$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/7/323430303a363832303a3a2f33322d3438203d3e2039383838.roa File: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (raw, json) Hash identifier: NYSfNKEeXeiCy1PYWrh3Md4+9WQ/qoda1KGdtTCYbc4= Subject key identifier: 48:16:E9:42:90:7C:E5:4C:66:E8:33:5E:78:4A:1E:E3:F0:A9:A0:E5 Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75 Certificate serial: 6FC62317A07ADFB241ACE8E3EF4A9648B2EAE740 Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/323430303a363832303a3a2f33322d3438203d3e2039383838.roa Signing time: Wed 07 Oct 2026 07:57:07 +0000 ROA not before: Wed 07 Oct 2026 07:52:07 +0000 ROA not after: Wed 06 Oct 2027 07:57:07 +0000 asID: 9888 IP address blocks: 2400:6820::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c6:23:17:a0:7a:df:b2:41:ac:e8:e3:ef:4a:96:48:b2:ea:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75 Validity Not Before: Oct 7 07:52:07 2026 GMT Not After : Oct 6 07:57:07 2027 GMT Subject: CN=4816E942907CE54C66E8335E784A1EE3F0A9A0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:d9:d5:2b:23:6e:4d:15:3b:b4:83:07:37: f6:9f:e8:d9:49:6f:aa:ed:dd:51:e4:b2:f3:53:19: e5:70:e5:93:83:45:12:df:b6:93:a6:d8:5b:c3:54: 2b:f0:ab:06:c1:5d:a3:e5:09:1e:1b:f2:49:59:a5: 37:d5:02:98:85:20:95:dc:8b:d9:69:32:4a:67:79: 3f:65:9e:b4:04:6c:55:9a:27:2d:34:98:8b:be:c9: 82:6b:10:b2:6c:a5:1b:f0:d2:0c:ab:85:1b:d5:60: aa:10:ea:95:93:44:af:6b:96:9d:b4:f5:77:5e:be: d8:d6:ef:62:a4:7a:a5:0b:47:5f:e7:13:ad:c9:cd: 28:7d:73:9c:0a:d6:5c:8d:52:2a:28:1f:37:3c:a7: c2:ec:de:47:44:0b:4d:01:61:14:ef:68:f8:67:4a: c9:8b:2b:d9:c7:49:fc:96:e8:48:ae:96:12:6f:aa: 2d:2d:36:21:9d:9b:ba:d8:40:91:bd:35:03:fc:72: 00:a4:b7:ac:76:56:88:97:23:e9:96:19:91:f9:9c: 94:6f:7a:b9:f7:df:28:24:93:c4:87:66:5a:3a:84: 91:55:07:58:cd:ac:4b:23:bb:2e:5a:b1:ab:81:6e: be:4d:4d:62:9b:da:e7:75:b2:a5:23:a9:58:88:a1: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:16:E9:42:90:7C:E5:4C:66:E8:33:5E:78:4A:1E:E3:F0:A9:A0:E5 X509v3 Authority Key Identifier: keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/323430303a363832303a3a2f33322d3438203d3e2039383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6820::/32 Signature Algorithm: sha256WithRSAEncryption 5b:10:4e:9a:b2:a1:3a:6d:db:80:88:9b:d8:97:f1:66:7b:64: 74:63:3f:40:fa:b2:ce:c4:1a:94:10:80:76:89:44:63:ec:15: ab:b2:24:33:85:ed:63:d0:8b:36:74:8c:8f:54:88:e2:0c:97: c8:b8:c8:3f:5e:ea:97:cf:e0:52:8d:bb:6a:58:3a:4e:88:4c: 61:46:c2:c9:ea:5a:6c:2a:22:e2:17:df:52:fd:d3:1e:a5:ea: 19:3e:39:fd:57:4f:d4:1c:b4:d4:70:6e:4a:4d:1e:c9:5e:00: aa:51:59:8c:dc:a1:69:42:7f:e6:6d:9c:c4:16:30:74:b3:03: fe:52:c8:5b:45:9e:3d:d5:f0:01:c1:0b:54:7f:68:94:c6:76: ec:54:5b:72:95:08:9e:ff:ba:a6:ed:69:ba:a0:c7:7c:f7:c6: b8:ee:b0:65:89:5e:65:b7:d0:17:bc:72:f0:46:bd:ea:34:0b: 75:fd:b6:1c:32:1c:38:42:2d:46:3e:bd:28:ca:54:37:5b:66: 99:a9:be:6f:5a:9d:ec:26:8e:a1:3a:57:93:dd:a4:fb:9d:b3: ea:ff:71:6f:e9:ce:8e:1d:ac:ca:0b:fd:5d:92:c5:a2:9c:16: fa:ed:ad:d6:fd:2a:cd:3d:99:08:3e:48:a1:2a:2b:01:5a:2e: 0c:ad:0c:26 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUb8YjF6B637JBrOjj70qWSLLq50AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2 MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MTAwNzA3NTIwN1oX DTI3MTAwNjA3NTcwN1owMzExMC8GA1UEAxMoNDgxNkU5NDI5MDdDRTU0QzY2RTgz MzVFNzg0QTFFRTNGMEE5QTBFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJvF2dUrI25NFTu0gwc39p/o2Ulvqu3dUeSy81MZ5XDlk4NFEt+2k6bYW8NU K/CrBsFdo+UJHhvySVmlN9UCmIUgldyL2WkySmd5P2WetARsVZonLTSYi77JgmsQ smylG/DSDKuFG9VgqhDqlZNEr2uWnbT1d16+2NbvYqR6pQtHX+cTrcnNKH1znArW XI1SKigfNzynwuzeR0QLTQFhFO9o+GdKyYsr2cdJ/JboSK6WEm+qLS02IZ2buthA kb01A/xyAKS3rHZWiJcj6ZYZkfmclG96ufffKCSTxIdmWjqEkVUHWM2sSyO7Llqx q4Fuvk1NYpva53WypSOpWIihbKUCAwEAAaOCAg4wggIKMB0GA1UdDgQWBBRIFulC kHzlTGboM154Sh7j8Kmg5TAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB a21BbEtZY2NrLW95QUVXblUuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzcvMzIzNDMwMzAzYTM2MzgzMjMwM2EzYTJmMzMzMjJkMzQzODIwM2Qz ZTIwMzkzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYB BQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAGggMA0GCSqGSIb3DQEBCwUAA4IBAQBb EE6asqE6bduAiJvYl/Fme2R0Yz9A+rLOxBqUEIB2iURj7BWrsiQzhe1j0Is2dIyP VIjiDJfIuMg/XuqXz+BSjbtqWDpOiExhRsLJ6lpsKiLiF99S/dMepeoZPjn9V0/U HLTUcG5KTR7JXgCqUVmM3KFpQn/mbZzEFjB0swP+UshbRZ491fABwQtUf2iUxnbs VFtylQie/7qm7Wm6oMd898a47rBliV5lt9AXvHLwRr3qNAt1/bYcMhw4Qi1GPr0o ylQ3W2aZqb5vWp3sJo6hOleT3aT7nbPq/3Fv6c6OHazKC/1dksWinBb67a3W/SrN PZkIPkihKisBWi4MrQwm -----END CERTIFICATE-----Generated at Tue Oct 27 15:42:39 2026 by rpki-client