$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33362e302f32342d3234203d3e20323139303735.roa File: 3130332e3233322e33362e302f32342d3234203d3e20323139303735.roa (raw, json) Hash identifier: zhQ3WQUy0MKS1S2+xvlIpxnAAhLx9FxW+ogw028DgZ4= Subject key identifier: CD:FF:A7:BA:B5:FE:E1:D1:56:D3:34:BD:3E:B5:39:EF:FF:0A:4B:38 Certificate issuer: /CN=A91E4ACE0000/serialNumber=70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA Certificate serial: 58F956B46727E2E07E2453539B6521CCDAB2D59C Authority key identifier: 70:B6:AA:57:AC:DC:31:0E:B7:BA:17:00:D8:C3:6C:10:03:DE:D7:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33362e302f32342d3234203d3e20323139303735.roa Signing time: Sat 14 Nov 2026 08:12:27 +0000 ROA not before: Sat 14 Nov 2026 08:07:27 +0000 ROA not after: Sat 13 Nov 2027 08:12:27 +0000 asID: 219075 IP address blocks: 103.232.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 08:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f9:56:b4:67:27:e2:e0:7e:24:53:53:9b:65:21:cc:da:b2:d5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4ACE0000, serialNumber=70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA Validity Not Before: Nov 14 08:07:27 2026 GMT Not After : Nov 13 08:12:27 2027 GMT Subject: CN=CDFFA7BAB5FEE1D156D334BD3EB539EFFF0A4B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:a9:1b:6b:92:4d:b3:ae:1e:d4:97:27:71: b6:b5:10:7d:e4:ff:5f:ee:f4:53:64:cc:10:9b:3d: 92:fd:78:ba:fe:6c:65:62:d4:79:76:ff:31:fa:a2: 9b:6a:7f:f9:00:2c:21:38:58:15:7f:60:c4:b0:bd: 32:30:56:dd:99:a0:e9:09:2c:c2:9e:35:b8:3e:49: 9b:55:73:23:50:31:d0:08:4f:ec:9c:56:4c:0f:4a: cd:ae:e2:f8:35:eb:c1:87:b6:63:91:11:71:8c:fa: 94:47:6c:64:c8:91:27:59:f3:7b:12:b8:e6:e4:fd: 80:26:f6:e7:4f:5a:e7:f9:4a:24:e3:f7:3f:f6:d3: 11:cd:fd:00:75:53:94:65:90:1e:e6:28:f4:c3:42: 92:41:ed:9a:c1:60:49:ae:43:dd:32:bf:62:58:77: 61:06:0d:4e:16:45:54:e5:d8:cf:86:4f:24:a6:ed: 33:40:66:c2:dc:19:e9:e5:1e:10:08:33:a8:59:aa: 38:21:f1:2b:89:12:0d:e7:50:03:75:78:0d:54:26: 83:6f:ba:0d:e1:45:02:9d:40:3e:4b:a1:1f:6f:75: 37:38:2c:82:cd:a8:a5:3e:dc:d6:9b:09:14:2c:5d: ae:ad:c8:b5:57:20:2c:e3:a9:d0:64:40:51:d0:87: 58:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FF:A7:BA:B5:FE:E1:D1:56:D3:34:BD:3E:B5:39:EF:FF:0A:4B:38 X509v3 Authority Key Identifier: keyid:70:B6:AA:57:AC:DC:31:0E:B7:BA:17:00:D8:C3:6C:10:03:DE:D7:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33362e302f32342d3234203d3e20323139303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.232.36.0/24 Signature Algorithm: