$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33382e302f32342d3234203d3e20323138373830.roa File: 3130332e3233322e33382e302f32342d3234203d3e20323138373830.roa (raw, json) Hash identifier: 0D32h0rfn6ZbVqHFkeAYRppI0AMzAjtzu/6uNUjJ0rM= Subject key identifier: 4B:34:84:2D:1E:26:98:95:B5:AE:39:F4:66:51:D6:61:71:3B:39:2A Certificate issuer: /CN=A91E4ACE0000/serialNumber=70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA Certificate serial: 35C3CE8D6521C74841DEC1FB87B423D4752307FE Authority key identifier: 70:B6:AA:57:AC:DC:31:0E:B7:BA:17:00:D8:C3:6C:10:03:DE:D7:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33382e302f32342d3234203d3e20323138373830.roa Signing time: Sat 14 Nov 2026 08:13:28 +0000 ROA not before: Sat 14 Nov 2026 08:08:28 +0000 ROA not after: Sat 13 Nov 2027 08:13:28 +0000 asID: 218780 IP address blocks: 103.232.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 08:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c3:ce:8d:65:21:c7:48:41:de:c1:fb:87:b4:23:d4:75:23:07:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4ACE0000, serialNumber=70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA Validity Not Before: Nov 14 08:08:28 2026 GMT Not After : Nov 13 08:13:28 2027 GMT Subject: CN=4B34842D1E269895B5AE39F46651D661713B392A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:bf:cc:11:10:bc:83:48:10:99:42:6b:45: c6:52:e8:d9:3c:5d:f7:ab:23:16:ff:67:b3:fa:ab: 03:8e:7c:5c:e7:49:47:e1:89:f2:25:96:e6:37:9b: 90:2f:de:7a:f6:02:fa:d1:10:5e:c8:25:45:a5:80: 22:06:fb:09:26:3e:52:f7:49:e0:3e:b1:4f:ed:a4: 0e:d1:12:90:7d:a1:bb:95:26:31:24:4e:09:3f:6c: 6c:58:68:a6:fd:56:63:80:79:34:df:5e:6a:f4:57: 30:c4:a4:34:09:10:1c:c3:35:5f:e1:44:f2:b2:5c: 79:87:1a:b1:17:c6:50:fe:2b:0a:4c:24:84:6a:ed: c4:c8:17:f1:ec:9c:e1:c5:fa:45:da:4e:f7:0a:76: b2:27:b9:1e:84:8c:1f:2e:75:79:7c:9e:70:50:c7: 94:3f:f1:b4:d8:93:ef:dc:14:c8:5a:cd:ea:b2:ab: 20:2f:ad:f4:ee:95:77:47:a6:97:22:67:ff:8d:e8: a0:36:aa:81:27:eb:ad:ce:2e:38:d6:20:99:67:5e: a8:1e:ac:be:de:f8:95:f9:15:b2:62:5e:2e:72:71: 41:65:89:48:fc:28:d5:d5:ff:58:2b:2f:7b:f1:b1: fd:b4:26:f3:55:d8:5d:72:7d:d2:50:ec:af:91:86: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:34:84:2D:1E:26:98:95:B5:AE:39:F4:66:51:D6:61:71:3B:39:2A X509v3 Authority Key Identifier: keyid:70:B6:AA:57:AC:DC:31:0E:B7:BA:17:00:D8:C3:6C:10:03:DE:D7:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33382e302f32342d3234203d3e20323138373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.232.38.