
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32342d3234203d3e20313334303930.roa
File: 3230332e372e3139362e302f32342d3234203d3e20313334303930.roa (raw, json)
Hash identifier: /LpdqHnCJJlwCcOi3CqIbxGlAHdFFT95xe2Q0VqmA3E=
Subject key identifier: F4:C2:E3:C9:3A:63:81:75:F4:FB:38:8E:9E:42:34:B7:95:81:42:B0
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 77B0C8AB788965ED3E8B8A6C8D1378735CC7431C
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32342d3234203d3e20313334303930.roa
Signing time: Wed 10 Jun 2026 06:53:08 +0000
ROA not before: Wed 10 Jun 2026 06:48:08 +0000
ROA not after: Wed 09 Jun 2027 06:53:08 +0000
asID: 134090
IP address blocks: 203.7.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b0:c8:ab:78:89:65:ed:3e:8b:8a:6c:8d:13:78:73:5c:c7:43:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Jun 10 06:48:08 2026 GMT
Not After : Jun 9 06:53:08 2027 GMT
Subject: CN=F4C2E3C93A638175F4FB388E9E4234B7958142B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:b5:04:41:ba:be:1f:bf:85:cc:32:b4:c8:
69:ef:6c:da:45:81:fc:cb:19:35:42:0a:8e:ab:b2:
44:c0:6e:ae:3e:6d:86:2b:8e:52:6d:12:24:c3:1c:
2e:91:ef:8e:04:9c:9c:2a:5e:b5:94:3a:f8:7e:2d:
13:90:1e:0c:62:e2:86:46:af:be:23:09:78:d7:d8:
71:81:08:93:7b:65:ff:74:98:c1:09:f4:af:0e:15:
08:e0:22:f1:1d:97:e9:90:43:6d:68:b6:fd:dc:40:
bb:46:e8:c6:28:8e:86:d7:34:04:96:60:91:10:7e:
b3:f1:7d:c8:c8:f4:9e:51:d3:db:6c:bd:39:f9:e9:
68:9b:b8:ce:d2:f2:cb:a8:45:fd:4f:fc:b5:82:5c:
7e:97:02:6b:c1:6d:6e:03:0e:29:22:19:c8:1d:d7:
c6:bc:38:47:0f:25:12:e5:99:01:9a:d2:17:05:58:
cd:ae:bd:b4:04:ca:16:0b:b4:77:1c:71:18:fe:97:
c3:a4:00:2c:eb:49:54:c8:59:f1:43:f4:a3:74:e4:
5f:f5:cf:83:85:cb:7f:d2:16:ee:84:11:de:ab:87:
27:3d:08:7e:e8:c0:f1:cb:07:43:e3:5f:c0:42:ba:
4d:1c:9f:74:0f:5f:bc:a0:c4:8f:1d:7d:89:f0:ab:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C2:E3:C9:3A:63:81:75:F4:FB:38:8E:9E:42:34:B7:95:81:42:B0
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32342d3234203d3e20313334303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.7.196.0/24
Signature Algorithm: sha256WithRSAEncryption
90:05:01:37:6d:de:0c:bc:67:37:90:4c:bb:ef:46:10:81:dd:
7b:3a:f4:8a:62:1b:3e:10:4c:45:49:0e:2f:36:4a:93:7f:72:
a1:8e:01:00:ce:c8:8b:63:8c:48:b9:cd:99:96:50:3d:2a:e0:
94:4e:b6:0d:03:70:d7:36:9c:0e:b9:a4:ba:6e:25:16:e2:7e:
97:ea:a4:41:b5:98:df:b2:a5:39:28:7d:72:2f:fb:19:b2:8e:
15:97:23:60:b0:44:79:4a:a4:47:29:5f:7e:6d:18:4f:c1:70:
d4:db:50:7e:39:32:c9:ec:a5:74:b9:87:c0:d5:c6:c0:b3:14:
3c:4c:d0:d6:8c:1c:42:f1:81:a8:33:02:58:49:c2:78:0d:7e:
fe:df:f6:b7:f5:24:ac:17:fa:6f:70:05:47:79:28:e3:70:17:
40:de:34:ad:44:4d:e6:99:59:1f:2b:19:1d:a1:bc:54:f3:f0:
25:d5:2e:72:69:f2:58:cc:bf:88:d6:0b:1f:61:51:af:8f:57:
0a:80:d6:2d:15:db:51:17:65:6d:33:5c:e6:4f:ee:e9:ac:cf:
8d:57:55:4f:b6:0f:81:c2:4f:2b:e5:d3:a6:67:34:bd:80:2d:
e3:8c:3c:e3:3b:79:47:f2:d9:9c:32:f8:b6:7d:11:03:9d:e8:
2b:67:27:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:10 2026 by rpki-client