
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
File: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (raw, json)
Hash identifier: Pl9O4/hrvE6XGRQRdZrkpmgI5or6MNwU7UHHLgiYTIk=
Subject key identifier: 65:A7:13:72:B6:53:0A:F5:F4:15:1A:89:6D:C0:18:DC:97:C4:C8:0D
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 5ADBC1B7331DD45BFAF217A90B746CAEADC94013
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
Signing time: Sun 06 Sep 2026 05:56:53 +0000
ROA not before: Sun 06 Sep 2026 05:51:53 +0000
ROA not after: Sun 05 Sep 2027 05:56:53 +0000
asID: 9449
IP address blocks: 103.184.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 01:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:db:c1:b7:33:1d:d4:5b:fa:f2:17:a9:0b:74:6c:ae:ad:c9:40:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
Validity
Not Before: Sep 6 05:51:53 2026 GMT
Not After : Sep 5 05:56:53 2027 GMT
Subject: CN=65A71372B6530AF5F4151A896DC018DC97C4C80D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:02:c4:1b:96:de:7f:72:b4:03:d3:d5:3c:
14:0c:3f:fe:3d:42:bc:a0:65:b4:68:63:fb:b1:15:
5b:c0:5a:ed:61:4f:51:32:1c:23:fa:3f:64:79:f4:
0f:e1:9d:27:7b:8c:82:a1:97:fa:52:1f:30:f8:3b:
4b:81:f1:ad:f8:39:e8:e6:c2:86:9f:b4:89:39:79:
6f:8d:5e:7f:01:ba:81:55:92:cf:3a:d2:d2:43:5e:
b4:00:d0:68:48:74:c5:05:a1:e8:03:c5:5a:23:ef:
77:2c:da:c0:d5:79:49:45:bc:1e:0e:db:95:c0:dd:
ed:b7:f5:f3:93:0c:d9:bf:82:98:b8:16:77:cb:7e:
55:ef:ec:78:02:52:c4:af:c8:2b:2b:da:89:16:e7:
f0:17:f3:66:ee:07:f0:17:84:7d:71:89:c5:56:33:
7c:1e:6c:78:d4:f7:fb:62:6d:0e:46:14:20:6e:54:
3f:cd:e1:08:4a:7f:99:a5:d2:f6:68:05:56:72:aa:
97:df:b0:49:2f:67:aa:04:6e:10:a0:63:74:fc:e4:
fa:14:68:c1:ce:04:1e:b0:c8:03:c0:39:b3:b1:cb:
06:c0:b8:e9:6a:88:18:e0:96:88:ee:b0:24:85:99:
75:c8:cb:f3:74:78:3f:7d:c4:c3:31:b9:1a:62:bf:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A7:13:72:B6:53:0A:F5:F4:15:1A:89:6D:C0:18:DC:97:C4:C8:0D
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.174.0/23
Signature Algorithm: sha256WithRSAEncryption
27:31:7e:70:b9:68:31:e2:bc:72:06:24:89:ba:22:53:71:6f:
cc:95:45:27:0a:64:5b:5f:45:af:64:6b:9f:95:c5:27:8b:ad:
7d:5e:9d:d1:22:37:ee:c6:18:ef:83:e3:62:61:fb:15:36:68:
43:38:69:bf:35:74:99:54:39:19:4a:24:03:88:53:bd:da:14:
e1:2d:f1:1f:79:80:a7:9c:8a:2e:8a:b6:3f:fe:0f:04:6f:e6:
93:fc:3a:07:da:07:3f:f8:51:13:9f:e6:6d:69:5a:b2:e5:46:
a6:ad:cb:04:84:d8:75:53:d4:6d:b3:b7:2a:26:9a:4f:aa:3f:
67:56:12:ee:36:3c:01:df:ad:65:cd:0a:58:39:44:a5:75:36:
ff:82:b9:90:20:05:a6:c4:e4:ea:82:de:4d:88:7a:0c:e8:2a:
34:59:b5:81:f2:b4:33:ac:0c:e4:55:53:61:85:fa:9f:d0:9c:
34:e3:f6:af:18:bb:61:5c:95:3f:2b:59:3b:2d:1d:82:28:d6:
1b:e1:ac:be:25:93:89:ba:2e:61:04:45:0e:f2:3b:c5:c2:84:
20:a2:74:79:53:3a:75:d8:99:17:75:30:a8:54:2f:0a:c5:1c:
84:7e:7d:dc:e8:57:d9:48:ba:4e:a3:4b:93:d2:99:48:19:0b:
ac:67:16:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:40:39 2026 by rpki-client