sha256WithRSAEncryption 36:fa:14:26:5e:f7:aa:ae:1b:ea:31:98:7e:6a:f7:ab:8a:6f: 26:b6:52:7c:2d:0d:4c:70:2f:d2:35:2a:ba:0b:1f:e6:a6:2e: ea:32:cb:2c:fa:7d:29:e6:a4:f8:91:07:80:e7:81:fc:57:ce: 50:03:ec:c4:75:66:c0:85:9b:45:c3:c5:73:f1:8b:d3:be:e5: b4:9e:e2:3b:67:08:b7:00:b6:59:ee:6d:ec:e4:7c:73:3a:93: 3d:7b:d6:51:da:0f:cb:a6:b0:1f:30:eb:dd:23:13:37:16:29: 02:49:e1:fe:ad:31:a1:d2:d0:ce:f2:63:3e:ac:59:de:19:b4: 99:59:09:37:fe:80:42:94:56:31:8c:19:cd:5e:43:c4:94:e6: 00:3e:93:52:29:68:3c:da:0f:55:c3:9e:08:e3:88:31:c7:99: 2b:6b:ed:bb:58:de:29:68:b8:57:97:0e:f6:47:6d:af:6a:f1: b2:fd:04:79:f9:36:03:87:89:8f:92:d6:26:24:ca:27:7a:99: 5a:ee:db:c8:df:ee:16:34:09:f7:c2:69:b5:07:1e:d4:2d:4f: 45:81:ff:a8:8e:4c:45:49:8e:48:8e:af:83:dc:ce:dc:35:60: cd:1c:7b:fa:3b:2a:9e:e4:95:c9:22:b7:14:83:bb:a5:ec:13: 0d:2e:1d:00 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUWPlWtGcn4uB+JFNTm2UhzNqy1ZwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTRBQ0UwMDAwMTEwLwYDVQQFEyg3MEI2QUE1N0FD REMzMTBFQjdCQTE3MDBEOEMzNkMxMDAzREVEN0NBMB4XDTI2MTExNDA4MDcyN1oX DTI3MTExMzA4MTIyN1owMzExMC8GA1UEAxMoQ0RGRkE3QkFCNUZFRTFEMTU2RDMz NEJEM0VCNTM5RUZGRjBBNEIzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYmqRtrkk2zrh7UlydxtrUQfeT/X+70U2TMEJs9kv14uv5sZWLUeXb/Mfqi m2p/+QAsIThYFX9gxLC9MjBW3Zmg6Qkswp41uD5Jm1VzI1Ax0AhP7JxWTA9Kza7i +DXrwYe2Y5ERcYz6lEdsZMiRJ1nzexK45uT9gCb2509a5/lKJOP3P/bTEc39AHVT lGWQHuYo9MNCkkHtmsFgSa5D3TK/Ylh3YQYNThZFVOXYz4ZPJKbtM0BmwtwZ6eUe EAgzqFmqOCHxK4kSDedQA3V4DVQmg2+6DeFFAp1APkuhH291Nzgsgs2opT7c1psJ FCxdrq3ItVcgLOOp0GRAUdCHWN0CAwEAAaOCAhQwggIQMB0GA1UdDgQWBBTN/6e6 tf7h0VbTNL0+tTnv/wpLODAfBgNVHSMEGDAWgBRwtqpXrNwxDre6FwDYw2wQA97X yjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFFNEFDRTAwMDAvMC83MEI2QUE1 N0FDREMzMTBFQjdCQTE3MDBEOEMzNkMxMDAzREVEN0NBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jTGFxVjZ6Y01R NjN1aGNBMk1Oc0VBUGUxOG8uY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MUU0 QUNFMDAwMC8wLzMxMzAzMzJlMzIzMzMyMmUzMzM2MmUzMDJmMzIzNDJkMzIzNDIw M2QzZTIwMzIzMTM5MzAzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+gkMA0GCSqGSIb3DQEBCwUA A4IBAQA2+hQmXveqrhvqMZh+averim8mtlJ8LQ1McC/SNSq6Cx/mpi7qMsss+n0p 5qT4kQeA54H8V85QA+zEdWbAhZtFw8Vz8YvTvuW0nuI7Zwi3ALZZ7m3s5HxzOpM9 e9ZR2g/LprAfMOvdIxM3FikCSeH+rTGh0tDO8mM+rFneGbSZWQk3/oBClFYxjBnN XkPElOYAPpNSKWg82g9Vw54I44gxx5kra+27WN4paLhXlw72R22vavGy/QR5+TYD h4mPktYmJMonepla7tvI3+4WNAn3wmm1Bx7ULU9Fgf+ojkxFSY5Ijq+D3M7cNWDN HHv6Oyqe5JXJIrcUg7ul7BMNLh0A -----END CERTIFICATE-----Generated at Sun Nov 15 00:54:19 2026 by rpki-client