$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3230332e302e38302e302f32342d3234203d3e2039343439.roa File: 3230332e302e38302e302f32342d3234203d3e2039343439.roa (raw, json) Hash identifier: adKswZZ+83MQE5j5Z1GVAEbYVQjS90TsNrYqZtVzT5k= Subject key identifier: D3:06:67:FF:5A:3A:A2:EE:68:FE:FF:A4:BF:3C:E5:6B:36:E9:54:2C Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 3BADDF58AEB3F2793278670B1D14360E0653A841 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e302e38302e302f32342d3234203d3e2039343439.roa Signing time: Mon 29 Jun 2026 01:13:37 +0000 ROA not before: Mon 29 Jun 2026 01:08:37 +0000 ROA not after: Mon 28 Jun 2027 01:13:37 +0000 asID: 9449 IP address blocks: 203.0.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 22:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ad:df:58:ae:b3:f2:79:32:78:67:0b:1d:14:36:0e:06:53:a8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Jun 29 01:08:37 2026 GMT Not After : Jun 28 01:13:37 2027 GMT Subject: CN=D30667FF5A3AA2EE68FEFFA4BF3CE56B36E9542C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:d8:5e:8f:ae:c9:3f:23:d3:1c:a0:87:3b: c9:d6:5c:2b:cc:25:5b:66:f6:5a:7b:38:99:5b:22: ba:a6:dc:b3:10:ed:88:7d:8a:d7:80:b1:09:24:74: 3c:3b:5e:cf:80:93:3e:da:bc:59:7e:02:30:77:bb: 23:40:4d:87:c9:fd:0a:2b:83:aa:e4:01:b5:d1:e2: 2f:9e:bc:90:5c:9a:c0:a4:5a:02:80:8d:2e:9b:c3: 65:32:04:24:7c:d9:a0:ea:43:b1:62:12:f2:4d:05: ac:51:44:8b:73:2f:f1:62:23:8e:7a:1d:ff:3e:85: dc:51:62:d8:d6:40:da:78:54:99:ce:42:ab:a4:97: ab:bc:e1:8b:a5:d3:77:ae:da:ee:c2:f2:2e:c7:17: fd:ae:ad:f5:53:4d:ac:18:4b:1e:d0:31:6e:e4:8b: a0:a8:03:41:9b:69:90:be:69:2b:4a:3a:7a:c7:27: 8e:9e:d5:70:02:21:e4:29:f3:c3:a0:93:29:7d:9b: 14:a0:e8:16:e2:ed:90:75:75:81:3a:b8:81:08:06: 4c:14:89:b2:6d:61:97:e2:2b:15:8f:c4:ae:e3:dc: 26:bb:e9:0b:08:8a:36:da:b8:e5:5a:73:29:e9:bb: 57:0b:5d:b8:ea:00:75:75:09:a8:29:46:52:b4:17: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:06:67:FF:5A:3A:A2:EE:68:FE:FF:A4:BF:3C:E5:6B:36:E9:54:2C X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e302e38302e302f32342d3234203d3e2039343439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.0.80.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:e9:d1:c8:bb:09:aa:81:e0:83:c3:8b:25:25:40:97:9b:d5: 37:a8:75:21:f7:49:c5:b9:ab:10:cb:d2:73:9f:f0:65:cf:af: ed:45:a0:f8:d4:95:66:90:f5:d5:06:1a:05:7a:b4:60:53:76: 5c:de:89:c7:8b:1e:a6:36:bf:85:20:39:72:f3:10:ef:25:1e: a2:bd:0d:4e:c6:2b:b5:27:7a:21:99:0a:e1:03:5e:78:c7:23: 76:70:45:db:4c:db:9b:2c:31:9a:13:f1:22:c4:ae:9f:c9:b4: 55:d1:14:13:bc:72:92:71:fb:c1:7d:6d:95:5c:41:61:e9:d9: 51:2a:7d:fa:bc:58:93:d1:ba:3c:21:07:54:b6:2d:f1:2f:c0: f4:1b:49:2f:18:e6:15:e7:c9:05:be:74:ef:dd:86:d4:66:b8: 30:03:51:8d:49:23:a9:dd:39:62:4f:56:42:06:3c:8b:01:60: f6:d8:f9:a8:c3:cc:a6:9d:ab:b9:0f:06:95:5f:f6:22:59:16: fb:b2:d6:a4:ab:bf:64:32:ca:e1:51:a7:5f:ce:aa:ed:47:81: b4:d0:0f:2f:5c:9f:fb:44:11:db:a8:bd:38:16:a8:90:68:80: 4b:fb:8d:fa:7d:da:05:05:ec:03:55:15:3f:15:38:40:6a:d5: 1b:94:81:fa -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUO63fWK6z8nkyeGcLHRQ2DgZTqEEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDYyOTAxMDgzN1oX DTI3MDYyODAxMTMzN1owMzExMC8GA1UEAxMoRDMwNjY3RkY1QTNBQTJFRTY4RkVG RkE0QkYzQ0U1NkIzNkU5NTQyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKd72F6Prsk/I9McoIc7ydZcK8wlW2b2Wns4mVsiuqbcsxDtiH2K14CxCSR0 PDtez4CTPtq8WX4CMHe7I0BNh8n9CiuDquQBtdHiL568kFyawKRaAoCNLpvDZTIE JHzZoOpDsWIS8k0FrFFEi3Mv8WIjjnod/z6F3FFi2NZA2nhUmc5Cq6SXq7zhi6XT d67a7sLyLscX/a6t9VNNrBhLHtAxbuSLoKgDQZtpkL5pK0o6escnjp7VcAIh5Cnz w6CTKX2bFKDoFuLtkHV1gTq4gQgGTBSJsm1hl+IrFY/EruPcJrvpCwiKNtq45Vpz Kem7VwtduOoAdXUJqClGUrQXup0CAwEAAaOCAgswggIHMB0GA1UdDgQWBBTTBmf/ Wjqi7mj+/6S/POVrNulULDAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUH MAuGaXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1 MzAwMDAwLzkvMzIzMDMzMmUzMDJlMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy MDM5MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAywBQMA0GCSqGSIb3DQEBCwUAA4IBAQAb6dHI uwmqgeCDw4slJUCXm9U3qHUh90nFuasQy9Jzn/Blz6/tRaD41JVmkPXVBhoFerRg U3Zc3onHix6mNr+FIDly8xDvJR6ivQ1Oxiu1J3ohmQrhA154xyN2cEXbTNubLDGa E/EixK6fybRV0RQTvHKScfvBfW2VXEFh6dlRKn36vFiT0bo8IQdUti3xL8D0G0kv GOYV58kFvnTv3YbUZrgwA1GNSSOp3TliT1ZCBjyLAWD22Pmow8ymnau5DwaVX/Yi WRb7stakq79kMsrhUadfzqrtR4G00A8vXJ/7RBHbqL04FqiQaIBL+436fdoFBewD VRU/FThAatUblIH6 -----END CERTIFICATE-----Generated at Sat Jul 18 10:03:31 2026 by rpki-client