
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa
File: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=
Subject key identifier: C2:A3:DD:F6:76:00:E1:91:9E:5F:18:B2:15:8D:65:F8:BB:82:D9:93
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 5AB77C6067D14FCA5317090746C8CC6D26F67B05
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa
Signing time: Fri 05 Jun 2026 12:30:56 +0000
ROA not before: Fri 05 Jun 2026 12:25:56 +0000
ROA not after: Fri 04 Jun 2027 12:30:56 +0000
asID: 136792
IP address blocks: 103.96.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 15:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b7:7c:60:67:d1:4f:ca:53:17:09:07:46:c8:cc:6d:26:f6:7b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Jun 5 12:25:56 2026 GMT
Not After : Jun 4 12:30:56 2027 GMT
Subject: CN=C2A3DDF67600E1919E5F18B2158D65F8BB82D993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:98:d8:85:a7:07:23:76:90:88:e7:d1:0e:
56:36:fb:44:02:f9:b4:23:95:e0:00:3d:c7:e8:38:
8f:72:b8:32:5f:98:09:04:ec:dd:95:aa:cf:07:f4:
3f:bb:8a:3a:f8:72:10:45:14:53:b7:bc:29:f4:39:
13:75:d6:26:e7:21:12:49:3a:7a:75:f2:32:2e:67:
96:3d:56:5b:3f:fd:61:06:10:a4:cc:1e:bf:90:75:
df:f2:2f:34:e9:ef:25:7a:13:6a:5a:19:f4:7a:44:
84:6f:7e:21:35:45:b2:fe:02:6c:dd:ca:50:fa:99:
b1:85:a8:a5:c1:db:84:e8:85:a8:95:e2:85:f0:fd:
d0:22:ce:6e:f2:02:b1:03:ce:47:22:df:bf:0f:0e:
96:e5:87:9f:c3:99:ba:39:2e:af:9f:1d:ba:9f:6e:
98:d8:79:18:91:fd:fd:33:93:5f:17:d0:86:8e:72:
a1:70:d9:4c:e3:69:f7:36:fa:35:8b:37:87:92:6c:
8c:c8:ce:04:a5:58:d4:7e:8f:19:da:72:37:4e:36:
80:08:71:74:db:bf:55:e8:3f:d9:db:86:83:67:35:
b1:09:a2:ff:f7:d8:e0:a9:fc:e4:38:45:21:ce:bf:
ad:9b:16:ad:e1:e1:48:db:3d:b7:12:76:4a:d4:65:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:DD:F6:76:00:E1:91:9E:5F:18:B2:15:8D:65:F8:BB:82:D9:93
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.96.20.0/24
Signature Algorithm: sha256WithRSAEncryption
64:13:60:df:3d:b8:f3:76:ff:f4:c6:ac:98:ff:a8:2e:a3:61:
fd:6f:56:b7:10:a7:24:2a:79:6b:aa:50:80:dd:5d:4f:c8:a3:
82:4b:c8:d1:8e:79:19:50:63:8f:be:0c:c9:10:fb:8a:13:b0:
8e:8d:4d:c2:e5:bc:da:3b:94:f3:ec:1c:b6:7b:68:f6:85:76:
ef:17:e2:47:01:b6:9d:e9:08:9a:63:0d:d9:5d:62:f8:4e:ce:
61:c0:78:d0:6a:c1:4f:91:b9:70:e5:88:c5:20:ae:bf:3e:a6:
7f:3e:4d:7d:a3:ce:60:84:71:de:10:6d:dc:b6:48:49:65:0a:
a8:51:45:d3:1e:ab:d5:08:0d:92:dd:05:f4:4e:89:53:c7:65:
b3:4e:3c:04:61:2b:b1:ae:6a:d9:45:33:46:38:a4:08:7e:b0:
69:25:76:ba:66:47:7b:d1:5c:e1:6e:4b:53:97:ba:e0:23:b9:
15:3f:7c:e8:d6:46:b0:83:7f:18:b2:bc:24:ec:1b:9d:b1:5a:
be:2c:3f:a5:53:03:e8:9d:55:10:5c:e6:7f:2f:5e:c8:65:02:
6f:e5:bd:d3:93:75:23:9a:97:8c:99:36:cf:01:97:8f:34:81:
8a:d2:58:18:54:f9:ff:4c:f1:22:3e:a7:62:93:6b:e0:cc:e1:
3f:4f:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:18 2026 by rpki-client