$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917135E0000/0/3130332e3130342e3139382e302f32342d3234203d3e20313336383039.roa File: 3130332e3130342e3139382e302f32342d3234203d3e20313336383039.roa (raw, json) Hash identifier: YyjKq7VFYgM7+boPcwPEK/zpF63Jri+8LovF88bEAMg= Subject key identifier: 2D:7F:EA:80:B9:59:0F:0E:20:60:58:D0:89:71:4C:5E:6B:D4:52:0D Certificate issuer: /CN=A917135E0000/serialNumber=FB80B42726E82285AE71A131A3A77C438925ED86 Certificate serial: 2809E7E0ED25B2AC1C54EAAC3AA38CD50BD6573E Authority key identifier: FB:80:B4:27:26:E8:22:85:AE:71:A1:31:A3:A7:7C:43:89:25:ED:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4C0JyboIoWucaExo6d8Q4kl7YY.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917135E0000/0/3130332e3130342e3139382e302f32342d3234203d3e20313336383039.roa Signing time: Thu 29 Oct 2026 07:20:20 +0000 ROA not before: Thu 29 Oct 2026 07:15:20 +0000 ROA not after: Thu 28 Oct 2027 07:20:20 +0000 asID: 136809 IP address blocks: 103.104.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917135E0000/0/FB80B42726E82285AE71A131A3A77C438925ED86.crl rsync://rpki.sub.apnic.net/repository/A917135E0000/0/FB80B42726E82285AE71A131A3A77C438925ED86.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4C0JyboIoWucaExo6d8Q4kl7YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 22:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:09:e7:e0:ed:25:b2:ac:1c:54:ea:ac:3a:a3:8c:d5:0b:d6:57:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917135E0000, serialNumber=FB80B42726E82285AE71A131A3A77C438925ED86 Validity Not Before: Oct 29 07:15:20 2026 GMT Not After : Oct 28 07:20:20 2027 GMT Subject: CN=2D7FEA80B9590F0E206058D089714C5E6BD4520D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9f:15:cd:d4:01:e4:77:ca:75:f2:f1:a8:af: 08:bf:0e:4f:44:43:52:10:2e:e4:40:c4:63:1b:fa: 4d:60:2d:4e:0f:f6:bb:c5:a3:52:58:87:58:38:3b: 64:f4:e8:42:0f:7f:b2:71:91:a0:93:34:3b:bd:b3: a0:78:c3:c5:ae:9c:c5:6d:67:9f:3f:ad:a8:d6:02: f5:75:89:0a:c4:23:b7:29:f6:f0:0d:14:9d:45:da: 55:0b:a4:6f:54:96:54:40:3b:3c:08:83:4b:a2:f2: 7d:3d:15:18:e2:c4:c0:d3:11:6f:b0:ed:c3:f1:6a: fc:44:1a:f2:f5:2f:8f:8a:15:ad:99:ce:69:85:d3: 65:03:51:3e:6e:83:c9:5e:b2:5b:1c:9b:a6:b2:de: c6:81:73:16:9f:3d:21:bb:ba:21:d5:20:d6:44:84: d7:d6:be:0b:74:1c:e8:02:1a:f4:54:f6:de:07:07: 6e:09:a1:4f:a8:d3:5f:3f:bb:bf:25:fc:4c:06:1e: 30:63:c2:04:1c:72:87:b3:68:a2:03:b7:04:5d:c4: b6:ef:d4:16:e0:b0:b1:85:7f:7f:0b:12:9d:c8:f1: ec:7e:6d:8a:72:2b:15:3e:f5:91:bc:58:7f:80:a1: af:48:72:94:28:48:9d:db:76:c9:7f:0d:b2:4e:71: cc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7F:EA:80:B9:59:0F:0E:20:60:58:D0:89:71:4C:5E:6B:D4:52:0D X509v3 Authority Key Identifier: keyid:FB:80:B4:27:26:E8:22:85:AE:71:A1:31:A3:A7:7C:43:89:25:ED:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917135E0000/0/FB80B42726E82285AE71A131A3A77C438925ED86.