaOfWwRJ27LbkdsVMMoTUu+vH 8/vvUTlNAYXLUD2Dg7bU5xDBh0ryFpgDbk877aEyZNySLb6UuX4MHX2D1xskIYbp vpZ7B/Xiqz9vR+ZQkdWFON8Xrxryn20TvoIQHEEsCHLdt7LByFgr0OXsP22D8qHF 2ZeK4r1Sz+WCn0n3WkeqbLAD0rxJTZHbb2pc7/G3gclsndFzSFX/vZec4zLk1Mq/ r+fpfi5lB0wWBGBSRtj6FlrqeYxzv3aj -----END CERTIFICATE-----Generated at Wed Sep 23 16:48:29 2026 by rpki-client