
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa
File: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=
Subject key identifier: 89:75:9A:F5:5F:F8:79:EE:89:FC:F1:D0:2F:5E:3A:F5:87:BE:21:B5
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 2293CCEF4A057213D1D262B0AFA64D09BAC8A6E2
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa
Signing time: Fri 04 Jul 2025 12:05:03 +0000
ROA not before: Fri 04 Jul 2025 12:00:03 +0000
ROA not after: Fri 03 Jul 2026 12:05:03 +0000
asID: 136792
IP address blocks: 103.96.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 03:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:93:cc:ef:4a:05:72:13:d1:d2:62:b0:af:a6:4d:09:ba:c8:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Jul 4 12:00:03 2025 GMT
Not After : Jul 3 12:05:03 2026 GMT
Subject: CN=89759AF55FF879EE89FCF1D02F5E3AF587BE21B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:b1:43:67:dd:e0:3b:8c:30:5c:a9:24:f7:
00:bc:d5:e7:70:49:e9:7a:7e:bd:45:49:d5:de:de:
bd:e0:dc:67:82:c2:1f:4b:cb:a2:7c:32:df:be:72:
5f:31:7a:a6:69:aa:c3:10:85:59:3d:9c:75:f0:09:
09:a9:da:5a:aa:bc:ba:5a:e9:2d:2d:c3:27:d2:c7:
e3:20:8c:7b:e1:57:ea:dc:54:55:6f:ac:2a:34:d8:
f3:14:6c:5b:80:8c:cc:8b:f6:ef:aa:27:3f:1d:4e:
70:e4:39:fb:27:2a:39:16:33:3c:2e:a7:9e:89:df:
42:75:10:1f:fc:4e:8d:8b:f9:25:bc:9a:0c:92:02:
96:a5:11:41:9e:97:1e:f4:48:a7:7d:1f:02:c6:ad:
c9:b9:1d:5b:3c:eb:a7:92:ab:e6:f1:59:fa:2c:48:
f8:2c:c3:9a:3d:fb:b4:ec:22:a9:7b:e4:84:28:6a:
e0:20:4d:53:d9:14:62:75:53:ed:e4:39:24:b8:22:
3d:a1:2f:54:b5:8c:48:af:55:3e:45:27:df:12:55:
c8:db:86:76:19:19:cc:88:0f:86:a6:8e:ff:07:f2:
14:d7:a7:d6:0f:17:af:27:d2:4e:66:02:55:57:01:
43:88:6d:29:ec:4f:08:5d:b3:1f:31:c7:79:a8:24:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:75:9A:F5:5F:F8:79:EE:89:FC:F1:D0:2F:5E:3A:F5:87:BE:21:B5
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.20.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:33:c5:08:35:21:c9:3d:77:7e:0d:6d:f0:b8:60:e7:e5:64:
dd:02:83:66:58:ad:c6:ab:d4:e8:cb:eb:28:e9:23:6f:0b:da:
a9:e4:55:2d:57:62:56:82:27:2b:80:ba:f5:5b:e2:37:fc:0e:
40:23:2e:4e:f9:ab:3e:50:21:41:56:4f:00:ec:67:fb:17:b5:
d1:1a:d2:df:87:07:3b:8a:7b:b1:d2:74:80:d2:2b:a7:d4:fe:
cb:68:4a:44:81:fe:35:1c:e3:47:05:55:a4:61:1d:6a:f8:1b:
ac:9d:bf:f3:18:9a:e8:17:12:fc:7d:4a:7d:48:12:82:1f:b0:
8d:e2:3f:42:69:b0:6f:66:9f:af:21:03:ea:da:79:d8:60:94:
8e:6e:64:04:c9:a0:03:20:98:bf:22:bf:9b:1e:30:a3:cd:06:
48:09:e7:db:4a:1b:18:ef:88:f0:89:7f:93:39:2e:7d:2b:55:
60:b5:8e:8d:9d:f4:91:8d:90:c9:ce:1b:9b:68:fc:80:0d:86:
1e:58:e5:0f:ac:ed:77:01:1d:fb:0e:8e:5c:af:c9:75:54:ad:
2e:b4:65:e7:24:1d:62:3f:f2:58:6d:64:28:34:78:3c:85:84:
c1:f1:13:21:ad:55:d3:c3:30:56:d8:19:90:9e:66:64:b1:f9:
7a:de:8b:b1
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUIpPM70oFchPR0mKwr6ZNCbrIpuIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2
MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI1MDcwNDEyMDAwM1oX
DTI2MDcwMzEyMDUwM1owMzExMC8GA1UEAxMoODk3NTlBRjU1RkY4NzlFRTg5RkNG
MUQwMkY1RTNBRjU4N0JFMjFCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANNesUNn3eA7jDBcqST3ALzV53BJ6Xp+vUVJ1d7eveDcZ4LCH0vLonwy375y
XzF6pmmqwxCFWT2cdfAJCanaWqq8ulrpLS3DJ9LH4yCMe+FX6txUVW+sKjTY8xRs
W4CMzIv276onPx1OcOQ5+ycqORYzPC6nnonfQnUQH/xOjYv5JbyaDJIClqURQZ6X
HvRIp30fAsatybkdWzzrp5Kr5vFZ+ixI+CzDmj37tOwiqXvkhChq4CBNU9kUYnVT
7eQ5JLgiPaEvVLWMSK9VPkUn3xJVyNuGdhkZzIgPhqaO/wfyFNen1g8XryfSTmYC
VVcBQ4htKexPCF2zHzHHeagkHdkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSJdZr1
X/h57on88dAvXjr1h74htTAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE
NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU
aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzAvMzEzMDMzMmUzOTM2MmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2AUMA0GCSqGSIb3DQEBCwUAA4IB
AQB7M8UINSHJPXd+DW3wuGDn5WTdAoNmWK3Gq9Toy+so6SNvC9qp5FUtV2JWgicr
gLr1W+I3/A5AIy5O+as+UCFBVk8A7Gf7F7XRGtLfhwc7inux0nSA0iun1P7LaEpE
gf41HONHBVWkYR1q+Busnb/zGJroFxL8fUp9SBKCH7CN4j9CabBvZp+vIQPq2nnY
YJSObmQEyaADIJi/Ir+bHjCjzQZICefbShsY74jwiX+TOS59K1VgtY6NnfSRjZDJ
zhubaPyADYYeWOUPrO13AR37Do5cr8l1VK0utGXnJB1iP/JYbWQoNHg8hYTB8RMh
rVXTwzBW2BmQnmZksfl63oux
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:49 2025 by rpki-client