
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3230332e302e38302e302f32342d3234203d3e20313334303930.roa
File: 3230332e302e38302e302f32342d3234203d3e20313334303930.roa (raw, json)
Hash identifier: kdx3CUTNv+VjeEs6W9tudB6rNQZmlJL2ExzD6LblsT4=
Subject key identifier: 01:18:37:61:76:6E:7D:90:56:D0:37:8D:22:64:C3:F9:87:13:23:FC
Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Certificate serial: 510040ECD930CBF65B9C4E0A9108E0625C6C86B3
Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e302e38302e302f32342d3234203d3e20313334303930.roa
Signing time: Thu 11 Jun 2026 04:03:37 +0000
ROA not before: Thu 11 Jun 2026 03:58:37 +0000
ROA not after: Thu 10 Jun 2027 04:03:37 +0000
asID: 134090
IP address blocks: 203.0.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:00:40:ec:d9:30:cb:f6:5b:9c:4e:0a:91:08:e0:62:5c:6c:86:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Validity
Not Before: Jun 11 03:58:37 2026 GMT
Not After : Jun 10 04:03:37 2027 GMT
Subject: CN=01183761766E7D9056D0378D2264C3F9871323FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:1b:49:d8:c2:22:2e:12:d2:74:8f:01:7e:
c0:d1:04:c3:27:d1:ad:36:f6:52:c5:77:13:0c:86:
6a:ee:b2:ac:0a:1a:3c:9f:40:e6:e3:41:e2:a8:18:
ae:7f:d6:ba:49:ed:cb:26:5c:7a:36:c2:27:0a:a6:
82:f2:67:84:53:db:8f:2a:6a:b3:30:61:fe:a7:f0:
f6:b9:b3:62:49:04:4e:93:8e:f3:f4:39:3e:40:fa:
a7:98:58:e6:c4:9d:80:e3:fc:30:d2:24:d8:10:a8:
4c:e5:59:09:a2:01:77:b5:ed:37:dd:cc:93:17:84:
0c:b5:6a:36:84:b0:03:72:ae:f1:38:a3:8e:dd:40:
09:0b:71:99:e4:f9:25:f9:6b:45:e7:20:d2:fc:f6:
6e:18:fd:ac:cf:e6:9f:ce:f0:7a:38:b2:94:a2:7b:
7c:5a:d7:bc:b7:6d:79:d2:26:dc:4b:21:a0:c5:64:
9e:6f:ae:9d:16:12:2d:1b:de:d5:77:e3:f1:8f:72:
9b:a8:8b:16:21:89:16:6f:8a:d4:85:85:80:6d:ff:
cf:b1:d0:4d:11:bd:e6:0f:93:a4:0e:3e:98:e9:a2:
c0:7a:ee:8d:51:82:46:31:59:08:0f:d0:06:e0:51:
4d:95:05:4e:b1:49:10:1a:23:c6:d7:aa:cd:b9:54:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:18:37:61:76:6E:7D:90:56:D0:37:8D:22:64:C3:F9:87:13:23:FC
X509v3 Authority Key Identifier:
keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e302e38302e302f32342d3234203d3e20313334303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.0.80.0/24
Signature Algorithm: sha256WithRSAEncryption
76:61:45:f3:5e:6e:cc:c0:6b:4a:a3:f5:54:be:5a:4b:cc:8f:
38:e8:34:e1:3c:9b:60:4c:7f:d8:bd:44:b9:9a:74:ae:41:2e:
d9:91:a0:04:1d:5e:40:2b:35:1e:45:b2:06:cc:5f:3c:d2:fb:
c2:7d:ff:b3:d0:f9:36:df:37:16:f6:d8:f0:f6:a0:5c:80:23:
dd:fa:d0:e5:e3:03:23:94:31:7e:01:22:0e:7f:38:30:20:ba:
59:a2:40:16:fe:0b:93:73:cc:15:93:06:90:e8:e6:95:fb:fa:
69:2d:56:9a:8b:c9:62:de:70:10:c9:c5:15:39:9e:3d:c7:a3:
8d:52:b9:e9:4a:10:16:38:70:77:56:76:f3:6a:cc:80:0a:0d:
91:0f:0a:bf:ad:65:1a:6e:73:39:18:ee:f5:65:74:83:c7:0d:
56:41:77:e0:39:a7:56:f5:d5:12:24:56:94:cf:10:c9:d1:3c:
27:7f:66:0f:cb:59:fd:11:de:23:f9:e1:51:2f:50:46:d4:cd:
d3:b2:c6:9d:19:e7:4f:6e:f3:67:f5:61:9c:3a:da:ae:76:05:
2d:84:97:c7:a9:18:1e:be:17:4f:02:e3:86:ca:d7:ee:28:ac:
40:f6:e9:73:1b:e9:9c:53:b4:11:d0:7c:ee:4f:8d:ad:c8:99:
4d:3e:61:74
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUUQBA7Nkwy/ZbnE4KkQjgYlxshrMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2
QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDYxMTAzNTgzN1oX
DTI3MDYxMDA0MDMzN1owMzExMC8GA1UEAxMoMDExODM3NjE3NjZFN0Q5MDU2RDAz
NzhEMjI2NEMzRjk4NzEzMjNGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALmzG0nYwiIuEtJ0jwF+wNEEwyfRrTb2UsV3EwyGau6yrAoaPJ9A5uNB4qgY
rn/WukntyyZcejbCJwqmgvJnhFPbjypqszBh/qfw9rmzYkkETpOO8/Q5PkD6p5hY
5sSdgOP8MNIk2BCoTOVZCaIBd7XtN93MkxeEDLVqNoSwA3Ku8Tijjt1ACQtxmeT5
JflrRecg0vz2bhj9rM/mn87wejiylKJ7fFrXvLdtedIm3EshoMVknm+unRYSLRve
1Xfj8Y9ym6iLFiGJFm+K1IWFgG3/z7HQTRG95g+TpA4+mOmiwHrujVGCRjFZCA/Q
BuBRTZUFTrFJEBojxteqzblU9esCAwEAAaOCAg8wggILMB0GA1UdDgQWBBQBGDdh
dm59kFbQN40iZMP5hxMj/DAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf
6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy
MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f
OXZNbXJnbTBTX3Z2RmluLXMuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH
MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzkvMzIzMDMzMmUzMDJlMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMxMzMzNDMwMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMsAUDANBgkqhkiG9w0BAQsFAAOCAQEA
dmFF815uzMBrSqP1VL5aS8yPOOg04TybYEx/2L1EuZp0rkEu2ZGgBB1eQCs1HkWy
BsxfPNL7wn3/s9D5Nt83FvbY8PagXIAj3frQ5eMDI5QxfgEiDn84MCC6WaJAFv4L
k3PMFZMGkOjmlfv6aS1WmovJYt5wEMnFFTmePcejjVK56UoQFjhwd1Z282rMgAoN
kQ8Kv61lGm5zORju9WV0g8cNVkF34DmnVvXVEiRWlM8QydE8J39mD8tZ/RHeI/nh
US9QRtTN07LGnRnnT27zZ/VhnDrarnYFLYSXx6kYHr4XTwLjhsrX7iisQPbpcxvp
nFO0EdB87k+NrciZTT5hdA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:55 2026 by rpki-client