$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa File: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (raw, json) Hash identifier: /+sJT+4M3YxlKiSTmSS+QE+W2EVnE9RJ/vLKVPLkgic= Subject key identifier: 26:9E:3D:C6:CD:B6:3D:B7:9D:E0:8E:B3:CA:54:63:FA:A6:DF:6D:86 Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Certificate serial: 7D2F27440AD0F2FD54C75E6DA37A1902CA576347 Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa Signing time: Wed 15 Jan 2025 02:10:13 +0000 ROA not before: Wed 15 Jan 2025 02:05:13 +0000 ROA not after: Wed 14 Jan 2026 02:10:13 +0000 asID: 9888 IP address blocks: 103.160.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 04:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2f:27:44:0a:d0:f2:fd:54:c7:5e:6d:a3:7a:19:02:ca:57:63:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0 Validity Not Before: Jan 15 02:05:13 2025 GMT Not After : Jan 14 02:10:13 2026 GMT Subject: CN=269E3DC6CDB63DB79DE08EB3CA5463FAA6DF6D86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:ff:42:2d:c0:15:f2:aa:cf:a4:ed:cb:87: 5a:84:66:9a:c5:83:77:2d:96:ec:4c:21:2c:9f:fd: d4:6d:8f:b4:79:4a:8d:f6:e1:67:f3:5b:a3:3a:01: 64:dc:d7:83:80:c6:e0:2f:6d:d6:66:d5:74:5f:3d: 0a:dc:45:2b:ab:86:f2:a7:1e:09:e1:8c:1b:fe:f0: 84:bc:2f:eb:c8:dc:c4:6d:7e:50:62:64:53:c8:0c: 41:65:25:5b:a9:da:b9:92:68:26:77:97:c3:7b:7c: d9:3b:55:92:0a:fa:22:a7:e9:2e:ee:c9:00:17:db: ad:82:37:65:07:16:3b:38:aa:ed:64:d3:d0:3f:66: 79:3f:c2:79:a6:2e:7e:97:6d:97:e5:e4:90:21:c0: 72:84:f2:8c:fb:8d:c5:41:c8:8b:99:4a:99:e5:e5: 07:6d:27:c7:44:d2:f4:4c:00:22:15:d1:52:1a:60: 01:0b:9d:3c:ec:b2:b7:9b:a4:19:2e:cf:65:8a:3f: 06:d1:41:28:5e:04:b3:ab:d3:68:46:e0:2b:86:31: 3e:95:79:bf:f1:c3:4a:99:de:23:d0:2b:ed:70:d1: 10:f2:01:2e:79:98:28:d8:41:c9:b8:23:c9:b8:ca: 35:c9:84:94:57:6f:92:a1:0a:51:cf:05:be:41:62: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9E:3D:C6:CD:B6:3D:B7:9D:E0:8E:B3:CA:54:63:FA:A6:DF:6D:86 X509v3 Authority Key Identifier: keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.116.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:9e:72:8e:2a:5c:f2:4e:eb:f3:2a:1f:61:9f:47:7f:ad:ac: 0f:4c:ce:d6:e4:cb:f3:7f:98:aa:3a:7d:90:7c:79:a0:26:54: 8a:4c:25:e2:61:95:bb:a2:6f:c3:c3:d3:2b:72:76:c8:8a:83: 76:65:fe:b1:b0:09:b9:2c:e0:87:51:fd:4e:ca:87:ac:ed:53: f9:cf:74:10:94:c2:f8:ad:7d:4b:af:ab:1e:be:00:a8:ce:56: f9:89:3f:22:96:89:eb:7b:bf:20:2c:57:5a:4a:35:e1:dc:1e: 9a:f8:dc:d4:4f:f9:cc:6e:bf:b6:73:f6:50:f6:39:cc:e0:d7: ca:4b:32:7e:f7:2c:7d:36:6f:8a:8e:ee:91:69:0c:ac:57:e2: 9d:f9:f0:0e:e3:c1:ad:09:a5:5a:b8:a6:92:b0:c5:93:35:a8: e1:b2:c5:f7:6b:b4:ee:84:58:77:40:46:f0:22:65:d2:91:7e: 0b:35:35:23:e9:bc:e4:6d:e0:c9:d6:35:e5:93:d4:7b:4f:87: 62:db:d4:ba:34:e5:e2:30:6d:48:65:d7:95:77:4a:e4:f3:e3: 69:69:cf:a5:0c:d2:be:e1:0f:bf:48:8e:aa:d1:f3:06:6f:93: cb:e3:cd:76:04:0a:6d:f6:e1:25:ea:fc:cc:63:75:7c:5f:be: 73:00:e6:b0 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUfS8nRArQ8v1Ux15to3oZAspXY0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI1MDExNTAyMDUxM1oX DTI2MDExNDAyMTAxM1owMzExMC8GA1UEAxMoMjY5RTNEQzZDREI2M0RCNzlERTA4 RUIzQ0E1NDYzRkFBNkRGNkQ4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpM/0ItwBXyqs+k7cuHWoRmmsWDdy2W7EwhLJ/91G2PtHlKjfbhZ/NbozoB ZNzXg4DG4C9t1mbVdF89CtxFK6uG8qceCeGMG/7whLwv68jcxG1+UGJkU8gMQWUl W6nauZJoJneXw3t82TtVkgr6IqfpLu7JABfbrYI3ZQcWOziq7WTT0D9meT/CeaYu fpdtl+XkkCHAcoTyjPuNxUHIi5lKmeXlB20nx0TS9EwAIhXRUhpgAQudPOyyt5uk GS7PZYo/BtFBKF4Es6vTaEbgK4YxPpV5v/HDSpneI9Ar7XDREPIBLnmYKNhBybgj ybjKNcmElFdvkqEKUc8FvkFi5gUCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQmnj3G zbY9t53gjrPKVGP6pt9thjAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT 4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh VjhkcGNCRVlPc18tQkdFLUEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzAvMzEzMDMzMmUzMTM2MzAyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzQy MDNkM2UyMDM5MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6B0MA0GCSqGSIb3DQEBCwUAA4IB AQCKnnKOKlzyTuvzKh9hn0d/rawPTM7W5Mvzf5iqOn2QfHmgJlSKTCXiYZW7om/D w9MrcnbIioN2Zf6xsAm5LOCHUf1Oyoes7VP5z3QQlML4rX1Lr6sevgCozlb5iT8i lonre78gLFdaSjXh3B6a+NzUT/nMbr+2c/ZQ9jnM4NfKSzJ+9yx9Nm+Kju6RaQys V+Kd+fAO48GtCaVauKaSsMWTNajhssX3a7TuhFh3QEbwImXSkX4LNTUj6bzkbeDJ 1jXlk9R7T4di29S6NOXiMG1IZdeVd0rk8+Npac+lDNK+4Q+/SI6q0fMGb5PL4812 BApt9uEl6vzMY3V8X75zAOaw -----END CERTIFICATE-----Generated at Fri Jul 4 02:58:06 2025 by rpki-client