$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3132322e39392e3132302e302f32322d3234203d3e2037353436.roa File: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (raw, json) Hash identifier: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE= Subject key identifier: DF:A9:37:6E:A1:64:F7:A3:63:19:F3:51:95:15:D4:7B:56:3F:5F:9D Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Certificate serial: 76E18B0AA4228F9B5AC7538698EDBC5395557687 Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3132322e39392e3132302e302f32322d3234203d3e2037353436.roa Signing time: Sun 05 Oct 2025 05:27:57 +0000 ROA not before: Sun 05 Oct 2025 05:22:57 +0000 ROA not after: Sun 04 Oct 2026 05:27:57 +0000 asID: 7546 IP address blocks: 122.99.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 07:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e1:8b:0a:a4:22:8f:9b:5a:c7:53:86:98:ed:bc:53:95:55:76:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4 Validity Not Before: Oct 5 05:22:57 2025 GMT Not After : Oct 4 05:27:57 2026 GMT Subject: CN=DFA9376EA164F7A36319F3519515D47B563F5F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:11:80:43:bc:ee:48:7e:45:ff:1f:11:4c: 2a:d9:f6:a7:19:5f:97:f1:df:e6:fa:6a:63:3c:70: 3a:8c:85:62:b3:96:c6:76:f0:ab:43:49:bb:18:3c: 74:bc:c2:84:de:75:bf:ad:81:25:bd:fb:61:b2:d7: 4e:e1:7d:52:43:e1:0e:36:69:2e:97:d5:ba:50:12: 1e:74:8f:d3:f3:5f:4c:56:b9:c9:8a:f4:73:ee:c7: 8c:29:26:d1:42:d6:90:65:87:0d:e0:d5:93:e2:58: fd:32:5a:b5:5e:88:2f:1a:aa:ba:bd:bc:87:05:60: f6:4f:38:d2:dc:29:11:4d:f3:26:be:45:b7:c8:7d: 2c:e9:65:b8:65:20:8d:64:2e:a2:cc:08:12:66:b5: 8c:7b:91:f8:01:4f:14:e9:58:01:17:a3:9c:e8:d3: c9:a6:94:96:39:00:11:95:c5:97:6a:38:c6:0b:65: e1:f9:12:16:8f:95:90:09:b7:fb:20:39:cb:0f:0e: c7:eb:f9:b1:9a:4a:c9:e7:bd:87:2d:3f:1a:29:a1: 4c:4f:6c:8b:a4:f9:81:78:fe:81:bb:99:28:36:72: 60:15:ba:a9:84:06:d8:86:d2:22:65:44:a4:1d:b6: 79:fe:09:c9:ed:e7:d2:ee:ae:2d:1d:02:a9:49:97: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A9:37:6E:A1:64:F7:A3:63:19:F3:51:95:15:D4:7B:56:3F:5F:9D X509v3 Authority Key Identifier: keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3132322e39392e3132302e302f32322d3234203d3e2037353436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.99.120.0/22 Signature Algorithm: sha256WithRSAEncryption 24:04:57:1f:a2:e1:18:2f:cd:31:09:05:02:76:ef:37:69:cc: b0:56:c9:1f:25:fd:4e:0a:b5:39:e7:0f:05:38:83:c3:da:ae: 3d:3b:0f:46:6f:de:cd:43:a0:1b:d0:f3:46:26:62:13:b8:f0: e0:28:80:a3:5d:29:b7:65:bd:03:1f:3e:15:bb:3c:db:82:4e: 3a:f0:ba:48:fe:9d:1a:ba:15:04:0c:c1:60:24:d1:f0:ae:21: 5c:6a:1e:87:ec:50:63:cd:77:9c:39:9a:bf:7c:68:26:ca:5b: 10:af:7e:eb:dc:b4:d2:bc:94:dd:31:5a:ca:24:b9:25:0b:07: 51:4d:ad:c9:58:69:54:0f:c4:5b:b1:67:32:e8:cc:f0:28:8d: 46:fc:25:5a:f1:7d:f6:e1:fe:3b:5b:c6:b1:1c:bf:f4:5c:cd: 53:34:f0:9d:3f:a3:f6:55:43:94:b7:b3:14:4e:96:ea:04:1c: ee:44:51:22:12:bf:e3:f8:db:28:c6:16:e7:3c:a7:ea:f3:13: c4:6c:52:71:a1:74:8e:40:d1:e8:d2:38:30:22:09:b4:1f:a3: 76:65:14:5d:d5:69:29:a0:59:c4:d1:c9:04:17:25:d0:72:9d: d2:b4:56:59:fd:a6:69:33:f1:b6:f6:4e:c3:a8:3a:f6:fd:66: 89:17:61:78 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUduGLCqQij5tax1OGmO28U5VVdocwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI1MTAwNTA1MjI1N1oX DTI2MTAwNDA1Mjc1N1owMzExMC8GA1UEAxMoREZBOTM3NkVBMTY0RjdBMzYzMTlG MzUxOTUxNUQ0N0I1NjNGNUY5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrBEYBDvO5IfkX/HxFMKtn2pxlfl/Hf5vpqYzxwOoyFYrOWxnbwq0NJuxg8 dLzChN51v62BJb37YbLXTuF9UkPhDjZpLpfVulASHnSP0/NfTFa5yYr0c+7HjCkm 0ULWkGWHDeDVk+JY/TJatV6ILxqqur28hwVg9k840twpEU3zJr5Ft8h9LOlluGUg jWQuoswIEma1jHuR+AFPFOlYARejnOjTyaaUljkAEZXFl2o4xgtl4fkSFo+VkAm3 +yA5yw8Ox+v5sZpKyee9hy0/GimhTE9si6T5gXj+gbuZKDZyYBW6qYQG2IbSImVE pB22ef4Jye3n0u6uLR0CqUmXwU8CAwEAAaOCAg8wggILMB0GA1UdDgQWBBTfqTdu oWT3o2MZ81GVFdR7Vj9fnTAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w M2psZkN5XzhudUVTbnpBTFEuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzQvMzEzMjMyMmUzOTM5MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAz ZDNlMjAzNzM1MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnpjeDANBgkqhkiG9w0BAQsFAAOCAQEA JARXH6LhGC/NMQkFAnbvN2nMsFbJHyX9Tgq1OecPBTiDw9quPTsPRm/ezUOgG9Dz RiZiE7jw4CiAo10pt2W9Ax8+Fbs824JOOvC6SP6dGroVBAzBYCTR8K4hXGoeh+xQ Y813nDmav3xoJspbEK9+69y00ryU3TFayiS5JQsHUU2tyVhpVA/EW7FnMujM8CiN RvwlWvF99uH+O1vGsRy/9FzNUzTwnT+j9lVDlLezFE6W6gQc7kRRIhK/4/jbKMYW 5zyn6vMTxGxScaF0jkDR6NI4MCIJtB+jdmUUXdVpKaBZxNHJBBcl0HKd0rRWWf2m aTPxtvZOw6g69v1miRdheA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:55:58 2025 by rpki-client