$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa File: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (raw, json) Hash identifier: gjG1OZMW5faujAfknl/AsEqIEMo1X4J8rMD0eZTWBDg= Subject key identifier: 79:24:FD:7E:C7:B7:F4:F8:50:F0:42:57:DB:FB:54:D3:56:BB:13:6E Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 66E4497C2F6CAB575FCC5964B83E994F659B3109 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa Signing time: Mon 19 May 2025 06:50:51 +0000 ROA not before: Mon 19 May 2025 06:45:51 +0000 ROA not after: Mon 18 May 2026 06:50:51 +0000 asID: 9913 IP address blocks: 103.233.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e4:49:7c:2f:6c:ab:57:5f:cc:59:64:b8:3e:99:4f:65:9b:31:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: May 19 06:45:51 2025 GMT Not After : May 18 06:50:51 2026 GMT Subject: CN=7924FD7EC7B7F4F850F04257DBFB54D356BB136E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:e6:0f:eb:b0:8e:60:95:8f:2e:c4:a8:b1: 50:76:6a:17:d1:b0:98:21:77:62:f7:40:3c:a0:45: 1f:d7:3f:6d:d8:7b:4f:3b:77:5e:f8:42:b7:f5:2b: 31:20:65:45:bf:c1:b2:20:fe:e9:56:aa:61:6c:b0: 8a:13:70:41:45:91:79:92:eb:ac:84:5d:1e:9b:23: 8d:c0:49:c7:3c:d1:12:82:1a:3b:5e:42:ea:95:36: 93:15:b9:60:b7:b2:a3:13:25:87:90:de:f0:ca:bd: 43:b8:70:6e:6e:2d:8e:ab:f5:88:62:4d:7f:5f:c9: 13:82:9b:34:38:d1:2e:7e:a9:4a:e3:33:71:f4:d0: cf:7a:47:3c:53:d7:04:01:30:a8:4c:eb:38:a2:25: 09:d0:da:59:f0:3f:9b:ff:eb:25:e8:8e:84:14:d2: 10:51:dc:32:17:b7:9a:1b:a5:b3:b0:cc:9e:5d:0e: 8b:40:54:ef:3a:58:79:09:c6:ba:65:a9:be:5b:6b: ac:22:75:15:35:93:ba:89:0c:7a:f2:d3:b2:d2:5a: 95:78:4b:a5:50:d1:50:74:91:39:b1:d1:2f:f7:30: d8:ef:7d:57:b0:79:a5:fa:ab:4c:ca:40:4a:6a:63: bd:2f:1f:00:f3:c3:88:2d:42:f5:cd:2d:a7:06:c2: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:24:FD:7E:C7:B7:F4:F8:50:F0:42:57:DB:FB:54:D3:56:BB:13:6E X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.233.208.0/22 Signature Algorithm: sha256WithRSAEncryption 67:4e:06:4f:8f:4e:4b:36:c3:2a:08:bc:4b:87:d6:86:a0:20: d9:ae:c9:56:d6:b6:b4:86:8a:be:fb:93:6d:5d:12:97:d1:55: ed:a8:9a:e1:7f:fa:86:cb:48:4b:c2:c3:a1:af:7e:81:fb:14: 99:9c:78:36:99:06:f2:39:0e:2a:92:31:c6:e0:df:16:fb:08: 87:5f:b5:0c:a3:99:7c:5d:03:7b:71:58:5b:97:cd:2a:5d:03: 29:d6:0e:fe:19:10:72:7c:b9:24:dd:6c:fb:77:f9:e8:aa:3d: a1:5f:c5:90:31:e3:9b:a1:72:ad:25:ce:c0:f5:8b:17:5c:9a: 15:7f:02:55:df:ba:64:5e:44:28:77:a9:be:aa:cc:83:67:d7: 0c:1a:24:b8:dd:6c:dd:04:b1:cd:2d:c2:79:19:31:62:23:54: 9d:61:5f:e3:e1:be:02:86:52:28:a1:2f:94:fd:23:0c:bb:a7: 3b:b8:3f:5c:2c:3f:81:df:e4:42:e6:63:80:f8:b4:70:ca:f6: 63:fb:a1:82:70:96:c8:96:75:4a:d8:b7:97:1d:d5:a9:0d:e1: b3:de:9f:e7:b2:8c:ce:b5:d2:7d:10:06:27:92:52:6d:d7:8b: e7:84:19:e0:6b:d9:66:5a:26:92:bb:b7:63:6a:d0:6b:00:c8: aa:74:ee:87 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUZuRJfC9sq1dfzFlkuD6ZT2WbMQkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI1MDUxOTA2NDU1MVoX DTI2MDUxODA2NTA1MVowMzExMC8GA1UEAxMoNzkyNEZEN0VDN0I3RjRGODUwRjA0 MjU3REJGQjU0RDM1NkJCMTM2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3A5g/rsI5glY8uxKixUHZqF9GwmCF3YvdAPKBFH9c/bdh7Tzt3XvhCt/Ur MSBlRb/BsiD+6VaqYWywihNwQUWReZLrrIRdHpsjjcBJxzzREoIaO15C6pU2kxW5 YLeyoxMlh5De8Mq9Q7hwbm4tjqv1iGJNf1/JE4KbNDjRLn6pSuMzcfTQz3pHPFPX BAEwqEzrOKIlCdDaWfA/m//rJeiOhBTSEFHcMhe3mhuls7DMnl0Oi0BU7zpYeQnG umWpvltrrCJ1FTWTuokMevLTstJalXhLpVDRUHSRObHRL/cw2O99V7B5pfqrTMpA SmpjvS8fAPPDiC1C9c0tpwbCIDMCAwEAAaOCAhEwggINMB0GA1UdDgQWBBR5JP1+ x7f0+FDwQlfb+1TTVrsTbjAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzkvMzEzMDMzMmUzMjMzMzMyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQy MDNkM2UyMDM5MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+nQMA0GCSqGSIb3DQEBCwUAA4IB AQBnTgZPj05LNsMqCLxLh9aGoCDZrslW1ra0hoq++5NtXRKX0VXtqJrhf/qGy0hL wsOhr36B+xSZnHg2mQbyOQ4qkjHG4N8W+wiHX7UMo5l8XQN7cVhbl80qXQMp1g7+ GRByfLkk3Wz7d/noqj2hX8WQMeOboXKtJc7A9YsXXJoVfwJV37pkXkQod6m+qsyD Z9cMGiS43WzdBLHNLcJ5GTFiI1SdYV/j4b4ChlIooS+U/SMMu6c7uD9cLD+B3+RC 5mOA+LRwyvZj+6GCcJbIlnVK2LeXHdWpDeGz3p/nsozOtdJ9EAYnklJt14vnhBng a9lmWiaSu7djatBrAMiqdO6H -----END CERTIFICATE-----Generated at Tue Oct 21 00:10:57 2025 by rpki-client