
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e33302e36302e302f32342d3234203d3e2037353436.roa
File: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (raw, json)
Hash identifier: ouqx4LxaBgGUkmuXMINywcsMwqU0N6ifWFXfDupPMm0=
Subject key identifier: 8A:AC:79:2E:9A:F0:96:BA:ED:00:02:83:D8:CD:37:A3:20:1D:36:29
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 1A7C4FA6CF53787608E36C5C2DE194F3AD3DFFE0
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e33302e36302e302f32342d3234203d3e2037353436.roa
Signing time: Sun 06 Sep 2026 05:56:55 +0000
ROA not before: Sun 06 Sep 2026 05:51:55 +0000
ROA not after: Sun 05 Sep 2027 05:56:55 +0000
asID: 7546
IP address blocks: 203.30.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 07:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7c:4f:a6:cf:53:78:76:08:e3:6c:5c:2d:e1:94:f3:ad:3d:ff:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Sep 6 05:51:55 2026 GMT
Not After : Sep 5 05:56:55 2027 GMT
Subject: CN=8AAC792E9AF096BAED000283D8CD37A3201D3629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:37:1a:7b:0e:e4:ad:07:49:b6:17:e2:f5:
06:13:a3:77:60:72:b8:ce:75:ac:19:47:8c:fc:ef:
20:fa:1a:98:19:c6:fb:09:40:16:1a:a5:43:99:8e:
29:d9:76:01:37:6b:0a:37:ad:bc:02:1f:54:d1:8b:
f8:73:cd:85:51:0a:ab:ee:6a:74:65:1f:65:f2:14:
9e:6b:1a:39:f2:96:f5:1e:de:c2:3f:e7:33:8b:6e:
fc:c9:4f:c1:3b:14:20:1a:f7:e3:d7:00:a3:81:29:
03:a4:b1:78:c3:5d:3a:e7:8b:5f:e0:eb:5d:86:d5:
87:59:10:93:40:73:d6:7a:99:25:5d:13:ac:59:74:
ce:6f:fd:13:0e:58:69:9b:e2:e7:c8:82:15:d5:21:
10:a8:2a:98:df:d0:c7:0c:b8:76:95:00:9a:94:20:
ae:99:67:4f:6e:d9:40:f2:78:07:67:81:dd:e5:d8:
36:16:53:33:70:27:ed:5f:cd:b8:2c:5b:be:04:59:
3d:eb:f3:66:2a:86:a6:1d:7a:04:bd:20:56:71:9f:
58:51:94:eb:85:87:c8:c9:ea:fa:b3:84:bb:c7:03:
86:ba:2c:c4:7f:38:2b:9a:f0:01:12:ba:33:76:d6:
47:3a:79:ee:c8:93:a5:6e:e5:2b:c5:26:f0:e7:96:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:79:2E:9A:F0:96:BA:ED:00:02:83:D8:CD:37:A3:20:1D:36:29
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e33302e36302e302f32342d3234203d3e2037353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.30.60.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:06:5e:5f:80:19:7f:3a:2d:a0:35:08:32:d6:99:60:cb:29:
d1:ff:57:05:83:69:c0:1d:81:11:55:f2:b5:8d:60:71:6f:ca:
4b:89:72:dc:c1:18:79:43:65:04:db:64:e8:3d:fb:69:eb:e8:
10:74:c1:3a:d0:c6:ab:8a:1f:01:0c:e5:df:06:19:e9:1a:bb:
5c:f8:0d:26:8e:0a:57:ff:99:71:7b:07:ed:88:92:1f:15:e7:
fc:4c:92:9d:4a:92:22:81:15:a9:12:ac:6d:53:a1:27:12:2d:
78:d1:eb:a5:72:41:7a:46:79:27:d7:47:63:ce:7b:16:4c:6f:
48:d9:27:3c:82:1e:30:fa:cd:29:d9:0e:8a:56:10:c9:62:89:
95:11:7c:6a:11:c7:fa:51:c3:c3:f6:60:5a:34:31:83:1a:b3:
25:d5:70:5a:96:3c:f5:e1:59:31:d2:0f:94:4b:b9:e7:9f:7e:
c1:8c:e9:0c:62:44:25:b7:a4:ad:2b:ce:60:81:2d:b7:f0:fe:
d1:55:97:af:ba:f6:14:c7:0d:34:39:33:60:35:af:00:ed:e8:
61:da:28:d4:a3:b2:e3:85:2a:0a:1e:46:fe:38:80:c5:3b:c8:
22:be:0e:7e:8f:1c:5b:96:24:db:9e:94:ce:22:da:38:4f:91:
a9:9a:08:2c
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUGnxPps9TeHYI42xcLeGU8609/+AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx
NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI2MDkwNjA1NTE1NVoX
DTI3MDkwNTA1NTY1NVowMzExMC8GA1UEAxMoOEFBQzc5MkU5QUYwOTZCQUVEMDAw
MjgzRDhDRDM3QTMyMDFEMzYyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKC5Nxp7DuStB0m2F+L1BhOjd2ByuM51rBlHjPzvIPoamBnG+wlAFhqlQ5mO
Kdl2ATdrCjetvAIfVNGL+HPNhVEKq+5qdGUfZfIUnmsaOfKW9R7ewj/nM4tu/MlP
wTsUIBr349cAo4EpA6SxeMNdOueLX+DrXYbVh1kQk0Bz1nqZJV0TrFl0zm/9Ew5Y
aZvi58iCFdUhEKgqmN/Qxwy4dpUAmpQgrplnT27ZQPJ4B2eB3eXYNhZTM3An7V/N
uCxbvgRZPevzZiqGph16BL0gVnGfWFGU64WHyMnq+rOEu8cDhrosxH84K5rwARK6
M3bWRzp57siTpW7lK8Um8OeWTU0CAwEAAaOCAg0wggIJMB0GA1UdDgQWBBSKrHku
mvCWuu0AAoPYzTejIB02KTAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA
tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw
NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w
M2psZkN5XzhudUVTbnpBTFEuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH
MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzQvMzIzMDMzMmUzMzMwMmUzNjMwMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzczNTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBADLHjwwDQYJKoZIhvcNAQELBQADggEBALwG
Xl+AGX86LaA1CDLWmWDLKdH/VwWDacAdgRFV8rWNYHFvykuJctzBGHlDZQTbZOg9
+2nr6BB0wTrQxquKHwEM5d8GGekau1z4DSaOClf/mXF7B+2Ikh8V5/xMkp1KkiKB
FakSrG1ToScSLXjR66VyQXpGeSfXR2POexZMb0jZJzyCHjD6zSnZDopWEMliiZUR
fGoRx/pRw8P2YFo0MYMasyXVcFqWPPXhWTHSD5RLueeffsGM6QxiRCW3pK0rzmCB
Lbfw/tFVl6+69hTHDTQ5M2A1rwDt6GHaKNSjsuOFKgoeRv44gMU7yCK+Dn6PHFuW
JNuelM4i2jhPkamaCCw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:07:26 2026 by rpki-client