
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e20313334303930.roa
File: 3230332e372e3139362e302f32332d3233203d3e20313334303930.roa (raw, json)
Hash identifier: qaOra+xDLyRhqdf//j4nvjjhMuhgOEsIZ5B8fiKTKxU=
Subject key identifier: 72:4D:11:0B:A2:4D:B4:97:33:2E:29:5E:46:76:DC:8C:59:9A:48:CA
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 6A05BD28B01E5EFFF675811E44A603AD950606D0
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e20313334303930.roa
Signing time: Wed 10 Jun 2026 06:53:53 +0000
ROA not before: Wed 10 Jun 2026 06:48:53 +0000
ROA not after: Wed 09 Jun 2027 06:53:53 +0000
asID: 134090
IP address blocks: 203.7.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:05:bd:28:b0:1e:5e:ff:f6:75:81:1e:44:a6:03:ad:95:06:06:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Jun 10 06:48:53 2026 GMT
Not After : Jun 9 06:53:53 2027 GMT
Subject: CN=724D110BA24DB497332E295E4676DC8C599A48CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:f8:b8:95:5e:b0:9b:32:94:0a:35:3e:93:
8a:5c:19:d5:a3:a8:0c:4e:63:90:83:a6:14:ec:ce:
af:e7:e7:05:88:3a:26:ef:52:6b:4c:c5:9d:9d:93:
1c:93:b2:2f:c9:f1:50:db:9a:6f:64:7e:e4:eb:53:
e0:b2:2b:58:b4:1a:15:85:3b:d2:f8:26:75:6f:db:
8b:bd:78:d7:0b:bd:23:02:71:7b:b0:87:be:ee:75:
bb:1b:c4:fe:e5:35:4d:0d:8d:42:23:c0:ee:3b:b7:
b5:d3:b1:53:81:8d:85:79:08:45:48:08:7a:1d:85:
6f:1b:5f:c7:43:42:69:ca:af:bc:a7:07:2a:ef:28:
09:97:3f:c7:62:10:d3:13:05:12:3b:fd:4d:db:d6:
e1:73:a8:06:80:77:90:ab:b2:b8:71:f4:66:d6:51:
d1:ec:19:75:15:6e:ea:8c:fe:cf:a4:b8:9b:f2:ea:
1e:05:75:35:2b:fe:b5:b0:b8:80:d3:2e:30:b5:09:
f5:6b:42:82:9c:68:f8:1f:2d:6c:92:b6:e4:c7:48:
98:3a:a1:69:89:3f:1c:05:61:f9:c8:4c:25:12:ea:
5b:84:37:14:37:3b:30:26:f5:0b:77:5d:0a:56:c0:
2f:52:65:00:23:33:10:6f:9d:d5:e8:96:65:05:65:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:11:0B:A2:4D:B4:97:33:2E:29:5E:46:76:DC:8C:59:9A:48:CA
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e20313334303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.7.196.0/23
Signature Algorithm: sha256WithRSAEncryption
52:5a:66:17:15:b6:c4:c2:90:23:a7:a6:34:80:c5:ec:ea:50:
bd:4d:39:ea:44:66:ee:b9:c8:bb:07:95:05:2b:9e:98:80:a7:
0f:7c:5f:98:fb:df:fa:4e:78:41:84:dd:f3:c4:90:ef:39:6c:
62:4a:1c:6f:0c:25:70:09:5c:65:19:8a:7c:24:37:78:76:bb:
cc:07:bc:49:7f:10:c4:17:80:3e:78:01:90:4f:7e:08:9a:37:
de:5c:8f:1a:14:8e:96:0c:ee:4c:da:bc:c1:14:6e:01:fb:23:
b2:48:ee:8c:c0:77:ec:d5:72:e3:5e:ef:c4:3e:ab:29:d6:7f:
d5:c9:b0:1f:e1:cc:39:7e:fa:e8:a5:9f:d3:29:c9:dc:a5:53:
86:55:70:05:dc:1a:91:f5:0a:58:da:3e:54:29:a9:23:f6:28:
03:fa:24:1a:41:e5:80:be:62:e9:5d:f8:2c:dc:6c:47:a6:44:
52:85:1b:c7:42:65:09:b9:6a:c5:52:30:60:0b:a3:45:09:9c:
3c:a1:8e:3f:0f:d2:65:3e:5c:9d:ca:62:26:03:95:41:f5:e1:
ee:28:5c:5d:4f:e2:40:0c:ff:47:16:47:fc:a3:d2:10:41:7c:
15:e0:f3:9c:fc:10:27:45:ad:5d:92:a3:ee:46:9c:63:77:9e:
6c:84:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:20 2026 by rpki-client