$ rpki-client -vvvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa File: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (raw, json) Hash identifier: ETobkltH6QxmmsPTDtL9q7ioelS5YrLQQVK4vW8Jxyk= Subject key identifier: 95:33:3A:B3:DD:AC:49:93:3A:A0:2A:F5:75:CF:38:07:88:0C:87:16 Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Certificate serial: 3047C7726C01147EBD0C5FB195DCA07F8227E8A7 Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa Signing time: Fri 11 Sep 2026 00:00:01 +0000 ROA not before: Thu 10 Sep 2026 23:55:01 +0000 ROA not after: Fri 10 Sep 2027 00:00:01 +0000 asID: 24021 IP address blocks: 203.147.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:47:c7:72:6c:01:14:7e:bd:0c:5f:b1:95:dc:a0:7f:82:27:e8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1 Validity Not Before: Sep 10 23:55:01 2026 GMT Not After : Sep 10 00:00:01 2027 GMT Subject: CN=95333AB3DDAC49933AA02AF575CF3807880C8716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:ee:a1:7a:03:39:3d:30:03:85:5c:df:c1: de:b6:23:51:d2:de:cd:99:ff:80:ff:be:ee:75:d0: 43:bd:3a:ce:ac:5e:97:6d:1f:4b:ab:1e:16:6c:2a: 66:93:83:1d:49:d1:b2:2d:01:c2:bd:2b:8e:0d:95: 19:ca:0a:d7:94:ad:fb:06:4c:1c:c7:8b:85:6e:0f: 03:7d:53:87:5a:b4:02:b4:06:2b:4c:2b:45:dc:ea: 09:9f:05:cd:3c:35:89:c1:0c:8a:84:53:78:0b:ec: b6:6f:3c:1f:0a:a0:e7:9a:c2:18:c2:f2:01:62:d1: e7:bb:63:9b:54:37:41:4d:c4:32:3a:46:ed:86:38: 02:6d:37:66:8b:14:c3:df:9a:4d:5e:52:06:28:1e: ae:c5:e3:bd:88:d1:e4:bf:0a:72:51:14:d7:3c:02: 0f:26:df:61:b7:8e:68:13:cd:c5:24:a4:c9:55:91: e4:f2:ad:57:14:f3:c7:8a:2d:b5:9d:c5:f7:9e:5e: d3:2c:03:c1:84:ff:ad:37:8b:14:86:9a:6c:b8:8d: 4c:8a:7a:24:9a:fc:67:88:85:7f:fd:e5:8c:38:ba: 4a:31:94:7d:b5:57:55:3a:e9:55:64:0a:e6:e4:5d: 15:e5:0c:3b:74:38:5e:ed:14:c5:08:00:d9:b7:02: e6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:33:3A:B3:DD:AC:49:93:3A:A0:2A:F5:75:CF:38:07:88:0C:87:16 X509v3 Authority Key Identifier: keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.147.108.0/23 Signature Algorithm: sha256WithRSAEncryption 94:67:cf:29:aa:85:5e:d6:b8:96:e1:e4:b5:85:95:e4:12:6b: 21:98:9e:57:bd:b4:f7:40:a1:f3:8f:31:0d:95:dd:60:91:a5: a3:ab:62:bf:b8:65:be:7a:d9:e2:d4:1d:45:dc:5a:5f:9c:3a: 51:7c:c4:11:0c:dd:c1:4e:3d:88:17:dc:65:06:2f:21:7d:86: f2:9e:52:3a:3d:dc:84:bc:c1:9b:c7:02:c7:45:57:a6:04:b4: 3c:2d:25:e5:81:a9:f2:a7:a3:78:8b:6f:fd:e5:72:4d:1d:ff: 1b:d8:59:00:63:7d:d1:04:2a:0a:43:72:6a:51:79:08:1c:05: ef:3a:05:19:2a:1d:7c:30:01:58:92:55:70:73:50:c4:cb:5d: 57:bc:f4:ed:6a:51:40:8a:15:ee:3b:14:9a:86:12:90:77:f1: 12:a3:e7:9b:b4:da:21:bd:bc:68:04:ba:6a:5c:0e:e6:ae:8b: 3d:ac:f8:4b:33:74:65:e0:b7:63:30:1c:ca:93:e8:52:aa:95: 3c:8f:9c:b6:aa:85:93:35:d4:c7:08:19:6e:c5:5b:54:56:f1: ee:4d:a0:96:22:55:9c:18:46:04:3b:1e:eb:70:73:b6:bb:fd: 7c:ce:fa:5a:39:91:78:f2:bc:d8:e6:0b:28:f3:da:a5:ce:d2: 26:37:63:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUMEfHcmwBFH69DF+xldygf4In6KcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3 REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDkxMDIzNTUwMVoX DTI3MDkxMDAwMDAwMVowMzExMC8GA1UEAxMoOTUzMzNBQjNEREFDNDk5MzNBQTAy QUY1NzVDRjM4MDc4ODBDODcxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIX7qF6Azk9MAOFXN/B3rYjUdLezZn/gP++7nXQQ706zqxel20fS6seFmwq ZpODHUnRsi0Bwr0rjg2VGcoK15St+wZMHMeLhW4PA31Th1q0ArQGK0wrRdzqCZ8F zTw1icEMioRTeAvstm88Hwqg55rCGMLyAWLR57tjm1Q3QU3EMjpG7YY4Am03ZosU w9+aTV5SBigersXjvYjR5L8KclEU1zwCDybfYbeOaBPNxSSkyVWR5PKtVxTzx4ot tZ3F955e0ywDwYT/rTeLFIaabLiNTIp6JJr8Z4iFf/3ljDi6SjGUfbVXVTrpVWQK 5uRdFeUMO3Q4Xu0UxQgA2bcC5v8CAwEAAaOCAgkwggIFMB0GA1UdDgQWBBSVMzqz 3axJkzqgKvV1zzgHiAyHFjAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM 4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL enctdE1MUmQyRE9FLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUFBzALhmxy c3luYzovL3Jwa2kucmFuZC5hcG5pYy5uZXQvcmVwby9BOTE4NzJFRDAwMDEvMC8z MjMwMzMyZTMxMzQzNzJlMzEzMDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIz NDMwMzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEAcuTbDANBgkqhkiG9w0BAQsFAAOCAQEAlGfPKaqF Xta4luHktYWV5BJrIZieV72090Ch848xDZXdYJGlo6tiv7hlvnrZ4tQdRdxaX5w6 UXzEEQzdwU49iBfcZQYvIX2G8p5SOj3chLzBm8cCx0VXpgS0PC0l5YGp8qejeItv /eVyTR3/G9hZAGN90QQqCkNyalF5CBwF7zoFGSodfDABWJJVcHNQxMtdV7z07WpR QIoV7jsUmoYSkHfxEqPnm7TaIb28aAS6alwO5q6LPaz4SzN0ZeC3YzAcypPoUqqV PI+ctqqFkzXUxwgZbsVbVFbx7k2gliJVnBhGBDse63Bztrv9fM76WjmRePK82OYL KPPapc7SJjdjPw== -----END CERTIFICATE-----Generated at Fri Sep 11 03:55:41 2026 by rpki-client