$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3230332e312e36392e302f32342d3234203d3e2039393133.roa File: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (raw, json) Hash identifier: dO5yl6c5PpbhT8VJ6Gr4SbudCYxk8yUDmtlBjVa4pe8= Subject key identifier: FD:06:4D:3D:07:76:7C:1C:8C:77:8D:D2:2D:11:FD:4A:A8:42:EF:27 Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 61970DDA6C1B6E2369939BAF542D077F0A378E90 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e312e36392e302f32342d3234203d3e2039393133.roa Signing time: Mon 20 Apr 2026 07:27:12 +0000 ROA not before: Mon 20 Apr 2026 07:22:12 +0000 ROA not after: Mon 19 Apr 2027 07:27:12 +0000 asID: 9913 IP address blocks: 203.1.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:97:0d:da:6c:1b:6e:23:69:93:9b:af:54:2d:07:7f:0a:37:8e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Apr 20 07:22:12 2026 GMT Not After : Apr 19 07:27:12 2027 GMT Subject: CN=FD064D3D07767C1C8C778DD22D11FD4AA842EF27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:c6:f9:a5:b5:14:76:c2:df:3c:b3:ab:06: e8:b0:8a:0e:6b:4b:f9:8e:de:7f:30:04:6d:08:ac: af:26:12:bc:24:1b:c9:4f:c8:02:5e:97:94:f6:5b: cc:e7:bf:8f:c0:35:a3:68:60:3f:af:39:41:94:54: 5f:07:92:20:9b:13:e7:6b:92:c5:a2:8f:7e:54:d3: 0e:ff:c3:31:d0:04:5b:af:fc:3f:8b:f7:95:45:1c: d3:0c:76:a2:b3:73:f4:f9:9a:d9:20:f1:b5:ec:b7: 1b:36:65:3f:dd:7d:24:39:4b:22:a0:1d:63:28:ed: c6:a4:1b:43:9f:dc:c7:a7:eb:63:c7:c7:9f:38:f2: c8:ad:1b:97:8a:b6:8a:90:e8:9e:1f:02:55:76:60: b8:a6:ba:ff:b2:59:43:bf:c3:97:26:90:b9:08:98: 6a:be:b4:08:d7:90:42:f7:09:4f:c2:83:22:33:13: 6c:2b:7c:56:2b:11:01:89:9f:01:6c:04:52:65:d8: c9:01:33:98:a2:75:9d:07:59:4d:92:d9:a5:28:f3: 6b:a3:c5:b8:14:93:e5:b5:ea:bc:8c:00:56:b5:e2: a5:ed:cc:2e:d0:77:69:c5:7b:0a:c0:d9:d7:73:ec: 8b:a5:75:26:0c:18:ea:91:d3:d2:9d:7b:92:d3:f8: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:06:4D:3D:07:76:7C:1C:8C:77:8D:D2:2D:11:FD:4A:A8:42:EF:27 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e312e36392e302f32342d3234203d3e2039393133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.1.69.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:f1:23:8f:db:38:8f:bd:1d:dc:c6:f3:f0:f0:90:6e:04:2c: 9b:48:ee:4d:f2:f1:d5:4c:c6:ae:48:21:a8:66:cc:82:32:6e: 85:87:03:dc:e5:a3:8f:66:72:10:6b:2f:0e:8f:47:62:92:6e: cd:1c:b1:d5:a0:7c:20:f7:da:e7:23:43:bc:3b:ca:3d:10:f7: 37:72:44:83:1c:54:c6:59:74:f0:c1:c2:6d:8d:2f:24:bd:74: ff:0a:48:9e:6a:61:31:1d:c6:cc:4b:c2:21:f9:b5:71:29:78: 8e:d5:84:71:14:3a:88:81:7e:cf:54:1f:3b:ad:e5:da:1e:cf: 99:35:6e:6d:ec:5f:5c:29:07:f3:24:51:36:67:38:24:a6:c6: 38:6e:62:45:e5:c9:6e:05:ec:aa:83:23:4a:e0:6f:32:0c:97: 1c:0a:05:54:cb:f1:6b:d2:c3:ec:e1:d2:af:51:73:a0:2d:1a: 09:17:7d:34:9f:71:0d:43:92:df:22:4e:2e:32:0f:e5:54:f9: e1:f5:c0:80:e0:26:2a:bd:cf:1a:38:ab:be:36:59:4c:66:1e: 68:0c:6b:23:05:5e:05:a0:02:c9:09:43:36:8f:e3:5f:8d:ce: 23:94:ce:d3:19:a4:b2:94:04:7d:bc:ba:a7:71:44:5d:9b:64: c0:e4:8e:37 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUYZcN2mwbbiNpk5uvVC0Hfwo3jpAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDQyMDA3MjIxMloX DTI3MDQxOTA3MjcxMlowMzExMC8GA1UEAxMoRkQwNjREM0QwNzc2N0MxQzhDNzc4 REQyMkQxMUZENEFBODQyRUYyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ66xvmltRR2wt88s6sG6LCKDmtL+Y7efzAEbQisryYSvCQbyU/IAl6XlPZb zOe/j8A1o2hgP685QZRUXweSIJsT52uSxaKPflTTDv/DMdAEW6/8P4v3lUUc0wx2 orNz9Pma2SDxtey3GzZlP919JDlLIqAdYyjtxqQbQ5/cx6frY8fHnzjyyK0bl4q2 ipDonh8CVXZguKa6/7JZQ7/DlyaQuQiYar60CNeQQvcJT8KDIjMTbCt8VisRAYmf AWwEUmXYyQEzmKJ1nQdZTZLZpSjza6PFuBST5bXqvIwAVrXipe3MLtB3acV7CsDZ 13Psi6V1JgwY6pHT0p17ktP4ab0CAwEAAaOCAgswggIHMB0GA1UdDgQWBBT9Bk09 B3Z8HIx3jdItEf1KqELvJzAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUH MAuGaXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzkvMzIzMDMzMmUzMTJlMzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy MDM5MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAywFFMA0GCSqGSIb3DQEBCwUAA4IBAQBv8SOP 2ziPvR3cxvPw8JBuBCybSO5N8vHVTMauSCGoZsyCMm6FhwPc5aOPZnIQay8Oj0di km7NHLHVoHwg99rnI0O8O8o9EPc3ckSDHFTGWXTwwcJtjS8kvXT/CkieamExHcbM S8Ih+bVxKXiO1YRxFDqIgX7PVB87reXaHs+ZNW5t7F9cKQfzJFE2ZzgkpsY4bmJF 5cluBeyqgyNK4G8yDJccCgVUy/Fr0sPs4dKvUXOgLRoJF300n3ENQ5LfIk4uMg/l VPnh9cCA4CYqvc8aOKu+NllMZh5oDGsjBV4FoALJCUM2j+Nfjc4jlM7TGaSylAR9 vLqncURdm2TA5I43 -----END CERTIFICATE-----Generated at Wed May 13 03:35:54 2026 by rpki-client