$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3136392e302f32342d3234203d3e203337393930.roa File: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (raw, json) Hash identifier: flJTPZ46b4mt9qzWDdfIDdppJpcYKfDqIn9TjegEbok= Subject key identifier: A6:54:3B:35:6D:DA:33:C5:92:54:1B:64:8F:78:87:76:67:39:C0:65 Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Certificate serial: 5DAE41D89031169527877B2E8BDA4A3FD794DA69 Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3136392e302f32342d3234203d3e203337393930.roa Signing time: Fri 24 Apr 2026 03:27:14 +0000 ROA not before: Fri 24 Apr 2026 03:22:14 +0000 ROA not after: Fri 23 Apr 2027 03:27:14 +0000 asID: 37990 IP address blocks: 203.4.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ae:41:d8:90:31:16:95:27:87:7b:2e:8b:da:4a:3f:d7:94:da:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Validity Not Before: Apr 24 03:22:14 2026 GMT Not After : Apr 23 03:27:14 2027 GMT Subject: CN=A6543B356DDA33C592541B648F7887766739C065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:13:53:8c:00:10:56:56:53:83:3a:d2:77: 92:28:51:03:e4:d9:21:3c:56:fc:ac:de:e8:e0:81: ed:02:ff:07:28:2a:16:0a:18:86:e9:37:db:8e:0a: 1a:de:33:ea:27:e6:3e:8a:06:ac:c3:f1:27:84:7b: 1e:64:ce:03:c8:18:df:5c:07:56:a6:3b:c0:9b:67: 41:0c:ee:c4:ca:fa:f2:bc:c7:b1:85:72:45:94:cd: 61:ec:15:6e:dd:f9:0c:db:30:71:a0:40:d6:48:86: 48:30:08:36:ec:a3:a8:fb:d4:8c:1a:c4:7a:90:78: 37:7d:b3:70:ba:4d:37:e3:15:3c:bf:48:f4:09:c6: 73:78:0b:2e:19:2c:14:7a:fe:d2:ce:fa:fc:ea:02: 5e:4a:3f:de:5a:b6:e4:19:d8:09:da:56:f0:d1:58: 4b:06:19:a5:d7:09:04:aa:5f:60:08:c0:c9:1e:ac: e7:02:1a:9c:b7:c5:c1:4a:a5:26:c1:1a:93:d3:39: bf:f0:7a:61:91:ce:b1:49:98:28:0d:13:d0:94:ee: 9b:e1:a9:2b:3b:4d:79:56:84:62:55:a3:68:68:24: 09:7f:77:99:7d:59:63:9f:df:4d:a3:8f:4c:97:17: ff:d2:fa:ad:4d:a3:cb:a9:4d:15:53:3c:58:1a:15: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:54:3B:35:6D:DA:33:C5:92:54:1B:64:8F:78:87:76:67:39:C0:65 X509v3 Authority Key Identifier: keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3136392e302f32342d3234203d3e203337393930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.4.169.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:c2:e2:57:07:fb:be:bd:b0:e5:8d:b0:f3:ab:4e:da:50:e2: 69:dd:42:f5:04:a4:e1:a6:8e:47:83:d6:10:1b:6a:55:3f:d6: 09:86:1b:62:dd:2b:c4:89:89:7e:5a:12:7a:7d:40:ff:24:2b: 5c:fb:b2:8a:bc:44:d7:d4:25:44:80:91:e8:b8:c3:9f:d0:34: e5:b6:bb:03:b5:03:d6:68:dd:ba:5d:3b:73:2b:c4:d9:b2:4b: d3:2a:74:d6:82:b3:6a:f0:28:8e:4d:a8:18:6d:88:33:d6:e9: 19:7f:ce:da:1c:55:5f:de:b2:50:61:71:9f:77:50:13:bc:89: 7f:19:17:d0:3e:33:41:41:86:8a:43:2d:07:29:33:61:28:f6: 0b:94:6d:3f:fe:c5:fe:e3:95:80:84:bf:1e:19:75:2d:12:11: 83:49:b8:30:bc:f7:d9:77:e4:48:2b:e2:76:6b:5c:18:c5:a3: 7b:f4:f3:d9:dd:26:45:4c:3b:2d:5c:bf:03:f6:04:e8:82:d1: e8:1b:84:f6:50:39:fd:9c:a7:21:26:3a:00:c9:fd:75:33:f5: d4:83:e7:30:62:2e:83:0c:cf:12:5f:85:b3:50:65:73:e3:99: ce:6b:a6:ec:5e:1b:66:10:cd:d7:c7:fd:91:aa:6d:51:8b:a1: 77:af:95:7a -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUXa5B2JAxFpUnh3sui9pKP9eU2mkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3 RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI2MDQyNDAzMjIxNFoX DTI3MDQyMzAzMjcxNFowMzExMC8GA1UEAxMoQTY1NDNCMzU2RERBMzNDNTkyNTQx QjY0OEY3ODg3NzY2NzM5QzA2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmxE1OMABBWVlODOtJ3kihRA+TZITxW/Kze6OCB7QL/BygqFgoYhuk3244K Gt4z6ifmPooGrMPxJ4R7HmTOA8gY31wHVqY7wJtnQQzuxMr68rzHsYVyRZTNYewV bt35DNswcaBA1kiGSDAINuyjqPvUjBrEepB4N32zcLpNN+MVPL9I9AnGc3gLLhks FHr+0s76/OoCXko/3lq25BnYCdpW8NFYSwYZpdcJBKpfYAjAyR6s5wIanLfFwUql JsEak9M5v/B6YZHOsUmYKA0T0JTum+GpKztNeVaEYlWjaGgkCX93mX1ZY5/fTaOP TJcX/9L6rU2jy6lNFVM8WBoV66MCAwEAAaOCAg8wggILMB0GA1UdDgQWBBSmVDs1 bdozxZJUG2SPeId2ZznAZTAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5 OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5 VUo0OUtYQjhYNFcxOXIyMjguY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzMvMzIzMDMzMmUzNDJlMzEzNjM5MmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzMzNzM5MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMsEqTANBgkqhkiG9w0BAQsFAAOCAQEA ncLiVwf7vr2w5Y2w86tO2lDiad1C9QSk4aaOR4PWEBtqVT/WCYYbYt0rxImJfloS en1A/yQrXPuyirxE19QlRICR6LjDn9A05ba7A7UD1mjdul07cyvE2bJL0yp01oKz avAojk2oGG2IM9bpGX/O2hxVX96yUGFxn3dQE7yJfxkX0D4zQUGGikMtBykzYSj2 C5RtP/7F/uOVgIS/Hhl1LRIRg0m4MLz32XfkSCvidmtcGMWje/Tz2d0mRUw7LVy/ A/YE6ILR6BuE9lA5/ZynISY6AMn9dTP11IPnMGIugwzPEl+Fs1Blc+OZzmum7F4b ZhDN18f9kaptUYuhd6+Veg== -----END CERTIFICATE-----Generated at Wed May 13 09:08:14 2026 by rpki-client