$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa File: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (raw, json) Hash identifier: h2bSnnI9a+kGlKn3GxEShW8TmFpFzCWMgYRzWIvLc4c= Subject key identifier: 87:FC:BF:4B:34:AF:9C:FB:C2:F4:B7:1E:9D:79:81:67:E6:E8:56:A5 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 7E3575B5286ABEE810479AC19373556064DC13DD Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa Signing time: Tue 21 Jan 2025 00:10:15 +0000 ROA not before: Tue 21 Jan 2025 00:05:15 +0000 ROA not after: Tue 20 Jan 2026 00:10:15 +0000 asID: 9888 IP address blocks: 103.184.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:35:75:b5:28:6a:be:e8:10:47:9a:c1:93:73:55:60:64:dc:13:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Jan 21 00:05:15 2025 GMT Not After : Jan 20 00:10:15 2026 GMT Subject: CN=87FCBF4B34AF9CFBC2F4B71E9D798167E6E856A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:20:87:33:75:28:ba:54:ab:76:12:2d:8b:03: 36:82:88:0b:ee:93:da:60:c4:27:c2:94:10:9a:1e: 64:6d:6a:25:7e:da:5c:7d:1f:05:6a:82:8d:fc:6a: ac:9c:25:79:c3:70:48:d0:52:00:b6:5b:e8:48:6b: e7:9f:d6:89:95:e1:58:b9:b1:74:cf:0d:b1:3f:78: 5a:16:95:5c:78:6a:29:6a:11:c8:c1:17:1a:87:e3: 9b:8a:7e:04:38:df:0b:8b:20:86:b5:41:af:e4:47: ae:be:1c:54:50:b4:98:fb:7b:4f:cd:f6:f9:f9:42: c8:e5:26:d6:d1:b6:48:ae:6f:14:6b:2f:86:27:55: 35:a5:bb:fa:e9:db:cc:68:30:61:c3:5d:f4:ce:74: 60:2a:eb:52:5b:1b:5e:09:9f:16:0b:fe:9c:54:9c: 21:92:93:36:81:cd:5e:52:83:2f:0b:a6:37:98:6f: 99:0d:69:02:11:a3:80:32:01:b7:4a:47:79:71:96: 0a:40:21:71:2d:ef:f1:6e:97:8a:11:e6:e3:56:8a: 49:4b:5f:75:30:80:0c:55:0d:0c:19:ee:3a:69:23: 41:67:4b:f2:ce:d7:24:47:db:57:68:62:af:3b:59: 85:88:3c:bf:3e:68:b3:19:68:c8:2d:6d:40:70:cd: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:BF:4B:34:AF:9C:FB:C2:F4:B7:1E:9D:79:81:67:E6:E8:56:A5 X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.174.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:4f:19:78:38:e5:d2:44:1c:64:82:1d:8f:97:db:1c:65:12: f3:f8:9c:a2:a5:2b:ed:49:6d:a8:6f:1b:49:c0:aa:cb:fb:e3: de:86:a1:91:f4:5c:55:d4:d1:34:2d:ad:9e:a9:7e:e1:80:e7: 4a:51:5a:2e:a4:f0:a5:08:b7:c9:c8:73:bf:8b:1e:5f:b5:f9: b2:6c:9f:3e:61:8c:fa:48:41:5a:fb:b6:d0:73:15:0c:67:4c: f8:04:3c:60:33:d2:55:10:82:07:1f:e0:52:59:01:be:1f:11: 8b:82:22:e2:c2:a6:15:ac:57:01:44:68:66:10:5e:ee:83:51: 41:3f:c5:c5:e4:ab:e5:75:f3:c4:ea:48:59:57:99:34:00:4b: e1:fe:f5:f5:dd:b3:6e:a2:f8:56:c3:22:f6:fc:77:0d:28:ac: 7f:d5:b2:af:87:bd:42:53:d4:60:56:3e:ed:f2:95:85:9a:13: c0:44:a9:83:82:2a:a6:0d:b8:d1:ff:89:c0:b5:aa:92:1f:ce: af:4b:03:ab:b6:95:db:c7:28:c0:01:aa:d9:43:6b:2f:2d:8a: f6:94:f9:ea:5e:6d:36:48:14:0d:b5:7a:eb:34:41:8e:a0:8f: d6:4b:07:dc:bd:eb:22:6a:07:c6:1d:0a:8e:e6:60:49:d1:e3: 78:94:26:7a -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUfjV1tShqvugQR5rBk3NVYGTcE90wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI1MDEyMTAwMDUxNVoX DTI2MDEyMDAwMTAxNVowMzExMC8GA1UEAxMoODdGQ0JGNEIzNEFGOUNGQkMyRjRC NzFFOUQ3OTgxNjdFNkU4NTZBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOYghzN1KLpUq3YSLYsDNoKIC+6T2mDEJ8KUEJoeZG1qJX7aXH0fBWqCjfxq rJwlecNwSNBSALZb6Ehr55/WiZXhWLmxdM8NsT94WhaVXHhqKWoRyMEXGofjm4p+ BDjfC4sghrVBr+RHrr4cVFC0mPt7T832+flCyOUm1tG2SK5vFGsvhidVNaW7+unb zGgwYcNd9M50YCrrUlsbXgmfFgv+nFScIZKTNoHNXlKDLwumN5hvmQ1pAhGjgDIB t0pHeXGWCkAhcS3v8W6XihHm41aKSUtfdTCADFUNDBnuOmkjQWdL8s7XJEfbV2hi rztZhYg8vz5osxloyC1tQHDN28UCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSH/L9L NK+c+8L0tx6deYFn5uhWpTAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzcvMzEzMDMzMmUzMTM4MzQyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzQy MDNkM2UyMDM5MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7iuMA0GCSqGSIb3DQEBCwUAA4IB AQBbTxl4OOXSRBxkgh2Pl9scZRLz+JyipSvtSW2obxtJwKrL++PehqGR9FxV1NE0 La2eqX7hgOdKUVoupPClCLfJyHO/ix5ftfmybJ8+YYz6SEFa+7bQcxUMZ0z4BDxg M9JVEIIHH+BSWQG+HxGLgiLiwqYVrFcBRGhmEF7ug1FBP8XF5KvldfPE6khZV5k0 AEvh/vX13bNuovhWwyL2/HcNKKx/1bKvh71CU9RgVj7t8pWFmhPARKmDgiqmDbjR /4nAtaqSH86vSwOrtpXbxyjAAarZQ2svLYr2lPnqXm02SBQNtXrrNEGOoI/WSwfc vesiagfGHQqO5mBJ0eN4lCZ6 -----END CERTIFICATE-----Generated at Tue Oct 21 01:25:10 2025 by rpki-client