
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
File: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (raw, json)
Hash identifier: fkFkv4x2RJF8ikeWNYi3IpWqQO/j13TZnucB+1TubjI=
Subject key identifier: F0:5C:A1:EA:BC:1C:D4:23:52:51:06:D8:5A:11:59:32:6F:6C:B5:0A
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 5306AC416D254CF1AADB0D57D50FC86822B6CD6C
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
Signing time: Thu 04 Jun 2026 02:27:17 +0000
ROA not before: Thu 04 Jun 2026 02:22:17 +0000
ROA not after: Thu 03 Jun 2027 02:27:17 +0000
asID: 7546
IP address blocks: 203.7.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:06:ac:41:6d:25:4c:f1:aa:db:0d:57:d5:0f:c8:68:22:b6:cd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Jun 4 02:22:17 2026 GMT
Not After : Jun 3 02:27:17 2027 GMT
Subject: CN=F05CA1EABC1CD423525106D85A1159326F6CB50A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:41:b8:d1:06:99:6e:b6:67:d9:72:15:90:
32:d7:f0:24:ae:81:20:97:f6:08:96:a5:a6:87:57:
a1:11:92:1a:f1:1d:5b:b6:a5:0f:3b:f1:ed:5b:34:
ad:a7:57:ab:2b:4c:ca:1c:3a:35:35:78:b5:c1:9a:
a5:0e:51:fd:55:80:c8:2e:0b:3d:88:36:d6:c3:9d:
73:a2:4f:4a:dc:a2:8d:fa:30:14:9c:fb:48:94:79:
f9:db:e1:ab:0c:dc:0c:ec:55:53:3e:45:25:d0:17:
f0:b4:40:9b:c0:73:36:44:d0:da:02:5b:77:a7:66:
78:97:e5:ee:4a:ea:74:52:6f:4c:1d:26:84:95:5d:
42:f9:67:d0:ab:bb:72:a0:e0:8a:3b:2b:b3:60:ce:
24:03:fe:b3:5f:96:18:ef:88:4d:fe:df:c9:29:60:
bf:e3:09:10:3e:a5:7f:c2:74:b4:d6:de:f1:37:6e:
d6:57:6d:b9:44:ad:ef:f0:be:31:af:b7:47:de:d4:
a9:2a:b2:9f:43:7f:f3:cc:57:82:f8:31:35:ee:58:
ac:39:20:01:4d:a9:f9:ae:83:e2:1e:ac:35:f0:e4:
7c:8a:1f:ff:98:9a:56:56:9c:3d:ae:4f:39:fc:76:
5f:0f:bc:b5:ef:78:8d:58:58:d1:39:65:bd:ea:4f:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5C:A1:EA:BC:1C:D4:23:52:51:06:D8:5A:11:59:32:6F:6C:B5:0A
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.7.196.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:a5:d3:26:91:d1:97:99:21:6f:fe:40:c4:88:55:9d:a8:04:
e0:4f:9b:7b:ed:67:20:dc:c3:99:12:a6:66:87:1d:94:3a:69:
39:e1:a5:82:21:09:2c:c1:cc:7c:ad:65:ba:a2:bd:37:bf:28:
ac:e7:90:ed:cf:88:a5:66:bc:11:66:ca:58:d0:67:48:7a:dc:
be:3b:4a:96:d9:20:66:e6:07:df:5d:4d:e8:74:a1:a3:3e:1c:
7a:cd:6f:a9:e8:6e:a7:98:fe:4e:b4:d8:b3:68:d6:ea:41:a0:
7c:5b:84:11:de:56:25:83:5f:f2:44:86:2f:1d:c3:60:1a:5b:
88:60:f7:3d:7c:b1:2a:17:5c:47:a8:08:84:01:14:dd:4a:e3:
56:cb:44:09:63:9f:e6:40:a8:b5:5a:84:44:76:86:f4:eb:cd:
71:03:c0:fa:46:90:04:cf:62:1b:ba:29:13:cc:5f:08:c4:0b:
b5:97:86:d4:06:4f:27:a8:c8:a3:f8:c3:4d:f9:bd:ae:1f:0f:
0c:a0:7c:45:35:cf:5a:cd:91:0e:9b:3b:9b:84:4c:ba:eb:62:
8d:54:0a:88:e4:16:cc:80:7f:78:66:11:2b:8d:0f:08:a6:64:
31:9f:32:c1:f6:b9:04:3f:f4:9c:9a:69:9e:93:f9:2a:57:e4:
d9:89:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:13 2026 by rpki-client