$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20323130313130.roa File: 34332e3235352e38322e302f32342d3234203d3e20323130313130.roa (raw, json) Hash identifier: PB0a+a2Gy49HBYeDS5tizGYeq0RhqGsRJr6JdjueuOg= Subject key identifier: 70:8A:4A:21:BA:65:33:22:8A:37:00:18:EC:01:07:59:4F:A2:7C:34 Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Certificate serial: 06ED7FC70CB7A315CE9A5D44EAE73ACADB070BD1 Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20323130313130.roa Signing time: Tue 25 Aug 2026 06:52:26 +0000 ROA not before: Tue 25 Aug 2026 06:47:26 +0000 ROA not after: Tue 24 Aug 2027 06:52:26 +0000 asID: 210110 IP address blocks: 43.255.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 04:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ed:7f:c7:0c:b7:a3:15:ce:9a:5d:44:ea:e7:3a:ca:db:07:0b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800 Validity Not Before: Aug 25 06:47:26 2026 GMT Not After : Aug 24 06:52:26 2027 GMT Subject: CN=708A4A21BA6533228A370018EC0107594FA27C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:59:34:6f:1a:70:9a:4e:36:d2:ac:9c:ed: 8e:04:a5:16:0d:89:a4:16:b3:75:b6:b4:43:a0:0f: 36:12:6e:c2:de:6f:7a:c2:50:33:41:84:ed:06:2c: 24:70:b0:8e:cc:70:e3:9d:4f:1c:c8:e1:19:bb:bd: a1:b6:8c:5e:46:2a:95:04:10:48:19:84:d6:30:71: 32:e4:88:2a:e6:1a:6b:60:b8:6e:6f:ae:10:5d:be: 9a:ad:34:71:89:26:99:8b:ff:2f:58:e0:10:a9:f4: 68:36:36:23:51:60:65:d5:f4:ad:64:d0:8c:a1:cc: 08:68:de:d3:46:de:f5:49:77:9c:c5:60:80:aa:e0: 0e:d3:41:63:1f:f2:6b:ef:43:f4:a9:74:24:7b:a8: 61:08:41:7a:80:d6:b6:d6:6a:6f:01:b7:ca:0c:96: f1:b3:60:6c:1a:32:d1:90:13:69:88:83:30:45:e1: 95:5b:db:c6:60:50:b3:bf:99:70:fa:dd:cd:68:1f: 59:88:b1:aa:32:f0:db:3e:8e:a7:67:78:43:2c:0c: ba:cf:d4:e7:85:6d:58:b1:b2:33:59:09:bd:43:70: 0f:25:a5:29:15:4c:92:15:05:65:4c:a5:2b:e0:92: 95:2b:1d:2a:52:0e:69:a9:7b:61:31:0b:1e:f9:66: 11:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8A:4A:21:BA:65:33:22:8A:37:00:18:EC:01:07:59:4F:A2:7C:34 X509v3 Authority Key Identifier: keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20323130313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.82.0/24 Signature Algorithm: sha256WithRSAEncryption a5:81:56:6c:f5:f0:b7:ea:9a:cc:eb:9d:ec:9f:8b:b3:81:bf: 00:f0:dc:21:7c:ef:d2:07:70:8b:a8:ae:43:e6:f0:fc:9d:03: 76:8f:8f:ce:0a:a9:81:89:40:fa:58:d6:9a:b8:a5:12:71:e1: 90:60:e8:f5:50:a4:a0:67:cb:87:b1:9e:f3:b6:8d:02:67:e0: c3:a8:d0:62:81:7f:94:17:f6:ba:40:e7:99:c1:94:bf:9a:cf: 80:b5:df:59:83:6a:84:ac:0c:23:8a:ba:4a:17:08:78:f7:90: ab:f4:40:78:5e:11:a4:f7:c0:d0:1f:fb:67:14:ce:d9:53:52: d5:a4:70:10:a3:ff:9f:58:5d:3d:af:19:dc:15:47:94:3f:51: 9b:95:a5:2b:ab:42:e6:5c:3a:cf:e8:18:6f:af:74:55:c5:48: c1:72:6d:a4:32:17:9e:95:fd:1f:8e:e1:3c:cb:92:17:77:88: c4:8e:ca:da:8c:1a:5e:8a:cf:51:7a:cc:fe:ef:e8:a9:ab:ac: 1a:3d:55:42:80:5e:8c:11:4c:a9:ae:91:bb:26:03:b1:42:28: 12:7c:ac:79:fd:99:f5:14:22:7f:cc:b2:ef:09:f4:70:56:08: 03:a5:0e:85:22:a8:fe:8f:ef:ac:c5:33:7c:b8:52:a1:52:34: b9:c9:1f:3c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUBu1/xwy3oxXOml1E6uc6ytsHC9EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4 NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDgyNTA2NDcyNloX DTI3MDgyNDA2NTIyNlowMzExMC8GA1UEAxMoNzA4QTRBMjFCQTY1MzMyMjhBMzcw MDE4RUMwMTA3NTk0RkEyN0MzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGYWTRvGnCaTjbSrJztjgSlFg2JpBazdba0Q6APNhJuwt5vesJQM0GE7QYs JHCwjsxw451PHMjhGbu9obaMXkYqlQQQSBmE1jBxMuSIKuYaa2C4bm+uEF2+mq00 cYkmmYv/L1jgEKn0aDY2I1FgZdX0rWTQjKHMCGje00be9Ul3nMVggKrgDtNBYx/y a+9D9Kl0JHuoYQhBeoDWttZqbwG3ygyW8bNgbBoy0ZATaYiDMEXhlVvbxmBQs7+Z cPrdzWgfWYixqjLw2z6Op2d4QywMus/U54VtWLGyM1kJvUNwDyWlKRVMkhUFZUyl K+CSlSsdKlIOaal7YTELHvlmEacCAwEAAaOCAhEwggINMB0GA1UdDgQWBBRwikoh umUzIoo3ABjsAQdZT6J8NDAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64 ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4 QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2 dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxQTYx MzEwMDAwLzAvMzQzMzJlMzIzNTM1MmUzODMyMmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzIzMTMwMzEzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/9SMA0GCSqGSIb3DQEBCwUAA4IB AQClgVZs9fC36prM653sn4uzgb8A8NwhfO/SB3CLqK5D5vD8nQN2j4/OCqmBiUD6 WNaauKUSceGQYOj1UKSgZ8uHsZ7zto0CZ+DDqNBigX+UF/a6QOeZwZS/ms+Atd9Z g2qErAwjirpKFwh495Cr9EB4XhGk98DQH/tnFM7ZU1LVpHAQo/+fWF09rxncFUeU P1GblaUrq0LmXDrP6Bhvr3RVxUjBcm2kMheelf0fjuE8y5IXd4jEjsrajBpeis9R esz+7+ipq6waPVVCgF6MEUyprpG7JgOxQigSfKx5/Zn1FCJ/zLLvCfRwVggDpQ6F Iqj+j++sxTN8uFKhUjS5yR88 -----END CERTIFICATE-----Generated at Thu Sep 10 09:56:13 2026 by rpki-client