$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137302e302f32332d3234203d3e2039343439.roa File: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (raw, json) Hash identifier: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw= Subject key identifier: 0D:A9:06:CD:B9:E1:8E:FC:BA:C5:0A:E4:0B:4C:0B:8C:85:3A:EA:D2 Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Certificate serial: 0399C17FAF69CB95335B1B65D1313A3C6516FF01 Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137302e302f32332d3234203d3e2039343439.roa Signing time: Tue 04 Mar 2025 01:16:03 +0000 ROA not before: Tue 04 Mar 2025 01:11:03 +0000 ROA not after: Tue 03 Mar 2026 01:16:03 +0000 asID: 9449 IP address blocks: 203.4.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 03:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:99:c1:7f:af:69:cb:95:33:5b:1b:65:d1:31:3a:3c:65:16:ff:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Validity Not Before: Mar 4 01:11:03 2025 GMT Not After : Mar 3 01:16:03 2026 GMT Subject: CN=0DA906CDB9E18EFCBAC50AE40B4C0B8C853AEAD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:08:4a:64:12:94:25:fe:b1:54:b4:75:bf: 81:69:aa:ee:80:15:44:ab:62:3f:29:7d:12:66:fb: 48:46:a9:09:93:1a:1d:24:25:b1:4f:52:d0:3b:9e: 2d:0b:ba:aa:f9:7e:06:67:1f:c2:2e:e6:bb:7c:87: 16:4e:a5:5b:48:4f:12:62:f7:16:dd:d4:d0:f6:7e: 3f:a3:93:7b:05:18:e2:63:68:a5:04:fe:19:b2:34: a0:ee:32:8e:62:f1:98:5e:2c:9d:2d:3d:ab:d7:a5: 69:9e:27:7b:e0:c5:67:f9:99:13:73:e4:06:86:90: 1b:38:cd:19:12:99:26:95:8a:ea:21:dd:0d:44:3e: 0a:b2:2e:7a:43:cd:4e:aa:6d:8d:3d:f5:86:1d:5e: 53:3c:c1:21:a3:be:c0:cb:01:0e:7c:14:4d:96:d7: 3e:06:98:a6:40:a8:c4:20:b9:a0:5d:06:c3:4e:cc: 56:ff:4b:07:dd:65:df:e7:e2:18:af:2c:48:a9:f8: c4:be:06:ca:d2:fb:ba:89:b7:53:90:b8:a0:59:ed: 99:fe:31:ec:63:b2:35:a7:51:eb:48:b2:99:55:fb: 3b:e1:88:da:1b:35:c9:ed:c2:87:59:1e:7f:7b:cf: 72:23:70:53:ee:21:5b:c5:f7:98:90:c8:61:1c:04: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A9:06:CD:B9:E1:8E:FC:BA:C5:0A:E4:0B:4C:0B:8C:85:3A:EA:D2 X509v3 Authority Key Identifier: keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137302e302f32332d3234203d3e2039343439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.4.170.0/23 Signature Algorithm: sha256WithRSAEncryption e0:56:59:96:1a:24:80:4a:7f:a7:2b:9a:d3:f5:f1:2c:97:4c: e0:26:ff:f1:5c:82:b2:27:7a:ee:89:02:76:e7:c7:3c:0f:e7: 6a:8a:66:92:2f:31:18:26:f4:bc:d5:83:c1:a1:78:9d:6c:56: 17:18:4b:cb:80:9b:87:fb:2a:3b:48:b8:d6:a9:cf:65:6c:3b: 67:10:c8:50:86:71:88:97:c6:30:79:bf:c4:a1:67:36:fe:a2: 6f:c9:38:71:45:1c:ed:00:2b:2b:d7:75:b1:de:fc:a2:0a:f7: 5d:48:3a:5f:f8:19:10:f8:19:c5:c7:a6:e5:f3:78:36:65:0c: 12:82:72:39:1a:55:38:b4:9b:9f:c5:f0:8a:56:97:54:1c:c2: 35:c0:3c:c4:fb:25:71:04:12:16:05:c9:76:91:89:7c:c2:53: 2f:a8:80:ff:6e:fd:2a:b4:62:60:cd:01:55:d4:75:52:2b:38: 50:57:ac:d6:52:a2:6d:96:d3:64:46:57:79:ef:8e:ea:20:9f: 5d:c1:65:ff:7a:df:ba:b7:5e:0b:1e:d0:d4:0e:8f:5d:9b:b7: b2:12:9a:68:e0:1b:5b:d7:28:78:0e:bd:b1:79:c7:a9:88:99: e6:94:e8:af:c8:12:1c:c4:23:30:d2:09:03:6c:00:9f:4d:9b: 89:97:48:1e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUA5nBf69py5UzWxtl0TE6PGUW/wEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3 RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI1MDMwNDAxMTEwM1oX DTI2MDMwMzAxMTYwM1owMzExMC8GA1UEAxMoMERBOTA2Q0RCOUUxOEVGQ0JBQzUw QUU0MEI0QzBCOEM4NTNBRUFEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcTCEpkEpQl/rFUtHW/gWmq7oAVRKtiPyl9Emb7SEapCZMaHSQlsU9S0Due LQu6qvl+Bmcfwi7mu3yHFk6lW0hPEmL3Ft3U0PZ+P6OTewUY4mNopQT+GbI0oO4y jmLxmF4snS09q9elaZ4ne+DFZ/mZE3PkBoaQGzjNGRKZJpWK6iHdDUQ+CrIuekPN TqptjT31hh1eUzzBIaO+wMsBDnwUTZbXPgaYpkCoxCC5oF0Gw07MVv9LB91l3+fi GK8sSKn4xL4GytL7uom3U5C4oFntmf4x7GOyNadR60iymVX7O+GI2hs1ye3Ch1ke f3vPciNwU+4hW8X3mJDIYRwEaOMCAwEAAaOCAg0wggIJMB0GA1UdDgQWBBQNqQbN ueGO/LrFCuQLTAuMhTrq0jAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5 OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5 VUo0OUtYQjhYNFcxOXIyMjguY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzMvMzIzMDMzMmUzNDJlMzEzNzMwMmUzMDJmMzIzMzJkMzIzNDIwM2Qz ZTIwMzkzNDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB BQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLBKowDQYJKoZIhvcNAQELBQADggEBAOBW WZYaJIBKf6crmtP18SyXTOAm//FcgrIneu6JAnbnxzwP52qKZpIvMRgm9LzVg8Gh eJ1sVhcYS8uAm4f7KjtIuNapz2VsO2cQyFCGcYiXxjB5v8ShZzb+om/JOHFFHO0A KyvXdbHe/KIK911IOl/4GRD4GcXHpuXzeDZlDBKCcjkaVTi0m5/F8IpWl1QcwjXA PMT7JXEEEhYFyXaRiXzCUy+ogP9u/Sq0YmDNAVXUdVIrOFBXrNZSom2W02RGV3nv juogn13BZf9637q3Xgse0NQOj12bt7ISmmjgG1vXKHgOvbF5x6mImeaU6K/IEhzE IzDSCQNsAJ9Nm4mXSB4= -----END CERTIFICATE-----Generated at Fri Jul 4 00:34:51 2025 by rpki-client