$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134633a3a2f34362d3436203d3e20313533333436.roa File: 323030313a6466343a353134633a3a2f34362d3436203d3e20313533333436.roa (raw, json) Hash identifier: cfW8/BpGR5YLDJqf4B6srqIWH4dAdAcYNWndMbPZ4n4= Subject key identifier: 4E:7F:5A:FA:58:BE:F0:83:4C:6D:6B:3C:98:15:CF:75:78:85:7A:EF Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Certificate serial: 3889A3565D6A6540F9D36E3A74D7DAF7C72340F1 Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134633a3a2f34362d3436203d3e20313533333436.roa Signing time: Sat 01 Aug 2026 11:14:22 +0000 ROA not before: Sat 01 Aug 2026 11:09:22 +0000 ROA not after: Sat 31 Jul 2027 11:14:22 +0000 asID: 153346 IP address blocks: 2001:df4:514c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 12:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:89:a3:56:5d:6a:65:40:f9:d3:6e:3a:74:d7:da:f7:c7:23:40:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Validity Not Before: Aug 1 11:09:22 2026 GMT Not After : Jul 31 11:14:22 2027 GMT Subject: CN=4E7F5AFA58BEF0834C6D6B3C9815CF7578857AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:25:cc:13:fa:e2:84:b8:3b:62:ca:a6:cf: 02:17:ad:5d:6d:09:30:2d:30:d7:a7:aa:f1:fb:7d: 02:0c:d7:bf:04:70:77:70:bf:6b:84:38:6a:c2:30: 0d:a2:15:65:d5:3c:7e:8e:68:9d:c2:55:b8:28:23: 19:54:23:ec:df:07:3a:b4:02:f2:0c:6f:f2:83:76: a9:87:25:d4:b6:d5:55:75:a7:0e:30:ea:37:10:01: 97:eb:11:93:00:80:97:b1:27:37:3d:ba:a2:7a:15: b2:15:9c:a6:5c:19:dc:e1:69:aa:68:04:2e:04:24: 87:59:60:f4:33:d0:4f:3f:6c:74:28:4c:e6:fb:f9: 5c:79:0f:7b:c7:5c:c3:93:3c:a3:a3:78:d8:2a:8e: 63:50:19:9b:db:5a:b7:f9:84:28:d7:90:50:12:80: c6:5d:63:be:4d:e8:21:62:1a:8c:ec:8a:e7:cd:01: 08:43:c1:76:eb:c8:d8:7a:01:8b:65:52:13:fe:a9: 2b:42:7e:e2:65:79:a9:13:45:67:7c:9d:f6:5a:07: c7:9c:4e:ee:f9:81:41:16:42:ae:bd:28:d7:75:3a: 19:4d:df:13:43:f8:66:1d:f6:d9:bb:b3:dc:d4:d1: 25:90:cb:8b:4c:10:db:82:83:49:ba:65:3f:25:71: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7F:5A:FA:58:BE:F0:83:4C:6D:6B:3C:98:15:CF:75:78:85:7A:EF X509v3 Authority Key Identifier: keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134633a3a2f34362d3436203d3e20313533333436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:514c::/46 Signature Algorithm: sha256WithRSAEncryption 33:e2:95:3a:ea:f2:12:71:d8:a2:34:46:89:97:ff:85:07:16: 7f:24:56:47:8c:45:dc:ea:df:02:7d:8d:0a:3a:8d:eb:38:bd: 24:2b:cf:f0:8d:c4:79:53:af:e8:22:bb:44:d0:b0:61:fa:6a: 99:00:c9:30:bf:74:cf:98:ca:74:95:a0:97:7a:3b:b5:47:da: 06:06:89:3d:55:b1:5a:14:8a:af:3c:f4:e9:16:09:4c:8c:33: b9:17:20:1b:bd:45:34:66:4d:a3:2e:f4:e1:c3:f6:bc:0d:a4: 78:47:48:c4:c7:ec:b8:dc:11:8b:b5:95:79:2c:9a:c3:f3:c5: c0:46:f7:60:15:09:b5:dc:9c:b2:2f:98:78:91:56:d4:8b:5a: 15:7a:aa:70:09:7d:6a:0d:44:79:c8:53:5b:63:b2:e0:46:be: b6:21:18:f5:e8:6f:9f:82:9f:bc:c0:c7:96:20:51:af:88:d0: 3d:a9:fa:57:b1:8b:e0:96:4f:dc:f7:ac:89:a7:66:36:31:36: bf:c9:97:8d:43:52:05:f6:c4:ca:c7:68:97:26:aa:6b:e5:3a: 7f:f2:5c:13:78:fc:9a:2f:dd:92:b7:31:35:d9:37:e3:44:df: a7:ad:08:d5:cc:7f:74:fb:0b:ab:05:86:c3:0a:98:b2:c9:ad: b5:30:7a:36 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOImjVl1qZUD50246dNfa98cjQPEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI2MDgwMTExMDkyMloX DTI3MDczMTExMTQyMlowMzExMC8GA1UEAxMoNEU3RjVBRkE1OEJFRjA4MzRDNkQ2 QjNDOTgxNUNGNzU3ODg1N0FFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMz5JcwT+uKEuDtiyqbPAhetXW0JMC0w16eq8ft9AgzXvwRwd3C/a4Q4asIw DaIVZdU8fo5oncJVuCgjGVQj7N8HOrQC8gxv8oN2qYcl1LbVVXWnDjDqNxABl+sR kwCAl7EnNz26onoVshWcplwZ3OFpqmgELgQkh1lg9DPQTz9sdChM5vv5XHkPe8dc w5M8o6N42CqOY1AZm9tat/mEKNeQUBKAxl1jvk3oIWIajOyK580BCEPBduvI2HoB i2VSE/6pK0J+4mV5qRNFZ3yd9loHx5xO7vmBQRZCrr0o13U6GU3fE0P4Zh322buz 3NTRJZDLi0wQ24KDSbplPyVxVl0CAwEAAaOCAh8wggIbMB0GA1UdDgQWBBROf1r6 WL7wg0xtazyYFc91eIV67zAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT +jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV OWlTUUJ0aVRodmh4dVdrX28uY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYB BQUHMAuGd3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx NzQ0N0IwMDAwLzEvMzIzMDMwMzEzYTY0NjYzNDNhMzUzMTM0NjMzYTNhMmYzNDM2 MmQzNDM2MjAzZDNlMjAzMTM1MzMzMzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIgAQ30UUwwDQYJ KoZIhvcNAQELBQADggEBADPilTrq8hJx2KI0RomX/4UHFn8kVkeMRdzq3wJ9jQo6 jes4vSQrz/CNxHlTr+giu0TQsGH6apkAyTC/dM+YynSVoJd6O7VH2gYGiT1VsVoU iq889OkWCUyMM7kXIBu9RTRmTaMu9OHD9rwNpHhHSMTH7LjcEYu1lXksmsPzxcBG 92AVCbXcnLIvmHiRVtSLWhV6qnAJfWoNRHnIU1tjsuBGvrYhGPXob5+Cn7zAx5Yg Ua+I0D2p+lexi+CWT9z3rImnZjYxNr/Jl41DUgX2xMrHaJcmqmvlOn/yXBN4/Jov 3ZK3MTXZN+NE36etCNXMf3T7C6sFhsMKmLLJrbUwejY= -----END CERTIFICATE-----Generated at Wed Aug 19 16:03:47 2026 by rpki-client