
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e31302e36312e302f32342d3234203d3e203435313633.roa
File: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (raw, json)
Hash identifier: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=
Subject key identifier: DC:39:9A:A8:B3:8D:92:F5:D6:9F:6B:C8:4F:C7:AB:65:90:F4:30:FE
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 1814C92E0D2C6F137395BD1091457620BC985979
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e31302e36312e302f32342d3234203d3e203435313633.roa
Signing time: Wed 11 Feb 2026 08:35:59 +0000
ROA not before: Wed 11 Feb 2026 08:30:59 +0000
ROA not after: Wed 10 Feb 2027 08:35:59 +0000
asID: 45163
IP address blocks: 203.10.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 22:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:14:c9:2e:0d:2c:6f:13:73:95:bd:10:91:45:76:20:bc:98:59:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Feb 11 08:30:59 2026 GMT
Not After : Feb 10 08:35:59 2027 GMT
Subject: CN=DC399AA8B38D92F5D69F6BC84FC7AB6590F430FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:f0:e9:df:2e:96:73:1c:8b:04:f9:72:36:
44:38:33:4e:0f:1c:41:4b:56:85:63:2a:7a:8f:08:
50:db:18:a8:ce:f7:04:81:0b:8a:99:e2:a2:84:f2:
60:bc:29:1f:6b:1c:f7:8f:12:fe:9e:38:cd:ca:5e:
9c:47:b6:6b:e1:aa:49:ff:92:49:41:40:ae:01:eb:
d9:cf:c9:26:c9:db:17:98:5d:dc:0a:5d:56:ad:26:
3c:37:f1:d6:fb:38:cf:60:2c:72:68:70:16:90:f7:
89:f1:ad:2a:49:ac:f0:cc:9d:30:f9:e3:10:cf:63:
de:01:b6:76:5d:35:c1:37:ff:18:dc:6f:6a:82:bd:
08:79:73:92:74:57:12:67:d9:81:96:4c:84:fa:98:
0a:26:6b:fe:94:ed:4f:d0:9f:7f:33:9e:41:fb:62:
d8:67:0b:b2:50:82:52:9f:7d:6e:a7:ff:6b:61:8e:
6f:34:3d:b2:48:98:da:8d:4b:00:b0:a3:e4:16:f2:
79:df:e0:57:e7:0c:5a:66:ac:2a:8b:25:be:fa:38:
75:8b:31:fc:50:a8:99:cb:fc:04:ce:d0:5b:47:db:
99:b1:3c:02:76:50:1e:29:17:0c:b0:f0:2c:8e:7f:
ce:7d:8d:a5:cb:2d:1c:d8:c3:f2:0b:3c:ce:85:85:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:9A:A8:B3:8D:92:F5:D6:9F:6B:C8:4F:C7:AB:65:90:F4:30:FE
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e31302e36312e302f32342d3234203d3e203435313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.10.61.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c0:bf:8b:26:93:62:43:94:b9:ff:5c:4a:64:83:4c:0d:36:
2f:3a:2b:2d:31:0c:2f:7e:43:0e:d2:90:ce:5f:1c:6a:d4:01:
a4:54:46:73:cd:11:95:c9:4f:5d:1c:de:46:6e:d2:ec:1f:96:
28:e7:f2:d1:d2:ff:a5:25:44:8d:cb:60:97:e7:74:66:a4:c8:
08:e3:4f:d1:75:87:00:f8:79:f1:0e:59:1d:48:65:1f:4c:fd:
59:70:b0:56:16:fa:42:2e:90:a8:f6:32:dd:45:4d:6c:86:99:
36:4b:e1:fa:56:d8:38:7c:09:49:fe:74:c5:e0:96:2d:22:8f:
fd:0d:61:47:3e:03:67:df:06:44:f7:bc:c6:9e:81:bf:06:b8:
71:b7:7a:82:f3:df:e7:5f:f8:6b:f6:78:e3:9b:d7:89:ec:4d:
9c:f1:03:0e:c6:ac:b7:68:b9:a5:5a:2f:2a:20:69:e2:a6:8d:
46:c4:1e:d8:ad:c4:bb:ae:38:2a:01:c9:e8:62:95:a3:0b:26:
64:fe:01:34:5f:a9:a5:51:17:c0:58:11:68:3b:7c:8d:4e:b5:
18:b4:6a:7a:b9:8c:a5:9a:b2:a6:b6:ee:33:46:ba:10:3e:39:
1e:5d:eb:f3:7f:5f:e3:78:8a:06:db:82:58:2c:4b:6f:5e:78:
4a:2b:37:9b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUGBTJLg0sbxNzlb0QkUV2ILyYWXkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3
REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDIxMTA4MzA1OVoX
DTI3MDIxMDA4MzU1OVowMzExMC8GA1UEAxMoREMzOTlBQThCMzhEOTJGNUQ2OUY2
QkM4NEZDN0FCNjU5MEY0MzBGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALjk8OnfLpZzHIsE+XI2RDgzTg8cQUtWhWMqeo8IUNsYqM73BIELipniooTy
YLwpH2sc948S/p44zcpenEe2a+GqSf+SSUFArgHr2c/JJsnbF5hd3ApdVq0mPDfx
1vs4z2AscmhwFpD3ifGtKkms8MydMPnjEM9j3gG2dl01wTf/GNxvaoK9CHlzknRX
EmfZgZZMhPqYCiZr/pTtT9CffzOeQfti2GcLslCCUp99bqf/a2GObzQ9skiY2o1L
ALCj5Bbyed/gV+cMWmasKoslvvo4dYsx/FComcv8BM7QW0fbmbE8AnZQHikXDLDw
LI5/zn2NpcstHNjD8gs8zoWF9FMCAwEAAaOCAgUwggIBMB0GA1UdDgQWBBTcOZqo
s42S9dafa8hPx6tlkPQw/jAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM
4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp
LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF
MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw
MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv
QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL
enctdE1MUmQyRE9FLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhy
c3luYzovL3Jwa2kucmFuZC5hcG5pYy5uZXQvcmVwby9BOTE4NzJFRDAwMDEvMC8z
MjMwMzMyZTMxMzAyZTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEz
NjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAywo9MA0GCSqGSIb3DQEBCwUAA4IBAQCrwL+LJpNiQ5S5
/1xKZINMDTYvOistMQwvfkMO0pDOXxxq1AGkVEZzzRGVyU9dHN5GbtLsH5Yo5/LR
0v+lJUSNy2CX53RmpMgI40/RdYcA+HnxDlkdSGUfTP1ZcLBWFvpCLpCo9jLdRU1s
hpk2S+H6Vtg4fAlJ/nTF4JYtIo/9DWFHPgNn3wZE97zGnoG/Brhxt3qC89/nX/hr
9njjm9eJ7E2c8QMOxqy3aLmlWi8qIGnipo1GxB7YrcS7rjgqAcnoYpWjCyZk/gE0
X6mlURfAWBFoO3yNTrUYtGp6uYylmrKmtu4zRroQPjkeXevzf1/jeIoG24JYLEtv
XnhKKzeb
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:28 2026 by rpki-client