$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa File: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (raw, json) Hash identifier: yogL8/81axQDf/PWzTASWBYKmDx9+f4U8iWDqKSfbiU= Subject key identifier: 90:F8:86:2B:98:B8:94:6D:07:FE:1C:54:EB:61:95:BA:75:83:33:B1 Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Certificate serial: 4D5A5D85C625D5E8931CD1359415EC2026F91EF5 Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa Signing time: Fri 20 Dec 2024 01:09:40 +0000 ROA not before: Fri 20 Dec 2024 01:04:40 +0000 ROA not after: Fri 19 Dec 2025 01:09:40 +0000 asID: 9449 IP address blocks: 103.160.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 04:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5a:5d:85:c6:25:d5:e8:93:1c:d1:35:94:15:ec:20:26:f9:1e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Validity Not Before: Dec 20 01:04:40 2024 GMT Not After : Dec 19 01:09:40 2025 GMT Subject: CN=90F8862B98B8946D07FE1C54EB6195BA758333B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:79:7e:5b:48:69:84:08:41:62:92:9d:e7: 8a:7c:2f:36:10:26:bf:19:70:f8:dd:cb:de:a2:d4: b3:74:7e:f1:2b:98:e8:c7:23:bc:33:89:e3:3f:59: 24:4a:c7:a3:f8:d6:79:56:bc:71:7a:5c:e8:b8:f6: 95:ef:1d:1b:3e:5a:d7:d3:45:b7:24:eb:63:d7:c2: ae:3a:f6:03:23:6e:52:fa:bd:a9:e2:dc:14:a6:93: 77:39:26:51:78:60:e3:05:88:6f:d2:69:0f:40:b0: 91:37:57:cd:e4:06:4d:d6:5e:6b:9b:33:3e:33:e5: b6:0b:1a:a2:81:5c:62:8e:9d:14:21:89:60:86:d5: d2:3c:07:cd:54:25:55:6b:86:70:f7:0c:ea:c6:81: 15:d6:2b:1f:bc:f2:70:34:5b:2c:81:7c:89:90:ad: 62:69:c9:08:b3:96:a6:d3:81:c1:be:b0:a5:6a:6c: af:ad:00:ce:bd:fe:da:93:2f:fa:d1:20:4b:00:fa: 1b:9b:2a:7c:c4:1c:05:ae:e6:30:df:26:01:dd:19: 9d:a2:5c:92:56:02:2a:54:d3:9c:3f:23:62:c6:8f: b9:c5:46:01:ff:30:09:6d:28:52:57:c3:b4:06:3b: 11:a1:2a:0c:1e:0c:0e:86:46:16:82:2d:98:ec:b6: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F8:86:2B:98:B8:94:6D:07:FE:1C:54:EB:61:95:BA:75:83:33:B1 X509v3 Authority Key Identifier: keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.116.0/23 Signature Algorithm: sha256WithRSAEncryption ba:98:35:14:b8:be:0b:47:48:c4:82:5a:fb:98:14:74:a9:40: f5:6d:0d:9a:bc:cf:28:85:f2:f8:b0:4d:e6:9b:5e:91:95:04: 03:17:18:40:50:73:3e:c7:82:52:fa:a1:f6:53:31:a6:f5:bf: 98:03:62:65:48:d2:be:81:06:fb:40:0d:35:9a:c0:bf:73:62: 24:7c:81:88:ce:2d:80:eb:15:64:96:88:41:fb:2e:11:58:c8: 65:39:2d:e0:5f:55:74:c1:50:91:9e:25:60:ba:1f:57:2d:6a: 83:e1:bb:5f:20:21:b0:3f:a4:be:14:9a:d5:28:2a:fe:b0:61: 34:8b:de:a8:00:0f:e5:19:71:59:7c:95:fd:b9:ac:35:6f:c0: 6d:07:90:07:f5:a0:db:31:26:b0:c3:d4:94:89:bf:d8:c6:be: 95:1b:ae:dd:f3:42:5a:f6:16:83:ed:6d:da:11:c4:fd:06:cc: 2f:65:34:c1:41:03:7b:69:f4:54:8a:8e:81:a1:ec:63:15:a1: e3:ca:3e:97:57:65:89:32:d7:4d:c0:f8:b7:a0:ac:66:ae:55: 74:89:25:fa:58:46:ae:28:91:4d:27:a7:bc:95:33:9b:4c:99: 7f:f2:c9:da:53:4b:91:18:44:aa:45:77:18:37:86:05:72:5a: 2d:27:52:d5 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUTVpdhcYl1eiTHNE1lBXsICb5HvUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI0MTIyMDAxMDQ0MFoX DTI1MTIxOTAxMDk0MFowMzExMC8GA1UEAxMoOTBGODg2MkI5OEI4OTQ2RDA3RkUx QzU0RUI2MTk1QkE3NTgzMzNCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALm2eX5bSGmECEFikp3ninwvNhAmvxlw+N3L3qLUs3R+8SuY6McjvDOJ4z9Z JErHo/jWeVa8cXpc6Lj2le8dGz5a19NFtyTrY9fCrjr2AyNuUvq9qeLcFKaTdzkm UXhg4wWIb9JpD0CwkTdXzeQGTdZea5szPjPltgsaooFcYo6dFCGJYIbV0jwHzVQl VWuGcPcM6saBFdYrH7zycDRbLIF8iZCtYmnJCLOWptOBwb6wpWpsr60Azr3+2pMv +tEgSwD6G5sqfMQcBa7mMN8mAd0ZnaJcklYCKlTTnD8jYsaPucVGAf8wCW0oUlfD tAY7EaEqDB4MDoZGFoItmOy2N2cCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSQ+IYr mLiUbQf+HFTrYZW6dYMzsTAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT 4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh VjhkcGNCRVlPc18tQkdFLUEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzAvMzEzMDMzMmUzMTM2MzAyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzQy MDNkM2UyMDM5MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6B0MA0GCSqGSIb3DQEBCwUAA4IB AQC6mDUUuL4LR0jEglr7mBR0qUD1bQ2avM8ohfL4sE3mm16RlQQDFxhAUHM+x4JS +qH2UzGm9b+YA2JlSNK+gQb7QA01msC/c2IkfIGIzi2A6xVklohB+y4RWMhlOS3g X1V0wVCRniVguh9XLWqD4btfICGwP6S+FJrVKCr+sGE0i96oAA/lGXFZfJX9uaw1 b8BtB5AH9aDbMSaww9SUib/Yxr6VG67d80Ja9haD7W3aEcT9BswvZTTBQQN7afRU io6BoexjFaHjyj6XV2WJMtdNwPi3oKxmrlV0iSX6WEauKJFNJ6e8lTObTJl/8sna U0uRGESqRXcYN4YFclotJ1LV -----END CERTIFICATE-----Generated at Thu Jul 3 17:05:34 2025 by rpki-client