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4C0JyboIoWucaExo6d8Q4kl7YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917135E0000/0/3130332e3130342e3139382e302f32342d3234203d3e20313336383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.198.0/24 Signature Algorithm: sha256WithRSAEncryption 60:21:b4:1f:bd:7a:37:38:0c:2f:36:18:16:ff:49:57:e4:6e: 32:43:31:7f:fc:45:3e:ec:ec:e2:16:aa:00:99:a6:4e:8d:18: 26:a2:d6:f1:31:37:cb:00:a3:26:61:dc:2a:2d:74:2e:cd:2c: 0b:eb:bf:e4:e8:7a:9f:35:32:c4:20:50:cf:fa:ec:77:dc:e3: df:60:59:fb:c5:c5:48:23:bd:33:8e:09:4a:ec:76:82:05:22: 6f:b8:85:92:e7:69:fa:c5:7c:8a:c4:c3:f4:d9:f3:b6:42:7c: e9:4e:f0:49:cc:87:86:fa:bf:fe:52:29:5c:e1:1a:3a:3f:00: be:ab:b8:d9:c7:e7:c4:fe:05:1d:12:8f:94:50:bb:40:14:de: f2:63:73:ae:05:33:09:31:9c:43:f1:54:d5:3f:3c:7b:73:36: b6:2b:20:17:88:fb:0c:35:84:80:65:e1:08:41:6f:b3:64:83: 7e:e8:3b:9e:e6:33:49:66:ce:2a:4c:61:c5:ab:7e:5e:fb:f2: 51:98:9a:e7:71:73:5e:a1:f2:82:75:1b:85:a5:8a:31:b3:9a: de:da:8e:0a:8a:4c:29:fd:f6:ac:bb:3d:0a:12:27:34:fb:bb: 95:6b:dc:af:fe:2c:28:3f:1d:36:b5:f4:4f:ec:ec:09:f8:a8: 01:12:61:91 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUKAnn4O0lsqwcVOqsOqOM1QvWVz4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzEzNUUwMDAwMTEwLwYDVQQFEyhGQjgwQjQyNzI2 RTgyMjg1QUU3MUExMzFBM0E3N0M0Mzg5MjVFRDg2MB4XDTI2MTAyOTA3MTUyMFoX DTI3MTAyODA3MjAyMFowMzExMC8GA1UEAxMoMkQ3RkVBODBCOTU5MEYwRTIwNjA1 OEQwODk3MTRDNUU2QkQ0NTIwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOSfFc3UAeR3ynXy8aivCL8OT0RDUhAu5EDEYxv6TWAtTg/2u8WjUliHWDg7 ZPToQg9/snGRoJM0O72zoHjDxa6cxW1nnz+tqNYC9XWJCsQjtyn28A0UnUXaVQuk b1SWVEA7PAiDS6LyfT0VGOLEwNMRb7Dtw/Fq/EQa8vUvj4oVrZnOaYXTZQNRPm6D yV6yWxybprLexoFzFp89Ibu6IdUg1kSE19a+C3Qc6AIa9FT23gcHbgmhT6jTXz+7 vyX8TAYeMGPCBBxyh7NoogO3BF3Etu/UFuCwsYV/fwsSncjx7H5tinIrFT71kbxY f4Chr0hylChIndt2yX8Nsk5xzIECAwEAAaOCAhcwggITMB0GA1UdDgQWBBQtf+qA uVkPDiBgWNCJcUxea9RSDTAfBgNVHSMEGDAWgBT7gLQnJugiha5xoTGjp3xDiSXt hjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3MTM1RTAwMDAvMC9GQjgwQjQy NzI2RTgyMjg1QUU3MUExMzFBM0E3N0M0Mzg5MjVFRDg2LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8tNEMwSnlib0lv V3VjYUV4bzZkOFE0a2w3WVkuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3 MTM1RTAwMDAvMC8zMTMwMzMyZTMxMzAzNDJlMzEzOTM4MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzEzMzM2MzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2jGMA0GCSqGSIb3DQEB CwUAA4IBAQBgIbQfvXo3OAwvNhgW/0lX5G4yQzF//EU+7OziFqoAmaZOjRgmotbx MTfLAKMmYdwqLXQuzSwL67/k6HqfNTLEIFDP+ux33OPfYFn7xcVII70zjglK7HaC BSJvuIWS52n6xXyKxMP02fO2QnzpTvBJzIeG+r/+Uilc4Ro6PwC+q7jZx+fE/gUd Eo+UULtAFN7yY3OuBTMJMZxD8VTVPzx7cza2KyAXiPsMNYSAZeEIQW+zZIN+6Due 5jNJZs4qTGHFq35e+/JRmJrncXNeofKCdRuFpYoxs5re2o4Kikwp/fasuz0KEic0 +7uVa9yv/iwoPx02tfRP7OwJ+KgBEmGR -----END CERTIFICATE-----Generated at Thu Nov 5 12:57:13 2026 by rpki-client