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:7c:a3:1b:df:c9:2e:06:88:d5:e1:db:e5:d1:69:43:96:c9: 1e:2a:63:08:b9:48:7e:18:dc:ba:e0:9f:72:c6:ce:8b:0a:79: a2:70:4e:aa:3c:c8:d0:d4:f0:9a:b0:97:4c:b3:70:4f:c2:1d: 54:27:6a:e2:bd:8b:da:13:c5:7d:6c:ce:75:24:fe:f9:51:a3: 4a:63:30:1a:b5:f0:76:3e:47:f1:fd:19:5c:58:ef:7b:8a:34: 80:dd:e9:a5:64:3d:42:e7:e7:62:50:da:b7:37:21:98:36:31: 23:46:67:0d:0b:8e:b4:59:29:3b:df:38:f4:0c:76:d1:f8:bc: a4:ec:d2:a2:54:7f:78:7a:bd:94:96:76:ad:a5:48:76:84:3e: e2:d4:5a:03:9b:75:48:fc:dd:cb:e9:c5:2a:7c:7e:23:5a:b7: 0a:cd:d9:04:17:e0:7e:21:60:db:8f:38:46:57:8d:32:3a:73: 8b:81:c8:8c:e1:4f:20:f9:ff:a9:fb:b7:78:a4:f3:80:53:44: 60:91:8d:18:d7:de:e0:c6:0d:a0:8e:ea:6e:12:14:70:d8:8e: 28:52:ef:6f:b3:7a:1d:c2:00:5f:a2:c0:5d:99:95:e8:04:7d: cc:1b:fb:d4:6e:91:fd:8c:7b:f0:78:06:11:4e:1c:77:88:7f: 02:ba:72:f9 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUNcPOjWUhx0hB3sH7h7Qj1HUjB/4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTRBQ0UwMDAwMTEwLwYDVQQFEyg3MEI2QUE1N0FD REMzMTBFQjdCQTE3MDBEOEMzNkMxMDAzREVEN0NBMB4XDTI2MTExNDA4MDgyOFoX DTI3MTExMzA4MTMyOFowMzExMC8GA1UEAxMoNEIzNDg0MkQxRTI2OTg5NUI1QUUz OUY0NjY1MUQ2NjE3MTNCMzkyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKeBv8wRELyDSBCZQmtFxlLo2Txd96sjFv9ns/qrA458XOdJR+GJ8iWW5jeb kC/eevYC+tEQXsglRaWAIgb7CSY+UvdJ4D6xT+2kDtESkH2hu5UmMSROCT9sbFho pv1WY4B5NN9eavRXMMSkNAkQHMM1X+FE8rJceYcasRfGUP4rCkwkhGrtxMgX8eyc 4cX6RdpO9wp2sie5HoSMHy51eXyecFDHlD/xtNiT79wUyFrN6rKrIC+t9O6Vd0em lyJn/43ooDaqgSfrrc4uONYgmWdeqB6svt74lfkVsmJeLnJxQWWJSPwo1dX/WCsv e/Gx/bQm81XYXXJ90lDsr5GGpx8CAwEAAaOCAhQwggIQMB0GA1UdDgQWBBRLNIQt HiaYlbWuOfRmUdZhcTs5KjAfBgNVHSMEGDAWgBRwtqpXrNwxDre6FwDYw2wQA97X yjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFFNEFDRTAwMDAvMC83MEI2QUE1 N0FDREMzMTBFQjdCQTE3MDBEOEMzNkMxMDAzREVEN0NBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jTGFxVjZ6Y01R NjN1aGNBMk1Oc0VBUGUxOG8uY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MUU0 QUNFMDAwMC8wLzMxMzAzMzJlMzIzMzMyMmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIw M2QzZTIwMzIzMTM4MzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+gmMA0GCSqGSIb3DQEBCwUA A4IBAQAffKMb38kuBojV4dvl0WlDlskeKmMIuUh+GNy64J9yxs6LCnmicE6qPMjQ 1PCasJdMs3BPwh1UJ2rivYvaE8V9bM51JP75UaNKYzAatfB2Pkfx/RlcWO97ijSA 3emlZD1C5+diUNq3NyGYNjEjRmcNC460WSk73zj0DHbR+Lyk7NKiVH94er2Ulnat pUh2hD7i1FoDm3VI/N3L6cUqfH4jWrcKzdkEF+B+IWDbjzhGV40yOnOLgciM4U8g +f+p+7d4pPOAU0RgkY0Y197gxg2gjupuEhRw2I4oUu9vs3odwgBfosBdmZXoBH3M G/vUbpH9jHvweAYRThx3iH8CunL5 -----END CERTIFICATE-----Generated at Sun Nov 15 01:10:51 2026 by rpki-client